Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
File: cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft (raw, json)
Hash identifier: 4u62O9E4ILf45NHDmAYITGSFcFIdcXZjtcoYGoRX3ro=
Subject key identifier: 7B:EB:A7:F0:FF:8F:01:48:F5:5D:9B:E8:A1:1E:74:E6:D0:75:FD:82
Authority key identifier: 70:98:0B:60:E0:D3:0E:49:8D:E1:BA:A6:45:A1:BE:57:A9:52:04:9D
Certificate issuer: /CN=70980b60e0d30e498de1baa645a1be57a952049d
Certificate serial: 019D29CECA722582776CED05E7E74DA0CD19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
Manifest number: 0BCB
Signing time: Thu 26 Mar 2026 11:01:51 +0000
Manifest this update: Thu 26 Mar 2026 11:01:51 +0000
Manifest next update: Fri 27 Mar 2026 11:01:51 +0000
Files and hashes: 1: RpRVr86nrmR4pLP_o-Dkxgygl-I.roa (hash: dYMAWblY0LPrzbeqEQ3uJpDKV9wamvkF6WdwjSusrRI=)
2: cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl (hash: +JQzjgUyX4sqV4cO6clY/YsGOvt1SdcfW76Rey2ol60=)
3: exmQSDmoNH_azOiipU8IusPL-zE.roa (hash: tOEc7EoupcuUU99+9kHSEhJIEOT6G42NFE+0vNPQoj4=)
4: zLLpSlai4j_BckMwzN3FZevoFJI.roa (hash: X+bvA7vFedjj2qlLm3vDJgVyiO2iqldPs11sP4fxghM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:ca:72:25:82:77:6c:ed:05:e7:e7:4d:a0:cd:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70980b60e0d30e498de1baa645a1be57a952049d
Validity
Not Before: Mar 26 11:01:51 2026 GMT
Not After : Mar 27 11:01:51 2026 GMT
Subject: CN=7beba7f0ff8f0148f55d9be8a11e74e6d075fd82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f2:25:e3:e1:a1:83:75:0e:9d:5d:80:e7:56:
94:d8:a7:b6:a1:73:4a:1a:a4:b4:59:16:b3:7e:19:
8b:ee:bd:cf:66:c2:f9:5a:59:05:dc:8c:b3:a2:ea:
6e:02:3c:66:3a:43:aa:dd:44:27:e4:e6:61:86:fb:
cf:5b:b6:15:f4:98:d2:27:18:2a:83:3a:24:37:52:
48:a9:ff:a9:1d:6d:28:a8:e7:77:17:f2:64:fa:48:
56:5d:bd:56:56:90:3f:aa:19:2d:2c:29:ca:25:c5:
19:44:cf:b3:af:34:c5:52:a9:e9:c2:12:7b:8f:46:
a5:7f:8c:dc:ee:1b:41:98:08:ca:08:78:44:9a:cd:
5a:bc:0d:62:11:d2:67:e5:da:05:1f:09:b3:03:e1:
02:83:a7:d0:67:50:84:21:c1:92:e1:bd:42:9d:57:
47:95:21:9a:84:c1:26:66:63:69:43:3c:d0:e1:5c:
2f:12:04:41:e8:c0:6c:1d:c9:17:73:f1:42:a4:a0:
07:a6:4b:d1:17:0b:a0:de:62:84:79:ae:df:72:0c:
98:7b:db:4b:44:ab:4c:49:95:9b:ce:bb:af:a2:b6:
d6:19:69:f5:f7:e6:8a:70:51:da:ab:4e:1d:d5:a6:
78:4b:64:0f:ca:93:ce:6c:dd:b4:f2:3f:ce:7d:0b:
c8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:EB:A7:F0:FF:8F:01:48:F5:5D:9B:E8:A1:1E:74:E6:D0:75:FD:82
X509v3 Authority Key Identifier:
keyid:70:98:0B:60:E0:D3:0E:49:8D:E1:BA:A6:45:A1:BE:57:A9:52:04:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:b3:d0:eb:f1:56:1d:0b:08:6a:37:28:13:2a:40:70:38:e7:
b7:bc:4f:31:f3:d8:6e:87:a7:f8:b3:86:0a:b9:2e:19:c2:a0:
5a:80:a2:ae:a6:89:dc:78:d1:79:f3:f2:27:c5:c3:ce:76:88:
90:93:36:a7:70:58:1c:77:6a:a4:7a:36:ed:a7:e5:9e:fa:4a:
c5:bc:22:e7:f0:3b:14:3c:c3:02:2e:73:16:35:a1:7b:62:0f:
7c:95:de:64:be:ac:7d:ad:f7:10:b3:a9:84:8e:9d:98:5d:5f:
33:60:fd:f8:61:46:50:4d:74:31:66:59:81:77:ca:de:50:15:
3d:6e:b4:e9:6c:06:ca:4a:b4:7c:8a:52:b9:7b:6b:3c:59:e8:
04:2f:79:4a:ec:8b:e8:5c:29:48:32:49:1b:d3:e6:35:43:e4:
df:b8:34:af:35:3e:df:c8:42:27:a1:59:57:65:8b:2f:87:95:
13:89:67:03:8b:65:25:cb:81:cf:d7:c8:d4:e0:44:d6:c7:9d:
21:1d:c0:c9:71:55:15:c7:2a:a3:ef:3b:66:64:15:4b:c9:75:
cb:d1:fc:4a:66:3f:f7:14:82:45:5c:27:52:00:f9:47:0e:91:
a6:3a:f3:1a:11:11:0b:e5:a4:36:f6:a6:80:21:0c:75:5a:15:
7d:55:26:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pzspyJYJ3bO0F5+dNoM0ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwOTgwYjYwZTBkMzBlNDk4ZGUxYmFhNjQ1YTFiZTU3YTk1
MjA0OWQwHhcNMjYwMzI2MTEwMTUxWhcNMjYwMzI3MTEwMTUxWjAzMTEwLwYDVQQD
Eyg3YmViYTdmMGZmOGYwMTQ4ZjU1ZDliZThhMTFlNzRlNmQwNzVmZDgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufIl4+Ghg3UOnV2A51aU2Ke2oXNK
GqS0WRazfhmL7r3PZsL5WlkF3IyzoupuAjxmOkOq3UQn5OZhhvvPW7YV9JjSJxgq
gzokN1JIqf+pHW0oqOd3F/Jk+khWXb1WVpA/qhktLCnKJcUZRM+zrzTFUqnpwhJ7
j0alf4zc7htBmAjKCHhEms1avA1iEdJn5doFHwmzA+ECg6fQZ1CEIcGS4b1CnVdH
lSGahMEmZmNpQzzQ4VwvEgRB6MBsHckXc/FCpKAHpkvRFwug3mKEea7fcgyYe9tL
RKtMSZWbzruvorbWGWn19+aKcFHaq04d1aZ4S2QPypPObN208j/OfQvILQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHvrp/D/jwFI9V2b6KEedObQdf2CMB8GA1UdIwQY
MBaAFHCYC2Dg0w5JjeG6pkWhvlepUgSdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0pnTFlPRFREa21ONGJxbVJhRy1WNmxTQkowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9kNTZjMTEtMjVlMS00OWM4LTg4NjMt
N2YzN2I3NzhjMDExLzEvY0pnTFlPRFREa21ONGJxbVJhRy1WNmxTQkowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9kNTZjMTEtMjVlMS00OWM4LTg4NjMtN2YzN2I3NzhjMDEx
LzEvY0pnTFlPRFREa21ONGJxbVJhRy1WNmxTQkowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAirPQ6/FW
HQsIajcoEypAcDjnt7xPMfPYboen+LOGCrkuGcKgWoCirqaJ3HjRefPyJ8XDznaI
kJM2p3BYHHdqpHo27aflnvpKxbwi5/A7FDzDAi5zFjWhe2IPfJXeZL6sfa33ELOp
hI6dmF1fM2D9+GFGUE10MWZZgXfK3lAVPW606WwGykq0fIpSuXtrPFnoBC95SuyL
6FwpSDJJG9PmNUPk37g0rzU+38hCJ6FZV2WLL4eVE4lnA4tlJcuBz9fI1OBE1sed
IR3AyXFVFccqo+87ZmQVS8l1y9H8SmY/9xSCRVwnUgD5Rw6RpjrzGhERC+WkNvam
gCEMdVoVfVUm4Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:41:50 2026 by rpki-client