Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft
File: thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft (raw, json)
Hash identifier: bgW4isikDN5nhUegNlTg8m0iPnVLQ+n29JmC4IajcFA=
Subject key identifier: 93:7E:2D:5C:D2:BA:5A:D3:35:13:37:6D:DC:40:74:65:E8:B6:C1:F5
Authority key identifier: B6:10:46:DC:B1:85:B0:BF:D9:97:66:28:D6:9A:18:9D:3C:39:87:D8
Certificate issuer: /CN=b61046dcb185b0bfd9976628d69a189d3c3987d8
Certificate serial: 019D281674442925315A862ADD9FA253AC43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/thBG3LGFsL_Zl2Yo1poYnTw5h9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft
Manifest number: 0CCC
Signing time: Thu 26 Mar 2026 03:00:53 +0000
Manifest this update: Thu 26 Mar 2026 03:00:53 +0000
Manifest next update: Fri 27 Mar 2026 03:00:53 +0000
Files and hashes: 1: 4HE55QqTfljWCn4cZ1ai8cvlh4Q.roa (hash: Urls4Wea48yb11KMoVdUctKI04Yz3x+qj0Xh8gfQ8ic=)
2: ZI0XBxKngNfebDmdNmRzMmhs3_c.roa (hash: QNWQmpn8TQdq4xaJXKJjh0gyorKFkSra2zQiLtm/C4o=)
3: gbhgQ3B2uQKFPVeFw6hdlGGc7-M.roa (hash: G0Tz2y63qfWHb3YGepEYqUMgHFr/+KkjDltfUYTk6fM=)
4: thBG3LGFsL_Zl2Yo1poYnTw5h9g.crl (hash: jixa2GhlUQqhj4MEdXEaMnUaKMAXYwxSzlw/BL0SIkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/thBG3LGFsL_Zl2Yo1poYnTw5h9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:74:44:29:25:31:5a:86:2a:dd:9f:a2:53:ac:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b61046dcb185b0bfd9976628d69a189d3c3987d8
Validity
Not Before: Mar 26 03:00:53 2026 GMT
Not After : Mar 27 03:00:53 2026 GMT
Subject: CN=937e2d5cd2ba5ad33513376ddc407465e8b6c1f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e0:4b:27:9e:5c:c9:b7:3c:11:ce:39:9d:1d:
d4:d8:eb:79:8d:52:87:00:33:2e:c4:ee:38:db:f7:
82:ee:76:72:3f:b9:be:1c:3e:9d:50:7b:dd:c7:3e:
f1:7a:c6:de:94:37:86:1d:b7:16:21:54:26:c2:13:
da:9e:97:74:d2:dc:ec:61:f2:31:ce:2f:50:0c:cc:
e0:84:ed:2b:41:15:ba:31:19:94:b1:8c:54:04:8b:
ad:ce:85:f0:d6:62:1e:78:a2:48:53:4c:5b:cc:61:
38:b0:56:70:ca:87:94:d1:e8:04:3e:5f:a5:5d:d0:
5c:f2:81:17:44:a4:f2:70:39:13:df:df:64:57:45:
7c:a0:00:b5:bf:ca:30:ee:4e:5e:f9:aa:da:37:86:
12:ca:2e:79:34:22:30:36:6a:36:f6:11:fc:60:02:
72:1f:7d:11:0b:87:36:0c:8b:75:d4:ba:04:5a:57:
dd:06:73:c0:7f:26:62:cb:df:8f:8b:57:7d:23:a6:
26:9a:21:96:93:8b:98:cf:0e:79:29:5e:d3:36:a9:
4f:e4:04:29:f4:ca:1b:4f:86:33:30:17:43:c3:89:
6a:50:ba:58:f0:27:dd:b4:1b:bd:b3:c1:f8:90:7a:
9a:0b:8d:02:c3:d6:22:27:78:ca:21:e9:53:8a:4f:
19:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:7E:2D:5C:D2:BA:5A:D3:35:13:37:6D:DC:40:74:65:E8:B6:C1:F5
X509v3 Authority Key Identifier:
keyid:B6:10:46:DC:B1:85:B0:BF:D9:97:66:28:D6:9A:18:9D:3C:39:87:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/thBG3LGFsL_Zl2Yo1poYnTw5h9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:69:9d:95:48:19:91:76:59:31:f6:15:74:86:80:1f:0c:9b:
f0:5e:96:01:73:33:67:6a:93:de:31:64:e7:ad:2e:25:fb:10:
eb:a7:3a:fb:9d:8c:28:17:72:53:70:6d:d6:c2:6c:e7:bf:85:
fd:47:40:1e:d6:4d:b7:fd:73:f6:53:31:7a:cc:d0:b2:8f:29:
3c:90:39:79:44:8a:ac:11:06:52:c1:19:38:f2:99:61:77:09:
c9:01:b1:ac:47:40:88:d0:23:78:b7:11:37:f6:79:98:67:71:
af:b9:f1:87:56:3e:dd:ae:d0:5a:24:eb:82:67:19:29:6a:86:
79:12:6a:f9:59:7b:ae:3c:b0:48:92:08:8e:3f:d6:53:9c:df:
dd:20:fe:c6:db:d6:4d:4e:49:72:17:1a:3c:76:b9:e7:9f:b2:
af:eb:bc:9b:b8:e6:72:16:17:a9:35:b0:e3:91:e2:ff:98:14:
9a:68:15:07:76:ef:23:94:4c:23:fc:32:dc:31:89:49:2b:91:
b9:d1:e0:02:9e:6b:75:e2:10:02:fa:48:86:40:53:7a:cd:ce:
46:3f:2f:24:b9:ab:ae:38:74:02:db:5d:57:29:fe:f8:4f:c7:
78:d8:9a:d6:79:9c:e9:36:96:df:74:39:c7:39:a1:20:4b:0f:
d1:4d:06:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFnREKSUxWoYq3Z+iU6xDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2MTA0NmRjYjE4NWIwYmZkOTk3NjYyOGQ2OWExODlkM2Mz
OTg3ZDgwHhcNMjYwMzI2MDMwMDUzWhcNMjYwMzI3MDMwMDUzWjAzMTEwLwYDVQQD
Eyg5MzdlMmQ1Y2QyYmE1YWQzMzUxMzM3NmRkYzQwNzQ2NWU4YjZjMWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreBLJ55cybc8Ec45nR3U2Ot5jVKH
ADMuxO442/eC7nZyP7m+HD6dUHvdxz7xesbelDeGHbcWIVQmwhPanpd00tzsYfIx
zi9QDMzghO0rQRW6MRmUsYxUBIutzoXw1mIeeKJIU0xbzGE4sFZwyoeU0egEPl+l
XdBc8oEXRKTycDkT399kV0V8oAC1v8ow7k5e+araN4YSyi55NCIwNmo29hH8YAJy
H30RC4c2DIt11LoEWlfdBnPAfyZiy9+Pi1d9I6YmmiGWk4uYzw55KV7TNqlP5AQp
9MobT4YzMBdDw4lqULpY8CfdtBu9s8H4kHqaC40Cw9YiJ3jKIelTik8ZCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJN+LVzSulrTNRM3bdxAdGXotsH1MB8GA1UdIwQY
MBaAFLYQRtyxhbC/2ZdmKNaaGJ08OYfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGhCRzNMR0ZzTF9abDJZbzFwb1luVHc1aDlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC83MDc1N2ItYzc1OC00MjkyLThiNWMt
Y2YxZjJmYThlNWYyLzEvdGhCRzNMR0ZzTF9abDJZbzFwb1luVHc1aDlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC83MDc1N2ItYzc1OC00MjkyLThiNWMtY2YxZjJmYThlNWYy
LzEvdGhCRzNMR0ZzTF9abDJZbzFwb1luVHc1aDlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWmmdlUgZ
kXZZMfYVdIaAHwyb8F6WAXMzZ2qT3jFk560uJfsQ66c6+52MKBdyU3Bt1sJs57+F
/UdAHtZNt/1z9lMxeszQso8pPJA5eUSKrBEGUsEZOPKZYXcJyQGxrEdAiNAjeLcR
N/Z5mGdxr7nxh1Y+3a7QWiTrgmcZKWqGeRJq+Vl7rjywSJIIjj/WU5zf3SD+xtvW
TU5JchcaPHa555+yr+u8m7jmchYXqTWw45Hi/5gUmmgVB3bvI5RMI/wy3DGJSSuR
udHgAp5rdeIQAvpIhkBTes3ORj8vJLmrrjh0AttdVyn++E/HeNia1nmc6TaW33Q5
xzmhIEsP0U0GDA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:19:55 2026 by rpki-client