Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/f4a606-e316-45cc-815c-01da1f4a8cf0/1/dA31rF75UxiFm7Y-wU5HNCohboU.mft
File: dA31rF75UxiFm7Y-wU5HNCohboU.mft (raw, json)
Hash identifier: 1fg1e10QjTyE1daFxQSGcpFa+01HlgQvS+5KiBK1MEY=
Subject key identifier: 89:6A:04:7A:E1:A7:DD:30:3B:CE:F0:E7:3F:39:22:09:86:C6:6F:4F
Authority key identifier: 74:0D:F5:AC:5E:F9:53:18:85:9B:B6:3E:C1:4E:47:34:2A:21:6E:85
Certificate issuer: /CN=740df5ac5ef95318859bb63ec14e47342a216e85
Certificate serial: 019D26CD06C0DB6CE8E30A69B466E8C97AE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dA31rF75UxiFm7Y-wU5HNCohboU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/f4a606-e316-45cc-815c-01da1f4a8cf0/1/dA31rF75UxiFm7Y-wU5HNCohboU.mft
Manifest number: 96
Signing time: Wed 25 Mar 2026 21:01:03 +0000
Manifest this update: Wed 25 Mar 2026 21:01:03 +0000
Manifest next update: Thu 26 Mar 2026 21:01:03 +0000
Files and hashes: 1: NbaTUfMsk7ejX5MZafYZHxonFQQ.roa (hash: D+/uSGFAXyKao2IQp+J+3qbr0DJSF7//qXrhMJ0x1yA=)
2: dA31rF75UxiFm7Y-wU5HNCohboU.crl (hash: qIXoNpqBeC0PPYPdAGGciyRdpaTIoBeTin0TxgUYrGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/f4a606-e316-45cc-815c-01da1f4a8cf0/1/dA31rF75UxiFm7Y-wU5HNCohboU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/f4a606-e316-45cc-815c-01da1f4a8cf0/1/dA31rF75UxiFm7Y-wU5HNCohboU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dA31rF75UxiFm7Y-wU5HNCohboU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:06:c0:db:6c:e8:e3:0a:69:b4:66:e8:c9:7a:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=740df5ac5ef95318859bb63ec14e47342a216e85
Validity
Not Before: Mar 25 21:01:03 2026 GMT
Not After : Mar 26 21:01:03 2026 GMT
Subject: CN=896a047ae1a7dd303bcef0e73f39220986c66f4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0b:90:66:d7:00:dc:8a:8d:94:70:86:f9:32:
3e:ab:2c:e1:74:d0:d0:ce:e6:70:80:94:64:f1:80:
93:d2:cb:3c:70:b7:9e:7b:42:1e:e4:71:e6:ce:ca:
de:25:cd:44:d8:df:74:f2:f0:2a:5c:5f:3d:8a:27:
e9:dc:07:b3:d9:f1:7a:a9:e2:05:f3:2d:47:17:9f:
74:e5:27:fd:fc:12:07:3e:03:81:e2:1d:e6:c3:f3:
ba:90:d5:fe:25:16:b9:e6:93:62:0b:88:ca:3c:cf:
a7:e4:72:97:3d:85:f4:da:57:0e:6d:ff:52:0d:99:
5d:76:60:72:1a:b4:9e:d3:e6:cb:ca:5b:d6:3e:3f:
e3:10:c7:3d:8a:0f:9f:fc:fc:2e:61:52:87:ef:0b:
d5:8c:12:34:c6:98:a8:fe:cc:c8:16:2f:f1:ec:02:
28:af:0b:85:e3:43:f8:2b:8b:be:b3:a7:98:6d:83:
6e:e2:7f:4e:49:06:23:79:26:03:e1:2d:f3:f7:02:
fc:29:c1:1d:96:a6:63:7b:50:33:57:c0:96:b1:c0:
53:81:e6:8a:c7:2b:21:57:13:59:bc:83:c9:8d:69:
32:d0:1c:67:cc:bf:04:4a:1b:e6:9b:fe:53:da:8d:
7a:9f:06:03:f6:5d:2d:06:54:ac:c3:7b:c1:a3:38:
5e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:6A:04:7A:E1:A7:DD:30:3B:CE:F0:E7:3F:39:22:09:86:C6:6F:4F
X509v3 Authority Key Identifier:
keyid:74:0D:F5:AC:5E:F9:53:18:85:9B:B6:3E:C1:4E:47:34:2A:21:6E:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dA31rF75UxiFm7Y-wU5HNCohboU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f4a606-e316-45cc-815c-01da1f4a8cf0/1/dA31rF75UxiFm7Y-wU5HNCohboU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f4a606-e316-45cc-815c-01da1f4a8cf0/1/dA31rF75UxiFm7Y-wU5HNCohboU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:73:68:5c:5f:8e:b4:70:06:e7:9a:29:f4:0c:1f:1f:c0:55:
3c:df:ba:2a:e3:09:33:3f:ba:ed:90:68:36:17:9c:3a:8e:e2:
d2:d7:e5:b8:ce:20:ee:4f:4c:61:16:44:98:07:02:62:fc:2e:
a6:f3:45:c8:b2:42:6f:6b:bc:f7:ae:89:8f:b7:3b:c5:95:0a:
56:08:5c:42:55:a5:e6:a3:74:73:51:67:51:a2:c9:e3:14:e2:
81:69:08:02:44:fb:c9:d8:ed:0f:e3:af:94:2e:0c:de:0a:12:
50:68:23:90:b1:ef:b3:84:90:ac:51:e3:78:17:a6:b4:4e:3c:
b7:52:79:b0:6f:28:b8:60:c9:24:85:ab:d9:15:3a:77:a7:6c:
4e:9c:f0:7f:55:00:ab:5f:b3:3c:f4:a4:bf:2a:92:3e:09:d8:
93:42:ee:98:95:60:27:a5:6c:d5:d1:a4:1d:04:76:63:24:1a:
0b:67:d4:14:ea:e1:a8:16:cf:47:c5:e4:eb:0e:ed:10:fd:a2:
8f:51:73:b5:0b:b7:fc:97:54:3b:e4:28:d8:eb:d8:b3:f2:23:
00:8d:c6:0f:b7:93:42:1f:c2:7b:70:9f:47:84:90:45:14:9a:
58:19:6a:37:7b:d8:b8:8d:29:e5:7f:53:d3:9a:48:71:a2:ac:
fc:f9:28:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzQbA22zo4wpptGboyXrnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0MGRmNWFjNWVmOTUzMTg4NTliYjYzZWMxNGU0NzM0MmEy
MTZlODUwHhcNMjYwMzI1MjEwMTAzWhcNMjYwMzI2MjEwMTAzWjAzMTEwLwYDVQQD
Eyg4OTZhMDQ3YWUxYTdkZDMwM2JjZWYwZTczZjM5MjIwOTg2YzY2ZjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuguQZtcA3IqNlHCG+TI+qyzhdNDQ
zuZwgJRk8YCT0ss8cLeee0Ie5HHmzsreJc1E2N908vAqXF89iifp3Aez2fF6qeIF
8y1HF5905Sf9/BIHPgOB4h3mw/O6kNX+JRa55pNiC4jKPM+n5HKXPYX02lcObf9S
DZlddmByGrSe0+bLylvWPj/jEMc9ig+f/PwuYVKH7wvVjBI0xpio/szIFi/x7AIo
rwuF40P4K4u+s6eYbYNu4n9OSQYjeSYD4S3z9wL8KcEdlqZje1AzV8CWscBTgeaK
xyshVxNZvIPJjWky0BxnzL8EShvmm/5T2o16nwYD9l0tBlSsw3vBozheXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIlqBHrhp90wO87w5z85IgmGxm9PMB8GA1UdIwQY
MBaAFHQN9axe+VMYhZu2PsFORzQqIW6FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEEzMXJGNzVVeGlGbTdZLXdVNUhOQ29oYm9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9mNGE2MDYtZTMxNi00NWNjLTgxNWMt
MDFkYTFmNGE4Y2YwLzEvZEEzMXJGNzVVeGlGbTdZLXdVNUhOQ29oYm9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9mNGE2MDYtZTMxNi00NWNjLTgxNWMtMDFkYTFmNGE4Y2Yw
LzEvZEEzMXJGNzVVeGlGbTdZLXdVNUhOQ29oYm9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGnNoXF+O
tHAG55op9AwfH8BVPN+6KuMJMz+67ZBoNhecOo7i0tfluM4g7k9MYRZEmAcCYvwu
pvNFyLJCb2u8966Jj7c7xZUKVghcQlWl5qN0c1FnUaLJ4xTigWkIAkT7ydjtD+Ov
lC4M3goSUGgjkLHvs4SQrFHjeBemtE48t1J5sG8ouGDJJIWr2RU6d6dsTpzwf1UA
q1+zPPSkvyqSPgnYk0LumJVgJ6Vs1dGkHQR2YyQaC2fUFOrhqBbPR8Xk6w7tEP2i
j1FztQu3/JdUO+Qo2OvYs/IjAI3GD7eTQh/Ce3CfR4SQRRSaWBlqN3vYuI0p5X9T
05pIcaKs/Pkocw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:28:02 2026 by rpki-client