Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
File: rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft (raw, json)
Hash identifier: +MsGoS6PL+Yuz4CeALaya+1MRHjIwbN8GEd+AQdMIyE=
Subject key identifier: FB:12:AA:CC:B2:BB:DA:E5:D6:77:61:5B:DB:2A:C3:5F:25:0C:09:D6
Authority key identifier: AD:36:7B:C1:9F:06:69:96:49:0A:20:66:74:C8:DA:8F:5E:D2:CD:0E
Certificate issuer: /CN=ad367bc19f066996490a206674c8da8f5ed2cd0e
Certificate serial: 019D284D6D66A8A723E5556BCC95EFD32AA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
Manifest number: 111D
Signing time: Thu 26 Mar 2026 04:00:55 +0000
Manifest this update: Thu 26 Mar 2026 04:00:55 +0000
Manifest next update: Fri 27 Mar 2026 04:00:55 +0000
Files and hashes: 1: DXKA0kXE0N5ZtPOR2Oy4LAcB_4A.roa (hash: Sj3LYG5kwveQsf1vohBBwmgJI5eBDcD/U3wifQsq2hI=)
2: rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl (hash: xk8j/yxn7Cc1fl1iua5wTTXnhVnfY9mbv8YAWAp+Lks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:6d:66:a8:a7:23:e5:55:6b:cc:95:ef:d3:2a:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad367bc19f066996490a206674c8da8f5ed2cd0e
Validity
Not Before: Mar 26 04:00:55 2026 GMT
Not After : Mar 27 04:00:55 2026 GMT
Subject: CN=fb12aaccb2bbdae5d677615bdb2ac35f250c09d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ee:24:c7:9a:df:ca:1d:6a:8f:c8:52:a0:45:
07:82:9a:c8:5a:9c:31:35:ec:08:e4:c4:64:ab:14:
87:b8:90:f4:d6:2b:d4:10:f6:3a:8f:f2:5c:af:6f:
b7:ca:df:cf:e5:69:95:64:91:70:a1:f5:2a:f7:db:
10:cd:61:90:5d:0a:63:7a:98:54:08:50:d9:d9:89:
69:16:1e:83:3c:24:90:a3:42:e9:8f:59:90:9f:b7:
07:75:10:27:71:7b:47:de:1b:46:22:b3:f1:bc:8f:
b5:c3:34:8e:09:c3:17:69:5a:26:b8:96:c2:6b:ec:
51:48:9c:7c:0f:b7:4c:44:5c:d6:fa:4b:4c:9f:3f:
0f:e9:53:8b:05:12:2b:15:ed:58:95:75:8d:25:2d:
61:3b:10:74:c8:3d:a1:87:0f:37:8c:a4:a5:58:97:
f0:a1:04:d4:d5:96:e5:a8:90:01:56:9b:1b:ca:00:
21:2f:13:f3:3a:38:f9:c4:c3:08:cd:db:75:58:83:
95:13:ea:56:39:3b:3b:a2:f1:55:ae:9a:06:49:34:
b3:30:b9:bd:0d:ef:3e:5f:0d:24:a0:53:6c:d6:93:
3a:8a:ee:c1:5d:20:91:48:27:0d:2f:e2:c0:39:1f:
27:7a:6b:ed:35:7a:d9:d2:33:a7:55:62:7d:9b:a1:
f1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:12:AA:CC:B2:BB:DA:E5:D6:77:61:5B:DB:2A:C3:5F:25:0C:09:D6
X509v3 Authority Key Identifier:
keyid:AD:36:7B:C1:9F:06:69:96:49:0A:20:66:74:C8:DA:8F:5E:D2:CD:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:66:2d:1b:55:67:c3:55:9b:b7:a4:73:cb:a9:d9:06:26:fe:
50:d7:8c:01:e0:ce:ff:c0:d2:f8:7e:2a:d2:a5:de:a3:d9:c8:
1d:0e:0c:67:3e:14:e4:2f:c3:63:34:18:3f:51:da:88:2e:ef:
6c:c3:42:cc:e8:5d:3e:cc:12:2b:94:66:1a:89:ff:ee:4f:49:
16:3c:ec:eb:fc:19:cc:68:5f:14:f6:82:fd:48:28:b6:0d:78:
42:2e:a7:13:33:ea:70:0f:6a:5b:77:8c:af:dc:f6:84:18:cf:
0c:64:ed:22:a9:8f:6b:35:d3:10:4e:8e:a7:7e:e3:79:16:db:
bd:8e:00:16:1f:9f:4d:5a:62:93:b0:69:7c:76:59:7f:91:e5:
19:89:a6:60:a4:1c:16:c6:9c:76:da:1f:2d:dd:e1:69:69:ab:
8f:eb:8e:3c:66:48:4e:a3:de:97:91:40:9a:2c:08:60:a1:c4:
53:c8:a3:8d:90:f6:e4:93:4c:06:4d:2a:bd:b2:1e:14:ee:71:
83:a4:48:85:9c:84:ed:a2:04:8c:a0:e0:0e:46:4b:ce:eb:c3:
90:45:d0:12:42:78:86:5f:8f:f9:91:9b:79:18:f7:df:bc:b4:
2c:b3:3f:70:5c:f9:b0:cb:41:dd:30:45:2f:47:b7:2e:70:41:
c4:54:0b:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTW1mqKcj5VVrzJXv0yqhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMzY3YmMxOWYwNjY5OTY0OTBhMjA2Njc0YzhkYThmNWVk
MmNkMGUwHhcNMjYwMzI2MDQwMDU1WhcNMjYwMzI3MDQwMDU1WjAzMTEwLwYDVQQD
EyhmYjEyYWFjY2IyYmJkYWU1ZDY3NzYxNWJkYjJhYzM1ZjI1MGMwOWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzu4kx5rfyh1qj8hSoEUHgprIWpwx
NewI5MRkqxSHuJD01ivUEPY6j/Jcr2+3yt/P5WmVZJFwofUq99sQzWGQXQpjephU
CFDZ2YlpFh6DPCSQo0Lpj1mQn7cHdRAncXtH3htGIrPxvI+1wzSOCcMXaVomuJbC
a+xRSJx8D7dMRFzW+ktMnz8P6VOLBRIrFe1YlXWNJS1hOxB0yD2hhw83jKSlWJfw
oQTU1ZblqJABVpsbygAhLxPzOjj5xMMIzdt1WIOVE+pWOTs7ovFVrpoGSTSzMLm9
De8+Xw0koFNs1pM6iu7BXSCRSCcNL+LAOR8nemvtNXrZ0jOnVWJ9m6HxDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPsSqsyyu9rl1ndhW9sqw18lDAnWMB8GA1UdIwQY
MBaAFK02e8GfBmmWSQogZnTI2o9e0s0OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclRaN3daOEdhWlpKQ2lCbWRNamFqMTdTelE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8zY2M4NDgtNzg2MS00Y2UxLTg3MGQt
ODRiNjdiNDcwYjA0LzEvclRaN3daOEdhWlpKQ2lCbWRNamFqMTdTelE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi8zY2M4NDgtNzg2MS00Y2UxLTg3MGQtODRiNjdiNDcwYjA0
LzEvclRaN3daOEdhWlpKQ2lCbWRNamFqMTdTelE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGGYtG1Vn
w1Wbt6Rzy6nZBib+UNeMAeDO/8DS+H4q0qXeo9nIHQ4MZz4U5C/DYzQYP1HaiC7v
bMNCzOhdPswSK5RmGon/7k9JFjzs6/wZzGhfFPaC/Ugotg14Qi6nEzPqcA9qW3eM
r9z2hBjPDGTtIqmPazXTEE6Op37jeRbbvY4AFh+fTVpik7BpfHZZf5HlGYmmYKQc
FsacdtofLd3haWmrj+uOPGZITqPel5FAmiwIYKHEU8ijjZD25JNMBk0qvbIeFO5x
g6RIhZyE7aIEjKDgDkZLzuvDkEXQEkJ4hl+P+ZGbeRj337y0LLM/cFz5sMtB3TBF
L0e3LnBBxFQLtA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:16:20 2026 by rpki-client