Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft
File: cC9OAJQ3AMCJfeetvPztXRC_LgE.mft (raw, json)
Hash identifier: kB0AcHwAeNq/oydiEhz3kdRUmonCKpCDr8+qtiKFQtg=
Subject key identifier: 31:F5:9C:F0:FB:9C:8A:DB:B5:A3:D0:4F:0A:52:83:DD:C0:9B:99:D7
Authority key identifier: 70:2F:4E:00:94:37:00:C0:89:7D:E7:AD:BC:FC:ED:5D:10:BF:2E:01
Certificate issuer: /CN=702f4e00943700c0897de7adbcfced5d10bf2e01
Certificate serial: 019D3307C2366E63D71E38E55ECF2AEA1B1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cC9OAJQ3AMCJfeetvPztXRC_LgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft
Manifest number: 188F
Signing time: Sat 28 Mar 2026 06:00:39 +0000
Manifest this update: Sat 28 Mar 2026 06:00:39 +0000
Manifest next update: Sun 29 Mar 2026 06:00:39 +0000
Files and hashes: 1: 4sUUJ2plPGrlHgJqJEpnOT8db0k.roa (hash: 9TkCWduhIaGb7gCxKXssPcvjYmu7Zi+zWKigf1ePUnI=)
2: cC9OAJQ3AMCJfeetvPztXRC_LgE.crl (hash: SzlE0frpC+wvXeM1U+sqaN9xRzsnDbbaJr71kxuRst0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cC9OAJQ3AMCJfeetvPztXRC_LgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:07:c2:36:6e:63:d7:1e:38:e5:5e:cf:2a:ea:1b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=702f4e00943700c0897de7adbcfced5d10bf2e01
Validity
Not Before: Mar 28 06:00:39 2026 GMT
Not After : Mar 29 06:00:39 2026 GMT
Subject: CN=31f59cf0fb9c8adbb5a3d04f0a5283ddc09b99d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5e:1a:fe:df:25:88:01:51:31:a8:cf:71:a8:
23:53:1c:9d:98:08:18:e7:16:3a:69:49:f7:f8:64:
36:37:d7:38:b0:96:6e:74:b6:1e:1d:b6:39:7a:34:
8d:d0:6b:a9:23:6a:4c:28:45:cf:7a:70:fc:ae:9e:
d2:ca:b5:eb:46:d6:7c:4a:e4:e8:74:3b:20:f4:47:
a4:c9:dd:c0:52:cb:fa:81:73:49:5d:bc:c4:7f:ce:
5c:0c:13:cc:eb:6e:66:7f:64:b3:b6:75:6e:bf:23:
bb:b5:f2:58:cc:7b:38:bd:c4:9a:a8:16:a4:d0:f1:
c9:f9:9b:14:3a:24:0c:10:65:3f:a5:27:0c:96:99:
96:c1:d4:ae:a2:04:0c:21:d7:72:cf:21:a8:9d:62:
30:e9:a2:83:7c:c1:1f:b9:bb:88:1e:e0:81:c1:0e:
e0:fe:2c:8c:14:9c:07:31:43:b2:ea:63:26:38:35:
fd:05:e4:96:12:fa:03:5a:90:9d:19:cc:87:b9:96:
5b:09:67:3e:1c:5c:60:a0:be:51:66:77:0d:14:1f:
62:1b:5c:bb:bc:8c:e0:74:08:12:46:e0:99:dc:e9:
ee:be:ba:7d:61:d3:e6:bc:5f:da:d5:b4:c2:e9:0f:
d0:25:12:72:4e:db:46:20:ed:fd:c9:69:7e:d1:fd:
a8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:F5:9C:F0:FB:9C:8A:DB:B5:A3:D0:4F:0A:52:83:DD:C0:9B:99:D7
X509v3 Authority Key Identifier:
keyid:70:2F:4E:00:94:37:00:C0:89:7D:E7:AD:BC:FC:ED:5D:10:BF:2E:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cC9OAJQ3AMCJfeetvPztXRC_LgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:a3:d9:94:ea:8c:10:89:7f:1c:72:a5:12:3f:bf:77:13:63:
c1:e7:ce:7d:bc:9d:bd:d4:b4:91:17:6e:84:95:4e:da:c7:5c:
40:2b:e9:83:5b:ff:d5:ee:35:87:bc:fa:3c:e0:0d:6c:56:b2:
23:d1:9a:b6:66:2b:86:95:ac:a2:d5:84:89:50:b3:68:18:33:
a2:4c:2b:2b:6f:57:12:8f:32:2e:d5:42:f5:17:57:e2:c8:11:
42:78:16:02:b0:82:be:a3:9b:39:14:e7:1a:5a:1c:fa:71:3d:
6e:3b:78:e0:4c:d9:3a:02:5d:b6:8b:d0:e1:1c:ca:0a:7f:6f:
f1:64:ca:f2:a7:3a:61:6a:cb:94:ba:ed:fb:9a:98:a8:4b:1f:
97:b2:0e:47:9a:4e:40:be:bb:aa:e1:17:6b:aa:c7:a5:d3:a2:
86:15:40:91:8c:a2:03:4a:03:46:5d:51:3c:9e:7f:86:3d:a3:
3d:83:82:c3:75:08:24:f7:fd:ed:5c:0d:cd:a0:a8:48:16:c9:
15:d0:a7:91:9c:59:f2:ca:77:9a:4e:0a:6a:3c:43:91:ee:ea:
b1:01:8b:22:15:03:1e:15:ec:64:69:c8:95:f2:a6:5e:d7:9f:
b1:20:d1:eb:2c:f9:ac:35:5c:58:d8:2e:a5:25:32:48:0f:b8:
2a:9c:b9:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0zB8I2bmPXHjjlXs8q6hsfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwMmY0ZTAwOTQzNzAwYzA4OTdkZTdhZGJjZmNlZDVkMTBi
ZjJlMDEwHhcNMjYwMzI4MDYwMDM5WhcNMjYwMzI5MDYwMDM5WjAzMTEwLwYDVQQD
EygzMWY1OWNmMGZiOWM4YWRiYjVhM2QwNGYwYTUyODNkZGMwOWI5OWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3V4a/t8liAFRMajPcagjUxydmAgY
5xY6aUn3+GQ2N9c4sJZudLYeHbY5ejSN0GupI2pMKEXPenD8rp7SyrXrRtZ8SuTo
dDsg9Eekyd3AUsv6gXNJXbzEf85cDBPM625mf2SztnVuvyO7tfJYzHs4vcSaqBak
0PHJ+ZsUOiQMEGU/pScMlpmWwdSuogQMIddyzyGonWIw6aKDfMEfubuIHuCBwQ7g
/iyMFJwHMUOy6mMmODX9BeSWEvoDWpCdGcyHuZZbCWc+HFxgoL5RZncNFB9iG1y7
vIzgdAgSRuCZ3Onuvrp9YdPmvF/a1bTC6Q/QJRJyTttGIO39yWl+0f2o2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDH1nPD7nIrbtaPQTwpSg93Am5nXMB8GA1UdIwQY
MBaAFHAvTgCUNwDAiX3nrbz87V0Qvy4BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0M5T0FKUTNBTUNKZmVldHZQenRYUkNfTGdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9iY2I2ZWItZTI2Mi00ZDY5LTgwZmIt
NTliMGZjOTEzZDM2LzEvY0M5T0FKUTNBTUNKZmVldHZQenRYUkNfTGdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9iY2I2ZWItZTI2Mi00ZDY5LTgwZmItNTliMGZjOTEzZDM2
LzEvY0M5T0FKUTNBTUNKZmVldHZQenRYUkNfTGdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp6PZlOqM
EIl/HHKlEj+/dxNjwefOfbydvdS0kRduhJVO2sdcQCvpg1v/1e41h7z6POANbFay
I9GatmYrhpWsotWEiVCzaBgzokwrK29XEo8yLtVC9RdX4sgRQngWArCCvqObORTn
Gloc+nE9bjt44EzZOgJdtovQ4RzKCn9v8WTK8qc6YWrLlLrt+5qYqEsfl7IOR5pO
QL67quEXa6rHpdOihhVAkYyiA0oDRl1RPJ5/hj2jPYOCw3UIJPf97VwNzaCoSBbJ
FdCnkZxZ8sp3mk4KajxDke7qsQGLIhUDHhXsZGnIlfKmXtefsSDR6yz5rDVcWNgu
pSUySA+4Kpy5JA==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:23:41 2026 by rpki-client