Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.mft
File: n78C8E7EMIy1tgeL0GoXywDYM2k.mft (raw, json)
Hash identifier: SsJaTZgVAwCS0eECyx4Gg7isRnFMJbJbMiC4RI1msdk=
Subject key identifier: C4:08:AA:21:42:87:27:B1:ED:8F:C1:0F:F3:38:7E:0B:81:A0:ED:08
Authority key identifier: 9F:BF:02:F0:4E:C4:30:8C:B5:B6:07:8B:D0:6A:17:CB:00:D8:33:69
Certificate issuer: /CN=9fbf02f04ec4308cb5b6078bd06a17cb00d83369
Certificate serial: 019D333F244E691339F59DCBEF13497C3532
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n78C8E7EMIy1tgeL0GoXywDYM2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.mft
Manifest number: 031C
Signing time: Sat 28 Mar 2026 07:01:09 +0000
Manifest this update: Sat 28 Mar 2026 07:01:09 +0000
Manifest next update: Sun 29 Mar 2026 07:01:09 +0000
Files and hashes: 1: DJqntjgYkfPW1Br18ErHhvNgn_M.roa (hash: B5GRLWvmtpau9qTab26EepTDGZK6+L4FVVyJPZXWVFg=)
2: n78C8E7EMIy1tgeL0GoXywDYM2k.crl (hash: Dm//Xx6paDeKNd8ThtWNZVUX2ISKZ3du4E1KND4HT4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/n78C8E7EMIy1tgeL0GoXywDYM2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:3f:24:4e:69:13:39:f5:9d:cb:ef:13:49:7c:35:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fbf02f04ec4308cb5b6078bd06a17cb00d83369
Validity
Not Before: Mar 28 07:01:09 2026 GMT
Not After : Mar 29 07:01:09 2026 GMT
Subject: CN=c408aa21428727b1ed8fc10ff3387e0b81a0ed08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:55:af:d3:2b:11:d4:36:12:88:3f:cb:38:ac:
f7:e9:e5:6f:fe:a9:92:e3:04:a5:e8:1b:11:a5:50:
1d:9c:78:13:a9:da:d0:3f:d6:61:79:fa:0c:46:71:
be:0a:f1:d2:18:d8:a4:78:9b:6b:9f:ff:d2:f9:0b:
b2:f5:b3:ba:60:95:09:44:d0:c6:72:ff:e4:f1:ef:
a6:32:c8:20:b4:49:6e:d8:39:25:76:fd:7f:b6:ef:
c5:c6:34:91:e1:26:0b:22:7a:c2:58:c1:8a:bf:64:
b8:9e:01:de:3f:3f:20:c6:93:24:50:8c:9e:19:ad:
27:65:dc:92:d9:49:a6:d1:0c:ec:4d:20:aa:98:30:
38:ef:6c:5f:43:2d:35:33:f6:56:46:59:c5:a0:22:
f2:ad:a7:51:ec:ac:d6:92:04:c1:ce:67:84:cd:93:
29:83:5d:43:c6:b6:3a:4c:30:79:bd:a7:81:e9:06:
5d:7d:88:ec:89:9a:16:d0:77:65:9f:7d:21:87:f1:
62:78:5b:fb:0d:b3:66:9c:60:46:e4:dc:3c:6e:47:
d3:c1:d7:9b:eb:8c:d8:4b:cd:24:f1:5f:bb:a9:16:
cb:7c:0d:0b:a9:a8:51:26:06:c7:e6:14:47:37:5f:
f5:d3:75:71:ab:73:05:db:98:71:58:d3:ab:fa:27:
36:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:08:AA:21:42:87:27:B1:ED:8F:C1:0F:F3:38:7E:0B:81:A0:ED:08
X509v3 Authority Key Identifier:
keyid:9F:BF:02:F0:4E:C4:30:8C:B5:B6:07:8B:D0:6A:17:CB:00:D8:33:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n78C8E7EMIy1tgeL0GoXywDYM2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:ff:ab:06:71:6f:d5:25:a7:7c:7f:0f:d7:71:1c:ce:dd:ef:
a9:28:99:f1:e7:9b:0a:1b:c7:c2:30:8f:ad:75:4b:6a:c9:dd:
f5:d7:2e:57:35:ee:62:5c:ea:eb:77:af:5c:e0:ba:53:86:41:
bb:dd:8a:bc:b7:99:ce:05:eb:a2:a4:90:08:69:c4:9b:94:34:
1c:2f:97:4f:31:ff:ef:c6:e6:9b:df:0e:f1:f8:3f:aa:63:39:
9a:ac:16:3c:67:2f:07:56:69:b1:b6:5b:81:01:11:12:a2:56:
8c:0f:6d:66:97:6b:b5:2c:a9:4b:c3:04:b0:22:77:52:53:14:
aa:ff:eb:f8:6e:13:c3:b2:df:ca:d4:a5:60:7a:02:e7:5e:c3:
c5:9b:81:ab:f1:52:45:82:77:53:09:12:6b:26:05:4f:02:1c:
8d:1d:c4:80:26:2c:0c:ae:e5:8e:15:28:5e:4e:2a:c1:b9:e1:
0e:09:8e:f1:62:2d:5a:50:77:eb:77:fd:38:26:e4:6e:46:4f:
93:8b:83:cf:f5:f7:7a:48:4c:4d:a6:cc:87:92:8e:39:a4:5f:
6a:75:d3:66:b2:b7:1f:67:a0:06:9f:58:28:53:aa:c5:3d:11:
27:d8:c7:f9:44:b3:be:dd:a6:2e:e0:9f:a0:8e:ef:cc:12:81:
91:3d:d3:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0zPyROaRM59Z3L7xNJfDUyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmYmYwMmYwNGVjNDMwOGNiNWI2MDc4YmQwNmExN2NiMDBk
ODMzNjkwHhcNMjYwMzI4MDcwMTA5WhcNMjYwMzI5MDcwMTA5WjAzMTEwLwYDVQQD
EyhjNDA4YWEyMTQyODcyN2IxZWQ4ZmMxMGZmMzM4N2UwYjgxYTBlZDA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFWv0ysR1DYSiD/LOKz36eVv/qmS
4wSl6BsRpVAdnHgTqdrQP9ZhefoMRnG+CvHSGNikeJtrn//S+Quy9bO6YJUJRNDG
cv/k8e+mMsggtElu2Dkldv1/tu/FxjSR4SYLInrCWMGKv2S4ngHePz8gxpMkUIye
Ga0nZdyS2Umm0QzsTSCqmDA472xfQy01M/ZWRlnFoCLyradR7KzWkgTBzmeEzZMp
g11DxrY6TDB5vaeB6QZdfYjsiZoW0Hdln30hh/FieFv7DbNmnGBG5Nw8bkfTwdeb
64zYS80k8V+7qRbLfA0LqahRJgbH5hRHN1/103Vxq3MF25hxWNOr+ic2uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMQIqiFChyex7Y/BD/M4fguBoO0IMB8GA1UdIwQY
MBaAFJ+/AvBOxDCMtbYHi9BqF8sA2DNpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjc4QzhFN0VNSXkxdGdlTDBHb1h5d0RZTTJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9jYWY0NjYtNmU2Yy00MDA5LWE1NWEt
NWZhOWRhMDNmNTcwLzEvbjc4QzhFN0VNSXkxdGdlTDBHb1h5d0RZTTJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9jYWY0NjYtNmU2Yy00MDA5LWE1NWEtNWZhOWRhMDNmNTcw
LzEvbjc4QzhFN0VNSXkxdGdlTDBHb1h5d0RZTTJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANP+rBnFv
1SWnfH8P13Eczt3vqSiZ8eebChvHwjCPrXVLasnd9dcuVzXuYlzq63evXOC6U4ZB
u92KvLeZzgXroqSQCGnEm5Q0HC+XTzH/78bmm98O8fg/qmM5mqwWPGcvB1ZpsbZb
gQEREqJWjA9tZpdrtSypS8MEsCJ3UlMUqv/r+G4Tw7LfytSlYHoC517DxZuBq/FS
RYJ3UwkSayYFTwIcjR3EgCYsDK7ljhUoXk4qwbnhDgmO8WItWlB363f9OCbkbkZP
k4uDz/X3ekhMTabMh5KOOaRfanXTZrK3H2egBp9YKFOqxT0RJ9jH+USzvt2mLuCf
oI7vzBKBkT3TRQ==
-----END CERTIFICATE-----
Generated at Sat Mar 28 17:35:02 2026 by rpki-client