Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
File: 0rERWbctQBXthntCt4Q4Hl2VWo8.mft (raw, json)
Hash identifier: Pl3UT8N3GiBo80rwyrWdtxw6UL2ldMmc2tjaUI6+kqc=
Subject key identifier: 19:34:EC:72:F4:88:D9:AC:D9:CB:AC:8F:32:E4:28:1B:57:E5:4C:DF
Authority key identifier: D2:B1:11:59:B7:2D:40:15:ED:86:7B:42:B7:84:38:1E:5D:95:5A:8F
Certificate issuer: /CN=d2b11159b72d4015ed867b42b784381e5d955a8f
Certificate serial: 019D2B85A3FF213F5C50035FBE793BB05321
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0rERWbctQBXthntCt4Q4Hl2VWo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 19:01:11 +0000
Manifest this update: Thu 26 Mar 2026 19:01:11 +0000
Manifest next update: Fri 27 Mar 2026 19:01:11 +0000
Files and hashes: 1: 0rERWbctQBXthntCt4Q4Hl2VWo8.crl (hash: jw2ZYufQ405THS/KeoNs5fz8+I0ttA7Nzv3j1PAbumY=)
2: 6lRgb3MGRN0CzqxKgomWEIyJ3Mg.roa (hash: CYhce381HzbX7vSncPONtF+Lbdg5xHx48Q/vd4tyB6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0rERWbctQBXthntCt4Q4Hl2VWo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:85:a3:ff:21:3f:5c:50:03:5f:be:79:3b:b0:53:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2b11159b72d4015ed867b42b784381e5d955a8f
Validity
Not Before: Mar 26 19:01:11 2026 GMT
Not After : Mar 27 19:01:11 2026 GMT
Subject: CN=1934ec72f488d9acd9cbac8f32e4281b57e54cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b4:ee:8b:43:90:f6:c5:12:55:e4:e1:91:b0:
85:46:13:46:75:b5:74:fd:05:ab:73:94:55:64:bd:
38:fa:3a:95:d1:9b:b9:02:da:1d:cd:2f:f4:3d:85:
d4:dc:87:3a:9a:ac:c3:48:d4:4d:c2:dc:24:ff:3e:
81:28:c6:de:36:74:0a:11:5e:e4:d6:26:90:32:d7:
36:d6:64:a4:0e:a2:26:09:10:e6:81:95:e0:34:af:
27:b0:a4:13:1c:1f:41:88:f5:1e:71:4d:f0:4d:64:
54:7a:c5:c8:41:47:44:ab:97:9f:b5:51:d7:b1:07:
85:d2:dd:b3:72:f0:7f:7a:ac:57:48:33:7e:74:4f:
d9:d3:9e:bd:1a:49:7b:e4:26:f7:f5:24:d4:c0:27:
62:99:b9:88:b7:a6:bb:70:31:ea:b0:24:36:cb:84:
48:b6:03:59:26:a3:d4:1e:1a:a6:b8:cc:df:61:ec:
6e:88:ff:6f:62:4a:29:42:47:a0:2a:df:14:08:11:
6f:15:72:03:c1:53:3c:6f:53:26:ce:42:7a:13:4e:
cc:3a:cf:a2:6f:8b:59:4b:c7:62:cc:33:69:5c:c3:
96:b1:78:e0:cd:86:e2:37:08:d1:bc:49:1c:90:49:
08:6e:38:71:fb:bf:80:a4:ba:a7:29:28:80:86:76:
ef:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:34:EC:72:F4:88:D9:AC:D9:CB:AC:8F:32:E4:28:1B:57:E5:4C:DF
X509v3 Authority Key Identifier:
keyid:D2:B1:11:59:B7:2D:40:15:ED:86:7B:42:B7:84:38:1E:5D:95:5A:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rERWbctQBXthntCt4Q4Hl2VWo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:e0:16:d1:a6:26:ed:55:c7:7f:f6:c5:7a:a7:e1:8e:1b:af:
72:a4:9b:bb:5e:65:a2:40:2f:ab:3f:3b:3e:ab:c3:62:5b:fb:
a3:5a:2b:8a:0d:25:7e:5d:f2:2b:8d:5b:30:1c:8c:62:89:76:
0b:06:f0:2e:9c:eb:51:7c:ac:48:da:22:61:9d:8a:80:3b:6f:
ee:8b:3f:14:94:06:1c:49:2c:38:1b:28:0c:56:99:30:80:b1:
08:f6:5b:dc:42:24:89:2e:27:93:b6:39:03:95:86:02:7a:25:
5e:5f:e0:37:65:dd:0d:0b:cd:ef:c6:7c:a1:3e:c9:ce:96:12:
1c:bb:89:92:f9:f5:fb:e3:76:72:1a:fc:73:9b:2b:1a:cc:ea:
b8:3b:61:0b:40:de:9e:26:5e:54:eb:62:dc:24:c1:55:14:a3:
58:43:3a:95:47:02:8d:44:5d:7f:07:57:73:d1:67:21:ba:23:
56:45:d8:96:b4:44:f4:6b:23:0b:37:09:18:25:a0:67:a7:e9:
65:25:87:0f:ce:8c:5b:f4:e4:57:70:fb:a7:80:68:a7:b5:c1:
35:5e:eb:d5:e4:b4:a3:a2:99:1c:15:21:31:d1:72:a9:bd:32:
4e:e7:1e:3c:9f:08:b0:c3:3b:84:bf:62:c9:f1:4f:33:a4:3c:
e9:33:56:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0rhaP/IT9cUANfvnk7sFMhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyYjExMTU5YjcyZDQwMTVlZDg2N2I0MmI3ODQzODFlNWQ5
NTVhOGYwHhcNMjYwMzI2MTkwMTExWhcNMjYwMzI3MTkwMTExWjAzMTEwLwYDVQQD
EygxOTM0ZWM3MmY0ODhkOWFjZDljYmFjOGYzMmU0MjgxYjU3ZTU0Y2RmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbTui0OQ9sUSVeThkbCFRhNGdbV0
/QWrc5RVZL04+jqV0Zu5AtodzS/0PYXU3Ic6mqzDSNRNwtwk/z6BKMbeNnQKEV7k
1iaQMtc21mSkDqImCRDmgZXgNK8nsKQTHB9BiPUecU3wTWRUesXIQUdEq5eftVHX
sQeF0t2zcvB/eqxXSDN+dE/Z0569Gkl75Cb39STUwCdimbmIt6a7cDHqsCQ2y4RI
tgNZJqPUHhqmuMzfYexuiP9vYkopQkegKt8UCBFvFXIDwVM8b1MmzkJ6E07MOs+i
b4tZS8dizDNpXMOWsXjgzYbiNwjRvEkckEkIbjhx+7+ApLqnKSiAhnbv/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBk07HL0iNms2cusjzLkKBtX5UzfMB8GA1UdIwQY
MBaAFNKxEVm3LUAV7YZ7QreEOB5dlVqPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHJFUldiY3RRQlh0aG50Q3Q0UTRIbDJWV284LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy85YzA5MWItZjg3OS00M2Y3LTkwMjAt
ZjViOTQ5NTljOWY3LzEvMHJFUldiY3RRQlh0aG50Q3Q0UTRIbDJWV284Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy85YzA5MWItZjg3OS00M2Y3LTkwMjAtZjViOTQ5NTljOWY3
LzEvMHJFUldiY3RRQlh0aG50Q3Q0UTRIbDJWV284LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeOAW0aYm
7VXHf/bFeqfhjhuvcqSbu15lokAvqz87PqvDYlv7o1orig0lfl3yK41bMByMYol2
CwbwLpzrUXysSNoiYZ2KgDtv7os/FJQGHEksOBsoDFaZMICxCPZb3EIkiS4nk7Y5
A5WGAnolXl/gN2XdDQvN78Z8oT7JzpYSHLuJkvn1++N2chr8c5srGszquDthC0De
niZeVOti3CTBVRSjWEM6lUcCjURdfwdXc9FnIbojVkXYlrRE9GsjCzcJGCWgZ6fp
ZSWHD86MW/TkV3D7p4Bop7XBNV7r1eS0o6KZHBUhMdFyqb0yTucePJ8IsMM7hL9i
yfFPM6Q86TNWNA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 22:50:29 2026 by rpki-client