Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.mft
File: srQdL319OFfgdfKk8vnT4ETy5TY.mft (raw, json)
Hash identifier: Bj0fWbZcBrx1QWpnroy/ZUpsXkQMQgtbudV5w/k3x5M=
Subject key identifier: C3:C2:61:B6:C4:56:54:37:8D:9A:9B:C8:1B:73:42:10:FE:20:94:86
Authority key identifier: B2:B4:1D:2F:7D:7D:38:57:E0:75:F2:A4:F2:F9:D3:E0:44:F2:E5:36
Certificate issuer: /CN=b2b41d2f7d7d3857e075f2a4f2f9d3e044f2e536
Certificate serial: 019D26CD3F1DBEDD098389BF31F9B16E8D64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/srQdL319OFfgdfKk8vnT4ETy5TY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.mft
Manifest number: 087B
Signing time: Wed 25 Mar 2026 21:01:18 +0000
Manifest this update: Wed 25 Mar 2026 21:01:18 +0000
Manifest next update: Thu 26 Mar 2026 21:01:18 +0000
Files and hashes: 1: Spy7lYm24U3zdnyHMnurxfa2T6k.roa (hash: JcDra+5Gb+YXgz7R5LBtufPmpQV8nA+XRnuojSfqw4U=)
2: srQdL319OFfgdfKk8vnT4ETy5TY.crl (hash: ryUTyf8jxVJ4rc60aJnKCne9rgDXd9E4l5fpNUEDr00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.mft
rsync://rpki.ripe.net/repository/DEFAULT/srQdL319OFfgdfKk8vnT4ETy5TY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:3f:1d:be:dd:09:83:89:bf:31:f9:b1:6e:8d:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2b41d2f7d7d3857e075f2a4f2f9d3e044f2e536
Validity
Not Before: Mar 25 21:01:18 2026 GMT
Not After : Mar 26 21:01:18 2026 GMT
Subject: CN=c3c261b6c45654378d9a9bc81b734210fe209486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:17:36:be:ae:f9:c9:08:9f:b6:af:ff:0d:17:
1f:c3:a5:9a:7c:ee:e3:51:7d:9d:b6:48:93:1d:4c:
40:b7:a7:d8:18:70:40:9b:48:ed:90:64:ec:21:21:
3c:74:e3:01:ed:04:bd:b2:74:9b:74:d5:78:e5:54:
06:18:50:c1:10:34:cd:f8:3b:9c:4b:d1:7f:27:c7:
96:6d:63:8f:84:bc:39:d6:0f:37:29:ad:2a:c5:6d:
d7:b5:f0:5f:fe:a9:77:37:af:64:f3:eb:58:44:f2:
c9:4c:a5:97:a6:3c:5e:4d:c0:61:9a:2e:f6:68:25:
6c:d4:4d:01:ea:0c:43:7b:08:f5:f2:ee:a6:c1:e0:
48:e0:40:63:f4:fd:b3:79:bc:55:45:6a:5b:70:a9:
c7:8a:56:7b:90:a6:c9:b7:0c:4a:09:8e:89:f2:09:
8e:7f:ca:3e:6f:06:dc:06:81:dd:bf:12:ee:3c:1e:
6e:59:50:87:bb:55:58:16:b7:84:52:90:91:a7:b7:
ee:da:fd:79:8e:65:6d:58:ba:48:04:cb:d7:29:c0:
1e:ac:e0:8f:f0:71:da:42:15:a6:ef:d6:95:83:de:
bc:f2:a0:80:c5:fb:04:22:5f:04:73:b8:ef:9f:6c:
da:af:f2:d0:03:5e:35:cc:10:f3:0f:97:ee:47:03:
23:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C2:61:B6:C4:56:54:37:8D:9A:9B:C8:1B:73:42:10:FE:20:94:86
X509v3 Authority Key Identifier:
keyid:B2:B4:1D:2F:7D:7D:38:57:E0:75:F2:A4:F2:F9:D3:E0:44:F2:E5:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/srQdL319OFfgdfKk8vnT4ETy5TY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:c2:cd:fc:a3:fe:ef:dc:0c:b6:64:2c:70:52:23:f4:e3:ff:
10:b8:e3:db:8c:92:4b:89:ff:83:fe:13:21:9c:49:f7:09:71:
d1:22:32:56:d0:ad:56:8a:cf:9a:62:2a:36:b6:8d:59:6e:2a:
07:4a:c4:dc:b9:69:fd:f4:9f:19:22:cf:df:d9:36:b0:8f:8d:
7c:95:b1:7d:de:b1:27:64:74:5d:92:3e:79:1d:3c:83:55:9b:
7e:04:15:af:ed:97:53:0e:e7:92:af:d7:ac:90:e6:34:09:c5:
91:d4:80:5c:03:03:a6:b4:ac:67:2e:b6:4d:f8:6e:44:68:7e:
bb:9c:60:1c:71:7f:68:34:17:af:80:83:5b:68:00:c3:c0:45:
3f:d4:be:e0:7a:b8:ec:7d:c3:c8:83:3b:77:12:2c:48:22:5e:
ed:e7:57:80:6d:bc:52:94:eb:e2:af:75:b0:a6:2c:0f:62:2b:
21:8f:2b:cc:21:6c:cf:9c:82:02:77:f5:61:bf:25:1d:9a:8e:
3f:5a:71:9c:f7:2e:f4:1d:2c:1e:d3:5f:19:eb:95:97:70:5b:
dc:ce:ce:f5:03:8d:f4:e4:c0:f6:ab:f5:61:44:e6:40:c7:4d:
2c:b2:19:d8:ca:77:d8:65:b5:cd:b4:b3:02:a6:5a:2e:5a:46:
40:61:08:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzT8dvt0Jg4m/Mfmxbo1kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYjQxZDJmN2Q3ZDM4NTdlMDc1ZjJhNGYyZjlkM2UwNDRm
MmU1MzYwHhcNMjYwMzI1MjEwMTE4WhcNMjYwMzI2MjEwMTE4WjAzMTEwLwYDVQQD
EyhjM2MyNjFiNmM0NTY1NDM3OGQ5YTliYzgxYjczNDIxMGZlMjA5NDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhc2vq75yQiftq//DRcfw6WafO7j
UX2dtkiTHUxAt6fYGHBAm0jtkGTsISE8dOMB7QS9snSbdNV45VQGGFDBEDTN+Duc
S9F/J8eWbWOPhLw51g83Ka0qxW3XtfBf/ql3N69k8+tYRPLJTKWXpjxeTcBhmi72
aCVs1E0B6gxDewj18u6mweBI4EBj9P2zebxVRWpbcKnHilZ7kKbJtwxKCY6J8gmO
f8o+bwbcBoHdvxLuPB5uWVCHu1VYFreEUpCRp7fu2v15jmVtWLpIBMvXKcAerOCP
8HHaQhWm79aVg9688qCAxfsEIl8Ec7jvn2zar/LQA141zBDzD5fuRwMjkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMPCYbbEVlQ3jZqbyBtzQhD+IJSGMB8GA1UdIwQY
MBaAFLK0HS99fThX4HXypPL50+BE8uU2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3JRZEwzMTlPRmZnZGZLazh2blQ0RVR5NVRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9kNzdhYzQtZGM2Ni00MzRmLTg0MjMt
YzllMjBjY2Q0NzZmLzEvc3JRZEwzMTlPRmZnZGZLazh2blQ0RVR5NVRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9kNzdhYzQtZGM2Ni00MzRmLTg0MjMtYzllMjBjY2Q0NzZm
LzEvc3JRZEwzMTlPRmZnZGZLazh2blQ0RVR5NVRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV8LN/KP+
79wMtmQscFIj9OP/ELjj24ySS4n/g/4TIZxJ9wlx0SIyVtCtVorPmmIqNraNWW4q
B0rE3Llp/fSfGSLP39k2sI+NfJWxfd6xJ2R0XZI+eR08g1WbfgQVr+2XUw7nkq/X
rJDmNAnFkdSAXAMDprSsZy62TfhuRGh+u5xgHHF/aDQXr4CDW2gAw8BFP9S+4Hq4
7H3DyIM7dxIsSCJe7edXgG28UpTr4q91sKYsD2IrIY8rzCFsz5yCAnf1Yb8lHZqO
P1pxnPcu9B0sHtNfGeuVl3Bb3M7O9QON9OTA9qv1YUTmQMdNLLIZ2Mp32GW1zbSz
AqZaLlpGQGEI0w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:14:58 2026 by rpki-client