Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.mft
File: 0rtm-96q__Q7llCx9svk8p7a9Yw.mft (raw, json)
Hash identifier: Kx78NgaZ/JDnF6hd2aED6bHOTNrWRaMeQeuZ3BTvPKc=
Subject key identifier: E4:31:5C:D8:71:03:1F:89:30:8C:04:96:64:DE:6A:3C:C5:AB:2F:D7
Authority key identifier: D2:BB:66:FB:DE:AA:FF:F4:3B:96:50:B1:F6:CB:E4:F2:9E:DA:F5:8C
Certificate issuer: /CN=d2bb66fbdeaafff43b9650b1f6cbe4f29edaf58c
Certificate serial: 019D2583729467CCE313FAC6F51B949BC2AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0rtm-96q__Q7llCx9svk8p7a9Yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 15:01:04 +0000
Manifest this update: Wed 25 Mar 2026 15:01:04 +0000
Manifest next update: Thu 26 Mar 2026 15:01:04 +0000
Files and hashes: 1: 0rtm-96q__Q7llCx9svk8p7a9Yw.crl (hash: H+NWhWOqdHcS7cBPnPId9wcnEZlrlA1HT1k+EVIkVhA=)
2: eqRZK_JGFaT4pOqnhAyJvjkUCoA.roa (hash: jItvJdxi3E9SOd6i/gjBeEHoNNhvY/8u3V8hrLU5X7c=)
3: pdBEIOtIWrJ0TSk32Jmh_QpJkK8.asa (hash: sxkJU3Q3LaQ8TF/6A6BbBQGeo7WMZ4PLTizqyUpaQgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0rtm-96q__Q7llCx9svk8p7a9Yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:72:94:67:cc:e3:13:fa:c6:f5:1b:94:9b:c2:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2bb66fbdeaafff43b9650b1f6cbe4f29edaf58c
Validity
Not Before: Mar 25 15:01:04 2026 GMT
Not After : Mar 26 15:01:04 2026 GMT
Subject: CN=e4315cd871031f89308c049664de6a3cc5ab2fd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:bf:d2:81:27:59:fb:7e:44:af:8c:f4:63:0a:
91:6d:2c:ed:7f:bf:e6:e2:02:f2:b8:97:69:00:31:
5b:1d:d8:29:b5:69:1f:51:0e:47:69:9a:05:1e:29:
a1:53:20:31:b2:1f:04:79:50:69:61:aa:86:13:5d:
bc:44:dc:fc:01:33:3c:83:dd:41:cb:ba:0d:4a:89:
df:36:46:c8:00:ef:35:73:96:98:cc:81:e7:9c:47:
de:40:d3:b3:b4:2b:3c:c7:cb:f1:43:96:e3:3e:b9:
da:51:69:42:ae:31:b7:98:05:70:c9:58:cd:31:cd:
6c:f7:62:1d:87:e3:f9:c5:15:27:51:80:4f:c3:2d:
2a:82:64:3d:18:40:34:33:1a:20:93:d5:a6:42:09:
9c:d7:1d:b1:cb:04:fb:28:a7:9f:98:28:c3:26:77:
af:df:5b:5d:00:c1:0d:50:d1:d8:33:43:c2:64:ca:
12:79:f2:9d:7f:92:b8:d4:9d:40:9c:84:89:4a:2e:
7a:24:4e:27:1c:3c:fd:51:a2:2f:e3:39:10:ee:36:
b0:99:b4:b5:37:e6:19:3d:e6:19:3b:88:11:c1:e8:
ff:3b:76:36:a4:7c:23:cf:f3:23:b5:0b:35:fe:a2:
55:9a:77:52:16:86:50:ad:1e:4f:b1:b3:28:3f:0a:
75:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:31:5C:D8:71:03:1F:89:30:8C:04:96:64:DE:6A:3C:C5:AB:2F:D7
X509v3 Authority Key Identifier:
keyid:D2:BB:66:FB:DE:AA:FF:F4:3B:96:50:B1:F6:CB:E4:F2:9E:DA:F5:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rtm-96q__Q7llCx9svk8p7a9Yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:7f:4d:99:e4:47:32:9d:bf:4d:51:dc:06:1d:0a:7d:43:eb:
f6:1d:4e:2e:56:01:fa:cb:af:3a:ba:10:80:ea:b6:6d:10:e8:
c4:a0:8a:e9:da:be:08:d8:49:b0:8d:d2:ca:ea:ec:e7:a1:ca:
f1:90:66:0d:1b:8c:50:57:97:64:bd:07:e3:e4:53:2b:3e:d5:
ac:db:25:2d:ca:03:77:e3:fb:ae:d3:d9:93:40:3f:17:89:d4:
5e:68:ce:c2:ed:77:6f:d9:de:64:7b:80:8a:90:83:a2:2d:75:
47:83:71:b0:8f:cb:91:27:e4:3f:45:59:69:c5:bd:a8:40:b6:
1b:6a:d5:98:92:85:e1:df:cc:7b:4c:6a:35:70:80:22:a3:8b:
09:f0:85:6e:6c:10:45:0f:63:23:f5:d2:d9:3e:68:28:69:28:
ce:9f:03:8b:b0:00:1a:3b:16:28:64:d8:97:23:78:6d:d6:ef:
cc:cb:46:47:c3:3d:e5:76:67:7e:f5:7a:6a:3f:a1:40:e5:20:
44:97:40:95:a4:74:36:a6:8b:57:07:93:3a:5a:56:b3:f6:88:
bf:5d:51:6d:e5:1a:50:87:c4:42:ed:f7:cc:73:b4:4a:f1:f8:
4d:90:c9:dd:8c:48:c7:5d:92:9c:f4:55:c3:c0:10:90:47:b5:
34:47:03:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lg3KUZ8zjE/rG9RuUm8KtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyYmI2NmZiZGVhYWZmZjQzYjk2NTBiMWY2Y2JlNGYyOWVk
YWY1OGMwHhcNMjYwMzI1MTUwMTA0WhcNMjYwMzI2MTUwMTA0WjAzMTEwLwYDVQQD
EyhlNDMxNWNkODcxMDMxZjg5MzA4YzA0OTY2NGRlNmEzY2M1YWIyZmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1r/SgSdZ+35Er4z0YwqRbSztf7/m
4gLyuJdpADFbHdgptWkfUQ5HaZoFHimhUyAxsh8EeVBpYaqGE128RNz8ATM8g91B
y7oNSonfNkbIAO81c5aYzIHnnEfeQNOztCs8x8vxQ5bjPrnaUWlCrjG3mAVwyVjN
Mc1s92Idh+P5xRUnUYBPwy0qgmQ9GEA0Mxogk9WmQgmc1x2xywT7KKefmCjDJnev
31tdAMENUNHYM0PCZMoSefKdf5K41J1AnISJSi56JE4nHDz9UaIv4zkQ7jawmbS1
N+YZPeYZO4gRwej/O3Y2pHwjz/MjtQs1/qJVmndSFoZQrR5PsbMoPwp1IQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOQxXNhxAx+JMIwElmTeajzFqy/XMB8GA1UdIwQY
MBaAFNK7Zvveqv/0O5ZQsfbL5PKe2vWMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHJ0bS05NnFfX1E3bGxDeDlzdms4cDdhOVl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9lOWNiZjMtM2E1ZC00Yjc0LTg2ZDMt
Y2IwZjI0NTVjYmQ2LzEvMHJ0bS05NnFfX1E3bGxDeDlzdms4cDdhOVl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9lOWNiZjMtM2E1ZC00Yjc0LTg2ZDMtY2IwZjI0NTVjYmQ2
LzEvMHJ0bS05NnFfX1E3bGxDeDlzdms4cDdhOVl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlX9NmeRH
Mp2/TVHcBh0KfUPr9h1OLlYB+suvOroQgOq2bRDoxKCK6dq+CNhJsI3Syurs56HK
8ZBmDRuMUFeXZL0H4+RTKz7VrNslLcoDd+P7rtPZk0A/F4nUXmjOwu13b9neZHuA
ipCDoi11R4NxsI/LkSfkP0VZacW9qEC2G2rVmJKF4d/Me0xqNXCAIqOLCfCFbmwQ
RQ9jI/XS2T5oKGkozp8Di7AAGjsWKGTYlyN4bdbvzMtGR8M95XZnfvV6aj+hQOUg
RJdAlaR0NqaLVweTOlpWs/aIv11RbeUaUIfEQu33zHO0SvH4TZDJ3YxIx12SnPRV
w8AQkEe1NEcDow==
-----END CERTIFICATE-----
Generated at Wed Mar 25 23:18:57 2026 by rpki-client