Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft
File: rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft (raw, json)
Hash identifier: WQanrOnemkPTwCfJxP0GJzz+0HqA/NsAb8Ud/LpskJI=
Subject key identifier: 2A:AA:D0:8E:AA:E7:74:BB:D2:2E:90:A1:82:5C:D7:1F:9C:21:28:76
Authority key identifier: AC:67:C9:3B:82:25:D0:4C:37:61:C1:3C:EF:EE:5F:83:29:35:8E:23
Certificate issuer: /CN=ac67c93b8225d04c3761c13cefee5f8329358e23
Certificate serial: 019D27A89D2F71C8B07A4929816A267EA245
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft
Manifest number: 189A
Signing time: Thu 26 Mar 2026 01:00:54 +0000
Manifest this update: Thu 26 Mar 2026 01:00:54 +0000
Manifest next update: Fri 27 Mar 2026 01:00:54 +0000
Files and hashes: 1: 9yXjetA_9LZJZxTsSX9y22ZXwZI.roa (hash: lMfThegQdVTCBwkXRaAXX4LmXRlXKEgH0ZgEcCTMjEk=)
2: WcITaUECKrRS-00UJB2toA0EWBA.roa (hash: 7Dbd0N6O8xlvKSw9ngaRpgSG6WpLRxBISHsmkzDSkD8=)
3: ldmxJAkKvmlHgUpkQnhFLSPjlKg.roa (hash: f+2m7+QBQ2xNK66onBBuHDLsOd1zJ2s1AavJSLAavCU=)
4: rGfJO4Il0Ew3YcE87-5fgyk1jiM.crl (hash: 737ytHTN+yYBD9aaMdHYG6bNJJ6BTHeLAgttjLcvSdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:9d:2f:71:c8:b0:7a:49:29:81:6a:26:7e:a2:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac67c93b8225d04c3761c13cefee5f8329358e23
Validity
Not Before: Mar 26 01:00:54 2026 GMT
Not After : Mar 27 01:00:54 2026 GMT
Subject: CN=2aaad08eaae774bbd22e90a1825cd71f9c212876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:60:ac:d2:99:99:72:ea:e7:b7:6a:69:ee:57:
d5:2a:75:26:30:be:b3:75:b4:c8:46:8b:9c:32:0e:
92:3b:80:ee:0e:6e:3a:e5:a9:a9:05:5c:11:8f:ad:
d7:42:94:86:16:c2:75:ce:60:98:dc:0f:34:ca:ae:
d1:da:32:f4:9f:fc:e3:be:cd:d5:7d:a8:9f:e5:89:
5a:86:18:c9:d2:ec:b3:50:fc:fc:25:ad:4f:77:88:
05:f0:4b:6e:5c:f7:e7:93:ee:5e:d1:f6:fd:19:91:
64:f7:4e:7b:b4:7b:34:84:fa:c3:8d:93:b4:b0:69:
a2:68:62:15:8b:ed:f0:ba:94:ae:5d:09:7a:72:32:
6c:20:7c:0d:7e:6c:8f:82:b3:cc:b9:81:1e:e2:fe:
59:81:0a:3b:56:b8:36:43:71:6b:1b:e0:cc:b0:db:
c4:0c:94:f8:88:84:13:70:06:c8:a6:41:ef:b7:14:
6f:e2:39:1f:cb:cd:11:e2:32:72:23:c1:52:17:92:
a1:43:4e:d1:5b:e1:57:d1:6e:6e:e5:ab:25:19:c4:
c7:44:51:0d:76:2a:ad:bb:a8:35:e6:04:b7:18:d3:
f5:6c:e5:bf:2e:78:1c:c3:c3:b0:fd:85:59:c2:52:
05:b3:80:7a:d8:ac:db:27:1d:0b:9f:9d:a4:4b:de:
56:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:AA:D0:8E:AA:E7:74:BB:D2:2E:90:A1:82:5C:D7:1F:9C:21:28:76
X509v3 Authority Key Identifier:
keyid:AC:67:C9:3B:82:25:D0:4C:37:61:C1:3C:EF:EE:5F:83:29:35:8E:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:a8:d2:0d:48:ee:d4:d9:cc:eb:af:88:6b:02:c8:c7:07:09:
99:5c:9b:a4:6f:a8:ef:09:e5:bb:71:50:1a:af:14:4a:7b:6d:
97:3a:9a:92:1a:35:0c:29:76:2c:a4:6f:d8:6e:ac:f4:da:ff:
41:2f:99:c3:73:9a:2f:5e:af:bc:2e:a4:7f:8d:d9:c9:c1:62:
fe:fd:b0:f0:79:b5:ec:b2:5f:c9:c8:38:ca:35:36:aa:d9:51:
9a:23:3f:0a:3a:21:01:32:34:4d:d7:eb:5d:19:d9:09:bf:fd:
64:0e:d6:2e:9c:e3:13:81:7c:61:ed:a3:c4:97:1f:6f:75:43:
b8:76:92:be:b1:f2:70:84:19:af:24:ca:86:0a:7f:01:98:53:
2c:41:0a:04:70:1d:80:a0:e8:77:73:65:aa:fb:dd:8d:88:1a:
c1:62:05:ed:9e:35:03:81:dc:44:08:3a:46:72:e9:e4:0e:77:
f3:1e:bd:db:eb:b2:7f:f1:2d:d6:de:1e:e3:01:30:fd:91:7e:
ad:7e:89:d0:76:26:c1:c6:22:4d:77:60:45:31:0f:18:3a:0c:
aa:2f:a9:e1:28:7e:7f:f5:55:cc:2f:f0:84:fb:33:9b:c8:e0:
ac:94:14:d4:02:09:9d:c2:b0:85:28:87:4c:73:b1:34:a6:27:
e9:a1:90:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqJ0vcciwekkpgWomfqJFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjNjdjOTNiODIyNWQwNGMzNzYxYzEzY2VmZWU1ZjgzMjkz
NThlMjMwHhcNMjYwMzI2MDEwMDU0WhcNMjYwMzI3MDEwMDU0WjAzMTEwLwYDVQQD
EygyYWFhZDA4ZWFhZTc3NGJiZDIyZTkwYTE4MjVjZDcxZjljMjEyODc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWCs0pmZcurnt2pp7lfVKnUmML6z
dbTIRoucMg6SO4DuDm465ampBVwRj63XQpSGFsJ1zmCY3A80yq7R2jL0n/zjvs3V
faif5YlahhjJ0uyzUPz8Ja1Pd4gF8EtuXPfnk+5e0fb9GZFk9057tHs0hPrDjZO0
sGmiaGIVi+3wupSuXQl6cjJsIHwNfmyPgrPMuYEe4v5ZgQo7Vrg2Q3FrG+DMsNvE
DJT4iIQTcAbIpkHvtxRv4jkfy80R4jJyI8FSF5KhQ07RW+FX0W5u5aslGcTHRFEN
diqtu6g15gS3GNP1bOW/Lngcw8Ow/YVZwlIFs4B62KzbJx0Ln52kS95WkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCqq0I6q53S70i6QoYJc1x+cISh2MB8GA1UdIwQY
MBaAFKxnyTuCJdBMN2HBPO/uX4MpNY4jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckdmSk80SWwwRXczWWNFODctNWZneWsxamlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9hYzhlNmYtNWY4My00NDliLThjOWQt
NzdjMTA0ODQyMmQ4LzEvckdmSk80SWwwRXczWWNFODctNWZneWsxamlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9hYzhlNmYtNWY4My00NDliLThjOWQtNzdjMTA0ODQyMmQ4
LzEvckdmSk80SWwwRXczWWNFODctNWZneWsxamlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiKjSDUju
1NnM66+IawLIxwcJmVybpG+o7wnlu3FQGq8USnttlzqakho1DCl2LKRv2G6s9Nr/
QS+Zw3OaL16vvC6kf43ZycFi/v2w8Hm17LJfycg4yjU2qtlRmiM/CjohATI0Tdfr
XRnZCb/9ZA7WLpzjE4F8Ye2jxJcfb3VDuHaSvrHycIQZryTKhgp/AZhTLEEKBHAd
gKDod3NlqvvdjYgawWIF7Z41A4HcRAg6RnLp5A538x692+uyf/Et1t4e4wEw/ZF+
rX6J0HYmwcYiTXdgRTEPGDoMqi+p4Sh+f/VVzC/whPszm8jgrJQU1AIJncKwhSiH
THOxNKYn6aGQCg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:34:49 2026 by rpki-client