Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft
File: MAsvRrpXChZ3v9WExygirZ2f5bA.mft (raw, json)
Hash identifier: tmfW7k8scOCRu3X/XuyWHOLuIfPsQy5KVkuGjZ2qUqI=
Subject key identifier: 0D:2E:4E:2A:31:11:8E:0C:23:FD:DA:82:44:76:FF:F5:BF:3F:FB:A9
Authority key identifier: 30:0B:2F:46:BA:57:0A:16:77:BF:D5:84:C7:28:22:AD:9D:9F:E5:B0
Certificate issuer: /CN=300b2f46ba570a1677bfd584c72822ad9d9fe5b0
Certificate serial: 019D25843387CCB6545B606DA09395C7C4E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAsvRrpXChZ3v9WExygirZ2f5bA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 15:01:54 +0000
Manifest this update: Wed 25 Mar 2026 15:01:54 +0000
Manifest next update: Thu 26 Mar 2026 15:01:54 +0000
Files and hashes: 1: KaT0sW3jh_PPKcDRHkAr_6LGbFg.roa (hash: 4tEmgwJp5TqeJVAPv5jHwB4A533Y/KCzgRQwAZ4AUmA=)
2: MAsvRrpXChZ3v9WExygirZ2f5bA.crl (hash: jRoUkGdVFQyR7KQHc7D+kXTKTcIJnL4w1mRITmJhVrY=)
3: YpeHyUrRfHsUTh5A1_lsn9ecLdI.roa (hash: 54/I0U+2gsfxDHjTGitToFh36OuJx0rhyc8ObFsTIiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MAsvRrpXChZ3v9WExygirZ2f5bA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:33:87:cc:b6:54:5b:60:6d:a0:93:95:c7:c4:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=300b2f46ba570a1677bfd584c72822ad9d9fe5b0
Validity
Not Before: Mar 25 15:01:54 2026 GMT
Not After : Mar 26 15:01:54 2026 GMT
Subject: CN=0d2e4e2a31118e0c23fdda824476fff5bf3ffba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:cc:f4:34:38:23:4a:9b:e5:3e:39:55:dc:e0:
b8:1e:a3:04:52:a8:dd:db:a0:38:6c:5d:b1:7e:db:
17:d5:b1:e1:85:21:81:cf:0f:2a:2b:8c:5c:78:33:
ed:0b:8b:88:1f:44:e2:b6:d8:ba:b9:ee:d2:2b:40:
b8:20:1a:d2:36:2d:ea:78:51:0c:d4:a6:52:f5:3d:
02:03:33:55:ac:63:b2:91:3a:73:75:67:ac:c6:ef:
1f:e2:f1:ce:4e:69:46:13:50:63:69:5c:8d:4f:a6:
a4:04:83:21:95:e3:c5:85:c2:b0:b3:98:91:bb:46:
77:6b:20:45:b5:ee:0d:13:86:4c:9a:1a:d7:0c:f8:
8e:e3:49:5c:e2:ab:48:02:48:1e:9f:ae:87:02:4e:
8a:63:97:61:6e:b9:17:3b:c6:50:de:88:e0:85:39:
c0:41:67:4b:7f:c8:36:e3:37:00:c1:f1:a8:12:fa:
12:4e:22:c7:40:a9:34:07:09:93:dd:94:f3:76:74:
0f:b1:e8:b2:c6:f3:cf:d6:1d:c9:c0:c0:91:df:64:
e9:05:51:ed:98:15:5f:7d:6d:7c:f8:df:ec:ac:01:
b2:38:e7:d7:ea:e1:31:28:d9:ee:1c:7b:f0:b2:58:
13:a7:05:7a:48:4e:69:c1:84:bb:a2:7e:d6:6a:87:
f5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:2E:4E:2A:31:11:8E:0C:23:FD:DA:82:44:76:FF:F5:BF:3F:FB:A9
X509v3 Authority Key Identifier:
keyid:30:0B:2F:46:BA:57:0A:16:77:BF:D5:84:C7:28:22:AD:9D:9F:E5:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAsvRrpXChZ3v9WExygirZ2f5bA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:dc:92:6c:84:b0:33:46:15:52:68:50:4a:f3:1f:a3:e7:07:
93:d0:f3:cd:f8:b9:8a:8e:de:ef:ed:e5:f5:a1:cc:fe:ff:0b:
16:79:62:36:9d:62:1c:3e:69:5c:3f:e9:de:86:6d:15:cd:5c:
aa:90:39:5d:18:08:a5:b3:ce:ab:a6:76:f0:aa:5f:97:fd:6f:
3d:fd:f2:2d:02:06:09:39:e9:fe:09:6f:c8:9f:66:95:94:02:
18:e5:e1:07:19:31:23:dd:bb:63:c0:17:95:41:0b:14:ea:f4:
3d:04:c0:26:ff:2b:34:61:38:e6:99:c9:c0:9c:2d:1f:86:11:
53:4c:cc:d8:57:65:58:e3:75:b0:8c:3a:6f:c4:06:ec:8a:4b:
2d:82:38:fa:02:e6:c3:0e:79:05:c3:04:ef:2f:67:55:4e:a3:
b5:d6:b8:15:92:56:3e:f0:d6:1e:c5:b4:79:84:dd:e8:67:1f:
a7:04:d9:06:9a:fa:c5:30:87:4d:d2:19:bd:17:35:4e:ba:e9:
b1:82:68:4f:a9:6f:aa:08:93:01:b2:23:e2:e7:47:74:6f:f2:
d6:3f:50:33:8c:af:bc:e9:c3:6b:e4:d8:37:c1:6d:8f:1a:04:
91:b1:41:98:a6:91:32:c3:bb:99:a3:60:7a:bf:89:54:7e:c9:
8a:35:c6:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lhDOHzLZUW2BtoJOVx8TkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwMGIyZjQ2YmE1NzBhMTY3N2JmZDU4NGM3MjgyMmFkOWQ5
ZmU1YjAwHhcNMjYwMzI1MTUwMTU0WhcNMjYwMzI2MTUwMTU0WjAzMTEwLwYDVQQD
EygwZDJlNGUyYTMxMTE4ZTBjMjNmZGRhODI0NDc2ZmZmNWJmM2ZmYmE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Mz0NDgjSpvlPjlV3OC4HqMEUqjd
26A4bF2xftsX1bHhhSGBzw8qK4xceDPtC4uIH0Titti6ue7SK0C4IBrSNi3qeFEM
1KZS9T0CAzNVrGOykTpzdWesxu8f4vHOTmlGE1BjaVyNT6akBIMhlePFhcKws5iR
u0Z3ayBFte4NE4ZMmhrXDPiO40lc4qtIAkgen66HAk6KY5dhbrkXO8ZQ3ojghTnA
QWdLf8g24zcAwfGoEvoSTiLHQKk0BwmT3ZTzdnQPseiyxvPP1h3JwMCR32TpBVHt
mBVffW18+N/srAGyOOfX6uExKNnuHHvwslgTpwV6SE5pwYS7on7Waof1lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA0uTioxEY4MI/3agkR2//W/P/upMB8GA1UdIwQY
MBaAFDALL0a6VwoWd7/VhMcoIq2dn+WwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUFzdlJycFhDaFozdjlXRXh5Z2lyWjJmNWJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9iY2I4N2YtMmMxNy00MjA3LTk2MmIt
OTgwNzI5MzZjNTE4LzEvTUFzdlJycFhDaFozdjlXRXh5Z2lyWjJmNWJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9iY2I4N2YtMmMxNy00MjA3LTk2MmItOTgwNzI5MzZjNTE4
LzEvTUFzdlJycFhDaFozdjlXRXh5Z2lyWjJmNWJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi9ySbISw
M0YVUmhQSvMfo+cHk9Dzzfi5io7e7+3l9aHM/v8LFnliNp1iHD5pXD/p3oZtFc1c
qpA5XRgIpbPOq6Z28Kpfl/1vPf3yLQIGCTnp/glvyJ9mlZQCGOXhBxkxI927Y8AX
lUELFOr0PQTAJv8rNGE45pnJwJwtH4YRU0zM2FdlWON1sIw6b8QG7IpLLYI4+gLm
ww55BcME7y9nVU6jtda4FZJWPvDWHsW0eYTd6GcfpwTZBpr6xTCHTdIZvRc1Trrp
sYJoT6lvqgiTAbIj4udHdG/y1j9QM4yvvOnDa+TYN8FtjxoEkbFBmKaRMsO7maNg
er+JVH7JijXGag==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:39 2026 by rpki-client