Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft
File: C1peymzTjpIbWhRXCFSttKO2kjg.mft (raw, json)
Hash identifier: uS0q9UcYRY98kuueCvl0MrR2Hhv0CPLx9ptGEHC4+SE=
Subject key identifier: D9:5A:AA:16:5F:3F:E3:54:25:AA:DB:B3:F6:D7:F3:2B:21:6C:8E:FF
Authority key identifier: 0B:5A:5E:CA:6C:D3:8E:92:1B:5A:14:57:08:54:AD:B4:A3:B6:92:38
Certificate issuer: /CN=0b5a5eca6cd38e921b5a14570854adb4a3b69238
Certificate serial: 019D28BBCE3A80BA1E59C4970EA2E9DCB638
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1peymzTjpIbWhRXCFSttKO2kjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft
Manifest number: 101D
Signing time: Thu 26 Mar 2026 06:01:29 +0000
Manifest this update: Thu 26 Mar 2026 06:01:29 +0000
Manifest next update: Fri 27 Mar 2026 06:01:29 +0000
Files and hashes: 1: C1peymzTjpIbWhRXCFSttKO2kjg.crl (hash: 3P3QxRt7ytesdlNQxHhyTwlrdpGhL9rdTcTfIBzQYgE=)
2: vYDkiQ8284qwQlXQwbK7sIbrgu4.roa (hash: atoNREmcnzRM3p/MPLhkQ+MYv5LYFsR6JX4f94qKzQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1peymzTjpIbWhRXCFSttKO2kjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:ce:3a:80:ba:1e:59:c4:97:0e:a2:e9:dc:b6:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5a5eca6cd38e921b5a14570854adb4a3b69238
Validity
Not Before: Mar 26 06:01:29 2026 GMT
Not After : Mar 27 06:01:29 2026 GMT
Subject: CN=d95aaa165f3fe35425aadbb3f6d7f32b216c8eff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:03:54:95:84:cf:45:7a:8c:04:b5:92:11:8a:
ce:c3:8b:d3:5f:8a:f8:89:31:62:3b:8c:21:20:b6:
29:32:31:68:19:94:18:24:27:58:6e:1d:85:7e:74:
19:20:b5:58:8c:e4:b7:d9:b6:8e:ff:9c:00:ec:c7:
53:ba:03:5b:cb:f8:84:0a:bd:39:be:b8:fb:29:b1:
1f:c6:e8:cf:50:04:85:a0:bc:63:17:d3:f2:db:79:
e7:78:ae:e3:49:43:1a:5e:16:6a:70:5c:ab:3e:4c:
8f:14:28:7b:2b:7a:2e:6b:65:19:b4:eb:00:5d:11:
9d:0f:97:1f:16:d0:cb:15:60:85:ec:da:cb:85:ff:
23:ce:e3:52:fb:f0:04:7a:25:f2:c1:68:bb:e6:b9:
f0:4b:a3:27:87:ee:e7:b9:5a:cf:3d:bd:99:9a:50:
d2:67:45:c3:2b:99:4e:1d:6e:a9:bd:27:0b:81:bd:
e1:ae:07:b7:4e:25:e5:f8:a4:c5:fa:19:41:8a:49:
b4:a5:61:93:6e:b2:16:11:d1:26:46:26:3c:05:e9:
a7:a1:1d:93:71:79:5e:8e:88:2c:1e:6a:b0:35:a7:
b3:c7:96:7b:9e:cb:96:05:86:b4:fa:1e:84:a0:67:
49:cc:75:71:55:a8:12:19:0b:fe:a7:d3:d1:e8:52:
bd:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:5A:AA:16:5F:3F:E3:54:25:AA:DB:B3:F6:D7:F3:2B:21:6C:8E:FF
X509v3 Authority Key Identifier:
keyid:0B:5A:5E:CA:6C:D3:8E:92:1B:5A:14:57:08:54:AD:B4:A3:B6:92:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1peymzTjpIbWhRXCFSttKO2kjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:ad:63:1a:92:b5:d4:6f:81:c4:bd:3f:77:83:d7:1e:b5:f7:
58:a9:2f:87:fb:c7:67:d3:72:71:92:75:44:0b:04:b0:3d:66:
7c:be:7b:f7:2c:2c:52:0d:11:10:99:19:6c:1e:09:b1:c8:97:
f6:de:d6:e0:c0:77:c5:b5:f3:1c:0e:1a:3c:2e:05:42:eb:c8:
c7:16:b6:28:ec:00:5b:bc:46:64:76:09:c6:7b:ef:92:0d:3e:
39:d9:e9:13:87:fc:1a:79:0a:ab:6a:d1:5a:d9:6b:df:03:50:
58:98:c8:b0:fb:32:5b:e5:05:af:61:b4:49:7f:71:85:01:76:
a4:34:ce:97:ca:2e:67:66:9e:ef:f9:ab:98:05:23:29:5f:b0:
32:91:77:d6:77:d0:92:4f:86:c4:39:c1:dc:48:10:31:b5:bf:
bd:17:b1:f7:f3:f6:4d:7d:8e:c0:56:46:24:e9:ee:65:58:96:
40:de:d4:c3:02:34:d5:21:f0:95:0a:9c:cb:10:63:3f:6b:06:
3a:c7:cb:f5:06:cd:3b:19:36:29:5a:72:44:73:6c:5c:04:79:
69:9a:2a:7c:3a:7b:11:23:af:a3:47:09:02:0a:04:f1:eb:ca:
a7:9c:07:c4:1c:35:4a:4f:f9:54:86:85:79:e8:e7:90:88:99:
45:fb:0a:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou846gLoeWcSXDqLp3LY4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNWE1ZWNhNmNkMzhlOTIxYjVhMTQ1NzA4NTRhZGI0YTNi
NjkyMzgwHhcNMjYwMzI2MDYwMTI5WhcNMjYwMzI3MDYwMTI5WjAzMTEwLwYDVQQD
EyhkOTVhYWExNjVmM2ZlMzU0MjVhYWRiYjNmNmQ3ZjMyYjIxNmM4ZWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3wNUlYTPRXqMBLWSEYrOw4vTX4r4
iTFiO4whILYpMjFoGZQYJCdYbh2FfnQZILVYjOS32baO/5wA7MdTugNby/iECr05
vrj7KbEfxujPUASFoLxjF9Py23nneK7jSUMaXhZqcFyrPkyPFCh7K3oua2UZtOsA
XRGdD5cfFtDLFWCF7NrLhf8jzuNS+/AEeiXywWi75rnwS6Mnh+7nuVrPPb2ZmlDS
Z0XDK5lOHW6pvScLgb3hrge3TiXl+KTF+hlBikm0pWGTbrIWEdEmRiY8BemnoR2T
cXlejogsHmqwNaezx5Z7nsuWBYa0+h6EoGdJzHVxVagSGQv+p9PR6FK9vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNlaqhZfP+NUJarbs/bX8yshbI7/MB8GA1UdIwQY
MBaAFAtaXsps046SG1oUVwhUrbSjtpI4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzFwZXltelRqcEliV2hSWENGU3R0S08ya2pnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9kYzRlNGQtYWUyMi00MTQ3LWFjODct
ZTBkOTE0YzFjYjUwLzEvQzFwZXltelRqcEliV2hSWENGU3R0S08ya2pnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9kYzRlNGQtYWUyMi00MTQ3LWFjODctZTBkOTE0YzFjYjUw
LzEvQzFwZXltelRqcEliV2hSWENGU3R0S08ya2pnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC61jGpK1
1G+BxL0/d4PXHrX3WKkvh/vHZ9NycZJ1RAsEsD1mfL579ywsUg0REJkZbB4JsciX
9t7W4MB3xbXzHA4aPC4FQuvIxxa2KOwAW7xGZHYJxnvvkg0+OdnpE4f8GnkKq2rR
Wtlr3wNQWJjIsPsyW+UFr2G0SX9xhQF2pDTOl8ouZ2ae7/mrmAUjKV+wMpF31nfQ
kk+GxDnB3EgQMbW/vRex9/P2TX2OwFZGJOnuZViWQN7UwwI01SHwlQqcyxBjP2sG
OsfL9QbNOxk2KVpyRHNsXAR5aZoqfDp7ESOvo0cJAgoE8evKp5wHxBw1Sk/5VIaF
eejnkIiZRfsKZA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:15:48 2026 by rpki-client