Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.mft
File: RKO0P2R-HncUzRMHZMu8SBTnoUg.mft (raw, json)
Hash identifier: flD2Pj79fxEdfrTxRKCpuMKpfGRCa5ETey9POtFkWqo=
Subject key identifier: 47:35:AF:2F:DE:7C:CE:37:07:1D:92:69:49:0C:AA:1A:FE:89:53:5E
Authority key identifier: 44:A3:B4:3F:64:7E:1E:77:14:CD:13:07:64:CB:BC:48:14:E7:A1:48
Certificate issuer: /CN=44a3b43f647e1e7714cd130764cbbc4814e7a148
Certificate serial: 019D28BB121F63BF5DDAF989F595055D802B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RKO0P2R-HncUzRMHZMu8SBTnoUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.mft
Manifest number: 188C
Signing time: Thu 26 Mar 2026 06:00:41 +0000
Manifest this update: Thu 26 Mar 2026 06:00:41 +0000
Manifest next update: Fri 27 Mar 2026 06:00:41 +0000
Files and hashes: 1: AEfnrK6ix3lgbRrsMfPKWVRCzjE.roa (hash: qwyfmOqhQfxk+SJv3YNNgHlxe2wh96nicliB7SifUfM=)
2: RKO0P2R-HncUzRMHZMu8SBTnoUg.crl (hash: LpwiICUXAZi/EaQ8YrDUQP/lbXZ1OscTrf7ZaFRyqx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RKO0P2R-HncUzRMHZMu8SBTnoUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:12:1f:63:bf:5d:da:f9:89:f5:95:05:5d:80:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44a3b43f647e1e7714cd130764cbbc4814e7a148
Validity
Not Before: Mar 26 06:00:41 2026 GMT
Not After : Mar 27 06:00:41 2026 GMT
Subject: CN=4735af2fde7cce37071d9269490caa1afe89535e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:82:af:20:14:51:31:ff:b9:54:81:99:fd:65:
4c:5e:e5:13:57:c4:08:9a:00:23:7b:50:47:97:80:
79:43:fb:6e:ac:1f:30:85:65:3d:5a:33:09:b2:85:
47:16:fd:4b:1c:96:62:45:c8:df:2b:b8:16:85:99:
66:f2:a3:94:89:16:b4:3d:5f:04:04:6e:5f:ed:97:
86:12:ac:0f:2e:21:9a:27:02:18:06:19:2c:17:15:
e9:83:7c:d5:02:b0:4e:7f:b3:ef:25:c2:68:52:e9:
f0:4d:34:79:4e:a2:38:82:9f:7a:d8:c9:f0:f2:17:
f8:5a:31:af:e0:be:7c:43:68:b0:36:58:14:33:14:
dc:ce:58:11:5b:a5:61:09:b5:e4:44:e1:21:73:05:
92:d4:93:a2:aa:2e:84:8c:ba:a0:44:26:2b:61:73:
d0:ec:cd:c0:33:e1:b0:86:b4:e7:e9:ce:5a:e5:e6:
94:49:18:b9:3f:22:54:f2:d2:e4:d5:78:78:93:78:
76:0e:51:66:b4:70:b4:c1:bb:8b:2b:cd:4e:67:02:
01:a3:d4:64:9f:3b:d0:69:cc:1d:53:e7:0f:15:2b:
c6:34:5d:07:b1:01:8e:77:2d:68:da:20:9d:d8:67:
5e:9a:cf:35:91:32:d3:7d:9d:b4:a6:1f:b2:4e:3f:
9c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:35:AF:2F:DE:7C:CE:37:07:1D:92:69:49:0C:AA:1A:FE:89:53:5E
X509v3 Authority Key Identifier:
keyid:44:A3:B4:3F:64:7E:1E:77:14:CD:13:07:64:CB:BC:48:14:E7:A1:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKO0P2R-HncUzRMHZMu8SBTnoUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:15:9f:e0:a7:3e:37:ab:9a:85:d2:20:8b:54:7a:58:17:e3:
b1:12:b0:20:55:27:23:5e:02:68:3f:65:a7:5b:18:d8:3f:a0:
70:5c:a8:cd:1c:02:ab:99:8d:59:0c:da:fa:0a:b1:1c:8a:88:
aa:e1:aa:d3:21:ea:b5:87:70:cb:ff:a1:a1:49:6e:02:b9:77:
16:7d:86:f9:4a:cb:39:3c:bc:3d:4e:f7:b5:65:7b:61:40:5c:
21:df:06:26:86:5e:a8:59:1e:54:f1:42:d8:07:da:9c:7b:18:
95:21:f2:ad:8e:08:99:18:ed:7d:3e:44:c7:5a:92:61:68:00:
9b:5d:75:65:c5:22:8d:22:7d:08:4f:92:3f:9a:b2:da:5d:81:
09:6f:f1:4b:68:cf:5f:06:b8:15:15:46:0d:d0:27:7e:65:fa:
bd:e6:c3:ae:56:5a:8a:43:24:2e:fc:90:1e:19:1e:cc:0a:5d:
30:9f:62:ef:da:cc:0e:c9:6a:f8:46:ea:ac:58:f0:f2:88:4b:
35:9e:38:fe:ff:cd:cb:cd:14:9c:8a:00:62:3c:7f:44:d5:a4:
54:3b:1a:6f:0f:94:b0:20:41:fd:a1:fe:2d:1f:72:5f:16:2c:
5b:5a:03:2e:69:6d:6a:42:16:ef:a5:e9:25:63:a2:5e:ec:a3:
c1:3c:3c:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ouxIfY79d2vmJ9ZUFXYArMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0YTNiNDNmNjQ3ZTFlNzcxNGNkMTMwNzY0Y2JiYzQ4MTRl
N2ExNDgwHhcNMjYwMzI2MDYwMDQxWhcNMjYwMzI3MDYwMDQxWjAzMTEwLwYDVQQD
Eyg0NzM1YWYyZmRlN2NjZTM3MDcxZDkyNjk0OTBjYWExYWZlODk1MzVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4KvIBRRMf+5VIGZ/WVMXuUTV8QI
mgAje1BHl4B5Q/turB8whWU9WjMJsoVHFv1LHJZiRcjfK7gWhZlm8qOUiRa0PV8E
BG5f7ZeGEqwPLiGaJwIYBhksFxXpg3zVArBOf7PvJcJoUunwTTR5TqI4gp962Mnw
8hf4WjGv4L58Q2iwNlgUMxTczlgRW6VhCbXkROEhcwWS1JOiqi6EjLqgRCYrYXPQ
7M3AM+GwhrTn6c5a5eaUSRi5PyJU8tLk1Xh4k3h2DlFmtHC0wbuLK81OZwIBo9Rk
nzvQacwdU+cPFSvGNF0HsQGOdy1o2iCd2Gdems81kTLTfZ20ph+yTj+cOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEc1ry/efM43Bx2SaUkMqhr+iVNeMB8GA1UdIwQY
MBaAFESjtD9kfh53FM0TB2TLvEgU56FIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUktPMFAyUi1IbmNVelJNSFpNdThTQlRub1VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9lMWNlZTYtZGNmZi00MzczLWJkODgt
YTNjNTM5ZjBiNmQyLzEvUktPMFAyUi1IbmNVelJNSFpNdThTQlRub1VnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9lMWNlZTYtZGNmZi00MzczLWJkODgtYTNjNTM5ZjBiNmQy
LzEvUktPMFAyUi1IbmNVelJNSFpNdThTQlRub1VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABxWf4Kc+
N6uahdIgi1R6WBfjsRKwIFUnI14CaD9lp1sY2D+gcFyozRwCq5mNWQza+gqxHIqI
quGq0yHqtYdwy/+hoUluArl3Fn2G+UrLOTy8PU73tWV7YUBcId8GJoZeqFkeVPFC
2AfanHsYlSHyrY4ImRjtfT5Ex1qSYWgAm111ZcUijSJ9CE+SP5qy2l2BCW/xS2jP
Xwa4FRVGDdAnfmX6vebDrlZaikMkLvyQHhkezApdMJ9i79rMDslq+EbqrFjw8ohL
NZ44/v/Ny80UnIoAYjx/RNWkVDsabw+UsCBB/aH+LR9yXxYsW1oDLmltakIW76Xp
JWOiXuyjwTw8NQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:58:58 2026 by rpki-client