Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft
File: B9PAwRUyjD0owPVyGwCYKyzUIV4.mft (raw, json)
Hash identifier: lfC3NQ/g9cL4oUwnlNL+Brt/jmvoO23Wy4JYi3KI3g4=
Subject key identifier: 06:5F:C5:29:DB:BA:3F:D5:00:92:A4:D1:88:F6:75:6A:4C:59:FE:C7
Authority key identifier: 07:D3:C0:C1:15:32:8C:3D:28:C0:F5:72:1B:00:98:2B:2C:D4:21:5E
Certificate issuer: /CN=07d3c0c115328c3d28c0f5721b00982b2cd4215e
Certificate serial: 019D26CCCA8D0E0BF7CFF0039082F046319A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9PAwRUyjD0owPVyGwCYKyzUIV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft
Manifest number: 175D
Signing time: Wed 25 Mar 2026 21:00:48 +0000
Manifest this update: Wed 25 Mar 2026 21:00:48 +0000
Manifest next update: Thu 26 Mar 2026 21:00:48 +0000
Files and hashes: 1: B9PAwRUyjD0owPVyGwCYKyzUIV4.crl (hash: hbJa+7qHVZXGRaT00VxFUktz8Pcg1SfkEMfRnQDxYwk=)
2: QRYnwPzgKp-9B5SCFgwsSF3VtLI.roa (hash: g+/BMJPy7LXVieQvJddQ3qFl3eA3wSZtRhRO6IBuRQ0=)
3: ad8VziUyy5y7esWKDnVVM5dOvOs.roa (hash: BarUJX1J5UzrikBZata2TwtD1kQ45xC8YMxlVyw4wMU=)
4: mqgpdMuqiVglKY9miPJxo9C0iTQ.roa (hash: cS8JqXqtjXcEL0kXghoZe2Txkm/P1kISxoeWzSy0MNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9PAwRUyjD0owPVyGwCYKyzUIV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:ca:8d:0e:0b:f7:cf:f0:03:90:82:f0:46:31:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d3c0c115328c3d28c0f5721b00982b2cd4215e
Validity
Not Before: Mar 25 21:00:48 2026 GMT
Not After : Mar 26 21:00:48 2026 GMT
Subject: CN=065fc529dbba3fd50092a4d188f6756a4c59fec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:28:14:55:8f:30:84:7c:0f:d2:6c:72:5c:ee:
36:45:c1:ce:5d:b2:00:f8:3e:9d:9f:1e:73:fc:23:
c0:2c:8d:32:d5:a9:48:41:e3:da:ef:10:65:5e:7f:
f4:bc:5d:d3:82:8f:b5:78:57:f0:96:a9:47:a8:38:
51:50:3e:38:fe:00:61:d7:fd:df:25:c5:ee:07:3a:
26:e9:1a:fe:d3:7c:e4:4f:35:94:3a:f8:92:2f:7f:
0d:27:7c:d8:d0:fb:66:7b:dd:12:7a:f8:9f:f9:4c:
57:04:79:e1:70:15:1b:72:13:9f:0d:cc:fe:d3:74:
d1:3c:4d:50:89:20:1b:54:37:f8:46:b6:d9:0b:4b:
e8:85:f9:dd:df:38:7b:85:4f:89:81:3c:33:b5:70:
bb:50:d6:83:45:d0:3c:e3:c6:b8:39:c3:d4:ed:2f:
16:1d:34:75:ef:43:0e:dc:31:18:5e:8f:01:67:64:
b4:a7:ce:e5:2b:74:31:04:0f:17:a8:c3:b6:62:cb:
41:90:94:4b:da:2c:69:69:99:00:56:cc:60:1e:09:
b9:ac:ee:03:ea:c1:00:14:ed:e9:42:c5:9b:11:b1:
4f:54:2d:56:64:2b:38:dc:47:a3:86:9d:ae:55:94:
47:c3:d9:a5:00:b8:7d:12:14:21:36:f0:5a:0b:23:
84:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:5F:C5:29:DB:BA:3F:D5:00:92:A4:D1:88:F6:75:6A:4C:59:FE:C7
X509v3 Authority Key Identifier:
keyid:07:D3:C0:C1:15:32:8C:3D:28:C0:F5:72:1B:00:98:2B:2C:D4:21:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9PAwRUyjD0owPVyGwCYKyzUIV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:d7:46:ff:ba:f0:b9:df:f3:ca:65:aa:2d:45:a3:23:d6:31:
70:ab:50:2c:4d:f0:ec:e6:51:56:c9:b0:6a:da:a9:49:29:ba:
4d:d7:cb:6f:22:42:34:2f:8a:eb:d8:e8:1b:12:4f:ae:4a:c6:
cd:e1:a3:07:57:a5:f7:89:6a:5c:f9:78:c0:9e:33:fc:0e:84:
10:2d:59:27:86:26:82:91:73:b2:24:9a:83:ff:cf:94:b6:4c:
3d:ba:ba:8b:a3:d0:c9:67:81:c5:37:3a:fb:15:9f:6e:6c:bd:
ca:cf:08:86:df:ed:13:71:54:1d:a1:33:9e:27:38:9b:5b:e8:
37:7c:1f:86:67:3a:48:77:94:3e:69:a6:25:73:fd:c0:94:4a:
10:07:4c:61:9a:11:cf:fd:37:7c:d9:db:b7:46:09:a1:b5:2e:
ed:bf:e1:11:1f:1d:03:40:5f:e7:fa:4f:98:a1:b6:83:87:85:
df:a6:29:10:ff:3d:57:ea:15:26:fb:8b:f3:2c:4f:2b:c5:57:
d1:49:71:67:8f:85:85:38:9e:e8:34:79:fe:d2:f2:3e:5f:1e:
e2:b0:61:54:b2:42:a6:c5:af:78:94:3a:00:02:6c:2f:46:f3:
ba:c7:33:db:31:59:d7:5d:5f:58:e5:84:a3:b3:5a:3f:c9:94:
77:db:4f:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzMqNDgv3z/ADkILwRjGaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ZDNjMGMxMTUzMjhjM2QyOGMwZjU3MjFiMDA5ODJiMmNk
NDIxNWUwHhcNMjYwMzI1MjEwMDQ4WhcNMjYwMzI2MjEwMDQ4WjAzMTEwLwYDVQQD
EygwNjVmYzUyOWRiYmEzZmQ1MDA5MmE0ZDE4OGY2NzU2YTRjNTlmZWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkygUVY8whHwP0mxyXO42RcHOXbIA
+D6dnx5z/CPALI0y1alIQePa7xBlXn/0vF3Tgo+1eFfwlqlHqDhRUD44/gBh1/3f
JcXuBzom6Rr+03zkTzWUOviSL38NJ3zY0Ptme90Sevif+UxXBHnhcBUbchOfDcz+
03TRPE1QiSAbVDf4RrbZC0vohfnd3zh7hU+JgTwztXC7UNaDRdA848a4OcPU7S8W
HTR170MO3DEYXo8BZ2S0p87lK3QxBA8XqMO2YstBkJRL2ixpaZkAVsxgHgm5rO4D
6sEAFO3pQsWbEbFPVC1WZCs43Eejhp2uVZRHw9mlALh9EhQhNvBaCyOE0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAZfxSnbuj/VAJKk0Yj2dWpMWf7HMB8GA1UdIwQY
MBaAFAfTwMEVMow9KMD1chsAmCss1CFeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjlQQXdSVXlqRDBvd1BWeUd3Q1lLeXpVSVY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8zNzZmNWEtYzAyNi00YmFlLTg4NDct
MmIxZDQzOWIyMjI3LzEvQjlQQXdSVXlqRDBvd1BWeUd3Q1lLeXpVSVY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS8zNzZmNWEtYzAyNi00YmFlLTg4NDctMmIxZDQzOWIyMjI3
LzEvQjlQQXdSVXlqRDBvd1BWeUd3Q1lLeXpVSVY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARNdG/7rw
ud/zymWqLUWjI9YxcKtQLE3w7OZRVsmwatqpSSm6TdfLbyJCNC+K69joGxJPrkrG
zeGjB1el94lqXPl4wJ4z/A6EEC1ZJ4YmgpFzsiSag//PlLZMPbq6i6PQyWeBxTc6
+xWfbmy9ys8Iht/tE3FUHaEznic4m1voN3wfhmc6SHeUPmmmJXP9wJRKEAdMYZoR
z/03fNnbt0YJobUu7b/hER8dA0Bf5/pPmKG2g4eF36YpEP89V+oVJvuL8yxPK8VX
0UlxZ4+FhTie6DR5/tLyPl8e4rBhVLJCpsWveJQ6AAJsL0bzuscz2zFZ111fWOWE
o7NaP8mUd9tPGg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:35 2026 by rpki-client