Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft
File: rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft (raw, json)
Hash identifier: TkTsykzYgICzV2V2JT4uzMDYKIs6YrD2on12KxKAm+w=
Subject key identifier: DA:B6:CC:57:86:FF:6C:B8:43:2F:51:13:9A:82:F7:8C:05:08:F9:9D
Authority key identifier: AC:97:EB:96:74:38:FF:C4:EB:66:63:3D:D8:C0:35:01:89:36:67:F7
Certificate issuer: /CN=ac97eb967438ffc4eb66633dd8c03501893667f7
Certificate serial: 019D39AF19ABA645378DA16C364E2AD92FE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft
Manifest number: 0BC5
Signing time: Sun 29 Mar 2026 13:01:09 +0000
Manifest this update: Sun 29 Mar 2026 13:01:09 +0000
Manifest next update: Mon 30 Mar 2026 13:01:09 +0000
Files and hashes: 1: OapL7HyFK0X9wx4mL1edhbz25m0.roa (hash: f3Ysa7cBGNsoNSQJdM2JIeAtt87DP7/+oUJ9JxWPJ4k=)
2: WkUE5TtDSY0qUMHRVPnjHcODIrA.roa (hash: 7KfXEZ987lAvPil502fNFkfEV1D1Y8iJROoMhWkSDa8=)
3: rJfrlnQ4_8TrZmM92MA1AYk2Z_c.crl (hash: rqxlN9l7QZ4BNBlnVq/HU6mQe/p0DHdteZuADdGgJXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:19:ab:a6:45:37:8d:a1:6c:36:4e:2a:d9:2f:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac97eb967438ffc4eb66633dd8c03501893667f7
Validity
Not Before: Mar 29 13:01:09 2026 GMT
Not After : Mar 30 13:01:09 2026 GMT
Subject: CN=dab6cc5786ff6cb8432f51139a82f78c0508f99d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7d:9e:66:b4:16:89:f5:a6:44:e2:4f:37:42:
ae:f6:16:7e:db:d9:6d:c3:9a:9e:f5:eb:e7:10:ac:
71:55:b5:77:41:0f:69:9f:79:db:12:3e:e6:45:fa:
30:3a:89:f4:99:14:d4:9e:e9:08:00:e6:39:99:2d:
ee:ee:ba:a5:e5:84:fe:1c:f0:a8:ad:31:a3:09:b5:
8e:de:c8:e0:de:cf:cb:bf:22:e3:99:70:5c:4f:8d:
1c:80:de:88:2d:22:02:b2:87:19:3b:f0:5a:08:f0:
0d:a5:0f:52:42:91:b3:01:d9:64:ef:2c:49:2b:21:
c7:e2:1e:33:a5:23:c3:52:82:06:58:ea:04:2d:9b:
12:af:fd:90:b4:bc:a7:b3:f9:0e:bb:d3:88:31:8e:
8b:b4:60:80:27:a9:9d:73:6a:8e:70:39:cf:c8:42:
71:a9:9d:28:82:62:76:ab:7b:4f:68:1b:b6:28:86:
6e:a3:ff:92:cd:26:06:35:ec:02:71:ee:ba:4c:96:
28:95:40:5d:b6:60:38:8a:3e:30:f8:4e:9b:66:e3:
3b:2f:4d:85:e3:17:73:2b:14:1c:16:da:7f:3a:f8:
9c:de:ce:a8:22:06:07:0a:13:04:f1:9b:cf:85:4c:
49:1c:27:e7:72:c5:11:4d:92:27:4f:c7:ec:86:7a:
c7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:B6:CC:57:86:FF:6C:B8:43:2F:51:13:9A:82:F7:8C:05:08:F9:9D
X509v3 Authority Key Identifier:
keyid:AC:97:EB:96:74:38:FF:C4:EB:66:63:3D:D8:C0:35:01:89:36:67:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:0e:5a:79:10:c2:db:de:98:55:60:bb:d5:f1:ba:d6:6c:fb:
da:1b:ca:17:82:8f:48:f7:72:85:a6:0e:59:41:1f:0b:49:c5:
ed:07:fa:09:04:a7:28:09:6b:68:20:b1:17:6a:34:40:0c:d1:
e9:e8:77:35:14:2f:b5:d5:e5:c4:00:58:f5:92:fe:4b:de:a3:
72:99:44:8d:19:dc:64:44:e0:6d:69:ee:1c:8d:2a:f0:e2:ea:
0a:fc:bd:05:32:df:f3:3f:a8:d2:34:eb:8a:04:93:9b:46:fa:
c4:7e:e9:4e:56:d6:24:26:38:14:72:bb:67:6d:71:22:db:ba:
11:a3:1b:40:f2:dc:d4:04:b0:ac:ef:7f:61:25:54:c5:45:4f:
66:bd:ca:d3:bd:93:00:c1:2b:e2:c8:39:51:34:a1:9f:6f:91:
29:93:33:7a:bd:b8:b5:79:01:19:13:6f:9a:3e:c2:dc:88:36:
9a:99:2c:70:e4:34:78:d0:39:df:4f:bc:6f:50:75:d3:18:42:
29:20:37:7d:88:be:59:0e:dd:7b:03:5a:6d:db:83:80:86:ea:
8a:34:ea:92:07:8d:24:84:af:52:94:ba:e4:10:2a:49:e7:a2:
51:b7:7c:f8:35:3c:46:f7:b2:21:56:90:f2:b8:03:6c:8c:3d:
42:47:91:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05rxmrpkU3jaFsNk4q2S/lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjOTdlYjk2NzQzOGZmYzRlYjY2NjMzZGQ4YzAzNTAxODkz
NjY3ZjcwHhcNMjYwMzI5MTMwMTA5WhcNMjYwMzMwMTMwMTA5WjAzMTEwLwYDVQQD
EyhkYWI2Y2M1Nzg2ZmY2Y2I4NDMyZjUxMTM5YTgyZjc4YzA1MDhmOTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4X2eZrQWifWmROJPN0Ku9hZ+29lt
w5qe9evnEKxxVbV3QQ9pn3nbEj7mRfowOon0mRTUnukIAOY5mS3u7rql5YT+HPCo
rTGjCbWO3sjg3s/LvyLjmXBcT40cgN6ILSICsocZO/BaCPANpQ9SQpGzAdlk7yxJ
KyHH4h4zpSPDUoIGWOoELZsSr/2QtLyns/kOu9OIMY6LtGCAJ6mdc2qOcDnPyEJx
qZ0ogmJ2q3tPaBu2KIZuo/+SzSYGNewCce66TJYolUBdtmA4ij4w+E6bZuM7L02F
4xdzKxQcFtp/Ovic3s6oIgYHChME8ZvPhUxJHCfncsURTZInT8fshnrH1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNq2zFeG/2y4Qy9RE5qC94wFCPmdMB8GA1UdIwQY
MBaAFKyX65Z0OP/E62ZjPdjANQGJNmf3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckpmcmxuUTRfOFRyWm1NOTJNQTFBWWsyWl9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83ZmVkNTItZDA0My00NTNiLThkZDEt
Y2YxOTk3YzAyNTBkLzEvckpmcmxuUTRfOFRyWm1NOTJNQTFBWWsyWl9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS83ZmVkNTItZDA0My00NTNiLThkZDEtY2YxOTk3YzAyNTBk
LzEvckpmcmxuUTRfOFRyWm1NOTJNQTFBWWsyWl9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhA5aeRDC
296YVWC71fG61mz72hvKF4KPSPdyhaYOWUEfC0nF7Qf6CQSnKAlraCCxF2o0QAzR
6eh3NRQvtdXlxABY9ZL+S96jcplEjRncZETgbWnuHI0q8OLqCvy9BTLf8z+o0jTr
igSTm0b6xH7pTlbWJCY4FHK7Z21xItu6EaMbQPLc1ASwrO9/YSVUxUVPZr3K072T
AMEr4sg5UTShn2+RKZMzer24tXkBGRNvmj7C3Ig2mpkscOQ0eNA530+8b1B10xhC
KSA3fYi+WQ7dewNabduDgIbqijTqkgeNJISvUpS65BAqSeeiUbd8+DU8RveyIVaQ
8rgDbIw9QkeRMA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:39 2026 by rpki-client