Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
File: rZr63kGDroAEjWuEgY7sRvaA-iY.mft (raw, json)
Hash identifier: AyATUiTme4tve7Ybp3+ex799swByhY2KCQ4fqN9Uz7A=
Subject key identifier: 6C:90:63:44:F4:53:62:2C:8D:96:1B:1F:B2:F2:5A:5A:23:13:26:78
Authority key identifier: AD:9A:FA:DE:41:83:AE:80:04:8D:6B:84:81:8E:EC:46:F6:80:FA:26
Certificate issuer: /CN=ad9afade4183ae80048d6b84818eec46f680fa26
Certificate serial: 019D37C0F2B61FAA49591F7B3E08FFAE22A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rZr63kGDroAEjWuEgY7sRvaA-iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
Manifest number: 16C2
Signing time: Sun 29 Mar 2026 04:01:24 +0000
Manifest this update: Sun 29 Mar 2026 04:01:24 +0000
Manifest next update: Mon 30 Mar 2026 04:01:24 +0000
Files and hashes: 1: YhV2RPOqPZXVdAMRyoGhsYcqg5o.roa (hash: +2OSyQukbn8Ac2KWdiYjJtwI1C2RFg/LbfJyv2kiAaQ=)
2: rZr63kGDroAEjWuEgY7sRvaA-iY.crl (hash: qwOO37qWSP0zIxwCf4O+3CaQfsumBcJXN7HLplPOiMw=)
3: zymQ8lQH58g9kZdGDaCuBYAYQI4.roa (hash: UsBi140YQptoK8CMotM0bOiYKyUZpHcPLjWyz1MACI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rZr63kGDroAEjWuEgY7sRvaA-iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:f2:b6:1f:aa:49:59:1f:7b:3e:08:ff:ae:22:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad9afade4183ae80048d6b84818eec46f680fa26
Validity
Not Before: Mar 29 04:01:24 2026 GMT
Not After : Mar 30 04:01:24 2026 GMT
Subject: CN=6c906344f453622c8d961b1fb2f25a5a23132678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:17:3a:cf:b6:4b:37:42:35:a7:33:44:7c:3b:
29:b5:9c:0b:f6:6d:03:ba:5a:32:ae:aa:70:c2:16:
15:8f:bf:65:a6:29:99:c7:a8:b2:43:69:d0:7f:5e:
3b:e5:b6:df:f9:5b:20:c2:44:a2:57:cb:64:cd:30:
f4:fa:a4:db:07:49:b3:61:d7:a2:8e:e9:23:c1:86:
29:05:49:5b:6e:cc:da:57:3c:c0:6b:b4:7f:58:fa:
4b:0b:96:93:ee:9c:58:57:65:92:f5:65:9f:3a:c7:
24:27:a1:3e:54:4e:00:d0:76:98:11:39:2e:0a:43:
65:02:a0:5b:c5:fa:3b:ea:ee:f6:9f:d1:b0:61:f1:
d9:45:ca:34:b7:5f:7f:ae:47:98:17:b4:8d:1a:82:
02:40:ff:62:8d:f7:55:c7:a4:9d:a8:92:31:45:13:
a4:df:20:55:9d:dd:94:ef:fc:03:06:c3:53:a5:f0:
73:d3:fe:63:37:b4:fc:fd:9d:63:2a:3d:e7:ce:81:
d2:15:e2:86:bc:11:1a:30:e8:74:2a:71:3d:74:c5:
bf:c8:4e:42:23:a0:74:f1:a1:61:0d:d2:77:e3:ef:
f1:06:84:36:6e:54:5e:77:32:48:f9:0f:ef:c2:8b:
66:41:53:8c:a8:68:32:63:67:7d:52:66:30:9b:31:
c6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:90:63:44:F4:53:62:2C:8D:96:1B:1F:B2:F2:5A:5A:23:13:26:78
X509v3 Authority Key Identifier:
keyid:AD:9A:FA:DE:41:83:AE:80:04:8D:6B:84:81:8E:EC:46:F6:80:FA:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZr63kGDroAEjWuEgY7sRvaA-iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:21:36:04:e1:0b:cd:d1:3a:fa:50:42:3a:ae:20:1d:9a:6e:
60:2b:ad:1c:5c:08:b2:5f:e1:75:6b:40:b8:d3:3f:32:67:f6:
8a:b7:7c:2f:20:62:d7:ef:78:52:66:b6:fc:6c:34:74:6a:82:
9b:84:f8:ff:4a:8b:c8:41:03:0f:76:b2:68:ca:ef:5c:da:da:
b6:c0:ce:c1:5b:ab:8c:59:6d:50:75:4a:0c:ac:28:26:3b:5f:
d5:d5:31:cd:d2:1e:fc:57:01:0f:76:31:52:48:2c:32:86:14:
c9:ee:f9:39:eb:66:6a:46:a1:60:94:e6:5e:63:c5:bf:84:cc:
fc:5e:54:64:63:f8:9b:41:38:6a:a3:2a:27:c4:10:84:be:bb:
28:35:f5:ba:15:9b:e7:c8:3c:0b:df:8b:c5:d2:13:aa:96:42:
94:9b:d3:be:13:5c:d5:03:dd:be:30:19:95:81:7c:ab:fd:f5:
1b:44:9e:cb:f5:84:6e:5e:da:20:26:d8:c6:4c:36:d6:9a:7d:
d2:3a:db:5e:cc:38:ab:05:ba:32:a4:1f:16:99:fc:4f:f0:56:
87:de:d9:ea:57:87:07:d0:68:48:61:6f:e6:ec:3f:98:c1:33:
92:d8:aa:6e:b4:2b:76:cf:56:0c:d9:a9:36:18:a0:2e:80:08:
ff:a9:52:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wPK2H6pJWR97Pgj/riKkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkOWFmYWRlNDE4M2FlODAwNDhkNmI4NDgxOGVlYzQ2ZjY4
MGZhMjYwHhcNMjYwMzI5MDQwMTI0WhcNMjYwMzMwMDQwMTI0WjAzMTEwLwYDVQQD
Eyg2YzkwNjM0NGY0NTM2MjJjOGQ5NjFiMWZiMmYyNWE1YTIzMTMyNjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxc6z7ZLN0I1pzNEfDsptZwL9m0D
uloyrqpwwhYVj79lpimZx6iyQ2nQf1475bbf+VsgwkSiV8tkzTD0+qTbB0mzYdei
jukjwYYpBUlbbszaVzzAa7R/WPpLC5aT7pxYV2WS9WWfOsckJ6E+VE4A0HaYETku
CkNlAqBbxfo76u72n9GwYfHZRco0t19/rkeYF7SNGoICQP9ijfdVx6SdqJIxRROk
3yBVnd2U7/wDBsNTpfBz0/5jN7T8/Z1jKj3nzoHSFeKGvBEaMOh0KnE9dMW/yE5C
I6B08aFhDdJ34+/xBoQ2blRedzJI+Q/vwotmQVOMqGgyY2d9UmYwmzHGjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGyQY0T0U2IsjZYbH7LyWlojEyZ4MB8GA1UdIwQY
MBaAFK2a+t5Bg66ABI1rhIGO7Eb2gPomMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclpyNjNrR0Ryb0FFald1RWdZN3NSdmFBLWlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9kMzc3Y2QtZTM2Zi00Y2I5LTgyNWIt
YzAyMzM0YmUxMjhjLzEvclpyNjNrR0Ryb0FFald1RWdZN3NSdmFBLWlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9kMzc3Y2QtZTM2Zi00Y2I5LTgyNWItYzAyMzM0YmUxMjhj
LzEvclpyNjNrR0Ryb0FFald1RWdZN3NSdmFBLWlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvCE2BOEL
zdE6+lBCOq4gHZpuYCutHFwIsl/hdWtAuNM/Mmf2ird8LyBi1+94Uma2/Gw0dGqC
m4T4/0qLyEEDD3ayaMrvXNratsDOwVurjFltUHVKDKwoJjtf1dUxzdIe/FcBD3Yx
UkgsMoYUye75OetmakahYJTmXmPFv4TM/F5UZGP4m0E4aqMqJ8QQhL67KDX1uhWb
58g8C9+LxdITqpZClJvTvhNc1QPdvjAZlYF8q/31G0Sey/WEbl7aICbYxkw21pp9
0jrbXsw4qwW6MqQfFpn8T/BWh97Z6leHB9BoSGFv5uw/mMEzktiqbrQrds9WDNmp
NhigLoAI/6lSqw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:21 2026 by rpki-client