Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
File: cL9VMELxpDgn3ANFALvRBopyl8o.mft (raw, json)
Hash identifier: JnDgRHAs+vtBnOhPHwSXtZyhWeLZOl6vjT4OUTaYi0U=
Subject key identifier: 27:7C:68:A1:CB:51:45:75:C2:E5:7E:DD:90:ED:46:CE:B1:37:2A:21
Authority key identifier: 70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
Certificate issuer: /CN=70bf553042f1a43827dc034500bbd1068a7297ca
Certificate serial: 019CE5918329CFDA0CF9939203F1D64D01CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
Manifest number: 0FB8
Signing time: Fri 13 Mar 2026 05:00:44 +0000
Manifest this update: Fri 13 Mar 2026 05:00:44 +0000
Manifest next update: Sat 14 Mar 2026 05:00:44 +0000
Files and hashes: 1: 2mtlk8QRwCiiEnYbpMMnvjbuPoA.roa (hash: Z5W5lNXdO09d/mAqW7DFRQRIlEadPN86K2bqgaTuUtQ=)
2: Td6ePlmmjfj3QDaFtTuHW3D9dC0.roa (hash: 08i4lHbdORnvMw2omeJpM2jEVbltVT01xGE4VC+1/bo=)
3: cL9VMELxpDgn3ANFALvRBopyl8o.crl (hash: qWRjIIeMMMe9P+Iut5QJ3MqioPJG+/GuznmMuplC+Ss=)
4: jcdUCN5v_fEw6tgouDGmsAi4uqQ.roa (hash: aK8/MYOjzg2j9dQklFTXiZMZEJgQejRF7dLncl3fyJg=)
5: lWHGG7_f5OqTv0LmU1Cq9xuDChI.roa (hash: vy8Lvl/OimTfUisZZ2J0ZdnOHx/P1IuOxxEKFhLRgLU=)
6: uvv9qPqkc14AyTkKhEshaclg-ro.roa (hash: oelEEgJXLeJc3nzjBLZO2ZEiqv1cxH4FuyLv/ZRpkA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 05:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:91:83:29:cf:da:0c:f9:93:92:03:f1:d6:4d:01:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70bf553042f1a43827dc034500bbd1068a7297ca
Validity
Not Before: Mar 13 05:00:44 2026 GMT
Not After : Mar 14 05:00:44 2026 GMT
Subject: CN=277c68a1cb514575c2e57edd90ed46ceb1372a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d3:8c:ed:08:39:c5:76:34:d3:4e:84:b5:23:
df:0b:1c:a8:e7:8d:d2:f0:1b:07:3c:d3:87:f0:9f:
a3:f0:a7:e5:9a:5d:67:1e:e6:6f:a6:56:aa:dc:49:
55:03:d8:00:c9:07:7a:b1:4c:65:50:9b:ff:7d:0f:
33:20:5c:a3:2f:d6:f8:ae:e9:77:38:45:93:ea:ff:
14:14:6d:85:d8:2e:e3:4a:bd:2d:0d:83:1b:97:e1:
73:59:f1:ae:89:b8:83:d9:46:c3:46:29:5e:a5:e0:
73:f2:92:d0:45:8f:92:f4:1b:8b:aa:1f:74:48:39:
79:bc:27:d2:a4:04:c4:61:8f:d6:ea:3f:74:41:00:
f5:94:8c:7a:ca:65:3e:f9:da:5c:8f:c0:77:5d:36:
95:09:0c:06:8e:72:de:be:32:d1:7b:51:4f:b1:0b:
ef:7d:20:35:d8:65:b1:2b:07:f5:95:df:0a:d3:0c:
8d:13:d8:e1:dc:2b:91:54:34:26:ec:c8:4e:10:f6:
44:f6:e7:6a:83:22:db:e7:7a:e5:74:42:15:81:22:
12:9a:83:98:1a:40:fb:51:4f:48:9f:32:0f:3f:53:
6e:9e:02:d1:d1:1d:c6:ba:35:93:18:e4:98:f6:85:
47:8d:93:41:f6:12:46:93:26:11:25:08:92:da:7d:
09:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:7C:68:A1:CB:51:45:75:C2:E5:7E:DD:90:ED:46:CE:B1:37:2A:21
X509v3 Authority Key Identifier:
keyid:70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:cc:68:7b:f9:1b:e2:39:7e:c0:dc:42:a2:c4:0f:21:ce:0e:
e8:2a:89:ac:74:b7:7c:86:a4:26:39:8c:d8:f3:05:dc:fb:61:
a2:3c:52:62:e3:e9:e4:c3:68:cc:f7:f9:b0:1b:64:fd:e7:3e:
51:86:4a:0d:c5:59:3c:65:e1:ed:16:a3:97:33:75:86:e9:77:
d3:50:72:42:86:f7:e3:57:0e:a9:7f:ef:49:07:8d:11:44:b8:
3c:82:60:c3:23:19:9c:4e:8d:32:e6:07:5e:ff:2d:fd:b5:63:
0f:1a:26:1c:da:7e:44:91:9e:a0:ff:c8:38:9e:6a:68:71:b9:
4c:39:10:36:26:8d:af:16:f6:63:f2:bd:70:6c:4b:54:e2:ba:
55:78:45:47:af:1f:1d:f4:c8:ac:75:3d:a2:ad:41:0b:2a:82:
ea:15:f2:fc:17:b5:89:90:89:30:c9:d4:0d:90:18:7c:0c:75:
01:76:e0:59:2f:f2:f8:df:a4:42:6a:7e:5a:cb:0f:4f:41:65:
5c:c3:d4:f4:73:7e:00:2e:ff:08:49:5a:d6:20:c1:68:85:39:
1a:42:0c:b1:db:72:73:ca:1d:e3:25:17:ff:02:b5:d9:cd:8c:
e7:a6:8d:d8:a6:38:46:ec:ab:6a:c3:90:74:19:a1:7b:75:9d:
82:b8:ce:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzlkYMpz9oM+ZOSA/HWTQHNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwYmY1NTMwNDJmMWE0MzgyN2RjMDM0NTAwYmJkMTA2OGE3
Mjk3Y2EwHhcNMjYwMzEzMDUwMDQ0WhcNMjYwMzE0MDUwMDQ0WjAzMTEwLwYDVQQD
EygyNzdjNjhhMWNiNTE0NTc1YzJlNTdlZGQ5MGVkNDZjZWIxMzcyYTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstOM7Qg5xXY0006EtSPfCxyo543S
8BsHPNOH8J+j8Kflml1nHuZvplaq3ElVA9gAyQd6sUxlUJv/fQ8zIFyjL9b4rul3
OEWT6v8UFG2F2C7jSr0tDYMbl+FzWfGuibiD2UbDRilepeBz8pLQRY+S9BuLqh90
SDl5vCfSpATEYY/W6j90QQD1lIx6ymU++dpcj8B3XTaVCQwGjnLevjLRe1FPsQvv
fSA12GWxKwf1ld8K0wyNE9jh3CuRVDQm7MhOEPZE9udqgyLb53rldEIVgSISmoOY
GkD7UU9InzIPP1NungLR0R3GujWTGOSY9oVHjZNB9hJGkyYRJQiS2n0JnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCd8aKHLUUV1wuV+3ZDtRs6xNyohMB8GA1UdIwQY
MBaAFHC/VTBC8aQ4J9wDRQC70QaKcpfKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0w5Vk1FTHhwRGduM0FORkFMdlJCb3B5bDhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9kZjc5NDQtMjU4OS00N2NiLWFiNTYt
NTM1ODQwMWZiNzk2LzEvY0w5Vk1FTHhwRGduM0FORkFMdlJCb3B5bDhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9kZjc5NDQtMjU4OS00N2NiLWFiNTYtNTM1ODQwMWZiNzk2
LzEvY0w5Vk1FTHhwRGduM0FORkFMdlJCb3B5bDhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEcxoe/kb
4jl+wNxCosQPIc4O6CqJrHS3fIakJjmM2PMF3PthojxSYuPp5MNozPf5sBtk/ec+
UYZKDcVZPGXh7RajlzN1hul301ByQob341cOqX/vSQeNEUS4PIJgwyMZnE6NMuYH
Xv8t/bVjDxomHNp+RJGeoP/IOJ5qaHG5TDkQNiaNrxb2Y/K9cGxLVOK6VXhFR68f
HfTIrHU9oq1BCyqC6hXy/Be1iZCJMMnUDZAYfAx1AXbgWS/y+N+kQmp+WssPT0Fl
XMPU9HN+AC7/CEla1iDBaIU5GkIMsdtyc8od4yUX/wK12c2M56aN2KY4RuyrasOQ
dBmhe3WdgrjOEg==
-----END CERTIFICATE-----
Generated at Fri Mar 13 14:55:44 2026 by rpki-client