Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
File: RsyrdHmk4NikF3NQoAppvYg7BI0.mft (raw, json)
Hash identifier: WG3QTQAKgivT+KSXn9QpkWVTXBp+AX4hZFo2LzrK1/w=
Subject key identifier: 02:0D:75:4B:8C:5E:8B:17:C6:2C:D8:B9:96:62:60:E1:37:8F:B0:2F
Authority key identifier: 46:CC:AB:74:79:A4:E0:D8:A4:17:73:50:A0:0A:69:BD:88:3B:04:8D
Certificate issuer: /CN=46ccab7479a4e0d8a4177350a00a69bd883b048d
Certificate serial: 019D39417AEDF17E47DF886F07FC3761B69E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 11:01:25 +0000
Manifest this update: Sun 29 Mar 2026 11:01:25 +0000
Manifest next update: Mon 30 Mar 2026 11:01:25 +0000
Files and hashes: 1: Qy8kurDk7MrnVCXvuWRCLEiAGdU.roa (hash: QbDgZoN3ZU6/bS/m4FLoXm7lSijDZPcbyRN3YX/mppU=)
2: RsyrdHmk4NikF3NQoAppvYg7BI0.crl (hash: Bj5gij6ej9Jo33yJ1yBwggABy/rZB2GBy7nieFZqmUU=)
3: hYfmOJAAi6Wk58P0BMQdg0-ETIE.roa (hash: ZhalI/LOgKiAuv67zXxSUEKRpEQkU7//oKdzXd9ydyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:7a:ed:f1:7e:47:df:88:6f:07:fc:37:61:b6:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46ccab7479a4e0d8a4177350a00a69bd883b048d
Validity
Not Before: Mar 29 11:01:25 2026 GMT
Not After : Mar 30 11:01:25 2026 GMT
Subject: CN=020d754b8c5e8b17c62cd8b9966260e1378fb02f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:58:3f:da:d6:75:9b:65:c8:dc:a7:06:74:60:
29:8b:7a:85:78:5e:79:62:62:5b:79:cf:13:09:74:
39:c9:85:2d:b6:55:ca:5d:6c:b3:e0:34:b2:ff:4a:
10:7d:7d:49:d5:e8:c0:9f:f4:5d:34:ca:74:97:49:
59:82:3c:00:51:6e:7d:67:42:57:38:f4:18:80:0e:
57:6b:ea:a0:4e:77:02:cf:d8:27:80:c7:03:4d:d2:
ff:74:58:d0:08:2d:80:e5:2f:66:73:8f:20:da:f1:
e0:c4:fc:3a:75:28:19:da:c0:38:b7:e7:77:8d:02:
e6:e4:31:ba:f2:a3:13:73:ba:d8:22:9e:eb:9e:5e:
d6:57:4f:46:2f:2c:d3:28:71:eb:24:c2:b7:5d:52:
db:5d:c1:4f:68:7b:72:ed:eb:43:0c:e2:31:a6:70:
42:9c:d3:de:bf:ac:88:ff:d9:37:25:87:65:84:50:
2c:10:b8:dc:9b:18:cf:5a:8d:98:c0:54:92:66:38:
50:61:a2:42:37:9f:e3:1e:a9:67:fc:1c:1b:c5:99:
2e:d2:f7:4e:d6:03:92:da:6a:6e:2a:83:ca:06:8f:
28:35:3f:a9:3f:5a:33:f6:9c:45:bb:be:70:c9:bc:
c7:f8:3a:0d:73:2f:86:92:a7:5b:0e:49:98:35:96:
e6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:0D:75:4B:8C:5E:8B:17:C6:2C:D8:B9:96:62:60:E1:37:8F:B0:2F
X509v3 Authority Key Identifier:
keyid:46:CC:AB:74:79:A4:E0:D8:A4:17:73:50:A0:0A:69:BD:88:3B:04:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:02:2a:dc:51:e0:58:84:4f:64:05:9d:6a:9f:df:b7:8c:8d:
b9:cb:43:a1:e5:39:32:44:4e:a7:fa:82:08:98:81:1c:41:c1:
5b:16:35:d2:7f:ab:83:a7:a8:76:28:c8:f4:23:03:20:94:21:
98:64:e3:d1:0d:2b:47:ec:02:71:e1:0f:51:e3:ff:ee:92:d6:
f3:2e:4e:9c:3c:bc:76:73:cd:c1:69:e2:9f:c4:0d:60:e8:c2:
c0:f9:0f:ff:ca:8a:00:b5:6a:d1:96:08:3c:25:b5:a9:28:c8:
a1:e0:46:1b:1d:3f:4e:ce:a4:64:d1:7f:3d:92:bf:78:74:e8:
02:f6:ac:f5:65:46:1c:7e:71:55:c4:2f:5f:ec:a0:ee:7a:98:
08:bf:40:dd:1e:7d:75:f7:8e:df:10:2f:61:26:53:ff:b4:ec:
0f:b5:2f:f6:ed:19:e6:ca:9e:05:d6:41:8b:4a:28:aa:b7:20:
00:f5:78:5a:22:4f:e5:da:8c:97:f4:87:eb:2b:c3:d9:1f:7f:
ac:fc:f7:1c:b8:8a:49:e4:df:31:bc:f5:82:33:1c:45:46:05:
92:21:f4:9d:f0:d3:1e:ec:6f:aa:65:36:cb:0b:ea:29:41:ad:
39:e2:a3:99:5d:58:8e:41:94:da:b6:91:24:e8:57:4a:c6:95:
7d:36:6c:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QXrt8X5H34hvB/w3YbaeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2Y2NhYjc0NzlhNGUwZDhhNDE3NzM1MGEwMGE2OWJkODgz
YjA0OGQwHhcNMjYwMzI5MTEwMTI1WhcNMjYwMzMwMTEwMTI1WjAzMTEwLwYDVQQD
EygwMjBkNzU0YjhjNWU4YjE3YzYyY2Q4Yjk5NjYyNjBlMTM3OGZiMDJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFg/2tZ1m2XI3KcGdGApi3qFeF55
YmJbec8TCXQ5yYUttlXKXWyz4DSy/0oQfX1J1ejAn/RdNMp0l0lZgjwAUW59Z0JX
OPQYgA5Xa+qgTncCz9gngMcDTdL/dFjQCC2A5S9mc48g2vHgxPw6dSgZ2sA4t+d3
jQLm5DG68qMTc7rYIp7rnl7WV09GLyzTKHHrJMK3XVLbXcFPaHty7etDDOIxpnBC
nNPev6yI/9k3JYdlhFAsELjcmxjPWo2YwFSSZjhQYaJCN5/jHqln/BwbxZku0vdO
1gOS2mpuKoPKBo8oNT+pP1oz9pxFu75wybzH+DoNcy+GkqdbDkmYNZbmxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAINdUuMXosXxizYuZZiYOE3j7AvMB8GA1UdIwQY
MBaAFEbMq3R5pODYpBdzUKAKab2IOwSNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnN5cmRIbWs0TmlrRjNOUW9BcHB2WWc3QkkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9kYzUyNDMtYmJhNC00YWNmLWEyMTgt
MmYzMDI1MmViNDQyLzEvUnN5cmRIbWs0TmlrRjNOUW9BcHB2WWc3QkkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9kYzUyNDMtYmJhNC00YWNmLWEyMTgtMmYzMDI1MmViNDQy
LzEvUnN5cmRIbWs0TmlrRjNOUW9BcHB2WWc3QkkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANAIq3FHg
WIRPZAWdap/ft4yNuctDoeU5MkROp/qCCJiBHEHBWxY10n+rg6eodijI9CMDIJQh
mGTj0Q0rR+wCceEPUeP/7pLW8y5OnDy8dnPNwWnin8QNYOjCwPkP/8qKALVq0ZYI
PCW1qSjIoeBGGx0/Ts6kZNF/PZK/eHToAvas9WVGHH5xVcQvX+yg7nqYCL9A3R59
dfeO3xAvYSZT/7TsD7Uv9u0Z5sqeBdZBi0ooqrcgAPV4WiJP5dqMl/SH6yvD2R9/
rPz3HLiKSeTfMbz1gjMcRUYFkiH0nfDTHuxvqmU2ywvqKUGtOeKjmV1YjkGU2raR
JOhXSsaVfTZsyg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 20:48:24 2026 by rpki-client