Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft
File: cPK0H9NmFINeM_wIgdskY4s6eHs.mft (raw, json)
Hash identifier: 2F7JbtR/MfrS4WD/RXbnb4GoXHliZ3OBSiBL21m4oQY=
Subject key identifier: 81:A4:0B:B1:60:BF:9D:AA:34:46:F4:1F:D0:8A:BA:11:C3:39:F8:1A
Authority key identifier: 70:F2:B4:1F:D3:66:14:83:5E:33:FC:08:81:DB:24:63:8B:3A:78:7B
Certificate issuer: /CN=70f2b41fd36614835e33fc0881db24638b3a787b
Certificate serial: 019D3977A47F514925D53EAE99EECEF50705
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPK0H9NmFINeM_wIgdskY4s6eHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft
Manifest number: 157F
Signing time: Sun 29 Mar 2026 12:00:35 +0000
Manifest this update: Sun 29 Mar 2026 12:00:35 +0000
Manifest next update: Mon 30 Mar 2026 12:00:35 +0000
Files and hashes: 1: 4RiCyXsTTxN4U2vKrxIpHqqQyp8.roa (hash: c7d+U4ANkFjBt/KeAPGICRD1tKcKRhMiiwMtTLMKDuM=)
2: cPK0H9NmFINeM_wIgdskY4s6eHs.crl (hash: A/sBRZ+m9IxUcXrPNTNdi3NZeHNWrEAL9eYZf6kPaw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/cPK0H9NmFINeM_wIgdskY4s6eHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:a4:7f:51:49:25:d5:3e:ae:99:ee:ce:f5:07:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f2b41fd36614835e33fc0881db24638b3a787b
Validity
Not Before: Mar 29 12:00:35 2026 GMT
Not After : Mar 30 12:00:35 2026 GMT
Subject: CN=81a40bb160bf9daa3446f41fd08aba11c339f81a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1e:bc:84:20:02:84:4b:83:65:33:47:3d:b8:
05:e4:33:5c:5e:7a:04:e8:2a:89:58:9d:0d:db:1e:
00:bf:c6:e8:3f:2e:94:ab:61:17:97:6a:8d:28:2b:
3a:3c:c9:e5:65:4f:0a:13:d7:b1:28:b9:ee:2e:f9:
a6:29:4e:74:11:d7:9a:9b:d5:ca:8d:23:3f:df:b3:
91:27:b9:e5:bb:c9:6f:38:52:9f:3b:89:3d:c9:6a:
d5:c5:d5:43:c4:f5:de:e8:7f:c0:1e:cc:be:98:95:
40:4e:15:6d:45:65:db:44:fe:5e:43:a2:83:41:07:
cb:67:48:a3:12:5a:57:33:65:d7:b1:87:e8:7f:c7:
5d:15:b6:7e:40:07:50:0a:16:b9:fd:5c:9c:5e:9f:
be:d7:30:59:8c:67:ef:46:5b:31:df:7c:2a:24:3e:
d4:3d:7b:1f:e1:9c:ad:5a:56:b5:a7:81:c4:be:ab:
cb:62:ed:38:83:0e:03:ca:80:b1:ca:ff:6d:7d:95:
ff:a1:31:b1:7d:97:f4:fd:66:69:ae:c0:8f:09:8e:
da:9a:18:cb:50:87:8b:36:59:1d:1a:83:4f:17:94:
7f:44:77:b5:bf:37:1f:d5:c4:d8:25:85:69:c1:a0:
6a:70:1a:4d:f9:fd:33:bc:e9:40:fc:e3:44:ef:40:
1a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:A4:0B:B1:60:BF:9D:AA:34:46:F4:1F:D0:8A:BA:11:C3:39:F8:1A
X509v3 Authority Key Identifier:
keyid:70:F2:B4:1F:D3:66:14:83:5E:33:FC:08:81:DB:24:63:8B:3A:78:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPK0H9NmFINeM_wIgdskY4s6eHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:17:a4:04:44:83:33:c4:1d:be:d4:57:a2:06:88:1b:87:70:
08:91:bd:37:3f:b6:18:65:34:b0:82:a1:d9:bb:6a:21:de:07:
23:63:e8:a3:31:ec:22:f6:39:cd:bb:e0:e4:1a:33:8c:31:f2:
37:e8:eb:80:e1:b8:2e:ad:40:62:b1:a4:85:2e:17:54:c7:8e:
17:5d:1f:d2:bf:3e:db:9e:23:cd:8b:f4:7b:b9:dc:97:e4:1b:
79:1b:5b:e6:ed:b3:42:b1:ec:05:8a:51:b9:fe:f6:fe:4f:e2:
9f:f9:1f:b2:b3:de:dc:9a:2c:34:b6:c7:21:b7:2d:14:a9:dd:
df:d8:86:56:a1:39:a4:c1:fb:68:da:37:2e:1f:3e:f4:5b:6c:
40:7b:d4:2c:da:79:30:cb:0b:d3:9c:1e:14:de:c1:9b:dd:a8:
bf:4a:c4:e3:8b:82:01:6d:d7:3c:28:bc:d3:17:dc:0e:4a:8d:
ef:a0:31:fb:69:c2:ff:8e:0a:b3:85:c0:e7:f8:da:2a:0c:b9:
2c:be:1c:74:a1:52:f3:28:54:e3:8c:f8:7c:f1:32:cd:b8:47:
b9:56:da:ef:64:62:12:fd:28:56:38:43:50:e9:a4:36:1a:c9:
0d:84:85:4a:7a:96:c3:1a:d6:8b:da:da:0b:55:50:c1:1c:18:
fe:f6:ba:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05d6R/UUkl1T6ume7O9QcFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwZjJiNDFmZDM2NjE0ODM1ZTMzZmMwODgxZGIyNDYzOGIz
YTc4N2IwHhcNMjYwMzI5MTIwMDM1WhcNMjYwMzMwMTIwMDM1WjAzMTEwLwYDVQQD
Eyg4MWE0MGJiMTYwYmY5ZGFhMzQ0NmY0MWZkMDhhYmExMWMzMzlmODFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtx68hCAChEuDZTNHPbgF5DNcXnoE
6CqJWJ0N2x4Av8boPy6Uq2EXl2qNKCs6PMnlZU8KE9exKLnuLvmmKU50Edeam9XK
jSM/37ORJ7nlu8lvOFKfO4k9yWrVxdVDxPXe6H/AHsy+mJVAThVtRWXbRP5eQ6KD
QQfLZ0ijElpXM2XXsYfof8ddFbZ+QAdQCha5/VycXp++1zBZjGfvRlsx33wqJD7U
PXsf4ZytWla1p4HEvqvLYu04gw4DyoCxyv9tfZX/oTGxfZf0/WZprsCPCY7amhjL
UIeLNlkdGoNPF5R/RHe1vzcf1cTYJYVpwaBqcBpN+f0zvOlA/ONE70Aa3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIGkC7Fgv52qNEb0H9CKuhHDOfgaMB8GA1UdIwQY
MBaAFHDytB/TZhSDXjP8CIHbJGOLOnh7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1BLMEg5Tm1GSU5lTV93SWdkc2tZNHM2ZUhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi83NzY2YmItYmI0OC00OWJlLWIyMWYt
MGEzNWI3ZWQ2M2M3LzEvY1BLMEg5Tm1GSU5lTV93SWdkc2tZNHM2ZUhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi83NzY2YmItYmI0OC00OWJlLWIyMWYtMGEzNWI3ZWQ2M2M3
LzEvY1BLMEg5Tm1GSU5lTV93SWdkc2tZNHM2ZUhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIxekBESD
M8QdvtRXogaIG4dwCJG9Nz+2GGU0sIKh2btqId4HI2PoozHsIvY5zbvg5BozjDHy
N+jrgOG4Lq1AYrGkhS4XVMeOF10f0r8+254jzYv0e7ncl+QbeRtb5u2zQrHsBYpR
uf72/k/in/kfsrPe3JosNLbHIbctFKnd39iGVqE5pMH7aNo3Lh8+9FtsQHvULNp5
MMsL05weFN7Bm92ov0rE44uCAW3XPCi80xfcDkqN76Ax+2nC/44Ks4XA5/jaKgy5
LL4cdKFS8yhU44z4fPEyzbhHuVba72RiEv0oVjhDUOmkNhrJDYSFSnqWwxrWi9ra
C1VQwRwY/va6gw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:26:02 2026 by rpki-client