Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/6568c6-7dd8-441a-802f-63abf6198f58/1/93OQ_GFgjAF4XRqAaFrp5WpbJYM.mft
File: 93OQ_GFgjAF4XRqAaFrp5WpbJYM.mft (raw, json)
Hash identifier: PwWWnC0jZwmbmLgVCsSWM877LbNpFrNrGs1j+wCWXzE=
Subject key identifier: 1B:C1:3F:BC:78:E5:49:78:51:72:3B:6D:8E:6A:28:9C:0F:2A:13:84
Authority key identifier: F7:73:90:FC:61:60:8C:01:78:5D:1A:80:68:5A:E9:E5:6A:5B:25:83
Certificate issuer: /CN=f77390fc61608c01785d1a80685ae9e56a5b2583
Certificate serial: 019D390A2DC25F0D365BE93EE848A20F1D66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93OQ_GFgjAF4XRqAaFrp5WpbJYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/6568c6-7dd8-441a-802f-63abf6198f58/1/93OQ_GFgjAF4XRqAaFrp5WpbJYM.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 10:01:01 +0000
Manifest this update: Sun 29 Mar 2026 10:01:01 +0000
Manifest next update: Mon 30 Mar 2026 10:01:01 +0000
Files and hashes: 1: 93OQ_GFgjAF4XRqAaFrp5WpbJYM.crl (hash: MNhFST3w+OH+B6HoR06al5umFIAayqTbaapVn5VsKnU=)
2: AtMRbaWIM3vKIPajxlWDipBHtFE.roa (hash: /F0mb64f4GvsT0V2gdRErVQNX5I6/07wWVDekslaiTQ=)
3: turqiMI7RCL64rtwabusAU3h4Y4.roa (hash: D8Hw63u312sddbf+MqkyGnEXwFYQiMq9Y7E4Hhv9r4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/6568c6-7dd8-441a-802f-63abf6198f58/1/93OQ_GFgjAF4XRqAaFrp5WpbJYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/6568c6-7dd8-441a-802f-63abf6198f58/1/93OQ_GFgjAF4XRqAaFrp5WpbJYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/93OQ_GFgjAF4XRqAaFrp5WpbJYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:2d:c2:5f:0d:36:5b:e9:3e:e8:48:a2:0f:1d:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77390fc61608c01785d1a80685ae9e56a5b2583
Validity
Not Before: Mar 29 10:01:01 2026 GMT
Not After : Mar 30 10:01:01 2026 GMT
Subject: CN=1bc13fbc78e5497851723b6d8e6a289c0f2a1384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c8:a8:4a:cb:53:63:45:ae:60:46:f0:e2:8b:
08:97:93:9d:0b:69:b8:86:15:25:03:4d:b9:6f:3d:
66:e4:94:d2:d5:34:74:a8:7a:db:3b:ed:c5:89:f9:
c7:99:d0:23:53:c0:81:9f:2b:35:88:0e:63:05:b5:
67:fb:74:98:11:00:d3:98:56:55:05:65:51:8e:43:
ba:29:a9:2d:93:4c:fa:91:8b:08:12:16:0f:68:61:
c9:04:44:6c:e2:f0:64:77:c1:3d:d2:d0:96:34:d4:
5f:80:38:e1:44:d0:6d:0c:5a:df:d4:d9:61:47:cc:
c3:fa:ed:19:55:69:2c:72:3c:c4:9e:5b:ff:45:d4:
82:e4:7e:1f:43:58:7c:ec:5e:99:e5:c3:bb:77:d5:
7c:f9:5f:03:0e:79:8e:12:fe:77:e8:0a:35:ca:5e:
cb:44:9d:8b:c8:26:ce:fd:d2:e3:5e:f4:90:f0:8e:
95:00:01:c1:96:66:8d:e8:de:2a:2a:cc:ad:0d:f2:
22:6f:f3:f8:f5:27:c9:de:ea:80:b1:f6:b9:06:c7:
21:9e:02:97:e1:21:36:d9:35:e1:98:d9:88:9a:be:
64:74:58:5e:81:50:70:d9:24:e6:ee:ff:9f:bc:32:
86:df:19:99:f2:74:3e:d4:f9:a8:10:ec:95:2b:7d:
6d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C1:3F:BC:78:E5:49:78:51:72:3B:6D:8E:6A:28:9C:0F:2A:13:84
X509v3 Authority Key Identifier:
keyid:F7:73:90:FC:61:60:8C:01:78:5D:1A:80:68:5A:E9:E5:6A:5B:25:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93OQ_GFgjAF4XRqAaFrp5WpbJYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/6568c6-7dd8-441a-802f-63abf6198f58/1/93OQ_GFgjAF4XRqAaFrp5WpbJYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/6568c6-7dd8-441a-802f-63abf6198f58/1/93OQ_GFgjAF4XRqAaFrp5WpbJYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:d0:e6:a8:0b:23:54:2e:db:c7:83:3f:82:51:95:55:60:41:
67:ee:5a:4d:3c:87:a7:93:94:7f:25:be:f6:98:28:2c:ea:f7:
cc:12:f4:da:7f:3f:a4:a9:01:42:31:a2:a9:cb:06:b3:ed:d6:
74:93:2c:b2:96:ec:b0:e8:71:83:cd:c9:67:80:2b:7a:4a:d2:
a8:22:ea:c8:f2:be:c7:52:68:df:f0:e1:a5:e3:ed:de:f7:68:
5d:77:94:9c:8b:d4:17:01:54:e3:c1:23:73:75:64:c5:d7:3e:
bc:63:0c:a1:bd:2b:3c:3c:97:b5:a0:6c:10:55:ae:91:d3:80:
70:44:7a:b9:87:e5:b9:37:b5:0a:07:07:41:27:ae:08:a2:7c:
9f:84:31:49:f4:d4:8e:2c:02:79:04:3c:7c:29:03:b4:20:d7:
47:24:51:e1:08:b7:95:68:3b:de:21:29:a4:f9:e5:dc:d9:38:
05:5e:02:4f:d0:17:e8:5a:cb:96:43:09:74:c2:41:96:52:a3:
63:c3:fd:e9:4b:2b:9f:27:b3:08:c1:20:76:b7:5a:e4:0c:10:
1e:ec:2a:76:95:d6:f5:29:93:e5:63:76:06:28:68:3b:4a:82:
ec:9d:84:18:d8:0c:ff:d5:97:c3:e5:83:c3:e7:5d:2e:c8:57:
57:9e:41:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05Ci3CXw02W+k+6EiiDx1mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3NzM5MGZjNjE2MDhjMDE3ODVkMWE4MDY4NWFlOWU1NmE1
YjI1ODMwHhcNMjYwMzI5MTAwMTAxWhcNMjYwMzMwMTAwMTAxWjAzMTEwLwYDVQQD
EygxYmMxM2ZiYzc4ZTU0OTc4NTE3MjNiNmQ4ZTZhMjg5YzBmMmExMzg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcioSstTY0WuYEbw4osIl5OdC2m4
hhUlA025bz1m5JTS1TR0qHrbO+3FifnHmdAjU8CBnys1iA5jBbVn+3SYEQDTmFZV
BWVRjkO6Kaktk0z6kYsIEhYPaGHJBERs4vBkd8E90tCWNNRfgDjhRNBtDFrf1Nlh
R8zD+u0ZVWkscjzEnlv/RdSC5H4fQ1h87F6Z5cO7d9V8+V8DDnmOEv536Ao1yl7L
RJ2LyCbO/dLjXvSQ8I6VAAHBlmaN6N4qKsytDfIib/P49SfJ3uqAsfa5BschngKX
4SE22TXhmNmImr5kdFhegVBw2STm7v+fvDKG3xmZ8nQ+1PmoEOyVK31towIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBvBP7x45Ul4UXI7bY5qKJwPKhOEMB8GA1UdIwQY
MBaAFPdzkPxhYIwBeF0agGha6eVqWyWDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTNPUV9HRmdqQUY0WFJxQWFGcnA1V3BiSllNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy82NTY4YzYtN2RkOC00NDFhLTgwMmYt
NjNhYmY2MTk4ZjU4LzEvOTNPUV9HRmdqQUY0WFJxQWFGcnA1V3BiSllNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy82NTY4YzYtN2RkOC00NDFhLTgwMmYtNjNhYmY2MTk4ZjU4
LzEvOTNPUV9HRmdqQUY0WFJxQWFGcnA1V3BiSllNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANtDmqAsj
VC7bx4M/glGVVWBBZ+5aTTyHp5OUfyW+9pgoLOr3zBL02n8/pKkBQjGiqcsGs+3W
dJMsspbssOhxg83JZ4ArekrSqCLqyPK+x1Jo3/DhpePt3vdoXXeUnIvUFwFU48Ej
c3Vkxdc+vGMMob0rPDyXtaBsEFWukdOAcER6uYfluTe1CgcHQSeuCKJ8n4QxSfTU
jiwCeQQ8fCkDtCDXRyRR4Qi3lWg73iEppPnl3Nk4BV4CT9AX6FrLlkMJdMJBllKj
Y8P96UsrnyezCMEgdrda5AwQHuwqdpXW9SmT5WN2BihoO0qC7J2EGNgM/9WXw+WD
w+ddLshXV55BCg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:15 2026 by rpki-client