Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
File: v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft (raw, json)
Hash identifier: LAcI3Pw9W3BWgAlNfahsPNStSeYqNY7M1sgLMgTLJhY=
Subject key identifier: E9:95:DA:A8:10:22:4E:81:DC:F7:32:C6:69:82:D5:4C:29:61:E1:1E
Authority key identifier: BF:4B:51:B0:BA:C4:5F:A2:26:BD:2D:CF:F1:17:30:ED:40:EC:21:49
Certificate issuer: /CN=bf4b51b0bac45fa226bd2dcff11730ed40ec2149
Certificate serial: 019D3978136D864A4F1E41A7FD991BA54EF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 12:01:03 +0000
Manifest this update: Sun 29 Mar 2026 12:01:03 +0000
Manifest next update: Mon 30 Mar 2026 12:01:03 +0000
Files and hashes: 1: 440C9nJzfAwzFQHbbTSsKGKGkig.roa (hash: 9GaUDae42NdjzGOSW1+fUpuBNX675/CDIy2pT/BeZSI=)
2: v0tRsLrEX6ImvS3P8Rcw7UDsIUk.crl (hash: E1fbCfmLE556T0NhZWhKisUQoNXCpeCrTP0hHEHjZJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:78:13:6d:86:4a:4f:1e:41:a7:fd:99:1b:a5:4e:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf4b51b0bac45fa226bd2dcff11730ed40ec2149
Validity
Not Before: Mar 29 12:01:03 2026 GMT
Not After : Mar 30 12:01:03 2026 GMT
Subject: CN=e995daa810224e81dcf732c66982d54c2961e11e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a6:05:8c:d8:e4:28:b6:95:59:ab:0d:5e:72:
e4:29:11:ec:24:50:2d:8d:67:1a:d6:94:41:a0:f2:
29:25:5a:1b:24:e7:2e:42:af:5f:d4:50:3f:8d:d5:
b8:90:2b:19:cc:70:a3:f2:c9:c2:74:21:40:74:00:
d7:97:b7:9f:1d:ea:39:36:08:b1:06:bb:67:1e:5a:
14:99:0b:4c:0f:17:08:b7:e8:26:79:7a:ef:7c:00:
10:53:f4:d4:35:7c:ba:79:45:f6:85:c5:18:d5:8d:
0d:60:86:b1:de:c6:ff:77:5b:a1:50:bf:7c:16:56:
02:91:ec:ad:5e:cf:c1:fe:14:51:64:3c:1c:be:3f:
e7:83:c7:f1:37:b9:82:15:20:d5:06:e4:af:07:1f:
d6:07:5c:5a:eb:43:b4:7c:a9:df:aa:ef:47:9c:f5:
64:fc:bd:31:70:c7:f3:d3:21:65:14:56:1c:6f:10:
e1:6a:c6:4b:1e:4f:1c:b9:50:aa:5f:57:92:d2:49:
bb:5d:dd:b0:aa:8e:d3:ff:9a:b6:0b:aa:ee:a9:9d:
4b:1d:ce:54:f3:87:9a:5f:aa:c2:b1:60:bf:8b:b9:
02:9d:01:5b:6a:7a:28:88:9b:e7:96:ef:63:5d:29:
78:3d:4d:1c:3c:81:5f:31:4f:60:ae:b3:7a:7b:9a:
59:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:95:DA:A8:10:22:4E:81:DC:F7:32:C6:69:82:D5:4C:29:61:E1:1E
X509v3 Authority Key Identifier:
keyid:BF:4B:51:B0:BA:C4:5F:A2:26:BD:2D:CF:F1:17:30:ED:40:EC:21:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:07:1f:be:73:ad:f4:28:a4:5c:bf:9f:45:07:c3:d1:d6:ed:
b2:73:dd:59:a3:92:e1:c6:6a:2e:ea:7a:ea:17:e8:d6:c3:82:
3b:0b:de:71:05:88:35:2e:28:c2:57:19:a3:d7:e3:e7:07:0d:
ed:8a:99:0f:04:63:f7:fc:7f:4e:a8:a3:9e:e4:3b:7b:26:1a:
3b:92:d1:5e:c5:f9:a9:69:e4:8e:1b:63:4d:be:b7:e5:c7:7d:
58:92:a2:36:a7:d8:6a:bd:e5:95:2e:ff:4b:8d:02:9b:9f:39:
e6:be:c5:07:41:09:81:cd:64:73:4e:8e:92:9b:f0:35:74:bf:
b7:d7:95:5a:95:36:9e:6a:fe:10:3a:03:62:c8:fa:5e:f4:2c:
33:48:ea:7c:98:4e:09:64:83:fe:a6:6c:b3:d3:95:b3:77:10:
1e:0b:6c:a7:34:f4:a4:76:60:17:3b:7c:44:d3:36:39:6c:00:
45:3b:49:30:57:9c:ca:d5:ee:59:de:25:55:f4:cc:80:68:20:
4a:ed:e4:aa:62:3b:90:6e:4c:03:3f:e6:4c:4c:e8:02:7b:3b:
f2:78:1f:19:fa:77:f0:c4:10:0e:53:63:6f:17:47:a6:0f:2d:
da:e2:52:32:fa:1e:0b:63:75:fc:69:75:7e:f4:ae:c4:26:c8:
ab:98:22:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05eBNthkpPHkGn/ZkbpU71MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmNGI1MWIwYmFjNDVmYTIyNmJkMmRjZmYxMTczMGVkNDBl
YzIxNDkwHhcNMjYwMzI5MTIwMTAzWhcNMjYwMzMwMTIwMTAzWjAzMTEwLwYDVQQD
EyhlOTk1ZGFhODEwMjI0ZTgxZGNmNzMyYzY2OTgyZDU0YzI5NjFlMTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6YFjNjkKLaVWasNXnLkKRHsJFAt
jWca1pRBoPIpJVobJOcuQq9f1FA/jdW4kCsZzHCj8snCdCFAdADXl7efHeo5Ngix
BrtnHloUmQtMDxcIt+gmeXrvfAAQU/TUNXy6eUX2hcUY1Y0NYIax3sb/d1uhUL98
FlYCkeytXs/B/hRRZDwcvj/ng8fxN7mCFSDVBuSvBx/WB1xa60O0fKnfqu9HnPVk
/L0xcMfz0yFlFFYcbxDhasZLHk8cuVCqX1eS0km7Xd2wqo7T/5q2C6ruqZ1LHc5U
84eaX6rCsWC/i7kCnQFbanooiJvnlu9jXSl4PU0cPIFfMU9grrN6e5pZZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOmV2qgQIk6B3PcyxmmC1UwpYeEeMB8GA1UdIwQY
MBaAFL9LUbC6xF+iJr0tz/EXMO1A7CFJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjB0UnNMckVYNkltdlMzUDhSY3c3VURzSVVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9kZWIwNjQtYTkyMi00NmE2LTg2Y2Et
ZTQzNTIzOTgzNzkzLzEvdjB0UnNMckVYNkltdlMzUDhSY3c3VURzSVVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9kZWIwNjQtYTkyMi00NmE2LTg2Y2EtZTQzNTIzOTgzNzkz
LzEvdjB0UnNMckVYNkltdlMzUDhSY3c3VURzSVVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANQcfvnOt
9CikXL+fRQfD0dbtsnPdWaOS4cZqLup66hfo1sOCOwvecQWINS4owlcZo9fj5wcN
7YqZDwRj9/x/TqijnuQ7eyYaO5LRXsX5qWnkjhtjTb635cd9WJKiNqfYar3llS7/
S40Cm5855r7FB0EJgc1kc06OkpvwNXS/t9eVWpU2nmr+EDoDYsj6XvQsM0jqfJhO
CWSD/qZss9OVs3cQHgtspzT0pHZgFzt8RNM2OWwARTtJMFecytXuWd4lVfTMgGgg
Su3kqmI7kG5MAz/mTEzoAns78ngfGfp38MQQDlNjbxdHpg8t2uJSMvoeC2N1/Gl1
fvSuxCbIq5gi4g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:12:56 2026 by rpki-client