Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
File: cms1Dp9PElni-cYJsi5l-9GGIGs.mft (raw, json)
Hash identifier: JFNhjWuEHZjiQaOPgeSl6hckbVfRdxOaNbLGh0ysiJg=
Subject key identifier: FB:7C:24:DD:19:11:96:44:2E:40:0C:92:77:94:24:23:8A:E5:28:8E
Authority key identifier: 72:6B:35:0E:9F:4F:12:59:E2:F9:C6:09:B2:2E:65:FB:D1:86:20:6B
Certificate issuer: /CN=726b350e9f4f1259e2f9c609b22e65fbd186206b
Certificate serial: 019CE6A4CA931352E92FF8E5473823FE45CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
Manifest number: 0B5E
Signing time: Fri 13 Mar 2026 10:01:25 +0000
Manifest this update: Fri 13 Mar 2026 10:01:25 +0000
Manifest next update: Sat 14 Mar 2026 10:01:25 +0000
Files and hashes: 1: Vgk0gI2zqL5WXJFX_4UqLzu-E_0.roa (hash: NgETn4NiYLdRNXpGtkv1SUgAR+9lJYvf3neTvpj+QGU=)
2: cms1Dp9PElni-cYJsi5l-9GGIGs.crl (hash: v9cagUhxXkfVqwPZUHwQTF8fINr1X0vtju8cbubP7jU=)
3: kzpTxdEgTlHmbcdyJmMivdKLXpo.roa (hash: E9K29jIawTV9zWoGNam+IgI6GZnKNdUSr8x32AMVm2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:a4:ca:93:13:52:e9:2f:f8:e5:47:38:23:fe:45:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=726b350e9f4f1259e2f9c609b22e65fbd186206b
Validity
Not Before: Mar 13 10:01:25 2026 GMT
Not After : Mar 14 10:01:25 2026 GMT
Subject: CN=fb7c24dd191196442e400c92779424238ae5288e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:7d:11:14:18:8d:96:1e:b2:5c:53:fe:8c:4e:
c5:a8:24:1f:80:f2:73:e3:52:1d:d3:62:a1:34:91:
bf:93:9a:7c:29:7e:dc:03:31:08:6b:aa:9b:07:46:
ff:0b:1c:5e:bb:dd:ab:20:09:a3:cf:d5:84:92:17:
25:7b:ab:de:6c:95:34:f0:39:d4:f7:d4:0f:50:36:
3b:b2:12:13:10:a2:85:c9:e8:fa:5d:27:38:ee:4c:
36:71:d0:dd:f3:c2:62:84:4e:ed:4b:2b:de:5e:c9:
85:8a:1a:f4:e6:28:35:9f:0f:38:74:2c:5c:86:e1:
71:dd:ae:2e:28:54:87:86:6d:44:7d:77:7a:13:11:
7b:27:95:13:cb:4c:6b:ce:10:2d:aa:d9:c6:8e:97:
e3:fc:a5:01:43:b8:1b:b2:58:7b:1b:56:ca:5e:b7:
e5:0b:38:38:ba:72:4a:d9:35:2b:58:c0:d7:38:7b:
be:57:e9:dd:63:a1:a6:7d:4d:fc:da:9d:bc:61:d1:
03:9e:cc:eb:bf:d7:26:99:6a:ea:76:f2:85:b9:af:
e8:5a:0f:93:53:52:9e:3b:44:12:df:0e:0b:2a:f9:
49:f6:77:0e:39:b2:e7:2e:c8:1a:7d:bf:91:4f:7f:
ac:87:e2:7a:d2:cf:31:6b:62:11:e3:b2:43:a8:c4:
37:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:7C:24:DD:19:11:96:44:2E:40:0C:92:77:94:24:23:8A:E5:28:8E
X509v3 Authority Key Identifier:
keyid:72:6B:35:0E:9F:4F:12:59:E2:F9:C6:09:B2:2E:65:FB:D1:86:20:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cms1Dp9PElni-cYJsi5l-9GGIGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/477c86-c7d6-4e37-bff6-a0072bac9f48/1/cms1Dp9PElni-cYJsi5l-9GGIGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:f0:e6:7a:88:e7:a1:48:04:1d:2c:19:e6:f8:8a:11:55:a7:
0c:c7:fe:37:8d:ec:d5:ca:b8:0a:7a:72:be:a2:5e:85:b6:40:
f3:d9:4e:7c:5f:eb:49:a6:cd:68:7a:ed:ae:b8:b5:f5:ad:7c:
9e:07:85:a7:95:95:e1:cb:90:d0:b1:7a:fb:b2:a5:8e:84:05:
e5:8b:a6:9d:3a:22:55:08:5a:4f:33:ed:ce:c8:cd:08:56:f6:
f1:da:0e:37:56:b7:8b:85:78:7b:95:08:4c:34:69:50:15:04:
45:8c:7c:1a:46:77:95:87:4a:d1:fc:1f:73:a5:8f:50:01:fc:
9c:85:4a:32:27:ef:be:63:1f:2a:50:04:ea:d3:cc:44:a4:3a:
7d:d5:2c:2a:b1:a8:e5:f6:07:de:11:1a:4f:60:0c:91:7b:eb:
20:f1:29:ce:3a:76:64:5c:37:ec:f6:f1:bc:b7:6e:f6:59:c4:
2c:6e:fc:93:ac:85:6a:31:ca:4e:60:a7:c7:38:45:c7:6e:b5:
d1:ec:4b:e3:33:09:8e:e2:47:ab:21:27:6c:b0:29:9a:64:65:
84:0a:b1:ab:ae:61:7b:82:77:2a:39:d4:78:eb:4f:fa:7e:a5:
a0:db:a7:2d:fb:47:05:91:73:3a:b5:f4:13:fd:8e:7c:fd:06:
94:52:42:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzmpMqTE1LpL/jlRzgj/kXPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNmIzNTBlOWY0ZjEyNTllMmY5YzYwOWIyMmU2NWZiZDE4
NjIwNmIwHhcNMjYwMzEzMTAwMTI1WhcNMjYwMzE0MTAwMTI1WjAzMTEwLwYDVQQD
EyhmYjdjMjRkZDE5MTE5NjQ0MmU0MDBjOTI3Nzk0MjQyMzhhZTUyODhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3X0RFBiNlh6yXFP+jE7FqCQfgPJz
41Id02KhNJG/k5p8KX7cAzEIa6qbB0b/Cxxeu92rIAmjz9WEkhcle6vebJU08DnU
99QPUDY7shITEKKFyej6XSc47kw2cdDd88JihE7tSyveXsmFihr05ig1nw84dCxc
huFx3a4uKFSHhm1EfXd6ExF7J5UTy0xrzhAtqtnGjpfj/KUBQ7gbslh7G1bKXrfl
Czg4unJK2TUrWMDXOHu+V+ndY6GmfU382p28YdEDnszrv9cmmWrqdvKFua/oWg+T
U1KeO0QS3w4LKvlJ9ncOObLnLsgafb+RT3+sh+J60s8xa2IR47JDqMQ3yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPt8JN0ZEZZELkAMkneUJCOK5SiOMB8GA1UdIwQY
MBaAFHJrNQ6fTxJZ4vnGCbIuZfvRhiBrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY21zMURwOVBFbG5pLWNZSnNpNWwtOUdHSUdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS80NzdjODYtYzdkNi00ZTM3LWJmZjYt
YTAwNzJiYWM5ZjQ4LzEvY21zMURwOVBFbG5pLWNZSnNpNWwtOUdHSUdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS80NzdjODYtYzdkNi00ZTM3LWJmZjYtYTAwNzJiYWM5ZjQ4
LzEvY21zMURwOVBFbG5pLWNZSnNpNWwtOUdHSUdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj/Dmeojn
oUgEHSwZ5viKEVWnDMf+N43s1cq4CnpyvqJehbZA89lOfF/rSabNaHrtrri19a18
ngeFp5WV4cuQ0LF6+7KljoQF5YumnToiVQhaTzPtzsjNCFb28doON1a3i4V4e5UI
TDRpUBUERYx8GkZ3lYdK0fwfc6WPUAH8nIVKMifvvmMfKlAE6tPMRKQ6fdUsKrGo
5fYH3hEaT2AMkXvrIPEpzjp2ZFw37PbxvLdu9lnELG78k6yFajHKTmCnxzhFx261
0exL4zMJjuJHqyEnbLApmmRlhAqxq65he4J3KjnUeOtP+n6loNunLftHBZFzOrX0
E/2OfP0GlFJCEw==
-----END CERTIFICATE-----
Generated at Fri Mar 13 11:52:36 2026 by rpki-client