Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
File: cK01PMGg0W1ejhSjdXWm89YFY_g.mft (raw, json)
Hash identifier: GRk12rO+dQe3lRn/undOSi74XdtjLknDg3fZUapUfL0=
Subject key identifier: 2E:88:64:5E:E9:D3:A5:1E:AD:97:2D:24:2B:0E:4E:29:40:E7:05:65
Authority key identifier: 70:AD:35:3C:C1:A0:D1:6D:5E:8E:14:A3:75:75:A6:F3:D6:05:63:F8
Certificate issuer: /CN=70ad353cc1a0d16d5e8e14a37575a6f3d60563f8
Certificate serial: 019CE7B6DBD5E6737235C8B8431FBA1BBE97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
Manifest number: 1866
Signing time: Fri 13 Mar 2026 15:00:46 +0000
Manifest this update: Fri 13 Mar 2026 15:00:46 +0000
Manifest next update: Sat 14 Mar 2026 15:00:46 +0000
Files and hashes: 1: NB9VsHBRBEiYw3McIpBpW336Ki4.roa (hash: RFYXt5Z4dlbdvwt6pd136hK2qoU5DGTk7ZrYTY6dsB8=)
2: YswYZYlKWOyRavy0ATCTvPfm9wQ.roa (hash: aGrODVPH+/3IzPSKFduvxP2Zeu3f9DRc9hp0rYqfO0U=)
3: cK01PMGg0W1ejhSjdXWm89YFY_g.crl (hash: 884NxpyGX4klDhnpu2FGyrme0n//0w6twHrcAtZS0sQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 15:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:b6:db:d5:e6:73:72:35:c8:b8:43:1f:ba:1b:be:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70ad353cc1a0d16d5e8e14a37575a6f3d60563f8
Validity
Not Before: Mar 13 15:00:46 2026 GMT
Not After : Mar 14 15:00:46 2026 GMT
Subject: CN=2e88645ee9d3a51ead972d242b0e4e2940e70565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:13:79:54:6a:63:92:3e:f8:9b:08:1b:29:2a:
c7:2f:1c:a5:73:cf:cb:27:f8:6b:33:49:03:7d:65:
d6:0a:55:02:16:c6:65:d7:56:f7:81:2d:de:45:31:
08:31:4b:17:7d:61:5b:dc:f4:1f:1f:fd:60:57:f7:
43:23:5f:17:05:86:7a:e4:10:9d:dd:d1:07:c0:70:
ba:cb:76:23:cb:98:56:a2:eb:18:a8:08:6e:0e:06:
e8:1b:a8:06:48:31:c7:e5:2d:c0:0c:17:5f:39:45:
2a:b0:3b:9c:fb:33:97:88:ea:34:6a:02:63:bd:b6:
4c:1a:2e:18:5b:f7:b8:81:cd:98:2c:da:a3:93:91:
36:c8:de:ef:a1:95:6e:be:93:b4:b2:c0:61:88:5b:
03:de:25:3d:3c:6a:47:01:80:6a:32:6d:bc:9b:e5:
d9:76:72:3e:30:d7:b3:d9:ef:a0:dd:a0:3f:75:94:
57:b8:97:5f:be:e3:8f:0e:60:5d:f6:dd:cd:24:18:
32:4f:36:ed:b0:d8:c1:3f:1f:58:04:0d:3e:82:4c:
08:42:e9:cc:b5:5b:e3:7c:a3:0d:37:f8:82:86:06:
65:0f:65:d5:b8:66:9b:d4:47:ed:e5:48:f0:f2:d1:
38:08:7e:68:90:52:ff:a8:bb:1a:11:d8:13:0f:55:
8f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:88:64:5E:E9:D3:A5:1E:AD:97:2D:24:2B:0E:4E:29:40:E7:05:65
X509v3 Authority Key Identifier:
keyid:70:AD:35:3C:C1:A0:D1:6D:5E:8E:14:A3:75:75:A6:F3:D6:05:63:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:64:c1:78:11:30:1c:8b:58:a9:e2:8f:8a:e0:f7:89:39:03:
23:31:f4:82:af:49:68:2d:80:3d:c4:e9:fc:67:22:48:00:8c:
4b:d2:24:01:03:ef:b0:5d:61:83:04:3d:9a:3d:32:c4:08:e9:
75:16:02:6a:20:79:98:80:7c:5a:6f:8a:f4:d4:3c:60:38:c1:
a1:d3:a1:81:44:ab:f0:4e:88:16:0a:c4:d0:18:68:b0:e5:c6:
79:70:5e:b5:f7:c3:c5:03:cb:58:38:2f:b6:5e:11:93:fd:67:
64:44:66:80:91:cc:f4:0d:71:c7:11:19:cd:cc:44:54:ac:cb:
08:40:23:d5:83:b1:01:42:cc:39:b7:7e:33:a1:87:5c:12:44:
f7:66:a1:e0:55:4a:fa:47:cf:a3:66:d8:90:0b:cd:77:b1:e0:
7b:54:99:d0:bf:80:11:96:e3:d6:10:14:dd:8d:69:a1:fe:ce:
34:71:eb:c4:e1:22:a4:0f:05:41:fc:fe:4f:59:d3:e4:55:76:
3a:f0:ca:c7:d8:ae:c2:e4:b6:7a:4d:e5:9a:7e:ee:d9:25:63:
1b:8e:3a:aa:11:9e:b7:d5:85:20:11:5e:42:26:ea:7c:c6:98:
e8:b7:e2:f1:5c:46:03:0b:ad:7a:61:74:fb:bb:0a:fa:be:cf:
ca:6a:39:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZznttvV5nNyNci4Qx+6G76XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwYWQzNTNjYzFhMGQxNmQ1ZThlMTRhMzc1NzVhNmYzZDYw
NTYzZjgwHhcNMjYwMzEzMTUwMDQ2WhcNMjYwMzE0MTUwMDQ2WjAzMTEwLwYDVQQD
EygyZTg4NjQ1ZWU5ZDNhNTFlYWQ5NzJkMjQyYjBlNGUyOTQwZTcwNTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RN5VGpjkj74mwgbKSrHLxylc8/L
J/hrM0kDfWXWClUCFsZl11b3gS3eRTEIMUsXfWFb3PQfH/1gV/dDI18XBYZ65BCd
3dEHwHC6y3Yjy5hWousYqAhuDgboG6gGSDHH5S3ADBdfOUUqsDuc+zOXiOo0agJj
vbZMGi4YW/e4gc2YLNqjk5E2yN7voZVuvpO0ssBhiFsD3iU9PGpHAYBqMm28m+XZ
dnI+MNez2e+g3aA/dZRXuJdfvuOPDmBd9t3NJBgyTzbtsNjBPx9YBA0+gkwIQunM
tVvjfKMNN/iChgZlD2XVuGab1Eft5Ujw8tE4CH5okFL/qLsaEdgTD1WPYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC6IZF7p06UerZctJCsOTilA5wVlMB8GA1UdIwQY
MBaAFHCtNTzBoNFtXo4Uo3V1pvPWBWP4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0swMVBNR2cwVzFlamhTamRYV204OVlGWV9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMjZkOWMtZDg1MS00YTY5LTk1Zjkt
MTUwNGVhNTNlMjU1LzEvY0swMVBNR2cwVzFlamhTamRYV204OVlGWV9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9lMjZkOWMtZDg1MS00YTY5LTk1ZjktMTUwNGVhNTNlMjU1
LzEvY0swMVBNR2cwVzFlamhTamRYV204OVlGWV9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxWTBeBEw
HItYqeKPiuD3iTkDIzH0gq9JaC2APcTp/GciSACMS9IkAQPvsF1hgwQ9mj0yxAjp
dRYCaiB5mIB8Wm+K9NQ8YDjBodOhgUSr8E6IFgrE0BhosOXGeXBetffDxQPLWDgv
tl4Rk/1nZERmgJHM9A1xxxEZzcxEVKzLCEAj1YOxAULMObd+M6GHXBJE92ah4FVK
+kfPo2bYkAvNd7Hge1SZ0L+AEZbj1hAU3Y1pof7ONHHrxOEipA8FQfz+T1nT5FV2
OvDKx9iuwuS2ek3lmn7u2SVjG446qhGet9WFIBFeQibqfMaY6Lfi8VxGAwutemF0
+7sK+r7Pymo5Cw==
-----END CERTIFICATE-----
Generated at Fri Mar 13 22:44:12 2026 by rpki-client