Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
File: _0cFo2PcHY0OpRybmh7L04B70FQ.mft (raw, json)
Hash identifier: QJUfUv4HAmIqZmXez0vYrXB2yjIcLrJkGIdNejpgJ5A=
Subject key identifier: BA:7B:2A:D1:5A:9C:64:2D:EC:94:B2:DF:C1:0A:E8:73:6A:C3:1C:2E
Authority key identifier: FF:47:05:A3:63:DC:1D:8D:0E:A5:1C:9B:9A:1E:CB:D3:80:7B:D0:54
Certificate issuer: /CN=ff4705a363dc1d8d0ea51c9b9a1ecbd3807bd054
Certificate serial: 019CE85C14127914A5B0F07CB474EF6DD06B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
Manifest number: 186A
Signing time: Fri 13 Mar 2026 18:01:14 +0000
Manifest this update: Fri 13 Mar 2026 18:01:14 +0000
Manifest next update: Sat 14 Mar 2026 18:01:14 +0000
Files and hashes: 1: DJeUFnamTZ95ip1wqQB6GBsmyiQ.roa (hash: MVnppoj2mz3TnYvjg2uHh/9JjoQIHJwR2BBiRIQrPeE=)
2: GHjJjwBpoAdhz9IMpI8-MFbmhXg.roa (hash: Yg81SKjjSUrf7wcCQo3l8C3jEm5E2w8HUv9yWnStEig=)
3: _0cFo2PcHY0OpRybmh7L04B70FQ.crl (hash: 8TWCd5A659JdLKiCdjH70OX8XVuKVBbPr9WmwPx+DqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 18:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e8:5c:14:12:79:14:a5:b0:f0:7c:b4:74:ef:6d:d0:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff4705a363dc1d8d0ea51c9b9a1ecbd3807bd054
Validity
Not Before: Mar 13 18:01:14 2026 GMT
Not After : Mar 14 18:01:14 2026 GMT
Subject: CN=ba7b2ad15a9c642dec94b2dfc10ae8736ac31c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:61:c0:17:40:a2:64:43:4e:84:ad:e2:93:1f:
16:42:aa:6e:2b:6f:73:46:0c:e8:4e:ec:74:ec:94:
d5:a5:b5:ac:4d:68:12:3e:56:ae:fc:f0:6e:68:de:
29:83:eb:8e:1b:ed:aa:67:f9:e9:bd:1d:07:a0:93:
b5:d7:f0:0f:c0:64:96:ae:f8:b9:8f:4f:e8:94:5b:
a0:ae:79:7c:e8:9b:fe:7f:8e:f0:f0:fc:38:6d:40:
46:b4:3f:39:59:b0:42:39:cb:fd:0d:c4:74:e9:59:
e8:6c:fb:1b:2a:cc:fe:ab:8e:52:30:4c:57:10:ed:
4d:d6:b8:17:80:91:f7:3c:3b:7d:df:05:00:da:87:
26:91:3a:a0:43:09:d4:45:49:29:c7:96:bf:41:30:
af:97:3f:1e:56:9e:e5:b5:f3:d2:79:f4:6d:be:fa:
7d:8d:8f:5f:1e:7d:08:ed:60:83:44:95:94:2e:79:
13:60:0e:6e:9e:91:74:d8:c4:b2:45:05:34:98:09:
a3:9b:e8:09:e0:8c:64:68:7c:6a:c5:a1:12:bd:c4:
05:6d:37:2a:dd:7c:57:ea:a5:ea:11:3d:ef:f6:d8:
e6:4b:21:59:18:76:9f:97:d0:e7:75:4d:fe:d0:66:
94:2a:97:26:9d:86:15:1e:9e:d6:7d:b3:e9:e1:d2:
7f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:7B:2A:D1:5A:9C:64:2D:EC:94:B2:DF:C1:0A:E8:73:6A:C3:1C:2E
X509v3 Authority Key Identifier:
keyid:FF:47:05:A3:63:DC:1D:8D:0E:A5:1C:9B:9A:1E:CB:D3:80:7B:D0:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:4d:6e:20:28:ca:69:ed:c7:eb:4e:f0:43:55:93:10:26:50:
d6:f9:fd:9e:29:59:7e:74:50:4f:62:17:66:c6:4a:9a:55:4b:
54:bb:89:14:0e:89:d1:4b:85:6d:48:45:36:5b:f3:14:67:f2:
90:7e:03:81:78:c1:16:37:3a:af:c8:a3:76:89:1e:c0:db:df:
93:ac:8d:0a:c6:4b:fa:61:fc:a0:13:9a:eb:a4:7d:cb:0a:a8:
8b:f3:5f:48:06:c2:3b:46:cb:51:71:43:0a:0d:84:11:7e:94:
6c:fd:bc:44:7e:be:a6:a2:3d:22:58:5c:9d:7e:11:68:f5:ad:
30:88:73:b3:1e:52:40:ed:a4:2e:e2:9c:ba:5e:2d:a3:5f:14:
69:d0:3d:2f:b6:1a:e7:b9:74:8d:b8:51:0e:bc:0a:17:d5:e0:
f8:7b:29:57:45:15:b6:d3:34:ad:89:5e:ec:10:f8:5b:54:9a:
0f:bf:51:fa:aa:07:fc:88:34:44:e7:68:12:ac:be:df:d0:66:
b8:dc:91:93:9b:0e:0c:fd:78:95:31:71:f7:29:3d:0b:38:5c:
af:be:b9:32:12:b1:ec:43:48:cd:8e:2c:b8:32:8a:a8:25:38:
87:92:a3:bd:1b:75:a9:c6:3f:47:9a:d5:df:49:bc:07:e8:bb:
81:68:bf:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzoXBQSeRSlsPB8tHTvbdBrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmNDcwNWEzNjNkYzFkOGQwZWE1MWM5YjlhMWVjYmQzODA3
YmQwNTQwHhcNMjYwMzEzMTgwMTE0WhcNMjYwMzE0MTgwMTE0WjAzMTEwLwYDVQQD
EyhiYTdiMmFkMTVhOWM2NDJkZWM5NGIyZGZjMTBhZTg3MzZhYzMxYzJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGHAF0CiZENOhK3ikx8WQqpuK29z
RgzoTux07JTVpbWsTWgSPlau/PBuaN4pg+uOG+2qZ/npvR0HoJO11/APwGSWrvi5
j0/olFugrnl86Jv+f47w8Pw4bUBGtD85WbBCOcv9DcR06VnobPsbKsz+q45SMExX
EO1N1rgXgJH3PDt93wUA2ocmkTqgQwnURUkpx5a/QTCvlz8eVp7ltfPSefRtvvp9
jY9fHn0I7WCDRJWULnkTYA5unpF02MSyRQU0mAmjm+gJ4IxkaHxqxaESvcQFbTcq
3XxX6qXqET3v9tjmSyFZGHafl9DndU3+0GaUKpcmnYYVHp7WfbPp4dJ/ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLp7KtFanGQt7JSy38EK6HNqwxwuMB8GA1UdIwQY
MBaAFP9HBaNj3B2NDqUcm5oey9OAe9BUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzBjRm8yUGNIWTBPcFJ5Ym1oN0wwNEI3MEZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wNWIzZDEtMTE2Zi00ZDYwLWExNzYt
NTZiYmUzOGY3NDA3LzEvXzBjRm8yUGNIWTBPcFJ5Ym1oN0wwNEI3MEZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8wNWIzZDEtMTE2Zi00ZDYwLWExNzYtNTZiYmUzOGY3NDA3
LzEvXzBjRm8yUGNIWTBPcFJ5Ym1oN0wwNEI3MEZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPk1uICjK
ae3H607wQ1WTECZQ1vn9nilZfnRQT2IXZsZKmlVLVLuJFA6J0UuFbUhFNlvzFGfy
kH4DgXjBFjc6r8ijdokewNvfk6yNCsZL+mH8oBOa66R9ywqoi/NfSAbCO0bLUXFD
Cg2EEX6UbP28RH6+pqI9IlhcnX4RaPWtMIhzsx5SQO2kLuKcul4to18UadA9L7Ya
57l0jbhRDrwKF9Xg+HspV0UVttM0rYle7BD4W1SaD79R+qoH/Ig0ROdoEqy+39Bm
uNyRk5sODP14lTFx9yk9Czhcr765MhKx7ENIzY4suDKKqCU4h5KjvRt1qcY/R5rV
30m8B+i7gWi/Zg==
-----END CERTIFICATE-----
Generated at Fri Mar 13 20:29:43 2026 by rpki-client