Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/RKqBMTnAax3PG_6DMrm4Aas-swI.mft
File: RKqBMTnAax3PG_6DMrm4Aas-swI.mft (raw, json)
Hash identifier: 5C9dn20Ao9wJJRd+ERpNavM/yyYMV24qUsiy8dNyouE=
Subject key identifier: 37:0A:89:87:89:8D:03:48:A8:AA:67:4B:EE:2C:43:CE:FD:21:B0:E2
Authority key identifier: 44:AA:81:31:39:C0:6B:1D:CF:1B:FE:83:32:B9:B8:01:AB:3E:B3:02
Certificate issuer: /CN=44aa813139c06b1dcf1bfe8332b9b801ab3eb302
Certificate serial: 019D37C10ACCAEF82929D23F1E96A84AF697
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RKqBMTnAax3PG_6DMrm4Aas-swI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/RKqBMTnAax3PG_6DMrm4Aas-swI.mft
Manifest number: 08A7
Signing time: Sun 29 Mar 2026 04:01:31 +0000
Manifest this update: Sun 29 Mar 2026 04:01:31 +0000
Manifest next update: Mon 30 Mar 2026 04:01:31 +0000
Files and hashes: 1: RKqBMTnAax3PG_6DMrm4Aas-swI.crl (hash: /VPAJ9wqw/7rmzaTYcOnOAPTVyJFt0Y89Q0icAfGNkI=)
2: ynuNLafz9LbBB3yzoCWMv9fdVAw.roa (hash: ggLRVHISQxu3PXeYplz4bZPnG+60dpFC8ZQ4LkB5T9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/RKqBMTnAax3PG_6DMrm4Aas-swI.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/RKqBMTnAax3PG_6DMrm4Aas-swI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RKqBMTnAax3PG_6DMrm4Aas-swI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:0a:cc:ae:f8:29:29:d2:3f:1e:96:a8:4a:f6:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44aa813139c06b1dcf1bfe8332b9b801ab3eb302
Validity
Not Before: Mar 29 04:01:31 2026 GMT
Not After : Mar 30 04:01:31 2026 GMT
Subject: CN=370a8987898d0348a8aa674bee2c43cefd21b0e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0a:de:6f:36:a6:b8:50:cd:4e:5c:4e:2a:d2:
69:0d:66:94:ac:c2:00:8a:68:f3:54:39:ff:43:74:
84:1a:8a:f6:1b:e3:7e:e5:3d:26:18:5d:b2:3b:f6:
64:25:a7:29:87:94:e6:fb:2b:ab:e9:71:58:35:14:
08:ab:99:e2:49:67:58:c7:01:da:b7:e2:92:fe:ad:
e1:42:4c:16:d1:fe:3a:9b:7d:a7:89:38:0f:ca:25:
09:ba:d3:4f:93:36:a3:59:0e:76:e9:f9:57:f2:eb:
c1:7c:e4:68:db:0f:63:db:52:ef:f0:d1:ac:f4:a8:
97:96:27:15:44:ee:64:f8:8e:62:14:89:94:1e:fd:
e2:72:a5:62:a6:67:8d:89:f7:8d:1a:8e:75:08:a7:
29:f7:28:15:ab:69:e4:59:de:36:aa:2e:59:19:1d:
b0:78:0f:29:21:25:42:48:a7:e2:ad:e3:7e:21:05:
d9:37:db:6c:c4:5d:fc:99:cd:3d:c3:69:0e:d5:25:
b0:10:6a:d0:00:f0:a5:25:f2:f9:b0:d2:74:68:50:
57:50:7a:f2:d7:5a:21:7f:48:b3:22:c6:62:5e:00:
a6:6b:f1:ea:31:2e:86:04:65:d8:a5:51:ee:a8:c9:
f4:0c:05:63:64:20:79:19:2b:27:ed:61:7a:a9:98:
c3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:0A:89:87:89:8D:03:48:A8:AA:67:4B:EE:2C:43:CE:FD:21:B0:E2
X509v3 Authority Key Identifier:
keyid:44:AA:81:31:39:C0:6B:1D:CF:1B:FE:83:32:B9:B8:01:AB:3E:B3:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKqBMTnAax3PG_6DMrm4Aas-swI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/RKqBMTnAax3PG_6DMrm4Aas-swI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/535bf7-59ac-45f1-bec5-41dd7f3ea7a4/1/RKqBMTnAax3PG_6DMrm4Aas-swI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:9b:72:72:7a:63:6f:06:0a:ed:e5:4f:02:de:47:6f:86:1d:
e1:78:41:72:97:70:eb:9c:af:cf:c5:f6:07:e7:e8:a1:31:c0:
67:f8:08:e1:1e:d3:74:2a:23:7b:65:07:64:7c:b7:63:ba:6f:
72:68:1e:16:08:d6:a4:d1:72:a6:ca:09:6f:46:f6:c4:4c:ff:
be:ce:5b:ad:85:81:b4:ec:11:47:84:46:ed:14:32:31:24:15:
2b:25:cf:5a:0a:03:bb:32:8b:67:2e:b9:b9:bd:b8:e5:96:29:
e0:ee:5b:62:40:80:ba:f8:59:d0:9f:fe:d0:38:38:7c:10:5e:
dd:31:ef:9e:1e:1d:9a:9a:3d:7e:c5:06:f1:77:14:95:b2:40:
aa:4e:85:af:63:51:38:a3:0f:18:61:f8:aa:90:cd:08:2b:bd:
7f:14:c6:9d:c1:c5:01:f4:11:7e:32:a9:56:5c:37:55:a4:c4:
ab:b3:45:36:a7:42:b6:4e:83:04:b2:03:b0:ea:a7:49:a1:a4:
94:59:5d:6a:8b:43:c1:98:0a:cb:50:81:fb:3f:da:b3:7b:46:
e0:61:02:6f:6a:b8:c4:e3:f0:e1:98:60:f3:32:e9:13:ca:6b:
3a:df:1e:ab:84:8b:5b:b6:63:95:3d:62:02:a6:3e:7d:8d:c9:
9e:64:31:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wQrMrvgpKdI/HpaoSvaXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0YWE4MTMxMzljMDZiMWRjZjFiZmU4MzMyYjliODAxYWIz
ZWIzMDIwHhcNMjYwMzI5MDQwMTMxWhcNMjYwMzMwMDQwMTMxWjAzMTEwLwYDVQQD
EygzNzBhODk4Nzg5OGQwMzQ4YThhYTY3NGJlZTJjNDNjZWZkMjFiMGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwrebzamuFDNTlxOKtJpDWaUrMIA
imjzVDn/Q3SEGor2G+N+5T0mGF2yO/ZkJacph5Tm+yur6XFYNRQIq5niSWdYxwHa
t+KS/q3hQkwW0f46m32niTgPyiUJutNPkzajWQ526flX8uvBfORo2w9j21Lv8NGs
9KiXlicVRO5k+I5iFImUHv3icqVipmeNifeNGo51CKcp9ygVq2nkWd42qi5ZGR2w
eA8pISVCSKfireN+IQXZN9tsxF38mc09w2kO1SWwEGrQAPClJfL5sNJ0aFBXUHry
11ohf0izIsZiXgCma/HqMS6GBGXYpVHuqMn0DAVjZCB5GSsn7WF6qZjDGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDcKiYeJjQNIqKpnS+4sQ879IbDiMB8GA1UdIwQY
MBaAFESqgTE5wGsdzxv+gzK5uAGrPrMCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUktxQk1UbkFheDNQR182RE1ybTRBYXMtc3dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy81MzViZjctNTlhYy00NWYxLWJlYzUt
NDFkZDdmM2VhN2E0LzEvUktxQk1UbkFheDNQR182RE1ybTRBYXMtc3dJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy81MzViZjctNTlhYy00NWYxLWJlYzUtNDFkZDdmM2VhN2E0
LzEvUktxQk1UbkFheDNQR182RE1ybTRBYXMtc3dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMptycnpj
bwYK7eVPAt5Hb4Yd4XhBcpdw65yvz8X2B+fooTHAZ/gI4R7TdCoje2UHZHy3Y7pv
cmgeFgjWpNFypsoJb0b2xEz/vs5brYWBtOwRR4RG7RQyMSQVKyXPWgoDuzKLZy65
ub245ZYp4O5bYkCAuvhZ0J/+0Dg4fBBe3THvnh4dmpo9fsUG8XcUlbJAqk6Fr2NR
OKMPGGH4qpDNCCu9fxTGncHFAfQRfjKpVlw3VaTEq7NFNqdCtk6DBLIDsOqnSaGk
lFldaotDwZgKy1CB+z/as3tG4GECb2q4xOPw4Zhg8zLpE8prOt8eq4SLW7ZjlT1i
AqY+fY3JnmQxFA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:38 2026 by rpki-client