Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft
File: RFbBTNhyT5qQlie5TgBs9p0SMHs.mft (raw, json)
Hash identifier: 7G1WQqnFL+LdM2b50QzTCKrugva/Zu3JhoRda9hjJDw=
Subject key identifier: B5:8D:F4:C7:50:B5:6A:DD:91:19:46:AC:1A:79:62:42:C6:9C:86:DB
Authority key identifier: 44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
Certificate issuer: /CN=4456c14cd8724f9a909627b94e006cf69d12307b
Certificate serial: 019D394120D0A4BAE0B7FFE43FEC97105403
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft
Manifest number: 1293
Signing time: Sun 29 Mar 2026 11:01:02 +0000
Manifest this update: Sun 29 Mar 2026 11:01:02 +0000
Manifest next update: Mon 30 Mar 2026 11:01:02 +0000
Files and hashes: 1: B-jEplfKinXm_aVY6XKJwZ6zffU.roa (hash: qovloFSiFG/W9rJh7fcNYETxsTgZ5QQyiO1DTttOrwQ=)
2: C8ndRUP4mG5i6Z7S5iDRwDHVA7s.roa (hash: x5nMtbiYKs0LuaiMOIAvyWWd3XFr7UWf1LhYWiYg0uo=)
3: NxUakW6ert1_TvUFm3rxXZuzp5o.roa (hash: iE/eE1pi3XGlNp9D+HdOt2wuaCbc0VIGMluSePKPqFE=)
4: RFbBTNhyT5qQlie5TgBs9p0SMHs.crl (hash: P/G7Hb0gFwpDC+VzmKXXVyiO9TSgVZEnktQIaPLg+Bo=)
5: TRoTSyHKXXelAmIqPzc2lsxZK2U.roa (hash: 7Cfsq98nLDZeDO6PJiMmxdQbsAXkC3e9yaQmSUF/wLE=)
6: WZPhvrVWJ7TbYiNT2ZcXtbK7KLw.roa (hash: gT6kAy3QC3WFVHTaMinwFIa4C3kHsmkq2W1J4go59R8=)
7: Z7YAJ4xfnW8yEXTxt7DbwgKIB-k.roa (hash: GKuomVfKG0bBmTKzxOPpDKeuM0owMJCeX+Ke/zhIJSw=)
8: ZSIuTwmYgVcQgO6LO0MnL_67E1E.roa (hash: oy/YErxqFRT8VyOcydqK3d11iP1CeKQirD3giIZVXPc=)
9: ed8yDMGRECTMaD8k-df_wcQHSQA.roa (hash: cwhw+g6gV0Cc1yz+CyTGqM6EEaAW5Bb5GiWG5Dbv1YY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:20:d0:a4:ba:e0:b7:ff:e4:3f:ec:97:10:54:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4456c14cd8724f9a909627b94e006cf69d12307b
Validity
Not Before: Mar 29 11:01:02 2026 GMT
Not After : Mar 30 11:01:02 2026 GMT
Subject: CN=b58df4c750b56add911946ac1a796242c69c86db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f4:4d:ae:a1:ee:7e:46:ff:42:97:ef:39:4b:
31:87:c6:cf:d8:39:cb:25:2c:2c:45:3e:88:bd:e8:
ab:47:cd:11:bb:42:87:d1:58:c2:9e:10:ca:40:6c:
31:e4:69:4a:37:ff:f2:c5:cf:6b:1a:9d:e9:60:34:
20:3e:f5:fb:31:ec:81:e6:88:45:7c:b5:3d:be:4c:
58:ed:8d:5b:7d:88:dd:55:6f:03:8c:26:9d:d5:2b:
33:61:29:ef:c6:a5:dc:e0:d2:89:3c:5f:d2:88:d8:
ba:81:bd:bd:9a:d2:1d:55:ac:95:15:2d:9c:42:5d:
58:8d:0c:42:e1:ad:6e:60:b0:57:be:e5:9a:73:74:
be:e5:c1:75:c8:56:f9:15:0c:43:03:48:95:37:5a:
50:8b:75:70:85:66:08:ff:ca:22:5b:fc:70:c4:be:
95:ea:07:fd:c0:25:32:b1:77:29:08:76:c8:39:c6:
5b:a6:9c:82:64:b7:2c:8f:0a:6b:3b:4b:65:25:65:
be:53:ef:44:46:c6:47:14:3d:8e:57:94:7d:51:fe:
1b:3e:bf:f3:c4:55:aa:1d:9f:bd:33:93:fe:bb:cf:
fc:a1:ae:9f:97:0d:4b:3b:74:33:49:24:e5:28:f1:
58:1f:98:bf:d7:45:2f:6b:c3:0f:fb:3a:f1:d8:76:
1b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:8D:F4:C7:50:B5:6A:DD:91:19:46:AC:1A:79:62:42:C6:9C:86:DB
X509v3 Authority Key Identifier:
keyid:44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:e9:3c:50:6f:00:bf:92:18:f3:37:04:f5:9d:a2:8d:64:3b:
9d:24:22:30:a0:a3:9f:c4:f0:68:bf:0d:14:af:15:8f:9a:9b:
38:12:9d:c1:9f:e3:bf:b4:e1:d9:47:9d:15:86:e5:81:0e:ea:
a5:8a:4f:f4:63:03:ce:d7:43:e2:0f:62:3a:09:94:56:e4:48:
b3:1d:63:16:ba:ef:63:39:c1:9c:51:23:ca:63:13:9f:b7:3a:
35:70:90:77:be:30:18:15:ff:38:94:61:89:f9:e5:d8:51:2d:
de:47:a8:e9:24:6a:09:97:5e:4f:30:27:45:97:31:e3:a2:46:
3b:43:cf:e2:6c:17:bd:7c:8b:85:6b:bf:8f:2b:e9:06:f1:66:
9a:c0:5c:01:7a:eb:54:f6:67:a6:a1:9a:4b:bb:70:43:10:cc:
16:8e:9e:c0:88:3c:65:6a:31:23:cc:13:f1:d6:72:d1:29:51:
da:2b:8a:e1:82:d2:7e:df:94:90:4f:0d:69:dc:dc:72:45:61:
c8:dd:19:e8:fe:d2:22:08:74:c6:97:c0:6f:c0:e5:aa:f5:3e:
bd:5d:57:5b:51:b6:80:74:a6:24:f9:a5:d1:79:b1:b4:61:dc:
1f:9b:95:1f:59:bd:3f:2a:9a:62:ec:f4:55:f5:7f:d4:37:55:
f6:36:26:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QSDQpLrgt//kP+yXEFQDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NTZjMTRjZDg3MjRmOWE5MDk2MjdiOTRlMDA2Y2Y2OWQx
MjMwN2IwHhcNMjYwMzI5MTEwMTAyWhcNMjYwMzMwMTEwMTAyWjAzMTEwLwYDVQQD
EyhiNThkZjRjNzUwYjU2YWRkOTExOTQ2YWMxYTc5NjI0MmM2OWM4NmRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfRNrqHufkb/QpfvOUsxh8bP2DnL
JSwsRT6IveirR80Ru0KH0VjCnhDKQGwx5GlKN//yxc9rGp3pYDQgPvX7MeyB5ohF
fLU9vkxY7Y1bfYjdVW8DjCad1SszYSnvxqXc4NKJPF/SiNi6gb29mtIdVayVFS2c
Ql1YjQxC4a1uYLBXvuWac3S+5cF1yFb5FQxDA0iVN1pQi3VwhWYI/8oiW/xwxL6V
6gf9wCUysXcpCHbIOcZbppyCZLcsjwprO0tlJWW+U+9ERsZHFD2OV5R9Uf4bPr/z
xFWqHZ+9M5P+u8/8oa6flw1LO3QzSSTlKPFYH5i/10Uva8MP+zrx2HYbAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLWN9MdQtWrdkRlGrBp5YkLGnIbbMB8GA1UdIwQY
MBaAFERWwUzYck+akJYnuU4AbPadEjB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkZiQlROaHlUNXFRbGllNVRnQnM5cDBTTUhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS81ZWNmYzItZGE3MC00MzMzLThmOTYt
NWI4NzgyNWMwN2VlLzEvUkZiQlROaHlUNXFRbGllNVRnQnM5cDBTTUhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS81ZWNmYzItZGE3MC00MzMzLThmOTYtNWI4NzgyNWMwN2Vl
LzEvUkZiQlROaHlUNXFRbGllNVRnQnM5cDBTTUhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPek8UG8A
v5IY8zcE9Z2ijWQ7nSQiMKCjn8TwaL8NFK8Vj5qbOBKdwZ/jv7Th2UedFYblgQ7q
pYpP9GMDztdD4g9iOgmUVuRIsx1jFrrvYznBnFEjymMTn7c6NXCQd74wGBX/OJRh
ifnl2FEt3keo6SRqCZdeTzAnRZcx46JGO0PP4mwXvXyLhWu/jyvpBvFmmsBcAXrr
VPZnpqGaS7twQxDMFo6ewIg8ZWoxI8wT8dZy0SlR2iuK4YLSft+UkE8NadzcckVh
yN0Z6P7SIgh0xpfAb8DlqvU+vV1XW1G2gHSmJPml0XmxtGHcH5uVH1m9PyqaYuz0
VfV/1DdV9jYm2g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 18:36:13 2026 by rpki-client