Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/byDBquA8J08ClCjuoKRCQgjU8-0.mft
File: byDBquA8J08ClCjuoKRCQgjU8-0.mft (raw, json)
Hash identifier: ptMD36aD2RVmOGDCf3diNGWdb8fw69dkgiHFbcSKeZY=
Subject key identifier: 22:E9:25:ED:CD:63:48:BD:1E:84:24:E3:F8:23:B6:0D:4B:04:FC:22
Authority key identifier: 6F:20:C1:AA:E0:3C:27:4F:02:94:28:EE:A0:A4:42:42:08:D4:F3:ED
Certificate issuer: /CN=6f20c1aae03c274f029428eea0a4424208d4f3ed
Certificate serial: 019D3940DFFD5ABFEDE915FCC5C9B66670B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/byDBquA8J08ClCjuoKRCQgjU8-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/byDBquA8J08ClCjuoKRCQgjU8-0.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 11:00:46 +0000
Manifest this update: Sun 29 Mar 2026 11:00:46 +0000
Manifest next update: Mon 30 Mar 2026 11:00:46 +0000
Files and hashes: 1: byDBquA8J08ClCjuoKRCQgjU8-0.crl (hash: joFIC8efwFRxsfZ7e0+wpLFnBAor3wQw2iUKjlNh+6k=)
2: grB1qqfTRQP7MTNrrn-WzmUk8gw.roa (hash: +6I+Ww911XZBE+FZXYbMuXqk8USqXVoE6JeVtzI2oaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/byDBquA8J08ClCjuoKRCQgjU8-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/byDBquA8J08ClCjuoKRCQgjU8-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/byDBquA8J08ClCjuoKRCQgjU8-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:df:fd:5a:bf:ed:e9:15:fc:c5:c9:b6:66:70:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f20c1aae03c274f029428eea0a4424208d4f3ed
Validity
Not Before: Mar 29 11:00:46 2026 GMT
Not After : Mar 30 11:00:46 2026 GMT
Subject: CN=22e925edcd6348bd1e8424e3f823b60d4b04fc22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b5:24:57:0f:2f:d3:3f:99:38:da:cb:dd:05:
33:f0:1e:0d:8a:13:a3:a9:d3:b0:96:2e:ec:ed:2e:
d4:80:26:1e:a4:92:15:63:29:73:f9:77:3f:ce:2a:
b8:e8:96:d8:ac:ec:b5:2d:fe:03:4b:dd:ad:9d:30:
da:35:65:77:c0:50:67:6d:b0:1f:db:37:01:a5:f1:
58:9b:68:51:a7:40:6d:d1:f0:9f:74:75:a4:59:07:
d2:8b:2a:a2:fa:e1:d8:f7:cb:5d:78:41:55:3c:0c:
90:db:40:66:32:ad:89:f2:56:cd:be:7b:f6:c4:f1:
ed:58:af:85:ca:15:c6:d0:7b:b5:a6:b0:1c:29:75:
71:22:ae:dc:01:39:bf:d7:d5:7f:d5:cd:5e:55:48:
94:13:06:21:ee:ad:76:0f:0a:f1:f6:45:43:1f:86:
b4:b0:8a:c1:2e:6b:ea:ab:2c:04:02:1d:51:41:24:
89:9a:51:5b:b6:5e:b3:f9:85:83:d9:32:06:c9:3d:
fd:58:a9:f8:16:2f:0c:13:09:f5:59:c5:8d:a9:c7:
1a:d2:34:8a:05:6b:bd:b2:68:2f:02:e1:ee:58:ad:
ad:bc:17:b0:87:1d:9a:96:68:dc:79:7f:88:47:b8:
ea:41:ba:39:00:a9:2b:7d:1b:a7:22:5a:02:28:f3:
cd:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:E9:25:ED:CD:63:48:BD:1E:84:24:E3:F8:23:B6:0D:4B:04:FC:22
X509v3 Authority Key Identifier:
keyid:6F:20:C1:AA:E0:3C:27:4F:02:94:28:EE:A0:A4:42:42:08:D4:F3:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/byDBquA8J08ClCjuoKRCQgjU8-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/byDBquA8J08ClCjuoKRCQgjU8-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/byDBquA8J08ClCjuoKRCQgjU8-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:4b:18:9e:3f:a4:93:90:a5:48:78:55:18:f7:2f:ab:f5:1c:
b1:44:c4:eb:64:ab:8b:cd:44:f9:65:0a:35:7a:8d:cf:e5:f1:
9c:2b:f0:ed:0c:8f:40:e4:47:49:a6:04:f6:ea:26:48:8c:77:
4d:73:06:74:50:56:d3:90:70:dd:a5:07:57:2e:6e:48:de:4d:
00:f0:52:ce:75:d4:ac:a9:20:85:06:0c:16:cf:cb:ed:05:d0:
1e:15:7f:50:6e:41:51:25:d7:56:e6:40:ba:01:38:e0:b0:8c:
12:2b:54:16:81:df:1a:44:f7:14:1a:e2:1c:a0:8b:fa:8a:26:
02:3f:ff:9a:53:07:75:5f:ba:66:96:89:a8:06:c3:74:f1:0c:
4b:5b:d1:1d:9a:ef:91:66:36:8f:6b:db:cd:19:64:36:95:5e:
75:9c:a9:c3:bf:b8:c0:ab:09:84:3b:7d:4d:f2:65:b2:87:b3:
79:c0:fd:c2:95:84:10:b2:fc:50:e5:aa:8b:9d:e5:a0:49:ab:
a4:ca:e0:4c:13:9f:49:4b:cb:fd:02:a3:65:80:12:a3:d0:76:
61:8a:9f:75:9c:28:dd:35:87:0c:69:01:06:98:4c:30:8a:65:
ff:e3:3f:75:12:40:6a:76:87:84:59:1e:c8:8c:2e:11:78:1f:
2c:c7:31:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QN/9Wr/t6RX8xcm2ZnCwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmMjBjMWFhZTAzYzI3NGYwMjk0MjhlZWEwYTQ0MjQyMDhk
NGYzZWQwHhcNMjYwMzI5MTEwMDQ2WhcNMjYwMzMwMTEwMDQ2WjAzMTEwLwYDVQQD
EygyMmU5MjVlZGNkNjM0OGJkMWU4NDI0ZTNmODIzYjYwZDRiMDRmYzIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7UkVw8v0z+ZONrL3QUz8B4NihOj
qdOwli7s7S7UgCYepJIVYylz+Xc/ziq46JbYrOy1Lf4DS92tnTDaNWV3wFBnbbAf
2zcBpfFYm2hRp0Bt0fCfdHWkWQfSiyqi+uHY98tdeEFVPAyQ20BmMq2J8lbNvnv2
xPHtWK+FyhXG0Hu1prAcKXVxIq7cATm/19V/1c1eVUiUEwYh7q12Dwrx9kVDH4a0
sIrBLmvqqywEAh1RQSSJmlFbtl6z+YWD2TIGyT39WKn4Fi8MEwn1WcWNqcca0jSK
BWu9smgvAuHuWK2tvBewhx2almjceX+IR7jqQbo5AKkrfRunIloCKPPNbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCLpJe3NY0i9HoQk4/gjtg1LBPwiMB8GA1UdIwQY
MBaAFG8gwargPCdPApQo7qCkQkII1PPtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnlEQnF1QThKMDhDbENqdW9LUkNRZ2pVOC0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS83ZTRiYTctZjU5Mi00ZWVjLWJjYWUt
MDk1ZDBiZDI1NTVmLzEvYnlEQnF1QThKMDhDbENqdW9LUkNRZ2pVOC0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS83ZTRiYTctZjU5Mi00ZWVjLWJjYWUtMDk1ZDBiZDI1NTVm
LzEvYnlEQnF1QThKMDhDbENqdW9LUkNRZ2pVOC0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvUsYnj+k
k5ClSHhVGPcvq/UcsUTE62Sri81E+WUKNXqNz+XxnCvw7QyPQORHSaYE9uomSIx3
TXMGdFBW05Bw3aUHVy5uSN5NAPBSznXUrKkghQYMFs/L7QXQHhV/UG5BUSXXVuZA
ugE44LCMEitUFoHfGkT3FBriHKCL+oomAj//mlMHdV+6ZpaJqAbDdPEMS1vRHZrv
kWY2j2vbzRlkNpVedZypw7+4wKsJhDt9TfJlsoezecD9wpWEELL8UOWqi53loEmr
pMrgTBOfSUvL/QKjZYASo9B2YYqfdZwo3TWHDGkBBphMMIpl/+M/dRJAanaHhFke
yIwuEXgfLMcx0A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 18:35:40 2026 by rpki-client