Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft
File: RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft (raw, json)
Hash identifier: nB2alASLVXxy/CLWfVUo0XcXsWTyZCQ5Vq/TrXHfWUE=
Subject key identifier: 7A:9D:3A:B4:0D:AE:3D:5E:2B:C9:FC:E2:92:5C:42:AF:DA:F5:AE:8D
Authority key identifier: 46:03:C6:56:C1:97:46:1A:49:CA:A1:FF:D7:20:D1:8B:EE:AC:80:76
Certificate issuer: /CN=4603c656c197461a49caa1ffd720d18beeac8076
Certificate serial: 019D37C06B69D99E9F4F14E6C2F3153B6F33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RgPGVsGXRhpJyqH_1yDRi-6sgHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft
Manifest number: 0657
Signing time: Sun 29 Mar 2026 04:00:50 +0000
Manifest this update: Sun 29 Mar 2026 04:00:50 +0000
Manifest next update: Mon 30 Mar 2026 04:00:50 +0000
Files and hashes: 1: Hrj27dyCNZvY-lKB2ef8Mo4G6tA.roa (hash: ywCaGFxrJHREbSiyJrKj2GAkS5PQJLvo8VTO1MR9hlc=)
2: RgPGVsGXRhpJyqH_1yDRi-6sgHY.crl (hash: AA5ol+Xdu9JZIu08AwGYzzIzWwMoxcT6CpOhzvRnh2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RgPGVsGXRhpJyqH_1yDRi-6sgHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:6b:69:d9:9e:9f:4f:14:e6:c2:f3:15:3b:6f:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4603c656c197461a49caa1ffd720d18beeac8076
Validity
Not Before: Mar 29 04:00:50 2026 GMT
Not After : Mar 30 04:00:50 2026 GMT
Subject: CN=7a9d3ab40dae3d5e2bc9fce2925c42afdaf5ae8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c8:f5:78:85:fd:dc:49:c2:51:f5:b9:99:8a:
32:a9:6a:4e:27:ac:e7:7f:58:14:15:c1:e3:75:dc:
65:a7:f9:96:04:a8:89:30:13:ec:88:7f:f5:bb:d7:
cb:a2:01:3c:58:1a:75:5a:fc:4b:62:8f:0c:fc:a3:
b3:bc:bc:99:9b:e5:21:12:89:0a:c6:fa:a6:35:d1:
20:80:06:ba:93:d1:e9:da:f8:1b:d0:1c:61:68:84:
5b:b0:51:3e:55:8c:4d:5e:9f:ae:c3:ce:f2:89:f6:
9a:41:1d:00:a1:cb:89:7f:b2:45:3f:6d:c7:1a:80:
b7:64:10:cc:42:da:73:62:d1:ac:38:ca:1b:4b:ab:
79:41:6f:d8:b9:f4:1b:7a:ed:ec:4f:c3:0f:51:8a:
64:49:07:02:4e:f7:47:2d:18:1f:40:da:ce:ee:50:
ea:5c:ce:08:ff:01:c2:e0:22:ae:57:a4:b3:cc:62:
6c:1f:98:e7:50:da:bc:61:9a:00:cd:34:c8:e2:62:
f4:be:20:bd:aa:1e:93:18:c0:6a:aa:29:08:2c:1d:
7e:c5:e2:bc:7c:85:21:55:91:24:27:4d:1f:24:ca:
f4:6e:41:df:74:f7:25:fe:a6:1e:ff:13:78:2b:c7:
3e:b1:66:88:cc:25:b3:7f:68:99:51:29:4f:f4:79:
b8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:9D:3A:B4:0D:AE:3D:5E:2B:C9:FC:E2:92:5C:42:AF:DA:F5:AE:8D
X509v3 Authority Key Identifier:
keyid:46:03:C6:56:C1:97:46:1A:49:CA:A1:FF:D7:20:D1:8B:EE:AC:80:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgPGVsGXRhpJyqH_1yDRi-6sgHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:74:72:8f:82:8a:25:5e:a1:d8:b7:e6:92:f6:4a:36:f8:cc:
3c:2b:ba:a4:c1:78:25:a7:ec:e0:22:8e:2b:d7:78:26:c9:fa:
7b:b1:a7:46:ef:cf:92:4b:6e:ac:21:e0:55:ef:5c:c3:d9:c4:
73:a8:31:b0:3f:4f:ac:06:04:96:34:f1:d6:cf:9c:41:99:5c:
62:22:5b:f0:82:21:81:42:29:08:af:c1:09:a4:0a:29:dc:66:
cc:11:20:13:d3:e1:eb:68:58:87:b3:00:2c:97:f7:d5:cf:37:
ec:de:94:9f:07:a4:28:07:b1:56:7c:98:52:84:24:88:32:39:
96:73:d0:ca:4f:c5:90:00:15:8b:2d:52:c7:bb:e8:ce:62:ad:
5b:f8:54:f5:11:04:56:4d:6f:23:dd:69:d3:59:82:86:19:ee:
a4:7c:da:22:a9:63:31:3f:21:37:78:a7:41:fc:cd:cc:7e:ea:
16:65:8c:c1:fc:c6:c9:2e:3f:63:27:81:b6:ab:a5:89:b2:dd:
9c:0b:92:b0:a5:bf:d3:83:89:b8:02:aa:a1:c4:bd:33:e4:9f:
00:8e:ae:c1:ec:6f:c1:49:9f:2e:8d:48:81:2d:ca:92:21:f0:
a3:22:7a:b2:d9:d4:55:e4:f9:3f:9c:07:79:a2:ef:8d:0b:94:
c2:e6:04:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wGtp2Z6fTxTmwvMVO28zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MDNjNjU2YzE5NzQ2MWE0OWNhYTFmZmQ3MjBkMThiZWVh
YzgwNzYwHhcNMjYwMzI5MDQwMDUwWhcNMjYwMzMwMDQwMDUwWjAzMTEwLwYDVQQD
Eyg3YTlkM2FiNDBkYWUzZDVlMmJjOWZjZTI5MjVjNDJhZmRhZjVhZThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcj1eIX93EnCUfW5mYoyqWpOJ6zn
f1gUFcHjddxlp/mWBKiJMBPsiH/1u9fLogE8WBp1WvxLYo8M/KOzvLyZm+UhEokK
xvqmNdEggAa6k9Hp2vgb0BxhaIRbsFE+VYxNXp+uw87yifaaQR0AocuJf7JFP23H
GoC3ZBDMQtpzYtGsOMobS6t5QW/YufQbeu3sT8MPUYpkSQcCTvdHLRgfQNrO7lDq
XM4I/wHC4CKuV6SzzGJsH5jnUNq8YZoAzTTI4mL0viC9qh6TGMBqqikILB1+xeK8
fIUhVZEkJ00fJMr0bkHfdPcl/qYe/xN4K8c+sWaIzCWzf2iZUSlP9Hm43wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHqdOrQNrj1eK8n84pJcQq/a9a6NMB8GA1UdIwQY
MBaAFEYDxlbBl0YaScqh/9cg0YvurIB2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmdQR1ZzR1hSaHBKeXFIXzF5RFJpLTZzZ0hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy84MWFjNzEtMGYyYS00ODYxLTk1OWIt
YWZhNGZkMzUwNmQwLzEvUmdQR1ZzR1hSaHBKeXFIXzF5RFJpLTZzZ0hZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy84MWFjNzEtMGYyYS00ODYxLTk1OWItYWZhNGZkMzUwNmQw
LzEvUmdQR1ZzR1hSaHBKeXFIXzF5RFJpLTZzZ0hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlnRyj4KK
JV6h2LfmkvZKNvjMPCu6pMF4Jafs4CKOK9d4Jsn6e7GnRu/PkkturCHgVe9cw9nE
c6gxsD9PrAYEljTx1s+cQZlcYiJb8IIhgUIpCK/BCaQKKdxmzBEgE9Ph62hYh7MA
LJf31c837N6UnwekKAexVnyYUoQkiDI5lnPQyk/FkAAViy1Sx7vozmKtW/hU9REE
Vk1vI91p01mChhnupHzaIqljMT8hN3inQfzNzH7qFmWMwfzGyS4/YyeBtqulibLd
nAuSsKW/04OJuAKqocS9M+SfAI6uwexvwUmfLo1IgS3KkiHwoyJ6stnUVeT5P5wH
eaLvjQuUwuYEWw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:10 2026 by rpki-client