Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.mft
File: b_pZATo68D98lsJOaNleGBoDBag.mft (raw, json)
Hash identifier: Ed/yTPpRp5uJ5S8VxLigFIcQx/c148T92kKfj2gbyYs=
Subject key identifier: 85:BE:46:54:EF:AC:64:22:A5:E9:4A:4B:F9:C0:94:28:A0:EF:A7:00
Authority key identifier: 6F:FA:59:01:3A:3A:F0:3F:7C:96:C2:4E:68:D9:5E:18:1A:03:05:A8
Certificate issuer: /CN=6ffa59013a3af03f7c96c24e68d95e181a0305a8
Certificate serial: 019D38D38B2B119410EA9C7F345FF0C3E926
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_pZATo68D98lsJOaNleGBoDBag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 09:01:20 +0000
Manifest this update: Sun 29 Mar 2026 09:01:20 +0000
Manifest next update: Mon 30 Mar 2026 09:01:20 +0000
Files and hashes: 1: SVOvzgkEfvGYjK4LPp7LCekPWQg.roa (hash: lwuDAbFV1ncdXu1vKoYuToeJM9cyJDqz+l6o1B6s+ac=)
2: b_pZATo68D98lsJOaNleGBoDBag.crl (hash: l+wkWdHG8BdeyqE/BnsUMfS0enpl46kfNwStOWyMbxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.mft
rsync://rpki.ripe.net/repository/DEFAULT/b_pZATo68D98lsJOaNleGBoDBag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:8b:2b:11:94:10:ea:9c:7f:34:5f:f0:c3:e9:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ffa59013a3af03f7c96c24e68d95e181a0305a8
Validity
Not Before: Mar 29 09:01:20 2026 GMT
Not After : Mar 30 09:01:20 2026 GMT
Subject: CN=85be4654efac6422a5e94a4bf9c09428a0efa700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:bf:ac:67:69:21:6c:68:f5:ab:72:8d:10:b8:
1f:f5:45:da:b3:95:fe:20:b3:7c:b6:97:31:cb:41:
5c:09:5b:c9:8c:bd:5d:10:c7:6b:52:13:4e:99:3d:
b5:19:10:d3:c0:89:f2:28:7b:3a:1b:1c:8e:e3:f4:
bd:60:66:90:cc:51:02:67:4b:b0:32:12:2c:2c:2c:
b7:b3:27:e8:23:b5:e8:01:1a:86:06:ac:b7:6d:b4:
cb:31:9a:1c:06:a9:87:0c:3f:bf:a1:08:a6:05:55:
d0:37:c2:68:cc:b6:71:36:e7:ae:be:43:f8:69:3d:
94:4a:f7:1a:27:0f:67:b6:8f:92:00:19:3e:43:ea:
1b:01:8e:bc:db:19:38:f6:e5:48:d3:50:e6:ce:2c:
ab:a6:33:6e:37:3d:3c:e3:42:71:cd:33:b8:41:ad:
cf:ef:f0:ad:30:aa:29:8e:d0:10:0e:9a:f9:5f:bf:
f2:3b:26:2e:fd:ec:68:50:cf:b7:3f:07:21:7d:bf:
64:5e:69:60:12:fe:34:09:62:e9:77:02:4b:7b:ea:
26:11:73:47:2c:35:42:b8:07:68:7e:d9:1a:23:5b:
0c:4e:a0:0d:53:0a:7a:f8:18:c1:69:fc:7c:26:01:
5a:43:7a:20:0d:4f:cd:a6:e3:ab:9e:c2:4d:ae:95:
c5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:BE:46:54:EF:AC:64:22:A5:E9:4A:4B:F9:C0:94:28:A0:EF:A7:00
X509v3 Authority Key Identifier:
keyid:6F:FA:59:01:3A:3A:F0:3F:7C:96:C2:4E:68:D9:5E:18:1A:03:05:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_pZATo68D98lsJOaNleGBoDBag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:55:75:85:10:b2:7f:c2:7e:b8:68:7d:6e:c0:01:18:c7:47:
c1:4b:ac:7e:a9:6a:a1:2a:09:29:82:79:97:c7:fa:12:03:07:
91:59:cf:86:40:89:8d:97:f1:9a:3d:c9:97:b1:78:31:17:22:
62:14:11:86:1c:ff:d8:30:0d:86:31:73:ad:8d:81:7f:86:a5:
70:59:83:26:4f:81:4d:e3:31:a1:24:02:d3:de:d4:5f:4c:13:
61:56:aa:61:88:f7:50:ca:d3:2a:43:d5:d2:ad:38:37:91:9a:
eb:32:e6:54:5c:4b:82:40:c6:fd:c5:9b:bc:cd:8e:4e:7e:a0:
61:8b:d6:a7:c5:9a:cd:f6:80:7b:87:46:2c:a2:f7:87:1a:66:
93:b2:14:e0:6c:99:2a:d8:b5:2c:ea:d7:de:1e:7f:91:b6:e3:
2c:68:d0:cf:b1:50:3a:ef:be:da:a6:32:44:96:71:38:8a:f8:
ef:be:9b:7d:4f:ff:40:99:43:c0:1c:22:ca:b7:23:5b:e8:49:
18:f9:89:92:1a:a4:f6:32:47:23:f4:33:85:0b:73:70:d0:45:
af:6e:6b:bb:a9:76:ac:66:ba:74:66:26:4a:74:c9:16:9a:45:
f9:42:c3:89:6f:32:e6:00:27:c0:fc:88:54:ed:e2:fc:c9:c9:
b6:4a:98:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0404srEZQQ6px/NF/ww+kmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmZmE1OTAxM2EzYWYwM2Y3Yzk2YzI0ZTY4ZDk1ZTE4MWEw
MzA1YTgwHhcNMjYwMzI5MDkwMTIwWhcNMjYwMzMwMDkwMTIwWjAzMTEwLwYDVQQD
Eyg4NWJlNDY1NGVmYWM2NDIyYTVlOTRhNGJmOWMwOTQyOGEwZWZhNzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2b+sZ2khbGj1q3KNELgf9UXas5X+
ILN8tpcxy0FcCVvJjL1dEMdrUhNOmT21GRDTwInyKHs6GxyO4/S9YGaQzFECZ0uw
MhIsLCy3syfoI7XoARqGBqy3bbTLMZocBqmHDD+/oQimBVXQN8JozLZxNueuvkP4
aT2USvcaJw9nto+SABk+Q+obAY682xk49uVI01DmziyrpjNuNz0840JxzTO4Qa3P
7/CtMKopjtAQDpr5X7/yOyYu/exoUM+3Pwchfb9kXmlgEv40CWLpdwJLe+omEXNH
LDVCuAdoftkaI1sMTqANUwp6+BjBafx8JgFaQ3ogDU/NpuOrnsJNrpXF7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIW+RlTvrGQipelKS/nAlCig76cAMB8GA1UdIwQY
MBaAFG/6WQE6OvA/fJbCTmjZXhgaAwWoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYl9wWkFUbzY4RDk4bHNKT2FObGVHQm9EQmFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC83ZTIxMzEtZGI4YS00Yzg5LWI1MGYt
ZDgyMjk3ZTk0NWFjLzEvYl9wWkFUbzY4RDk4bHNKT2FObGVHQm9EQmFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC83ZTIxMzEtZGI4YS00Yzg5LWI1MGYtZDgyMjk3ZTk0NWFj
LzEvYl9wWkFUbzY4RDk4bHNKT2FObGVHQm9EQmFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASlV1hRCy
f8J+uGh9bsABGMdHwUusfqlqoSoJKYJ5l8f6EgMHkVnPhkCJjZfxmj3Jl7F4MRci
YhQRhhz/2DANhjFzrY2Bf4alcFmDJk+BTeMxoSQC097UX0wTYVaqYYj3UMrTKkPV
0q04N5Ga6zLmVFxLgkDG/cWbvM2OTn6gYYvWp8WazfaAe4dGLKL3hxpmk7IU4GyZ
Kti1LOrX3h5/kbbjLGjQz7FQOu++2qYyRJZxOIr4776bfU//QJlDwBwiyrcjW+hJ
GPmJkhqk9jJHI/QzhQtzcNBFr25ru6l2rGa6dGYmSnTJFppF+ULDiW8y5gAnwPyI
VO3i/MnJtkqY/A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:00 2026 by rpki-client