Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.mft
File: rOuZdImZq44CGPfI29zFaY1mnTk.mft (raw, json)
Hash identifier: rr452lG18UP4AgR4d2/nDeVYPz28eU1fLEeKHfseXp4=
Subject key identifier: B9:2E:05:CD:07:28:2C:51:8F:52:0E:09:06:97:0A:F5:31:7E:F6:3A
Authority key identifier: AC:EB:99:74:89:99:AB:8E:02:18:F7:C8:DB:DC:C5:69:8D:66:9D:39
Certificate issuer: /CN=aceb99748999ab8e0218f7c8dbdcc5698d669d39
Certificate serial: 019D3752F93F0B2CFB36A9D123F611A01DF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOuZdImZq44CGPfI29zFaY1mnTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 02:01:17 +0000
Manifest this update: Sun 29 Mar 2026 02:01:17 +0000
Manifest next update: Mon 30 Mar 2026 02:01:17 +0000
Files and hashes: 1: CbbyPFwOxRt_djihEbyH4dswgkU.roa (hash: zzZiYXhJH80jdIaDpqCJXODjR57XtJuUcOZwLqkue/Y=)
2: rOuZdImZq44CGPfI29zFaY1mnTk.crl (hash: 484MjwCXPPNlaOpNZ//YFrgSgspGOtyaxX2uXymnxiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/rOuZdImZq44CGPfI29zFaY1mnTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:f9:3f:0b:2c:fb:36:a9:d1:23:f6:11:a0:1d:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aceb99748999ab8e0218f7c8dbdcc5698d669d39
Validity
Not Before: Mar 29 02:01:17 2026 GMT
Not After : Mar 30 02:01:17 2026 GMT
Subject: CN=b92e05cd07282c518f520e0906970af5317ef63a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0d:e4:ca:b6:1b:2f:aa:96:d8:61:82:25:1a:
79:5b:a3:19:e1:47:5a:48:ee:49:02:72:e3:a2:74:
61:47:c2:8d:91:e7:45:6b:16:a9:8f:64:41:44:84:
e3:0d:d2:65:d7:37:59:89:af:9b:57:fb:7a:2b:e2:
27:4a:ba:3b:df:27:0c:bc:0e:92:3a:7f:4f:92:62:
07:44:f5:a1:f5:95:41:b8:26:0f:e5:89:ef:c2:4d:
dc:f1:98:c6:c0:92:98:31:9f:57:da:9d:4f:98:2e:
64:c4:a1:4b:ab:bd:2b:d1:48:c2:80:b1:24:26:21:
a2:ad:c1:cc:14:69:06:55:3c:4a:29:51:69:5f:b6:
c6:43:47:62:56:1c:35:aa:aa:86:aa:40:9b:7d:a4:
11:35:dc:64:0e:3d:53:ab:70:4c:ac:e8:fc:e7:66:
7e:e3:ae:98:9e:d7:9d:9f:6b:f0:fb:63:f1:ee:6c:
ee:ee:b7:d9:a7:aa:73:22:02:95:2f:d4:9e:49:fd:
e4:0b:a4:f2:27:db:b8:d0:0e:51:6c:8a:47:6e:44:
b6:cc:2e:29:28:2a:84:ce:d5:89:00:7e:b2:02:05:
bc:32:cf:89:ee:1b:fb:b4:74:4d:a1:b6:64:d3:91:
4f:d0:86:7b:9d:af:b4:53:31:70:3f:49:f5:fc:51:
fb:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:2E:05:CD:07:28:2C:51:8F:52:0E:09:06:97:0A:F5:31:7E:F6:3A
X509v3 Authority Key Identifier:
keyid:AC:EB:99:74:89:99:AB:8E:02:18:F7:C8:DB:DC:C5:69:8D:66:9D:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOuZdImZq44CGPfI29zFaY1mnTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:20:f6:0c:bf:99:40:99:fc:69:ec:e2:23:c6:dd:4a:de:d0:
4d:69:29:a1:d3:7f:3f:63:0d:e1:01:e8:4b:f6:7d:af:2f:2f:
fb:04:0e:fa:ff:ff:5e:2f:03:7e:89:8f:7a:7a:fc:9c:e5:02:
4a:f8:dc:22:2f:5e:7d:bf:09:3a:6a:32:d1:a8:c7:cf:24:b1:
ec:b1:50:e5:96:8c:02:24:31:e2:38:1c:9d:03:35:e9:88:35:
d4:15:f7:81:90:45:94:86:59:0f:36:a3:04:39:8e:cd:63:80:
5e:4c:8f:66:63:68:19:10:fb:c2:83:e7:94:8e:1c:65:29:e1:
74:4b:40:d7:bc:6e:f5:80:4c:40:b3:74:9f:e4:73:c6:31:08:
0e:b1:41:64:c7:ff:46:3b:b5:71:67:08:9c:4d:68:39:15:aa:
17:54:18:10:8a:51:b9:35:fc:43:2b:ba:b1:86:d0:c4:ba:b4:
63:ea:15:3c:e5:dd:42:f7:1d:4a:26:6e:76:a3:30:ea:72:fd:
17:38:e3:bd:6b:c8:0d:a4:80:c5:ec:c6:b7:ee:e5:79:d0:44:
f5:03:fe:b7:38:4d:a6:09:7a:9e:6e:5c:e5:be:c7:3f:b9:47:
8d:a9:a8:5b:a4:aa:5a:c8:0c:63:f8:b3:12:58:4c:a1:c6:e8:
ae:b5:80:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03Uvk/Cyz7NqnRI/YRoB34MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjZWI5OTc0ODk5OWFiOGUwMjE4ZjdjOGRiZGNjNTY5OGQ2
NjlkMzkwHhcNMjYwMzI5MDIwMTE3WhcNMjYwMzMwMDIwMTE3WjAzMTEwLwYDVQQD
EyhiOTJlMDVjZDA3MjgyYzUxOGY1MjBlMDkwNjk3MGFmNTMxN2VmNjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0A3kyrYbL6qW2GGCJRp5W6MZ4Uda
SO5JAnLjonRhR8KNkedFaxapj2RBRITjDdJl1zdZia+bV/t6K+InSro73ycMvA6S
On9PkmIHRPWh9ZVBuCYP5Ynvwk3c8ZjGwJKYMZ9X2p1PmC5kxKFLq70r0UjCgLEk
JiGircHMFGkGVTxKKVFpX7bGQ0diVhw1qqqGqkCbfaQRNdxkDj1Tq3BMrOj852Z+
466Yntedn2vw+2Px7mzu7rfZp6pzIgKVL9SeSf3kC6TyJ9u40A5RbIpHbkS2zC4p
KCqEztWJAH6yAgW8Ms+J7hv7tHRNobZk05FP0IZ7na+0UzFwP0n1/FH7cwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLkuBc0HKCxRj1IOCQaXCvUxfvY6MB8GA1UdIwQY
MBaAFKzrmXSJmauOAhj3yNvcxWmNZp05MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvck91WmRJbVpxNDRDR1BmSTI5ekZhWTFtblRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9mNjAxMzQtNmQ2ZC00ZGMxLTkyYTkt
NjU5YWU4MjE5OTFjLzEvck91WmRJbVpxNDRDR1BmSTI5ekZhWTFtblRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9mNjAxMzQtNmQ2ZC00ZGMxLTkyYTktNjU5YWU4MjE5OTFj
LzEvck91WmRJbVpxNDRDR1BmSTI5ekZhWTFtblRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZCD2DL+Z
QJn8aeziI8bdSt7QTWkpodN/P2MN4QHoS/Z9ry8v+wQO+v//Xi8DfomPenr8nOUC
SvjcIi9efb8JOmoy0ajHzySx7LFQ5ZaMAiQx4jgcnQM16Yg11BX3gZBFlIZZDzaj
BDmOzWOAXkyPZmNoGRD7woPnlI4cZSnhdEtA17xu9YBMQLN0n+RzxjEIDrFBZMf/
Rju1cWcInE1oORWqF1QYEIpRuTX8Qyu6sYbQxLq0Y+oVPOXdQvcdSiZudqMw6nL9
FzjjvWvIDaSAxezGt+7ledBE9QP+tzhNpgl6nm5c5b7HP7lHjamoW6SqWsgMY/iz
ElhMocborrWAIQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:44:39 2026 by rpki-client