Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
File: r070qO03Ebas1owPSPYhgx_Vqq4.mft (raw, json)
Hash identifier: iWt6ZQLAc2RhLuOR4c99W8WIUAgkEp1akDQlGvrHsDY=
Subject key identifier: CF:06:F3:31:B4:6A:A5:0F:8E:2A:D7:B6:14:38:00:AF:7A:60:E2:D3
Authority key identifier: AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE
Certificate issuer: /CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae
Certificate serial: 019CE4EC58F42BF83799B4816F6C22D3FE71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
Manifest number: 1867
Signing time: Fri 13 Mar 2026 02:00:20 +0000
Manifest this update: Fri 13 Mar 2026 02:00:20 +0000
Manifest next update: Sat 14 Mar 2026 02:00:20 +0000
Files and hashes: 1: IFfM41C2iw4zVbKliZbWU1sGtlo.roa (hash: 2tPJsJbwIDoCDzDnvS5bHZwht6rGtT6H5rAQ7kX958E=)
2: cmKT8tNT04DB4snpmXdQUr0nl3Q.roa (hash: PNE5CH9WwmP98sniR82D6V4y4hCcTeAU6RiNs++jAdg=)
3: r070qO03Ebas1owPSPYhgx_Vqq4.crl (hash: BEWyngGxyzTYW6lr3rTt6LM8Dxji4/AbwGt+3NBYfyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:ec:58:f4:2b:f8:37:99:b4:81:6f:6c:22:d3:fe:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae
Validity
Not Before: Mar 13 02:00:20 2026 GMT
Not After : Mar 14 02:00:20 2026 GMT
Subject: CN=cf06f331b46aa50f8e2ad7b6143800af7a60e2d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f2:66:67:7a:d0:d4:41:17:83:eb:32:9c:a6:
e2:b6:50:92:32:37:ad:fc:1b:c3:21:ab:07:01:e1:
34:4f:25:6f:17:e4:3f:01:25:b1:66:d0:aa:c0:9b:
92:6b:af:86:50:4a:a2:bb:bf:cc:b5:ca:ca:84:eb:
23:6b:34:80:63:72:b3:25:35:53:63:c5:20:15:61:
23:e1:c6:67:1c:6e:36:c2:e9:5e:1b:b7:08:5d:54:
f9:6e:85:1d:fc:77:5f:64:78:d5:c1:f5:d4:8c:37:
4e:21:00:20:15:be:cb:ad:fa:fd:66:c9:d7:b3:70:
73:37:bb:50:79:80:e6:b1:9e:96:be:9a:c1:79:3b:
fe:b8:fd:51:4d:fd:0a:b5:46:2b:4a:15:ce:5d:73:
b0:58:89:23:be:ff:f5:44:c8:50:36:91:aa:d1:15:
3b:cf:bb:57:af:cf:d0:57:0a:7e:96:bd:0b:27:9f:
81:04:29:34:2a:1c:57:0e:a6:c8:09:ea:e9:8e:f5:
56:7b:11:12:56:e0:40:b3:ce:36:ba:4e:33:fd:86:
ee:ee:16:1b:69:f8:bf:8c:2e:ad:aa:76:7b:6c:38:
6c:b4:00:51:ae:dd:4d:a8:b7:da:3e:1c:eb:55:8f:
5a:7b:7f:4f:e4:b2:64:4f:eb:fe:d1:b7:71:df:e4:
ff:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:06:F3:31:B4:6A:A5:0F:8E:2A:D7:B6:14:38:00:AF:7A:60:E2:D3
X509v3 Authority Key Identifier:
keyid:AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:64:45:f0:eb:c7:94:1f:42:42:35:08:a7:a2:83:81:e2:0e:
56:90:78:f0:25:a2:c4:7c:58:87:94:f9:51:dd:cc:dc:45:88:
d5:33:16:06:ff:97:76:45:57:e0:4d:36:4a:28:fd:bf:8d:67:
5c:8a:9f:9b:2b:39:3d:61:12:1f:a4:19:a7:45:4c:1b:2c:9e:
1a:5b:e8:b9:95:cf:e4:b7:89:c8:98:4d:7d:c2:1c:fc:a8:bc:
bf:0f:31:2f:0a:12:aa:2d:34:2e:45:8e:2d:33:43:3e:28:88:
91:98:65:cd:75:b9:86:03:e1:ae:19:b6:a7:dc:21:ac:47:81:
24:94:e3:88:cb:6c:0c:61:72:e8:cc:de:52:bb:1d:73:4d:c7:
d4:23:3f:9a:0a:a4:4a:52:7a:00:54:2c:8c:50:83:0f:7e:29:
f0:72:38:62:c9:64:c2:3d:82:a9:d8:82:aa:d1:64:af:d5:83:
8c:33:63:cd:f7:ee:b9:a4:a0:94:17:ca:19:22:65:6a:15:d9:
7e:11:fa:07:dc:23:14:e8:e3:09:e8:38:3e:34:c5:b4:6c:14:
1d:98:c6:ec:f7:28:94:fd:0e:fd:f2:86:b5:b7:be:8a:c5:83:
ca:1a:fe:3c:90:34:e4:3a:72:cb:8e:71:af:22:42:f2:30:27:
6f:25:44:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzk7Fj0K/g3mbSBb2wi0/5xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNGVmNGE4ZWQzNzExYjZhY2Q2OGMwZjQ4ZjYyMTgzMWZk
NWFhYWUwHhcNMjYwMzEzMDIwMDIwWhcNMjYwMzE0MDIwMDIwWjAzMTEwLwYDVQQD
EyhjZjA2ZjMzMWI0NmFhNTBmOGUyYWQ3YjYxNDM4MDBhZjdhNjBlMmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPJmZ3rQ1EEXg+synKbitlCSMjet
/BvDIasHAeE0TyVvF+Q/ASWxZtCqwJuSa6+GUEqiu7/MtcrKhOsjazSAY3KzJTVT
Y8UgFWEj4cZnHG42wuleG7cIXVT5boUd/HdfZHjVwfXUjDdOIQAgFb7Lrfr9ZsnX
s3BzN7tQeYDmsZ6WvprBeTv+uP1RTf0KtUYrShXOXXOwWIkjvv/1RMhQNpGq0RU7
z7tXr8/QVwp+lr0LJ5+BBCk0KhxXDqbICerpjvVWexESVuBAs842uk4z/Ybu7hYb
afi/jC6tqnZ7bDhstABRrt1NqLfaPhzrVY9ae39P5LJkT+v+0bdx3+T/DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM8G8zG0aqUPjirXthQ4AK96YOLTMB8GA1UdIwQY
MBaAFK9O9KjtNxG2rNaMD0j2IYMf1aquMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjA3MHFPMDNFYmFzMW93UFNQWWhneF9WcXE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9lOGY0YjMtMjEyMC00ZWNiLTk2MDkt
Y2I5YzU4ZjUxMGNiLzEvcjA3MHFPMDNFYmFzMW93UFNQWWhneF9WcXE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9lOGY0YjMtMjEyMC00ZWNiLTk2MDktY2I5YzU4ZjUxMGNi
LzEvcjA3MHFPMDNFYmFzMW93UFNQWWhneF9WcXE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB2RF8OvH
lB9CQjUIp6KDgeIOVpB48CWixHxYh5T5Ud3M3EWI1TMWBv+XdkVX4E02Sij9v41n
XIqfmys5PWESH6QZp0VMGyyeGlvouZXP5LeJyJhNfcIc/Ki8vw8xLwoSqi00LkWO
LTNDPiiIkZhlzXW5hgPhrhm2p9whrEeBJJTjiMtsDGFy6MzeUrsdc03H1CM/mgqk
SlJ6AFQsjFCDD34p8HI4Yslkwj2CqdiCqtFkr9WDjDNjzffuuaSglBfKGSJlahXZ
fhH6B9wjFOjjCeg4PjTFtGwUHZjG7PcolP0O/fKGtbe+isWDyhr+PJA05Dpyy45x
ryJC8jAnbyVExw==
-----END CERTIFICATE-----
Generated at Fri Mar 13 08:32:44 2026 by rpki-client