Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
File: ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft (raw, json)
Hash identifier: CbVDp7ggEq9ss22IKC27PG9bfcYiXtdj5PVc5UicR/4=
Subject key identifier: 0A:18:92:07:5F:79:62:36:09:A7:E4:2D:08:00:52:BE:91:5B:35:B4
Authority key identifier: 92:2E:33:0B:58:79:59:0A:BA:E8:1B:F4:0A:91:A5:10:1B:C1:8F:A0
Certificate issuer: /CN=922e330b5879590abae81bf40a91a5101bc18fa0
Certificate serial: 019D3909987C2E8CE44A081E3B33B69C2A75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 10:00:23 +0000
Manifest this update: Sun 29 Mar 2026 10:00:23 +0000
Manifest next update: Mon 30 Mar 2026 10:00:23 +0000
Files and hashes: 1: 3pCr2mnL2pD_uXHjkQUgtPuvFPs.roa (hash: AEuGhXQguRSp/ih8O+939bXs6UO6yS5s6bISurK2/Vs=)
2: 6EZBeGxNf7QRr-7BKxfjk1mIV8I.roa (hash: WC0gwtiT4OCWAekCe2z7fiG7BMx8NcVUB2W69nAJWQM=)
3: ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl (hash: TgJNlPSbwwTIIT8juOeN1IVl9cwz/y3miQzTrV2e8Nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:98:7c:2e:8c:e4:4a:08:1e:3b:33:b6:9c:2a:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922e330b5879590abae81bf40a91a5101bc18fa0
Validity
Not Before: Mar 29 10:00:23 2026 GMT
Not After : Mar 30 10:00:23 2026 GMT
Subject: CN=0a1892075f79623609a7e42d080052be915b35b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:46:72:e4:3a:a9:dc:1c:88:85:40:87:ef:ed:
91:ed:87:80:da:ee:45:93:27:45:c5:bb:25:04:64:
a4:e3:59:e9:5a:29:7a:ca:1e:be:3f:fb:03:3a:8b:
c1:c3:e4:28:f1:6c:34:48:a2:76:40:4d:78:44:05:
1d:f0:1b:b2:dc:ca:a3:11:fa:8a:3c:f1:a3:83:81:
bb:12:8b:4f:0a:90:d2:6d:81:b8:97:af:42:5b:13:
80:49:38:52:8d:13:f5:d9:36:b6:0d:91:c8:99:be:
7b:88:6c:09:db:36:2b:e2:42:84:7f:bf:eb:96:6d:
25:02:7b:cb:2f:37:6b:4f:2e:f9:45:e8:e0:c2:ba:
8a:d7:71:54:90:c3:ea:3c:7f:be:59:0c:f6:06:53:
c2:ec:fa:4c:cb:47:47:87:78:34:6f:f7:e9:82:a3:
a8:1f:97:bd:f3:1e:a9:8e:4c:4a:f2:d4:ce:62:71:
22:ea:02:ef:45:77:7f:6d:a6:65:dd:cf:49:74:b1:
cb:7b:e7:17:8b:6e:4d:b7:b7:e1:90:2d:ce:48:b9:
fd:d6:2b:26:6d:b0:72:e6:77:24:fa:1b:4b:17:d1:
c5:05:50:7e:9f:18:7c:1b:27:c9:79:06:6b:f3:c6:
80:a4:af:98:f0:98:a4:90:ca:38:1a:24:30:29:24:
f8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:18:92:07:5F:79:62:36:09:A7:E4:2D:08:00:52:BE:91:5B:35:B4
X509v3 Authority Key Identifier:
keyid:92:2E:33:0B:58:79:59:0A:BA:E8:1B:F4:0A:91:A5:10:1B:C1:8F:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:ab:2a:88:ac:07:d3:a9:81:0d:d5:72:a2:37:a7:b6:af:92:
06:ce:77:a0:ce:bc:12:07:f8:ae:ac:38:be:1c:8d:0d:65:40:
19:2b:7c:5a:e5:e7:31:fd:82:5d:f4:34:1b:aa:a4:68:be:42:
37:bb:eb:50:73:1e:03:37:32:05:ab:7e:3c:e3:0e:c2:5b:82:
9c:92:bd:6d:d9:bf:06:90:e8:65:ef:b6:20:d1:1e:c3:e4:2b:
8e:92:27:72:b2:58:c3:4e:dc:b8:af:a2:2f:48:58:4d:38:d7:
96:91:5a:2d:5e:f6:47:db:24:ba:e8:5e:3f:bc:b8:42:b9:97:
f2:b9:7a:76:56:3d:6f:c3:2e:1a:f9:8e:a2:e4:a7:83:88:c0:
ed:bf:36:19:28:55:76:0a:74:7e:58:ac:22:56:93:d4:2f:dd:
21:c9:ca:ce:8f:c8:69:55:f1:36:86:4b:56:3f:51:eb:4f:69:
bd:52:78:0f:7c:ed:c2:94:9a:ff:19:b8:46:5a:7b:57:4b:3d:
26:9e:c2:1c:24:91:48:95:2e:04:63:4d:82:2a:80:79:60:08:
1e:a2:c0:46:25:cf:f6:6e:91:08:38:0b:14:cc:6d:ac:d7:19:
c4:bb:bc:16:b1:f2:8d:e1:80:2e:31:cd:a8:84:8b:1a:46:e2:
0b:5d:50:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05CZh8LozkSggeOzO2nCp1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMmUzMzBiNTg3OTU5MGFiYWU4MWJmNDBhOTFhNTEwMWJj
MThmYTAwHhcNMjYwMzI5MTAwMDIzWhcNMjYwMzMwMTAwMDIzWjAzMTEwLwYDVQQD
EygwYTE4OTIwNzVmNzk2MjM2MDlhN2U0MmQwODAwNTJiZTkxNWIzNWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEZy5Dqp3ByIhUCH7+2R7YeA2u5F
kydFxbslBGSk41npWil6yh6+P/sDOovBw+Qo8Ww0SKJ2QE14RAUd8Buy3MqjEfqK
PPGjg4G7EotPCpDSbYG4l69CWxOASThSjRP12Ta2DZHImb57iGwJ2zYr4kKEf7/r
lm0lAnvLLzdrTy75RejgwrqK13FUkMPqPH++WQz2BlPC7PpMy0dHh3g0b/fpgqOo
H5e98x6pjkxK8tTOYnEi6gLvRXd/baZl3c9JdLHLe+cXi25Nt7fhkC3OSLn91ism
bbBy5nck+htLF9HFBVB+nxh8GyfJeQZr88aApK+Y8JikkMo4GiQwKST4rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAoYkgdfeWI2CafkLQgAUr6RWzW0MB8GA1UdIwQY
MBaAFJIuMwtYeVkKuugb9AqRpRAbwY+gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2k0ekMxaDVXUXE2NkJ2MENwR2xFQnZCajZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9mMTgwZmYtMzM2Yy00YjQ1LTkzNzgt
NTY4NjcyYzI1Y2E4LzEva2k0ekMxaDVXUXE2NkJ2MENwR2xFQnZCajZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9mMTgwZmYtMzM2Yy00YjQ1LTkzNzgtNTY4NjcyYzI1Y2E4
LzEva2k0ekMxaDVXUXE2NkJ2MENwR2xFQnZCajZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf6sqiKwH
06mBDdVyojentq+SBs53oM68Egf4rqw4vhyNDWVAGSt8WuXnMf2CXfQ0G6qkaL5C
N7vrUHMeAzcyBat+POMOwluCnJK9bdm/BpDoZe+2INEew+QrjpIncrJYw07cuK+i
L0hYTTjXlpFaLV72R9skuuheP7y4QrmX8rl6dlY9b8MuGvmOouSng4jA7b82GShV
dgp0flisIlaT1C/dIcnKzo/IaVXxNoZLVj9R609pvVJ4D3ztwpSa/xm4Rlp7V0s9
Jp7CHCSRSJUuBGNNgiqAeWAIHqLARiXP9m6RCDgLFMxtrNcZxLu8FrHyjeGALjHN
qISLGkbiC11Qpg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:13:23 2026 by rpki-client