Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.mft
File: _Z99xQlavbRF0YmFfTEBqK7info.mft (raw, json)
Hash identifier: 43RbUPr0WzQv8bQ0mpQI4U3Fl5GXK2gmi1mX9rDSimY=
Subject key identifier: 10:F4:84:D3:76:06:1C:38:14:A5:5C:2D:51:FA:95:A6:14:DF:D2:23
Authority key identifier: FD:9F:7D:C5:09:5A:BD:B4:45:D1:89:85:7D:31:01:A8:AE:E2:9D:FA
Certificate issuer: /CN=fd9f7dc5095abdb445d189857d3101a8aee29dfa
Certificate serial: 019D37524F969A365DBD635AAC62C5A80DB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Z99xQlavbRF0YmFfTEBqK7info.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 02:00:34 +0000
Manifest this update: Sun 29 Mar 2026 02:00:34 +0000
Manifest next update: Mon 30 Mar 2026 02:00:34 +0000
Files and hashes: 1: 1CsIbYboFfXpu9s0vWDMRaV6Mz8.roa (hash: aw9rHGkSfZiIUgRqcbBY40U13wLpn52XPqFkofANffo=)
2: _Z99xQlavbRF0YmFfTEBqK7info.crl (hash: njUBTj5bUUHDaXqMJC4gEtdtmWvNE4G+MfwecE4fe4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Z99xQlavbRF0YmFfTEBqK7info.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:4f:96:9a:36:5d:bd:63:5a:ac:62:c5:a8:0d:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd9f7dc5095abdb445d189857d3101a8aee29dfa
Validity
Not Before: Mar 29 02:00:34 2026 GMT
Not After : Mar 30 02:00:34 2026 GMT
Subject: CN=10f484d376061c3814a55c2d51fa95a614dfd223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ab:ea:37:c6:48:a7:8b:18:11:72:6b:8f:b5:
3e:6d:37:cf:6a:22:a9:f4:7f:08:b4:96:b8:fe:ea:
c4:cb:6d:df:20:14:9e:f5:80:fe:22:38:aa:a2:5c:
19:95:04:ac:2c:93:57:d3:84:60:25:89:59:3a:eb:
c1:a7:3e:9e:f0:b8:7a:ce:37:75:35:89:da:1c:e9:
f7:96:d9:d2:96:8e:cd:cf:6d:d8:8b:bb:e9:ef:fb:
63:4f:8c:9b:af:09:d0:aa:af:d1:c3:9a:50:1d:b2:
f5:ef:e6:e1:f6:a3:ca:4c:43:aa:c8:af:0a:fc:b7:
b2:fb:bf:16:b3:bb:96:42:96:bd:a8:c0:b1:62:f6:
1f:00:84:e8:f4:c1:56:cc:7a:33:19:57:26:25:2a:
85:53:6b:75:de:9a:bd:fe:5a:e2:e5:63:c0:c7:d5:
13:85:00:85:4e:76:04:81:f9:c3:3e:b7:aa:13:67:
d7:cd:6a:49:1e:4a:8f:ca:01:aa:9e:ec:16:75:b5:
27:46:37:bb:e1:e7:4c:90:37:58:cc:53:e5:69:8f:
fb:dc:7d:8f:fd:f0:10:0e:c9:f4:4e:6c:e3:61:a6:
2d:31:d9:1e:52:53:11:41:ec:56:7a:22:50:12:be:
0a:23:2f:de:b7:d6:5a:7e:25:46:ea:0c:a4:3d:18:
73:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F4:84:D3:76:06:1C:38:14:A5:5C:2D:51:FA:95:A6:14:DF:D2:23
X509v3 Authority Key Identifier:
keyid:FD:9F:7D:C5:09:5A:BD:B4:45:D1:89:85:7D:31:01:A8:AE:E2:9D:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Z99xQlavbRF0YmFfTEBqK7info.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/5b60e5-8237-4628-946b-2229cd83f3e5/1/_Z99xQlavbRF0YmFfTEBqK7info.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:40:77:34:ff:49:fa:54:3f:fa:93:5a:ac:b3:02:0c:4f:ec:
b9:c6:aa:6b:2c:25:13:b3:d4:7b:ca:02:25:f0:e5:7f:2e:88:
2b:34:ac:90:4a:55:e6:18:0d:ac:08:c4:46:8b:43:d1:f4:5f:
49:30:34:80:a7:f1:84:43:3d:d2:8c:25:07:e4:a0:7a:97:33:
41:6a:b1:2d:08:c1:35:42:e4:2b:7e:71:43:eb:33:3d:f6:34:
8f:1a:df:f8:65:62:3e:9f:0f:11:58:9e:01:64:38:89:7b:81:
82:26:14:5c:fe:5a:b1:f5:4b:5b:8c:78:67:f4:ea:a9:39:e3:
89:3e:a0:ae:3e:c8:55:bd:a7:a0:2a:55:89:6f:f5:36:15:61:
44:34:c3:3d:af:bd:a5:a9:d1:5a:16:40:33:44:83:c4:37:3c:
07:a0:bb:56:ec:14:c2:30:3d:cc:1e:39:d1:e1:76:73:38:bf:
e9:d0:6b:0f:bc:a5:12:b9:c8:a5:54:4d:1d:4e:5c:a7:d0:8f:
5e:b7:bf:e2:61:5e:02:32:ba:4a:fc:bb:cd:af:13:b1:3d:4b:
10:0c:b2:ad:fa:76:71:f8:73:93:1e:13:cf:8b:f6:1b:35:95:
8f:d0:7f:cf:9f:2f:ad:78:e1:6e:36:16:9a:8e:88:89:ad:4f:
c1:4b:7f:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03Uk+WmjZdvWNarGLFqA20MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkOWY3ZGM1MDk1YWJkYjQ0NWQxODk4NTdkMzEwMWE4YWVl
MjlkZmEwHhcNMjYwMzI5MDIwMDM0WhcNMjYwMzMwMDIwMDM0WjAzMTEwLwYDVQQD
EygxMGY0ODRkMzc2MDYxYzM4MTRhNTVjMmQ1MWZhOTVhNjE0ZGZkMjIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA46vqN8ZIp4sYEXJrj7U+bTfPaiKp
9H8ItJa4/urEy23fIBSe9YD+IjiqolwZlQSsLJNX04RgJYlZOuvBpz6e8Lh6zjd1
NYnaHOn3ltnSlo7Nz23Yi7vp7/tjT4ybrwnQqq/Rw5pQHbL17+bh9qPKTEOqyK8K
/Ley+78Ws7uWQpa9qMCxYvYfAITo9MFWzHozGVcmJSqFU2t13pq9/lri5WPAx9UT
hQCFTnYEgfnDPreqE2fXzWpJHkqPygGqnuwWdbUnRje74edMkDdYzFPlaY/73H2P
/fAQDsn0TmzjYaYtMdkeUlMRQexWeiJQEr4KIy/et9ZafiVG6gykPRhz3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBD0hNN2Bhw4FKVcLVH6laYU39IjMB8GA1UdIwQY
MBaAFP2ffcUJWr20RdGJhX0xAaiu4p36MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1o5OXhRbGF2YlJGMFltRmZURUJxSzdpbmZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC81YjYwZTUtODIzNy00NjI4LTk0NmIt
MjIyOWNkODNmM2U1LzEvX1o5OXhRbGF2YlJGMFltRmZURUJxSzdpbmZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC81YjYwZTUtODIzNy00NjI4LTk0NmItMjIyOWNkODNmM2U1
LzEvX1o5OXhRbGF2YlJGMFltRmZURUJxSzdpbmZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdUB3NP9J
+lQ/+pNarLMCDE/sucaqaywlE7PUe8oCJfDlfy6IKzSskEpV5hgNrAjERotD0fRf
STA0gKfxhEM90owlB+SgepczQWqxLQjBNULkK35xQ+szPfY0jxrf+GViPp8PEVie
AWQ4iXuBgiYUXP5asfVLW4x4Z/TqqTnjiT6grj7IVb2noCpViW/1NhVhRDTDPa+9
panRWhZAM0SDxDc8B6C7VuwUwjA9zB450eF2czi/6dBrD7ylErnIpVRNHU5cp9CP
Xre/4mFeAjK6Svy7za8TsT1LEAyyrfp2cfhzkx4Tz4v2GzWVj9B/z58vrXjhbjYW
mo6Iia1PwUt/Qw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:08 2026 by rpki-client