Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft
File: MBlcO7BQWGtfTlAEEYAHxIs06uU.mft (raw, json)
Hash identifier: sPXFdecneB2HCiBVldhpIzltkzdmmo1absByeostX5Y=
Subject key identifier: C2:37:34:B9:E5:DF:0A:03:57:D6:A8:C2:D6:AE:33:F8:03:EE:BA:AD
Authority key identifier: 30:19:5C:3B:B0:50:58:6B:5F:4E:50:04:11:80:07:C4:8B:34:EA:E5
Certificate issuer: /CN=30195c3bb050586b5f4e5004118007c48b34eae5
Certificate serial: 019CEB261973740B39E7FD2C752709430EF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBlcO7BQWGtfTlAEEYAHxIs06uU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft
Manifest number: 1867
Signing time: Sat 14 Mar 2026 07:01:08 +0000
Manifest this update: Sat 14 Mar 2026 07:01:08 +0000
Manifest next update: Sun 15 Mar 2026 07:01:08 +0000
Files and hashes: 1: MBlcO7BQWGtfTlAEEYAHxIs06uU.crl (hash: dPMehCYxbJReRjq4Toef3DiVQrfSNjkpRlO5OXYJXc8=)
2: qeezGpylFYQWdw5Zzwgz6qTCezQ.roa (hash: 81jQgwS6nCCkT6pNsFrxENxQzb13LmVBgngNENTsUtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MBlcO7BQWGtfTlAEEYAHxIs06uU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:eb:26:19:73:74:0b:39:e7:fd:2c:75:27:09:43:0e:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30195c3bb050586b5f4e5004118007c48b34eae5
Validity
Not Before: Mar 14 07:01:08 2026 GMT
Not After : Mar 15 07:01:08 2026 GMT
Subject: CN=c23734b9e5df0a0357d6a8c2d6ae33f803eebaad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:92:3d:b9:aa:31:8c:e3:27:7f:e5:13:89:39:
fd:c0:92:89:ca:07:0f:0c:18:1b:43:16:7d:fb:db:
41:4d:ea:b6:61:69:64:ff:6b:e2:db:de:88:26:1e:
47:14:88:a0:f5:5a:83:15:c2:bf:3c:1e:22:13:64:
4e:8e:e0:60:5f:27:b2:e3:ca:e2:32:a1:a5:81:d8:
f0:b5:a6:96:d0:4d:d0:bc:2a:05:85:8e:10:18:60:
96:a7:c6:df:0a:a2:7e:8f:cd:9b:08:1d:1c:8e:7f:
04:27:73:43:fa:6f:8b:9a:37:83:4c:94:16:6c:cc:
f6:80:8d:c1:25:7a:40:83:78:ab:c2:e2:c3:b5:4e:
e3:11:75:e5:8c:d4:41:53:c7:41:b9:19:c6:11:4c:
05:29:8f:95:24:8f:81:de:6c:31:1e:75:c5:77:95:
7a:91:aa:83:10:83:1f:d0:2a:3a:70:9d:56:8d:45:
02:b1:72:bb:7a:b5:06:92:34:c7:9f:07:da:88:55:
91:ac:59:fa:72:19:44:64:33:67:db:34:55:07:99:
9b:fb:81:42:8a:06:b3:aa:a2:c4:3c:a4:6d:88:3d:
b8:ff:16:17:6e:21:50:b5:b1:2c:6e:ab:1b:46:9f:
7a:65:21:98:3d:7e:37:0c:7b:a4:5b:65:52:39:f4:
a9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:37:34:B9:E5:DF:0A:03:57:D6:A8:C2:D6:AE:33:F8:03:EE:BA:AD
X509v3 Authority Key Identifier:
keyid:30:19:5C:3B:B0:50:58:6B:5F:4E:50:04:11:80:07:C4:8B:34:EA:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBlcO7BQWGtfTlAEEYAHxIs06uU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/c76275-d8da-4523-83ad-b421c38b2f7f/1/MBlcO7BQWGtfTlAEEYAHxIs06uU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:51:a8:01:22:67:1e:08:21:f2:77:8d:2a:59:11:f8:55:6e:
de:0f:1b:fc:52:28:ca:22:50:f6:ce:0a:de:79:b1:4e:a8:f7:
d1:82:66:e3:39:c3:70:64:4f:42:c8:c8:bc:dd:2a:3b:c2:19:
b3:99:d2:22:ae:80:d8:9f:d2:b1:2e:34:2d:03:a5:2e:f7:13:
da:64:d9:a0:bd:a1:e4:1a:c0:be:ea:78:71:fe:74:98:7c:c0:
01:68:f7:31:51:44:ca:96:5f:b0:9b:fd:94:07:cf:04:90:f3:
60:26:09:52:c8:24:e8:86:d6:6e:9d:50:72:0c:0f:90:d7:e5:
de:ad:82:3a:30:aa:15:3d:8e:d2:fa:3e:32:70:05:29:0a:b4:
91:87:e2:11:5a:ce:91:6b:83:78:43:03:93:1d:30:6a:12:80:
4b:10:ea:63:f8:38:b8:91:87:d6:29:14:fe:51:e3:ef:13:4d:
50:99:a1:f1:9f:4a:73:c9:30:34:d3:98:eb:8d:03:b7:5e:43:
e3:3b:bb:ea:31:71:db:bf:18:cf:0f:4f:a1:f1:15:f6:e2:ce:
59:03:ec:ee:6a:19:3f:9c:9b:55:63:87:7d:5b:3b:a1:81:90:
85:84:34:9a:ff:c7:06:52:4d:be:48:db:c9:f3:87:fd:fd:e8:
cc:10:a2:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzrJhlzdAs55/0sdScJQw71MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwMTk1YzNiYjA1MDU4NmI1ZjRlNTAwNDExODAwN2M0OGIz
NGVhZTUwHhcNMjYwMzE0MDcwMTA4WhcNMjYwMzE1MDcwMTA4WjAzMTEwLwYDVQQD
EyhjMjM3MzRiOWU1ZGYwYTAzNTdkNmE4YzJkNmFlMzNmODAzZWViYWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZI9uaoxjOMnf+UTiTn9wJKJygcP
DBgbQxZ9+9tBTeq2YWlk/2vi296IJh5HFIig9VqDFcK/PB4iE2ROjuBgXyey48ri
MqGlgdjwtaaW0E3QvCoFhY4QGGCWp8bfCqJ+j82bCB0cjn8EJ3ND+m+LmjeDTJQW
bMz2gI3BJXpAg3irwuLDtU7jEXXljNRBU8dBuRnGEUwFKY+VJI+B3mwxHnXFd5V6
kaqDEIMf0Co6cJ1WjUUCsXK7erUGkjTHnwfaiFWRrFn6chlEZDNn2zRVB5mb+4FC
igazqqLEPKRtiD24/xYXbiFQtbEsbqsbRp96ZSGYPX43DHukW2VSOfSp4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMI3NLnl3woDV9aowtauM/gD7rqtMB8GA1UdIwQY
MBaAFDAZXDuwUFhrX05QBBGAB8SLNOrlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUJsY083QlFXR3RmVGxBRUVZQUh4SXMwNnVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9jNzYyNzUtZDhkYS00NTIzLTgzYWQt
YjQyMWMzOGIyZjdmLzEvTUJsY083QlFXR3RmVGxBRUVZQUh4SXMwNnVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9jNzYyNzUtZDhkYS00NTIzLTgzYWQtYjQyMWMzOGIyZjdm
LzEvTUJsY083QlFXR3RmVGxBRUVZQUh4SXMwNnVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYlGoASJn
Hggh8neNKlkR+FVu3g8b/FIoyiJQ9s4K3nmxTqj30YJm4znDcGRPQsjIvN0qO8IZ
s5nSIq6A2J/SsS40LQOlLvcT2mTZoL2h5BrAvup4cf50mHzAAWj3MVFEypZfsJv9
lAfPBJDzYCYJUsgk6IbWbp1QcgwPkNfl3q2COjCqFT2O0vo+MnAFKQq0kYfiEVrO
kWuDeEMDkx0wahKASxDqY/g4uJGH1ikU/lHj7xNNUJmh8Z9Kc8kwNNOY640Dt15D
4zu76jFx278Yzw9PofEV9uLOWQPs7moZP5ybVWOHfVs7oYGQhYQ0mv/HBlJNvkjb
yfOH/f3ozBCiUQ==
-----END CERTIFICATE-----
Generated at Sat Mar 14 10:29:23 2026 by rpki-client