Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.mft
File: alQ3DEupveK5g3a_j5QqlJJsFRk.mft (raw, json)
Hash identifier: dXeDVv2/drHo5GJgXQEWmrdJwZsebtQ0cbbJC+sRydI=
Subject key identifier: 2F:D0:2B:04:DD:8E:6E:96:12:11:84:31:E4:5D:B7:20:0E:D4:8D:2F
Authority key identifier: 6A:54:37:0C:4B:A9:BD:E2:B9:83:76:BF:8F:94:2A:94:92:6C:15:19
Certificate issuer: /CN=6a54370c4ba9bde2b98376bf8f942a94926c1519
Certificate serial: 019D38D377AB93E1FC4AA23807A756552901
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alQ3DEupveK5g3a_j5QqlJJsFRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.mft
Manifest number: 0583
Signing time: Sun 29 Mar 2026 09:01:15 +0000
Manifest this update: Sun 29 Mar 2026 09:01:15 +0000
Manifest next update: Mon 30 Mar 2026 09:01:15 +0000
Files and hashes: 1: alQ3DEupveK5g3a_j5QqlJJsFRk.crl (hash: kZIYaLRNzY4k3zenYA+aNOenIGRHgXCgwMjJCeQVaMQ=)
2: qW9AF__zUvkNDM1hwnTXNbw4MmE.roa (hash: L8YbidEFG/0Uh1hABI0PUB51vRjUgh6q12O5a/Ue0jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/alQ3DEupveK5g3a_j5QqlJJsFRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:77:ab:93:e1:fc:4a:a2:38:07:a7:56:55:29:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a54370c4ba9bde2b98376bf8f942a94926c1519
Validity
Not Before: Mar 29 09:01:15 2026 GMT
Not After : Mar 30 09:01:15 2026 GMT
Subject: CN=2fd02b04dd8e6e9612118431e45db7200ed48d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:95:d6:7a:8f:41:3b:0d:9d:9b:b8:2b:31:74:
5c:1c:5b:ed:6d:3d:59:80:df:dd:69:20:58:29:de:
d1:91:5b:70:b3:0d:62:ad:f3:34:18:8e:52:61:3c:
61:e8:36:ec:bb:6f:68:a8:de:a4:00:2e:04:b9:30:
2f:80:71:24:f4:ba:4a:5d:6a:e7:81:f7:75:bb:ae:
8c:2b:e6:4c:42:11:3a:c4:ac:d9:fa:8c:38:92:c0:
fa:32:a4:c2:1d:59:cc:cd:31:8b:79:52:43:5e:26:
49:e3:ba:51:12:78:b4:2c:25:c8:07:8a:db:f4:7a:
78:90:17:09:5c:88:20:d4:e7:e4:93:81:7d:75:c3:
d1:a7:ab:22:1f:ee:48:fd:ee:ac:41:97:d0:84:a6:
44:55:17:fb:d5:ae:6e:54:f4:54:e0:9c:a5:56:6b:
ae:26:bc:ba:32:c2:85:80:2f:ad:3d:c8:97:cd:21:
84:ee:c8:9a:cb:0b:e0:8c:52:9a:4d:b2:10:32:72:
0f:8f:c1:9e:64:5b:a7:9f:27:8b:af:c1:50:d2:4e:
0a:c3:72:04:da:ea:bb:b6:52:fb:13:09:64:e5:70:
fb:08:f5:7e:f5:90:60:c6:be:25:8f:fa:c9:e8:a9:
9a:59:54:d3:21:47:6f:cf:6f:cf:11:53:4c:98:9a:
38:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:D0:2B:04:DD:8E:6E:96:12:11:84:31:E4:5D:B7:20:0E:D4:8D:2F
X509v3 Authority Key Identifier:
keyid:6A:54:37:0C:4B:A9:BD:E2:B9:83:76:BF:8F:94:2A:94:92:6C:15:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alQ3DEupveK5g3a_j5QqlJJsFRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:8e:9b:8d:5a:f0:5a:e9:2b:b1:ba:2d:20:d0:cc:73:9f:4a:
85:bf:68:66:33:b6:0b:06:9b:04:a7:e4:50:45:31:fd:0e:1f:
a5:4d:35:bc:ac:9c:c5:58:00:ae:a1:63:76:d0:4a:ad:75:24:
d8:a1:d9:1c:d4:5a:49:3c:bf:cd:2c:79:57:49:f7:66:4c:28:
e7:15:dd:dd:6d:a6:aa:05:6a:09:8e:f9:d9:00:76:e0:b6:fb:
7e:a5:83:84:d8:54:27:8c:2a:bf:0a:80:21:eb:5c:e3:a3:2e:
a4:9a:55:14:ef:70:d2:70:7a:c0:42:50:a8:0a:d2:6f:9a:ba:
21:1c:46:d0:35:ea:b9:ee:d2:a3:9f:2d:36:1f:b0:4e:54:27:
69:53:9e:26:df:1c:23:84:45:0b:8b:db:1c:0d:16:45:2b:f4:
9e:31:db:2b:8a:07:b4:46:cd:a8:21:cc:f5:43:0a:76:10:7b:
53:71:47:1c:8f:65:a1:55:ea:90:b5:5c:a5:48:b1:cd:b8:10:
c4:7b:5b:f6:0b:d3:24:d2:4f:ba:6e:f4:3c:19:ea:19:47:af:
c1:d2:c9:39:b5:96:6e:ef:ef:1b:5a:bb:78:28:3e:44:7d:f8:
5c:11:67:8e:1c:2f:e1:3a:27:7d:b0:33:19:51:12:5a:bd:5b:
bf:d2:b5:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0403erk+H8SqI4B6dWVSkBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhNTQzNzBjNGJhOWJkZTJiOTgzNzZiZjhmOTQyYTk0OTI2
YzE1MTkwHhcNMjYwMzI5MDkwMTE1WhcNMjYwMzMwMDkwMTE1WjAzMTEwLwYDVQQD
EygyZmQwMmIwNGRkOGU2ZTk2MTIxMTg0MzFlNDVkYjcyMDBlZDQ4ZDJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5XWeo9BOw2dm7grMXRcHFvtbT1Z
gN/daSBYKd7RkVtwsw1irfM0GI5SYTxh6Dbsu29oqN6kAC4EuTAvgHEk9LpKXWrn
gfd1u66MK+ZMQhE6xKzZ+ow4ksD6MqTCHVnMzTGLeVJDXiZJ47pREni0LCXIB4rb
9Hp4kBcJXIgg1Ofkk4F9dcPRp6siH+5I/e6sQZfQhKZEVRf71a5uVPRU4JylVmuu
Jry6MsKFgC+tPciXzSGE7siaywvgjFKaTbIQMnIPj8GeZFunnyeLr8FQ0k4Kw3IE
2uq7tlL7Ewlk5XD7CPV+9ZBgxr4lj/rJ6KmaWVTTIUdvz2/PEVNMmJo4zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC/QKwTdjm6WEhGEMeRdtyAO1I0vMB8GA1UdIwQY
MBaAFGpUNwxLqb3iuYN2v4+UKpSSbBUZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWxRM0RFdXB2ZUs1ZzNhX2o1UXFsSkpzRlJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My82NzYwM2EtZjUyOS00YjE4LTk5ZmIt
NTAzYjk5ZDVhZDY4LzEvYWxRM0RFdXB2ZUs1ZzNhX2o1UXFsSkpzRlJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My82NzYwM2EtZjUyOS00YjE4LTk5ZmItNTAzYjk5ZDVhZDY4
LzEvYWxRM0RFdXB2ZUs1ZzNhX2o1UXFsSkpzRlJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAko6bjVrw
WukrsbotINDMc59Khb9oZjO2CwabBKfkUEUx/Q4fpU01vKycxVgArqFjdtBKrXUk
2KHZHNRaSTy/zSx5V0n3Zkwo5xXd3W2mqgVqCY752QB24Lb7fqWDhNhUJ4wqvwqA
Ietc46MupJpVFO9w0nB6wEJQqArSb5q6IRxG0DXque7So58tNh+wTlQnaVOeJt8c
I4RFC4vbHA0WRSv0njHbK4oHtEbNqCHM9UMKdhB7U3FHHI9loVXqkLVcpUixzbgQ
xHtb9gvTJNJPum70PBnqGUevwdLJObWWbu/vG1q7eCg+RH34XBFnjhwv4TonfbAz
GVESWr1bv9K15A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:57:06 2026 by rpki-client