Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft
File: rRfnAW-VOg5izKRWb_nRBSww8lo.mft (raw, json)
Hash identifier: Dos1TQ4e+U7cCx+U9SGBVr21YRWU7DDZcKWmL/glDEY=
Subject key identifier: 81:07:DB:D5:B2:52:1E:79:48:FF:35:36:5A:07:C2:12:5E:05:6F:F1
Authority key identifier: AD:17:E7:01:6F:95:3A:0E:62:CC:A4:56:6F:F9:D1:05:2C:30:F2:5A
Certificate issuer: /CN=ad17e7016f953a0e62cca4566ff9d1052c30f25a
Certificate serial: 019CC6ABC7B4D892CA2635871DE07BDD9867
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRfnAW-VOg5izKRWb_nRBSww8lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft
Manifest number: 078A
Signing time: Sat 07 Mar 2026 05:01:12 +0000
Manifest this update: Sat 07 Mar 2026 05:01:12 +0000
Manifest next update: Sun 08 Mar 2026 05:01:12 +0000
Files and hashes: 1: 69yOYQhcSzVteXbmSSuXjdooyOA.roa (hash: 2ZA47QSgmHPBZuYu1sYyxVw+wEl4vjMSOZuQJyxjjcA=)
2: DaNzl7w617W61WMkK2mhl8jN5wU.roa (hash: KfPIGqY3EVhRc2Ytnf57ChmISLtMr8fTABQiZHidkaM=)
3: rRfnAW-VOg5izKRWb_nRBSww8lo.crl (hash: GYy1lMg6dzVaOxCxKb2T33IZcrq7BdRd68XC3F0yUB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rRfnAW-VOg5izKRWb_nRBSww8lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c6:ab:c7:b4:d8:92:ca:26:35:87:1d:e0:7b:dd:98:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad17e7016f953a0e62cca4566ff9d1052c30f25a
Validity
Not Before: Mar 7 05:01:12 2026 GMT
Not After : Mar 8 05:01:12 2026 GMT
Subject: CN=8107dbd5b2521e7948ff35365a07c2125e056ff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f1:e7:5a:63:26:97:cd:40:67:ee:8e:2c:37:
72:9f:bb:6b:c7:6c:52:70:c2:4d:18:a1:02:f1:b5:
9b:67:5a:71:1e:da:ef:11:2b:79:3a:47:ac:8a:48:
49:e4:e2:1a:e8:da:db:14:58:9c:ca:e5:bd:b9:04:
c8:06:82:9e:fe:1b:04:09:01:a0:ad:04:d1:d5:50:
5c:fb:88:94:27:44:1d:4b:5c:86:9d:07:6a:d6:38:
11:9e:a8:c8:e1:20:33:07:2e:f2:6f:32:e4:a8:4f:
3b:14:b2:c6:45:5d:91:9a:cf:62:4a:b4:73:52:31:
22:a0:a2:2d:e6:83:42:05:4d:c6:05:fb:1b:62:fa:
3e:9b:8f:a0:5f:3b:37:bb:9b:72:c8:40:60:62:43:
e6:2d:76:af:e5:4d:c6:5d:ff:1e:f8:5a:24:77:b4:
91:a8:a8:d2:af:dc:8a:c0:43:49:77:3a:c6:d1:9c:
3c:58:2e:2e:ff:8b:3a:de:83:20:a8:38:0a:27:f8:
86:96:a6:87:51:ed:87:e2:57:67:14:b0:d8:0d:4c:
9a:f1:73:0e:b5:ae:61:7b:66:ec:47:de:a8:05:f5:
f6:13:5f:7f:16:1e:fc:94:f4:3c:15:b1:88:78:e5:
7c:5d:49:de:b3:fc:07:b9:1d:12:23:7f:70:e6:9d:
3e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:07:DB:D5:B2:52:1E:79:48:FF:35:36:5A:07:C2:12:5E:05:6F:F1
X509v3 Authority Key Identifier:
keyid:AD:17:E7:01:6F:95:3A:0E:62:CC:A4:56:6F:F9:D1:05:2C:30:F2:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRfnAW-VOg5izKRWb_nRBSww8lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:a7:13:97:fd:7f:b0:08:77:5a:54:b2:e1:bd:3a:5e:4f:5b:
fd:07:60:2e:35:ee:26:ee:ed:e7:b5:3e:e6:c3:4a:3e:bb:5b:
1f:24:3f:2e:92:35:5d:02:ae:ed:4f:be:fa:43:88:11:46:b1:
14:3c:33:c0:12:25:fd:26:a8:d7:7c:5b:f4:31:58:a2:07:6c:
75:35:f9:7c:55:8b:48:db:77:b8:85:25:36:27:4a:b7:7c:e8:
33:a1:78:10:72:8c:9c:18:28:ed:71:7d:34:8f:15:0d:68:76:
b1:cd:f4:1e:59:1d:25:b7:54:7a:a8:a7:78:6c:97:40:3e:b1:
7e:f2:67:7a:91:90:41:a9:40:d2:8d:56:89:66:5f:c0:ee:ba:
a5:d0:71:f6:94:b0:4e:eb:27:a9:48:47:58:2a:fa:c0:ff:bc:
4c:f8:f3:35:1d:22:3f:63:df:94:96:01:9f:82:cc:09:cd:3c:
20:d6:e8:8c:47:bd:bc:6a:31:ed:2a:12:16:05:36:65:fc:dd:
81:92:f6:57:4f:03:1f:7e:c6:03:95:b2:59:9e:c7:30:e6:8e:
70:b6:f6:e2:5a:5f:be:ae:c4:c3:53:36:40:7a:6c:06:ce:01:
56:59:f8:f7:a4:81:ae:71:64:69:3c:de:7a:ec:3f:68:18:2c:
82:de:70:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzGq8e02JLKJjWHHeB73ZhnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMTdlNzAxNmY5NTNhMGU2MmNjYTQ1NjZmZjlkMTA1MmMz
MGYyNWEwHhcNMjYwMzA3MDUwMTEyWhcNMjYwMzA4MDUwMTEyWjAzMTEwLwYDVQQD
Eyg4MTA3ZGJkNWIyNTIxZTc5NDhmZjM1MzY1YTA3YzIxMjVlMDU2ZmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfHnWmMml81AZ+6OLDdyn7trx2xS
cMJNGKEC8bWbZ1pxHtrvESt5OkesikhJ5OIa6NrbFFicyuW9uQTIBoKe/hsECQGg
rQTR1VBc+4iUJ0QdS1yGnQdq1jgRnqjI4SAzBy7ybzLkqE87FLLGRV2Rms9iSrRz
UjEioKIt5oNCBU3GBfsbYvo+m4+gXzs3u5tyyEBgYkPmLXav5U3GXf8e+Fokd7SR
qKjSr9yKwENJdzrG0Zw8WC4u/4s63oMgqDgKJ/iGlqaHUe2H4ldnFLDYDUya8XMO
ta5he2bsR96oBfX2E19/Fh78lPQ8FbGIeOV8XUnes/wHuR0SI39w5p0+lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIEH29WyUh55SP81NloHwhJeBW/xMB8GA1UdIwQY
MBaAFK0X5wFvlToOYsykVm/50QUsMPJaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclJmbkFXLVZPZzVpektSV2JfblJCU3d3OGxvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My84M2M4ODEtYmVmNy00Zjc5LTkwYmEt
NTU5MDc2OGRlMmNmLzEvclJmbkFXLVZPZzVpektSV2JfblJCU3d3OGxvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My84M2M4ODEtYmVmNy00Zjc5LTkwYmEtNTU5MDc2OGRlMmNm
LzEvclJmbkFXLVZPZzVpektSV2JfblJCU3d3OGxvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkacTl/1/
sAh3WlSy4b06Xk9b/QdgLjXuJu7t57U+5sNKPrtbHyQ/LpI1XQKu7U+++kOIEUax
FDwzwBIl/Sao13xb9DFYogdsdTX5fFWLSNt3uIUlNidKt3zoM6F4EHKMnBgo7XF9
NI8VDWh2sc30HlkdJbdUeqineGyXQD6xfvJnepGQQalA0o1WiWZfwO66pdBx9pSw
TusnqUhHWCr6wP+8TPjzNR0iP2PflJYBn4LMCc08INbojEe9vGox7SoSFgU2Zfzd
gZL2V08DH37GA5WyWZ7HMOaOcLb24lpfvq7Ew1M2QHpsBs4BVln496SBrnFkaTze
euw/aBgsgt5wNg==
-----END CERTIFICATE-----
Generated at Sat Mar 7 12:44:08 2026 by rpki-client