Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/rQ3BCLYPR7DZdygI5fzDgeqoHHg.mft
File: rQ3BCLYPR7DZdygI5fzDgeqoHHg.mft (raw, json)
Hash identifier: OE+sOqLhuWhf7YAmkAv2zdLgMIdKVFMWMvf1tAuYYSY=
Subject key identifier: 7E:D2:45:0F:8B:35:9E:0A:EF:E8:2C:D9:13:17:FB:70:FC:2E:FC:ED
Authority key identifier: AD:0D:C1:08:B6:0F:47:B0:D9:77:28:08:E5:FC:C3:81:EA:A8:1C:78
Certificate issuer: /CN=ad0dc108b60f47b0d9772808e5fcc381eaa81c78
Certificate serial: 019D382E039CEEDBAA59307D65AB3F8EDFD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ3BCLYPR7DZdygI5fzDgeqoHHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/rQ3BCLYPR7DZdygI5fzDgeqoHHg.mft
Manifest number: 0C9D
Signing time: Sun 29 Mar 2026 06:00:32 +0000
Manifest this update: Sun 29 Mar 2026 06:00:32 +0000
Manifest next update: Mon 30 Mar 2026 06:00:32 +0000
Files and hashes: 1: fIl8xxivGUZsaj8kaaW_71inehg.roa (hash: zYHkvAQ/ytlKOUn9y5s0CfOnBXPRV19zcGQTulQeAcg=)
2: rQ3BCLYPR7DZdygI5fzDgeqoHHg.crl (hash: dyt20leXsdH0265cHJVrvR2MZ0A3lOc1SbdjmAD2G5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/rQ3BCLYPR7DZdygI5fzDgeqoHHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/rQ3BCLYPR7DZdygI5fzDgeqoHHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rQ3BCLYPR7DZdygI5fzDgeqoHHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:03:9c:ee:db:aa:59:30:7d:65:ab:3f:8e:df:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0dc108b60f47b0d9772808e5fcc381eaa81c78
Validity
Not Before: Mar 29 06:00:32 2026 GMT
Not After : Mar 30 06:00:32 2026 GMT
Subject: CN=7ed2450f8b359e0aefe82cd91317fb70fc2efced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:75:fb:c0:56:f7:15:41:97:d7:ac:ba:c0:40:
f5:26:65:da:12:4b:74:1a:b9:a1:0b:6d:ce:c8:d7:
be:8e:4f:6a:5c:6c:f9:38:ff:c1:bc:9f:e6:3a:8b:
20:f0:da:c0:4e:52:5f:04:59:a5:c4:4d:63:1e:d5:
f3:24:b4:c6:ed:85:f2:cb:6c:ad:aa:16:06:3a:20:
27:a0:e0:0f:cf:71:28:39:58:ea:fd:53:ad:97:0a:
80:b4:44:1e:4e:b0:0f:6e:11:0b:d1:3f:ff:45:d2:
ee:4b:ca:ac:39:03:b7:bb:35:e8:c8:49:f5:de:df:
33:e4:9a:00:91:b2:3f:91:23:ad:8a:36:62:81:1b:
b7:cd:2f:fa:8c:bb:86:fe:66:f8:d5:6a:eb:71:13:
81:64:b3:c7:84:5d:81:c6:9a:8a:88:3d:10:52:5a:
3a:46:0a:79:97:b0:f4:5d:b6:6e:e1:51:df:84:48:
64:a0:c2:d9:a6:1d:94:4e:5f:46:55:a8:be:46:52:
55:82:f3:58:0c:2a:90:a3:08:2f:0d:9f:12:f3:90:
1e:23:bb:c2:dc:2c:fa:30:12:52:ec:48:bc:7f:50:
6f:f4:b1:30:c4:a3:c6:ba:33:21:11:6f:23:7b:e9:
19:74:a2:94:b3:83:4b:c2:c3:1a:e3:0e:e1:77:92:
eb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:D2:45:0F:8B:35:9E:0A:EF:E8:2C:D9:13:17:FB:70:FC:2E:FC:ED
X509v3 Authority Key Identifier:
keyid:AD:0D:C1:08:B6:0F:47:B0:D9:77:28:08:E5:FC:C3:81:EA:A8:1C:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ3BCLYPR7DZdygI5fzDgeqoHHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/rQ3BCLYPR7DZdygI5fzDgeqoHHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/rQ3BCLYPR7DZdygI5fzDgeqoHHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:b0:fc:0d:14:a0:28:c5:b8:0f:14:e0:d7:44:d9:1c:a3:38:
6c:e8:fc:db:7a:7f:fc:e5:3b:86:b1:c6:1c:d2:91:85:25:72:
73:cd:a9:bf:9f:14:a7:4a:c9:a0:be:f3:5a:fb:37:e0:8e:5b:
8b:ee:82:6c:e9:87:d7:73:b7:58:5a:78:77:0c:7d:f8:18:3c:
ec:54:42:39:56:b5:d7:29:b4:58:6a:30:41:9f:53:31:7b:f9:
a3:a5:34:2a:aa:7f:b7:da:1e:2c:73:1e:66:66:5b:90:b4:4b:
e9:3f:a4:cd:49:11:80:bd:3a:ef:09:89:cb:0b:ae:5c:fd:82:
f0:8a:4b:77:d1:10:f8:5e:75:ef:70:9e:ca:cf:d3:ad:72:54:
40:c0:85:75:66:c3:6d:d6:f6:31:5b:d2:80:1e:90:10:a0:a7:
ea:e2:7d:02:a5:46:bb:be:7a:f2:30:1b:4e:0b:cf:8e:60:d0:
24:cd:c7:d2:5f:ab:8d:9b:06:b8:62:b5:d6:2b:f2:2f:96:ff:
02:5e:1a:a2:7f:08:f3:05:78:8a:83:07:1b:0a:9d:d9:ae:a2:
39:8c:5f:2a:12:b3:c7:74:fb:94:86:9f:08:38:40:f4:2a:fc:
5e:1f:ef:46:ce:d1:c1:89:31:e1:ad:9c:62:36:dc:3d:c6:50:
d6:a3:fa:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LgOc7tuqWTB9Zas/jt/RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMGRjMTA4YjYwZjQ3YjBkOTc3MjgwOGU1ZmNjMzgxZWFh
ODFjNzgwHhcNMjYwMzI5MDYwMDMyWhcNMjYwMzMwMDYwMDMyWjAzMTEwLwYDVQQD
Eyg3ZWQyNDUwZjhiMzU5ZTBhZWZlODJjZDkxMzE3ZmI3MGZjMmVmY2VkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5HX7wFb3FUGX16y6wED1JmXaEkt0
GrmhC23OyNe+jk9qXGz5OP/BvJ/mOosg8NrATlJfBFmlxE1jHtXzJLTG7YXyy2yt
qhYGOiAnoOAPz3EoOVjq/VOtlwqAtEQeTrAPbhEL0T//RdLuS8qsOQO3uzXoyEn1
3t8z5JoAkbI/kSOtijZigRu3zS/6jLuG/mb41WrrcROBZLPHhF2BxpqKiD0QUlo6
Rgp5l7D0XbZu4VHfhEhkoMLZph2UTl9GVai+RlJVgvNYDCqQowgvDZ8S85AeI7vC
3Cz6MBJS7Ei8f1Bv9LEwxKPGujMhEW8je+kZdKKUs4NLwsMa4w7hd5Lr2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH7SRQ+LNZ4K7+gs2RMX+3D8LvztMB8GA1UdIwQY
MBaAFK0NwQi2D0ew2XcoCOX8w4HqqBx4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclEzQkNMWVBSN0RaZHlnSTVmekRnZXFvSEhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8wYjU4NjAtY2Q1Ny00MTgzLWI5YWUt
ZTg0Nzg1ODk0ODM4LzEvclEzQkNMWVBSN0RaZHlnSTVmekRnZXFvSEhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8wYjU4NjAtY2Q1Ny00MTgzLWI5YWUtZTg0Nzg1ODk0ODM4
LzEvclEzQkNMWVBSN0RaZHlnSTVmekRnZXFvSEhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK7D8DRSg
KMW4DxTg10TZHKM4bOj823p//OU7hrHGHNKRhSVyc82pv58Up0rJoL7zWvs34I5b
i+6CbOmH13O3WFp4dwx9+Bg87FRCOVa11ym0WGowQZ9TMXv5o6U0Kqp/t9oeLHMe
ZmZbkLRL6T+kzUkRgL067wmJywuuXP2C8IpLd9EQ+F5173Ceys/TrXJUQMCFdWbD
bdb2MVvSgB6QEKCn6uJ9AqVGu7568jAbTgvPjmDQJM3H0l+rjZsGuGK11ivyL5b/
Al4aon8I8wV4ioMHGwqd2a6iOYxfKhKzx3T7lIafCDhA9Cr8Xh/vRs7RwYkx4a2c
YjbcPcZQ1qP60Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:36 2026 by rpki-client