Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.mft
File: mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.mft (raw, json)
Hash identifier: LchOYFDEsoTgbNr7IVrH0T7CX0Opq2TVir5doxa8/IU=
Subject key identifier: 3D:3A:DC:25:8E:92:16:D6:8A:45:6C:53:53:E1:58:A3:62:72:5C:F2
Authority key identifier: 98:5B:50:A1:0D:2D:58:C6:75:03:EA:AA:70:1E:51:09:15:DD:51:92
Certificate issuer: /CN=985b50a10d2d58c67503eaaa701e510915dd5192
Certificate serial: 019D3A1CD3BBFB7D31F8C7DA81A82BF829EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.mft
Manifest number: 07EC
Signing time: Sun 29 Mar 2026 15:01:00 +0000
Manifest this update: Sun 29 Mar 2026 15:01:00 +0000
Manifest next update: Mon 30 Mar 2026 15:01:00 +0000
Files and hashes: 1: mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.crl (hash: t0KJEp4hgXfUb1AhXdb0NQ+snjhN+Cu5ReYcZxtpBao=)
2: qOMNY6hVgy-QhQyOIQ4S2QZXLHI.roa (hash: sAeYUG9d4ti78IMqnSOELZESU1YQF01cfT/pGko2jnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:d3:bb:fb:7d:31:f8:c7:da:81:a8:2b:f8:29:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=985b50a10d2d58c67503eaaa701e510915dd5192
Validity
Not Before: Mar 29 15:01:00 2026 GMT
Not After : Mar 30 15:01:00 2026 GMT
Subject: CN=3d3adc258e9216d68a456c5353e158a362725cf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3f:73:7a:c4:c5:b1:1f:48:51:fe:0a:92:e7:
dd:8e:6c:48:d1:62:36:c4:af:49:82:53:e8:40:47:
96:8b:31:3b:d3:45:9f:44:8f:4f:f3:26:1f:ad:ad:
a9:56:5e:6b:f4:6b:1d:f1:a2:ae:8f:9b:1c:96:98:
f2:a9:cf:7e:53:32:da:e9:fe:43:9d:9f:4d:c4:28:
f8:f6:67:71:e7:e2:37:e9:ec:93:76:b9:ec:24:42:
05:70:cc:24:33:10:f2:23:43:21:4c:ca:f4:21:87:
16:0a:18:2c:9f:b6:e2:a6:db:ff:fa:71:cf:15:c6:
4c:2f:71:b6:29:79:35:54:ad:fd:00:7e:d5:26:98:
df:f3:87:35:a5:13:82:9e:dc:a8:51:38:a4:e7:43:
fc:82:24:79:26:f1:f8:0d:0c:97:67:02:25:1a:43:
85:11:52:9a:55:4c:06:42:2a:6b:b7:8c:26:ce:2f:
d0:84:51:25:2c:89:cf:9e:bf:ef:7a:09:01:46:5b:
90:b6:2d:4b:7e:1d:45:97:bf:2d:60:95:c5:dd:3b:
7b:7f:f9:dd:3a:1a:14:2c:f4:2c:31:e6:bf:c7:e1:
94:0b:af:df:d5:78:67:df:95:72:b8:02:6a:76:b8:
6d:7a:49:f5:30:ec:88:47:8c:1d:ad:0e:b5:25:a2:
18:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:3A:DC:25:8E:92:16:D6:8A:45:6C:53:53:E1:58:A3:62:72:5C:F2
X509v3 Authority Key Identifier:
keyid:98:5B:50:A1:0D:2D:58:C6:75:03:EA:AA:70:1E:51:09:15:DD:51:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:f7:94:bb:63:e6:5a:db:55:8b:c1:f7:5d:68:57:d0:42:93:
37:f7:d2:20:6c:41:8f:88:f5:69:7e:69:14:44:c3:01:65:ab:
67:12:bb:95:6f:e9:3e:fd:c7:ad:e3:bf:1d:9e:8a:2f:31:fc:
b2:81:1a:00:a4:30:c7:b2:80:8b:1b:92:e9:5c:55:ef:47:0b:
4b:0d:4f:db:1a:e1:46:b4:09:6c:07:79:50:cb:50:01:45:4a:
7a:c1:1e:0f:32:d5:93:f3:3a:c6:86:7d:11:27:0f:cf:ed:c1:
e4:e6:44:79:59:7f:e1:f5:00:64:df:2d:ce:72:84:c1:af:6b:
f0:09:ce:0e:6f:7d:ab:81:9c:3c:2b:cf:00:97:f6:87:df:ea:
e9:70:07:c2:2a:f6:e3:1a:4f:b1:ee:38:25:55:b7:5a:9e:ad:
8d:8b:c8:ac:4b:0e:dd:d7:d9:93:ef:b2:61:0a:e5:f1:94:4e:
d6:4c:e9:11:70:3e:44:55:d6:f7:e9:fe:2d:c5:1a:5d:64:4e:
32:db:b5:95:37:4d:0c:6d:fc:07:8a:ef:d0:b8:6e:6d:af:dd:
19:cc:f7:6a:10:d6:fc:45:72:73:39:50:55:08:5c:af:e1:f2:
93:f3:54:d9:1a:39:61:9a:34:8d:29:c3:27:cf:76:4d:26:da:
ab:38:3c:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06HNO7+30x+Mfagagr+CnvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4NWI1MGExMGQyZDU4YzY3NTAzZWFhYTcwMWU1MTA5MTVk
ZDUxOTIwHhcNMjYwMzI5MTUwMTAwWhcNMjYwMzMwMTUwMTAwWjAzMTEwLwYDVQQD
EygzZDNhZGMyNThlOTIxNmQ2OGE0NTZjNTM1M2UxNThhMzYyNzI1Y2YyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2D9zesTFsR9IUf4KkufdjmxI0WI2
xK9JglPoQEeWizE700WfRI9P8yYfra2pVl5r9Gsd8aKuj5sclpjyqc9+UzLa6f5D
nZ9NxCj49mdx5+I36eyTdrnsJEIFcMwkMxDyI0MhTMr0IYcWChgsn7biptv/+nHP
FcZML3G2KXk1VK39AH7VJpjf84c1pROCntyoUTik50P8giR5JvH4DQyXZwIlGkOF
EVKaVUwGQiprt4wmzi/QhFElLInPnr/vegkBRluQti1Lfh1Fl78tYJXF3Tt7f/nd
OhoULPQsMea/x+GUC6/f1Xhn35VyuAJqdrhtekn1MOyIR4wdrQ61JaIY4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD063CWOkhbWikVsU1PhWKNiclzyMB8GA1UdIwQY
MBaAFJhbUKENLVjGdQPqqnAeUQkV3VGSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUZ0UW9RMHRXTVoxQS1xcWNCNVJDUlhkVVpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy81Njg5YjAtYWY2ZC00MzgxLTg5OTIt
OTBmNjcxOWU2N2I5LzEvbUZ0UW9RMHRXTVoxQS1xcWNCNVJDUlhkVVpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy81Njg5YjAtYWY2ZC00MzgxLTg5OTItOTBmNjcxOWU2N2I5
LzEvbUZ0UW9RMHRXTVoxQS1xcWNCNVJDUlhkVVpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtPeUu2Pm
WttVi8H3XWhX0EKTN/fSIGxBj4j1aX5pFETDAWWrZxK7lW/pPv3HreO/HZ6KLzH8
soEaAKQwx7KAixuS6VxV70cLSw1P2xrhRrQJbAd5UMtQAUVKesEeDzLVk/M6xoZ9
EScPz+3B5OZEeVl/4fUAZN8tznKEwa9r8AnODm99q4GcPCvPAJf2h9/q6XAHwir2
4xpPse44JVW3Wp6tjYvIrEsO3dfZk++yYQrl8ZRO1kzpEXA+RFXW9+n+LcUaXWRO
Mtu1lTdNDG38B4rv0Lhuba/dGcz3ahDW/EVyczlQVQhcr+Hyk/NU2Ro5YZo0jSnD
J892TSbaqzg8IA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:51:47 2026 by rpki-client