Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.mft
File: 735cdfZIrGkrFLwiLiwYDIY7ReI.mft (raw, json)
Hash identifier: /9bSYmtcHT2J022n8QYhEVSD1bAd+vcdtRlf5+scRRE=
Subject key identifier: E4:06:C9:56:BB:61:1F:DF:C5:BB:81:FA:D5:5E:18:9F:55:11:08:8A
Authority key identifier: EF:7E:5C:75:F6:48:AC:69:2B:14:BC:22:2E:2C:18:0C:86:3B:45:E2
Certificate issuer: /CN=ef7e5c75f648ac692b14bc222e2c180c863b45e2
Certificate serial: 019D38D32287F3CB9B709FA40E5096738FDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/735cdfZIrGkrFLwiLiwYDIY7ReI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.mft
Manifest number: 052E
Signing time: Sun 29 Mar 2026 09:00:54 +0000
Manifest this update: Sun 29 Mar 2026 09:00:54 +0000
Manifest next update: Mon 30 Mar 2026 09:00:54 +0000
Files and hashes: 1: 1j3vfqmoOqwb7Yh6DBdvRjdsFsg.roa (hash: /Uld+qa79+lTp86N22k2YZMrzBMGIznMfTj+54uPKBY=)
2: 735cdfZIrGkrFLwiLiwYDIY7ReI.crl (hash: PSFjRPrs4HpVLfJu5e9GVSEGCAJlGkXDGhL7YTbThjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.mft
rsync://rpki.ripe.net/repository/DEFAULT/735cdfZIrGkrFLwiLiwYDIY7ReI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:22:87:f3:cb:9b:70:9f:a4:0e:50:96:73:8f:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef7e5c75f648ac692b14bc222e2c180c863b45e2
Validity
Not Before: Mar 29 09:00:54 2026 GMT
Not After : Mar 30 09:00:54 2026 GMT
Subject: CN=e406c956bb611fdfc5bb81fad55e189f5511088a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5e:9a:9b:dc:36:32:f1:62:ef:a9:cf:d8:35:
af:19:ba:8a:bf:73:15:4b:b3:87:28:00:79:23:5e:
73:c9:67:af:29:86:2a:73:89:20:df:bd:79:d1:be:
15:d1:25:df:15:2b:08:e0:b3:f1:b4:db:0c:33:d3:
e8:f3:8c:9c:17:b7:87:1c:1c:5a:3e:f0:a8:29:49:
1f:37:d6:b7:6f:77:6e:7a:48:e7:9a:32:d0:70:b1:
fb:2e:47:af:21:05:19:13:76:b9:b4:41:d8:79:b0:
0e:9d:eb:05:0d:82:0a:e2:ae:37:52:79:fc:ee:e6:
19:f3:8d:80:e5:89:81:e8:cc:04:f8:ef:c5:31:59:
90:51:de:29:75:1a:e7:68:a1:71:1e:ce:d4:11:a5:
04:b0:33:3e:9f:6b:1e:75:99:49:ee:e8:31:cc:9d:
38:44:9e:ba:89:e0:83:af:f7:a1:3e:49:bb:3d:82:
60:e0:85:6d:54:a5:86:62:87:ee:d5:b8:0d:3d:53:
b2:bb:77:5b:bf:15:55:15:18:8b:47:2a:13:9c:87:
57:04:e2:a2:64:7a:ed:1e:41:c2:82:44:c5:aa:8f:
92:f5:7d:32:ef:c3:38:1c:a4:c3:af:b6:6b:5e:f9:
81:af:dc:c8:9d:22:96:be:65:96:9c:57:cf:d8:bf:
c6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:06:C9:56:BB:61:1F:DF:C5:BB:81:FA:D5:5E:18:9F:55:11:08:8A
X509v3 Authority Key Identifier:
keyid:EF:7E:5C:75:F6:48:AC:69:2B:14:BC:22:2E:2C:18:0C:86:3B:45:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/735cdfZIrGkrFLwiLiwYDIY7ReI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:42:c4:bc:5e:90:b6:c0:57:9a:b9:99:0c:00:d5:be:9e:aa:
0e:9e:7b:a0:08:86:d8:21:59:70:c1:d4:6b:26:f5:80:b5:96:
d5:ee:5f:c5:ea:bb:26:d9:09:aa:b7:64:ff:b2:56:93:46:59:
cb:d1:10:2c:5f:fe:87:04:04:10:e5:7d:b6:1e:80:3a:b6:68:
ab:c4:81:cd:98:12:cd:6e:de:33:25:c6:49:b0:00:ce:7a:11:
de:87:b9:9c:59:d5:0f:4e:2f:38:17:12:64:30:27:24:5d:4e:
5f:b1:68:09:ea:da:ae:77:55:ed:71:a1:3b:b1:b7:68:d4:48:
bd:72:5e:e0:19:86:f4:c0:e8:f0:e5:48:2c:cc:e4:98:7f:99:
5e:86:87:53:b7:a4:4f:bb:49:06:2b:f1:19:99:4c:2d:ad:73:
fc:9e:70:72:9a:13:b7:cb:8a:19:8c:3d:98:e7:77:1f:58:85:
69:11:95:21:88:65:9b:0b:03:b2:01:d8:a4:88:92:2d:e7:cd:
a0:07:bb:84:af:10:03:04:ad:10:85:95:b0:58:d3:9b:24:ca:
0a:63:bd:d1:b3:c8:d0:1f:c5:26:46:16:8a:44:7b:9d:94:2a:
c5:08:64:5d:be:3c:e6:71:c3:5e:94:86:db:22:e7:6f:41:9e:
1b:c3:a2:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040yKH88ubcJ+kDlCWc4/eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmN2U1Yzc1ZjY0OGFjNjkyYjE0YmMyMjJlMmMxODBjODYz
YjQ1ZTIwHhcNMjYwMzI5MDkwMDU0WhcNMjYwMzMwMDkwMDU0WjAzMTEwLwYDVQQD
EyhlNDA2Yzk1NmJiNjExZmRmYzViYjgxZmFkNTVlMTg5ZjU1MTEwODhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1l6am9w2MvFi76nP2DWvGbqKv3MV
S7OHKAB5I15zyWevKYYqc4kg37150b4V0SXfFSsI4LPxtNsMM9Po84ycF7eHHBxa
PvCoKUkfN9a3b3duekjnmjLQcLH7LkevIQUZE3a5tEHYebAOnesFDYIK4q43Unn8
7uYZ842A5YmB6MwE+O/FMVmQUd4pdRrnaKFxHs7UEaUEsDM+n2sedZlJ7ugxzJ04
RJ66ieCDr/ehPkm7PYJg4IVtVKWGYofu1bgNPVOyu3dbvxVVFRiLRyoTnIdXBOKi
ZHrtHkHCgkTFqo+S9X0y78M4HKTDr7ZrXvmBr9zInSKWvmWWnFfP2L/GZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOQGyVa7YR/fxbuB+tVeGJ9VEQiKMB8GA1UdIwQY
MBaAFO9+XHX2SKxpKxS8Ii4sGAyGO0XiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzM1Y2RmWklyR2tyRkx3aUxpd1lESVk3UmVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9hMTQyYTktYTAwYS00MjM1LWI3MWYt
ZTZiMjBiMDlmODY2LzEvNzM1Y2RmWklyR2tyRkx3aUxpd1lESVk3UmVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9hMTQyYTktYTAwYS00MjM1LWI3MWYtZTZiMjBiMDlmODY2
LzEvNzM1Y2RmWklyR2tyRkx3aUxpd1lESVk3UmVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsULEvF6Q
tsBXmrmZDADVvp6qDp57oAiG2CFZcMHUayb1gLWW1e5fxeq7JtkJqrdk/7JWk0ZZ
y9EQLF/+hwQEEOV9th6AOrZoq8SBzZgSzW7eMyXGSbAAznoR3oe5nFnVD04vOBcS
ZDAnJF1OX7FoCerarndV7XGhO7G3aNRIvXJe4BmG9MDo8OVILMzkmH+ZXoaHU7ek
T7tJBivxGZlMLa1z/J5wcpoTt8uKGYw9mOd3H1iFaRGVIYhlmwsDsgHYpIiSLefN
oAe7hK8QAwStEIWVsFjTmyTKCmO90bPI0B/FJkYWikR7nZQqxQhkXb485nHDXpSG
2yLnb0GeG8OihA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:40:48 2026 by rpki-client