Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft
File: Rro_gAObnnhM-yS_LH3bJOGQCnY.mft (raw, json)
Hash identifier: 01SGRWjauPGnpnzO+xbqDb2YbxklfgqwJZ8PdsK/0MM=
Subject key identifier: 39:C4:DB:06:4D:42:A4:A2:2F:59:80:F4:94:E4:0B:DA:B9:DC:C1:48
Authority key identifier: 46:BA:3F:80:03:9B:9E:78:4C:FB:24:BF:2C:7D:DB:24:E1:90:0A:76
Certificate issuer: /CN=46ba3f80039b9e784cfb24bf2c7ddb24e1900a76
Certificate serial: 019D390983CC7D3D822A4C2CB2BAC6EA5A2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft
Manifest number: 189F
Signing time: Sun 29 Mar 2026 10:00:17 +0000
Manifest this update: Sun 29 Mar 2026 10:00:17 +0000
Manifest next update: Mon 30 Mar 2026 10:00:17 +0000
Files and hashes: 1: 0MnT-Cev0aWfox9D3TA-NvqEMlk.roa (hash: JJLpUG+0ObMqR5bxSAi6saPQ/DL3PUHcYLY29JhBmbE=)
2: 1-LbhNdw_AJV43onNE0QCUpCX6so.roa (hash: dSYVcw8EiYO4/PAbhwcAgMdvgRcG7f4kUZi0vNXjJIw=)
3: 4BHAHtAhc28ZrQwUD5OHuec1Ir8.roa (hash: 0iGZlpXjvTxGNf9N3a9R/JttWSb6ffwtMSks1EBv2mQ=)
4: 9h9M7PjhCe5Xzh52sY19F_HCfoo.roa (hash: dKnlXAO85KhguToJuoLLUtMZOEcwIkloXdGeaFlciRA=)
5: AFX34QTnP207XVV_8PKrJ8TJVJg.roa (hash: hVizqqIjbbc78J/ZubGhAhYsI/9yAoa6vJ1uP6RfMPU=)
6: Rro_gAObnnhM-yS_LH3bJOGQCnY.crl (hash: oJzPWTx9fW2noiR+XFeT47ptVoQZrMv25BlUaWGA85M=)
7: TB3TWMd6B_jTmmabHUiaE7GbxpY.roa (hash: Asm92jz966O9dWSXvo5IS2rhxQ2wThoj/frBnCQjxYo=)
8: kHyEvJhu_w11Kx9L4McOAF2P03o.roa (hash: jmuEXw0e3wCECNG5mj5zMNmwosrMAavIJYnu60jwGTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:83:cc:7d:3d:82:2a:4c:2c:b2:ba:c6:ea:5a:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46ba3f80039b9e784cfb24bf2c7ddb24e1900a76
Validity
Not Before: Mar 29 10:00:17 2026 GMT
Not After : Mar 30 10:00:17 2026 GMT
Subject: CN=39c4db064d42a4a22f5980f494e40bdab9dcc148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c5:b8:a9:b2:21:f1:d6:21:cf:c6:c5:26:bc:
6a:f0:0e:87:ab:38:5c:f9:e2:0f:49:2f:c6:cb:a5:
33:1d:1e:78:61:ac:48:8a:42:ac:23:b3:58:b1:0e:
47:63:52:59:8a:46:d8:84:76:d9:79:85:1b:0e:1d:
f8:38:1b:75:09:46:2b:cd:c2:1f:e0:03:2e:fe:6b:
ea:36:c3:d1:7a:fb:81:9c:2e:2c:cd:8e:10:e1:86:
16:80:ee:7e:6e:88:48:18:73:19:ce:37:b1:46:93:
d4:28:e9:80:ce:bf:58:59:a9:1d:de:48:6b:24:6a:
44:38:a2:20:fe:3b:2f:88:72:98:d2:70:cc:7c:3f:
b8:7a:f2:13:76:b6:52:0f:ab:9a:c6:33:e6:1b:a0:
61:7d:cc:84:5c:98:14:b4:63:d1:8c:08:25:96:bf:
8f:d3:b5:87:ba:25:a8:7f:6d:d3:71:15:c8:19:8e:
01:3f:c8:5e:b7:34:3d:eb:53:86:04:dc:ea:6c:b1:
9b:e9:93:9a:c9:74:c4:c1:00:1c:2e:af:f2:1c:ba:
2c:b2:31:68:b4:d2:1b:0f:63:86:1d:66:e3:95:a7:
d1:fb:b0:8c:e2:0a:7a:f6:3d:f8:f4:e9:19:7c:52:
57:55:b9:b3:08:1c:e7:02:f8:9e:e9:8a:8d:3a:a8:
2a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C4:DB:06:4D:42:A4:A2:2F:59:80:F4:94:E4:0B:DA:B9:DC:C1:48
X509v3 Authority Key Identifier:
keyid:46:BA:3F:80:03:9B:9E:78:4C:FB:24:BF:2C:7D:DB:24:E1:90:0A:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:80:03:9f:c8:a6:b6:57:7f:7e:b3:e8:26:7b:a0:78:c4:94:
d9:d6:24:de:87:41:7f:dd:52:49:e2:3d:3d:ed:98:fe:db:2d:
bb:df:24:01:d6:14:ac:0a:56:35:01:52:75:5c:08:a5:41:8d:
2d:ee:da:27:3e:96:55:38:3c:d3:d3:64:f0:e5:75:ac:54:f4:
77:e7:95:79:71:66:09:97:a5:49:74:43:51:d5:a5:5e:81:0c:
eb:cf:9d:d2:46:84:ef:38:fc:fb:84:cb:c7:37:1c:cb:08:50:
f6:08:b7:6d:af:f9:7a:db:86:5c:cd:16:d1:80:d3:15:16:a8:
07:9b:65:13:75:ff:5a:8f:a2:78:c7:11:54:2c:a4:d1:23:46:
15:a3:12:f0:70:4a:36:f6:1a:fe:fb:7f:5a:8a:cc:ce:7a:59:
5e:70:03:dc:13:fc:96:f3:46:12:d5:30:51:7b:2f:0d:0e:80:
a0:2a:94:f7:84:bb:cd:69:ed:b7:a3:7f:05:d1:30:f3:35:fa:
a5:26:9f:46:b9:c4:74:6d:7b:6f:79:aa:fb:0d:7d:bb:46:4c:
74:2f:ea:04:d7:f8:88:1e:16:1d:e0:ca:b7:72:26:b3:26:57:
ca:76:24:de:00:82:d6:1e:0d:aa:82:44:2d:73:17:c2:4e:a6:
5e:29:fb:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05CYPMfT2CKkwssrrG6lorMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2YmEzZjgwMDM5YjllNzg0Y2ZiMjRiZjJjN2RkYjI0ZTE5
MDBhNzYwHhcNMjYwMzI5MTAwMDE3WhcNMjYwMzMwMTAwMDE3WjAzMTEwLwYDVQQD
EygzOWM0ZGIwNjRkNDJhNGEyMmY1OTgwZjQ5NGU0MGJkYWI5ZGNjMTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsW4qbIh8dYhz8bFJrxq8A6Hqzhc
+eIPSS/Gy6UzHR54YaxIikKsI7NYsQ5HY1JZikbYhHbZeYUbDh34OBt1CUYrzcIf
4AMu/mvqNsPRevuBnC4szY4Q4YYWgO5+bohIGHMZzjexRpPUKOmAzr9YWakd3khr
JGpEOKIg/jsviHKY0nDMfD+4evITdrZSD6uaxjPmG6BhfcyEXJgUtGPRjAgllr+P
07WHuiWof23TcRXIGY4BP8hetzQ961OGBNzqbLGb6ZOayXTEwQAcLq/yHLossjFo
tNIbD2OGHWbjlafR+7CM4gp69j349OkZfFJXVbmzCBznAvie6YqNOqgqjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDnE2wZNQqSiL1mA9JTkC9q53MFIMB8GA1UdIwQY
MBaAFEa6P4ADm554TPskvyx92yThkAp2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnJvX2dBT2JubmhNLXlTX0xIM2JKT0dRQ25ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9jZmEyYWUtZTUyNC00YmQwLTg3NWIt
ODlhY2UzODIyMGZiLzEvUnJvX2dBT2JubmhNLXlTX0xIM2JKT0dRQ25ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9jZmEyYWUtZTUyNC00YmQwLTg3NWItODlhY2UzODIyMGZi
LzEvUnJvX2dBT2JubmhNLXlTX0xIM2JKT0dRQ25ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMIADn8im
tld/frPoJnugeMSU2dYk3odBf91SSeI9Pe2Y/tstu98kAdYUrApWNQFSdVwIpUGN
Le7aJz6WVTg809Nk8OV1rFT0d+eVeXFmCZelSXRDUdWlXoEM68+d0kaE7zj8+4TL
xzccywhQ9gi3ba/5etuGXM0W0YDTFRaoB5tlE3X/Wo+ieMcRVCyk0SNGFaMS8HBK
NvYa/vt/WorMznpZXnAD3BP8lvNGEtUwUXsvDQ6AoCqU94S7zWntt6N/BdEw8zX6
pSafRrnEdG17b3mq+w19u0ZMdC/qBNf4iB4WHeDKt3ImsyZXynYk3gCC1h4NqoJE
LXMXwk6mXin7bg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:24:18 2026 by rpki-client