Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.mft
File: b1dizVOgPjIkIEagGo4cyslGtt0.mft (raw, json)
Hash identifier: pZ3E8jOPEw4LX7LshZ4Kfr8umxYh/NQBJGpSKl9mNns=
Subject key identifier: DC:72:6D:1E:AC:5A:2F:F0:BF:D9:A1:47:E1:08:C2:06:DD:9F:CF:01
Authority key identifier: 6F:57:62:CD:53:A0:3E:32:24:20:46:A0:1A:8E:1C:CA:C9:46:B6:DD
Certificate issuer: /CN=6f5762cd53a03e32242046a01a8e1ccac946b6dd
Certificate serial: 019D3940AC4910DE9F9D2DD037C654D11FB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b1dizVOgPjIkIEagGo4cyslGtt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 11:00:32 +0000
Manifest this update: Sun 29 Mar 2026 11:00:32 +0000
Manifest next update: Mon 30 Mar 2026 11:00:32 +0000
Files and hashes: 1: 8R5UNrAqJQPdeejAPTo1fqEGO0I.roa (hash: nmngdkdG7ZF784QABffIgU3OGRFd2RcORgkl7KA2W8U=)
2: b1dizVOgPjIkIEagGo4cyslGtt0.crl (hash: o0RmInCVidEh5VdLxT/EGvKEkkicu83Zv1ajw971FU8=)
3: eCt1ukGdwDTlQatY4BtcnZOutqg.roa (hash: jUioXzkDEnZcp7VMTk2cW0iuDalR1NZtQ0/IgZsYx3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.mft
rsync://rpki.ripe.net/repository/DEFAULT/b1dizVOgPjIkIEagGo4cyslGtt0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:ac:49:10:de:9f:9d:2d:d0:37:c6:54:d1:1f:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5762cd53a03e32242046a01a8e1ccac946b6dd
Validity
Not Before: Mar 29 11:00:32 2026 GMT
Not After : Mar 30 11:00:32 2026 GMT
Subject: CN=dc726d1eac5a2ff0bfd9a147e108c206dd9fcf01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:17:e5:ee:60:36:22:f3:a2:f4:c2:93:55:89:
a4:8b:3f:37:12:46:32:98:62:d8:10:7a:59:ce:bf:
6a:29:02:90:87:a2:96:ee:bc:2b:75:49:fe:14:12:
9b:0c:bf:c2:ce:98:ac:2d:fe:c3:2b:79:76:48:34:
90:84:03:f2:b6:48:8c:19:93:f3:95:a7:8e:26:19:
eb:e7:ef:47:d9:aa:92:ac:53:10:d2:c5:55:46:bd:
a1:f1:52:25:29:dc:52:bd:7f:03:f5:88:d5:4b:de:
7d:ed:14:bf:49:78:9f:cd:27:49:57:4d:a7:ca:64:
2a:17:f9:47:3c:ac:9a:88:b5:3b:7b:1f:7a:71:4b:
38:13:cd:44:4f:39:5f:6e:2d:c6:55:ca:7e:08:11:
c5:7d:b5:ab:b2:71:19:41:b5:e4:34:1e:dc:ff:a1:
f4:02:4a:dc:d7:e4:d1:9e:1e:c4:4b:c2:71:6a:4b:
d5:73:da:59:e1:69:24:39:77:3d:57:2d:6f:c6:ab:
67:fc:79:23:75:01:22:bc:8d:d8:b3:d4:42:3d:c8:
c2:10:cf:18:5b:9f:d4:56:fb:56:22:18:32:f7:ee:
29:b9:f6:e8:07:36:b3:1a:74:2e:e0:71:72:fe:4b:
d6:a4:f9:fd:31:8b:f5:2f:90:b8:9e:21:31:21:b3:
a8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:72:6D:1E:AC:5A:2F:F0:BF:D9:A1:47:E1:08:C2:06:DD:9F:CF:01
X509v3 Authority Key Identifier:
keyid:6F:57:62:CD:53:A0:3E:32:24:20:46:A0:1A:8E:1C:CA:C9:46:B6:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1dizVOgPjIkIEagGo4cyslGtt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:2c:40:8e:5e:4e:d2:32:c9:b1:44:18:f6:eb:56:62:46:09:
d9:85:dc:38:9e:1e:20:b9:9a:e9:4e:38:b5:39:02:90:8a:e8:
1c:90:4d:63:09:0d:0a:42:dd:8c:04:8a:dd:69:c1:7a:90:d1:
99:00:39:18:c8:8b:f3:b3:76:41:92:21:c9:08:96:42:6c:0a:
d8:10:1b:43:e8:d0:33:03:67:ac:97:e0:d3:08:91:f3:78:1c:
40:bf:c4:11:15:b7:7c:75:e7:49:a7:23:a9:c9:f3:2b:b3:94:
d3:13:8e:05:76:93:51:8b:d1:1e:fc:b6:f5:c1:45:75:c3:81:
45:26:d5:b1:12:cb:cd:87:09:08:70:17:06:6f:f7:e2:e5:3f:
c0:95:ca:51:1f:ed:05:7b:bd:9f:b8:98:0c:a2:c0:de:32:1b:
56:25:cd:7b:6d:b3:fd:91:92:83:84:7a:0e:fc:6b:89:39:f1:
1d:6a:46:df:47:95:a6:11:a2:61:5e:da:9f:c4:2f:17:db:95:
0e:72:87:72:5d:59:2c:5e:db:36:92:52:8b:13:d6:fd:e0:e4:
ea:29:52:74:04:3d:7c:77:d1:d5:45:93:88:fb:d4:f1:1c:83:
4f:6e:45:e7:0b:35:53:c1:62:c2:a4:fe:6e:69:15:4b:c1:34:
1b:c9:e1:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QKxJEN6fnS3QN8ZU0R+xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNTc2MmNkNTNhMDNlMzIyNDIwNDZhMDFhOGUxY2NhYzk0
NmI2ZGQwHhcNMjYwMzI5MTEwMDMyWhcNMjYwMzMwMTEwMDMyWjAzMTEwLwYDVQQD
EyhkYzcyNmQxZWFjNWEyZmYwYmZkOWExNDdlMTA4YzIwNmRkOWZjZjAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxfl7mA2IvOi9MKTVYmkiz83EkYy
mGLYEHpZzr9qKQKQh6KW7rwrdUn+FBKbDL/CzpisLf7DK3l2SDSQhAPytkiMGZPz
laeOJhnr5+9H2aqSrFMQ0sVVRr2h8VIlKdxSvX8D9YjVS9597RS/SXifzSdJV02n
ymQqF/lHPKyaiLU7ex96cUs4E81ETzlfbi3GVcp+CBHFfbWrsnEZQbXkNB7c/6H0
Akrc1+TRnh7ES8JxakvVc9pZ4WkkOXc9Vy1vxqtn/HkjdQEivI3Ys9RCPcjCEM8Y
W5/UVvtWIhgy9+4pufboBzazGnQu4HFy/kvWpPn9MYv1L5C4niExIbOokQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNxybR6sWi/wv9mhR+EIwgbdn88BMB8GA1UdIwQY
MBaAFG9XYs1ToD4yJCBGoBqOHMrJRrbdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjFkaXpWT2dQaklrSUVhZ0dvNGN5c2xHdHQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9mNmZkYzMtOWNmYy00N2ZkLWJiYTgt
NzljYmYzOTVkNzI2LzEvYjFkaXpWT2dQaklrSUVhZ0dvNGN5c2xHdHQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9mNmZkYzMtOWNmYy00N2ZkLWJiYTgtNzljYmYzOTVkNzI2
LzEvYjFkaXpWT2dQaklrSUVhZ0dvNGN5c2xHdHQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJCxAjl5O
0jLJsUQY9utWYkYJ2YXcOJ4eILma6U44tTkCkIroHJBNYwkNCkLdjASK3WnBepDR
mQA5GMiL87N2QZIhyQiWQmwK2BAbQ+jQMwNnrJfg0wiR83gcQL/EERW3fHXnSacj
qcnzK7OU0xOOBXaTUYvRHvy29cFFdcOBRSbVsRLLzYcJCHAXBm/34uU/wJXKUR/t
BXu9n7iYDKLA3jIbViXNe22z/ZGSg4R6DvxriTnxHWpG30eVphGiYV7an8QvF9uV
DnKHcl1ZLF7bNpJSixPW/eDk6ilSdAQ9fHfR1UWTiPvU8RyDT25F5ws1U8FiwqT+
bmkVS8E0G8nhMA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:43 2026 by rpki-client