Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/ab7f0d-dd30-48df-bb0c-85b26b3ed983/1/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.mft
File: a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.mft (raw, json)
Hash identifier: +007hilWbEqYt7DyuEEa3C3SnyxFLwKRuerltK8bCB8=
Subject key identifier: E0:81:1B:14:96:50:8B:36:9C:EF:3F:27:3C:17:68:1B:DD:B2:77:A3
Authority key identifier: 6B:41:37:C9:57:19:DE:3B:06:51:E4:4A:D0:68:35:01:AE:67:EB:88
Certificate issuer: /CN=6b4137c95719de3b0651e44ad0683501ae67eb88
Certificate serial: 019D389C3698AD75E1D4F9E6D44CD2ADAE5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/ab7f0d-dd30-48df-bb0c-85b26b3ed983/1/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.mft
Manifest number: 0807
Signing time: Sun 29 Mar 2026 08:00:54 +0000
Manifest this update: Sun 29 Mar 2026 08:00:54 +0000
Manifest next update: Mon 30 Mar 2026 08:00:54 +0000
Files and hashes: 1: 652lcuzT9PIhaSeP2avGOH6beOk.roa (hash: 9cjGs1jIWWRzFnAzuxAkpsphISqK1RUqJmC7SPZmiso=)
2: Mr2LQ1C5SJjiCxHDUHB6isq0KGI.roa (hash: RA9IEzCO4KyarLoUNb941n55NG/XIML//2KL7SpybBQ=)
3: a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.crl (hash: A/YKRxfY7u0Gx/W95ydtcLt+F8t15g/bUvGNYTdXBX8=)
4: knDMH2cT6X9zpZOHV6KWJKXM32g.roa (hash: arPSRktl1sXhku4kqnqqJyXzy3Zxw9oz2dPJBl2xgrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/ab7f0d-dd30-48df-bb0c-85b26b3ed983/1/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/ab7f0d-dd30-48df-bb0c-85b26b3ed983/1/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.mft
rsync://rpki.ripe.net/repository/DEFAULT/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:36:98:ad:75:e1:d4:f9:e6:d4:4c:d2:ad:ae:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b4137c95719de3b0651e44ad0683501ae67eb88
Validity
Not Before: Mar 29 08:00:54 2026 GMT
Not After : Mar 30 08:00:54 2026 GMT
Subject: CN=e0811b1496508b369cef3f273c17681bddb277a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4c:12:1f:bc:f5:b0:e5:58:c7:8b:9c:0b:d9:
37:c3:39:93:09:0e:06:2b:1e:c2:27:00:f5:da:ec:
e3:a1:e9:56:eb:0d:18:4d:2a:7e:27:16:83:d8:f7:
3e:85:27:4d:84:8b:4f:32:77:b0:47:5b:6d:ee:6d:
aa:f1:d9:ce:c9:a8:20:42:50:0a:51:dc:43:2f:3e:
9a:0a:28:d7:ee:ef:60:13:83:f0:f8:38:a9:41:af:
de:8b:20:14:06:76:d6:75:1b:c8:e3:53:b9:0b:8f:
45:69:ed:8b:20:e9:e1:85:db:96:88:16:23:56:4b:
d0:df:2d:dc:39:32:45:4a:3f:88:2f:7a:58:0a:ec:
3e:f0:8e:bd:be:30:b3:8e:40:0c:ab:f8:76:7d:ab:
dd:6f:01:c6:7d:c6:41:d9:fe:32:19:af:6b:8b:38:
68:0a:c7:87:a6:1e:b3:ce:c2:3a:d1:03:85:7c:58:
eb:6e:29:a9:c9:0a:c0:5b:0b:68:62:d8:fc:02:1c:
c8:be:77:e3:22:43:c1:f6:7c:3a:8e:8e:f7:7f:07:
b4:76:21:19:00:37:91:49:19:c0:4e:27:6b:8c:99:
95:e5:60:52:d4:21:70:26:e4:c8:17:88:f9:74:1a:
7b:47:b5:e5:59:2b:a4:87:66:af:0c:2c:75:30:4c:
6c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:81:1B:14:96:50:8B:36:9C:EF:3F:27:3C:17:68:1B:DD:B2:77:A3
X509v3 Authority Key Identifier:
keyid:6B:41:37:C9:57:19:DE:3B:06:51:E4:4A:D0:68:35:01:AE:67:EB:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ab7f0d-dd30-48df-bb0c-85b26b3ed983/1/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ab7f0d-dd30-48df-bb0c-85b26b3ed983/1/a0E3yVcZ3jsGUeRK0Gg1Aa5n64g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:0b:b0:8c:3a:ac:82:9d:61:9c:97:e1:b2:2c:58:17:45:22:
1e:57:c4:66:50:04:ea:66:44:49:73:00:85:5b:1e:23:ed:ec:
8a:09:c1:e9:0d:ff:f9:e6:cf:26:56:06:d1:7a:be:7d:41:af:
01:c1:19:63:cf:33:be:4f:dc:b4:66:c7:24:01:7a:ed:a0:51:
ab:3c:23:55:6e:ce:65:99:42:a0:82:fc:e6:dd:ae:eb:c0:88:
f3:9c:1e:cb:67:1e:23:91:e9:80:6a:e2:01:74:aa:51:49:6e:
a4:0f:70:39:d8:4e:2e:b3:e1:67:ec:1f:bc:76:fd:71:a5:65:
90:92:16:51:77:0c:8b:fd:b2:65:32:f7:1e:c3:0c:46:b0:91:
6d:a0:db:1e:b7:7e:d1:ff:b9:26:82:f0:ed:8a:56:9b:b7:35:
d1:9a:18:57:bd:18:35:ea:42:43:87:bf:ec:67:bd:10:c1:45:
eb:96:57:91:70:11:b7:c6:2f:14:fe:bc:0e:cf:eb:e2:2d:4f:
a5:de:c2:3f:9a:75:82:49:33:fa:91:48:ab:77:03:92:14:69:
a9:21:dd:38:f9:69:b7:1f:22:d1:d4:46:17:b5:9c:3f:f5:6c:
08:f2:48:5e:1d:cf:97:44:8c:3d:13:2d:f5:d8:86:4a:44:b8:
6e:15:4c:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nDaYrXXh1Pnm1EzSra5bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNDEzN2M5NTcxOWRlM2IwNjUxZTQ0YWQwNjgzNTAxYWU2
N2ViODgwHhcNMjYwMzI5MDgwMDU0WhcNMjYwMzMwMDgwMDU0WjAzMTEwLwYDVQQD
EyhlMDgxMWIxNDk2NTA4YjM2OWNlZjNmMjczYzE3NjgxYmRkYjI3N2EzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UwSH7z1sOVYx4ucC9k3wzmTCQ4G
Kx7CJwD12uzjoelW6w0YTSp+JxaD2Pc+hSdNhItPMnewR1tt7m2q8dnOyaggQlAK
UdxDLz6aCijX7u9gE4Pw+DipQa/eiyAUBnbWdRvI41O5C49Fae2LIOnhhduWiBYj
VkvQ3y3cOTJFSj+IL3pYCuw+8I69vjCzjkAMq/h2favdbwHGfcZB2f4yGa9rizho
CseHph6zzsI60QOFfFjrbimpyQrAWwtoYtj8AhzIvnfjIkPB9nw6jo73fwe0diEZ
ADeRSRnATidrjJmV5WBS1CFwJuTIF4j5dBp7R7XlWSukh2avDCx1MExsVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOCBGxSWUIs2nO8/JzwXaBvdsnejMB8GA1UdIwQY
MBaAFGtBN8lXGd47BlHkStBoNQGuZ+uIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTBFM3lWY1ozanNHVWVSSzBHZzFBYTVuNjRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9hYjdmMGQtZGQzMC00OGRmLWJiMGMt
ODViMjZiM2VkOTgzLzEvYTBFM3lWY1ozanNHVWVSSzBHZzFBYTVuNjRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9hYjdmMGQtZGQzMC00OGRmLWJiMGMtODViMjZiM2VkOTgz
LzEvYTBFM3lWY1ozanNHVWVSSzBHZzFBYTVuNjRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQwuwjDqs
gp1hnJfhsixYF0UiHlfEZlAE6mZESXMAhVseI+3signB6Q3/+ebPJlYG0Xq+fUGv
AcEZY88zvk/ctGbHJAF67aBRqzwjVW7OZZlCoIL85t2u68CI85wey2ceI5HpgGri
AXSqUUlupA9wOdhOLrPhZ+wfvHb9caVlkJIWUXcMi/2yZTL3HsMMRrCRbaDbHrd+
0f+5JoLw7YpWm7c10ZoYV70YNepCQ4e/7Ge9EMFF65ZXkXARt8YvFP68Ds/r4i1P
pd7CP5p1gkkz+pFIq3cDkhRpqSHdOPlptx8i0dRGF7WcP/VsCPJIXh3Pl0SMPRMt
9diGSkS4bhVMkg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:32 2026 by rpki-client