Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
File: CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft (raw, json)
Hash identifier: dT+xDngkwli5tnIY6bLrMEMj5Ndm4c3pUH7jiYB6cjw=
Subject key identifier: 05:70:34:2D:4E:55:A9:8A:20:CD:5C:EE:7B:95:15:22:11:83:09:D8
Authority key identifier: 08:D4:93:07:88:12:D0:9E:1A:1E:0E:B2:A3:80:FC:65:74:98:3F:5C
Certificate issuer: /CN=08d493078812d09e1a1e0eb2a380fc6574983f5c
Certificate serial: 019CE2FE11DC9937BA4ED2B384608D640D1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
Manifest number: 13AD
Signing time: Thu 12 Mar 2026 17:00:27 +0000
Manifest this update: Thu 12 Mar 2026 17:00:27 +0000
Manifest next update: Fri 13 Mar 2026 17:00:27 +0000
Files and hashes: 1: CNSTB4gS0J4aHg6yo4D8ZXSYP1w.crl (hash: iexrj+AVcMqgWjb4P4JBBaJkKCZt/SEipkrqjjhqVaY=)
2: UUqgGSLj84boI_NxgkGB4TKwVIU.roa (hash: el0OUsfFn2pwq6lrAb2NBOC3HWUwPQO50Ng8SKy5hMc=)
3: YmIRs6_4Cx0UeKMkGUDdp5mRk_0.roa (hash: bFavmNyn/CPcWGJeZG409Nafloy5IsBvUxX5L0UODxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:fe:11:dc:99:37:ba:4e:d2:b3:84:60:8d:64:0d:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d493078812d09e1a1e0eb2a380fc6574983f5c
Validity
Not Before: Mar 12 17:00:27 2026 GMT
Not After : Mar 13 17:00:27 2026 GMT
Subject: CN=0570342d4e55a98a20cd5cee7b951522118309d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:a9:73:58:9c:0b:7c:04:5d:4b:cc:03:e7:78:
95:59:b3:05:38:c7:44:16:cf:45:ee:c1:f9:4f:76:
bd:72:2c:73:29:35:1d:0a:55:eb:f6:b9:68:82:ca:
a7:72:37:01:6c:e6:13:d6:3a:13:a3:3f:55:c6:30:
d7:a8:0d:39:48:fb:1a:97:87:46:85:6d:a2:58:24:
7b:10:9c:9f:41:e2:a6:a8:fd:16:48:3b:4f:2c:ea:
ed:ec:5b:86:a2:4d:b8:6f:67:f1:8b:45:27:5d:38:
5e:26:a2:2a:b7:ab:12:8b:cc:88:2d:4c:8a:6f:3d:
4a:47:3f:8d:8a:f0:0f:3c:6c:2c:8e:0c:fb:b1:3b:
08:7c:d8:c1:b4:ed:25:f6:a7:7c:1e:0a:de:16:33:
28:e3:cf:ec:ec:0d:18:30:7a:e5:70:e7:51:74:59:
3a:e5:f4:e6:14:15:9d:40:8b:71:7d:ec:22:16:ff:
bd:d7:cd:a4:d9:3c:4b:bf:0e:63:32:fb:b2:e1:44:
91:db:dc:10:b7:da:0a:d7:33:48:b6:a1:16:84:f2:
55:1b:d2:f6:3f:3f:3f:fa:df:d0:10:6b:01:3b:9e:
33:5c:ec:9f:8f:c4:62:c8:8c:d4:f4:e3:9a:d7:0d:
8a:60:ad:65:04:d7:4f:61:2d:c6:79:6a:33:11:60:
9b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:70:34:2D:4E:55:A9:8A:20:CD:5C:EE:7B:95:15:22:11:83:09:D8
X509v3 Authority Key Identifier:
keyid:08:D4:93:07:88:12:D0:9E:1A:1E:0E:B2:A3:80:FC:65:74:98:3F:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:59:d3:eb:66:12:cf:9a:51:02:ea:1a:63:57:5f:0b:ab:81:
50:36:c1:37:af:48:38:82:05:70:17:c5:47:27:2d:09:0b:e7:
08:41:1b:26:35:31:5e:2e:b6:f0:60:30:b5:7a:2c:41:f7:47:
0e:d7:c9:bc:ed:f9:4e:1f:20:38:60:09:56:19:0c:18:2c:df:
37:79:76:eb:f9:13:37:89:33:3a:08:ec:03:80:b0:7b:86:ed:
03:40:6a:56:91:81:1b:b7:b1:c7:15:83:d1:ca:29:1f:bd:d7:
e3:80:f0:4f:52:9a:30:52:d9:83:82:17:77:f9:f8:0d:90:d3:
f1:21:a9:06:e7:4d:85:28:3f:58:fd:64:24:a2:89:ca:d0:03:
2f:f7:33:dd:a2:d2:45:33:92:8d:79:b2:dd:5f:f0:ac:da:97:
d5:00:71:7f:ff:9d:ee:f2:95:4a:c8:04:a3:96:b3:d3:04:d5:
06:a1:2e:fb:87:80:eb:8b:70:2e:1b:72:bd:9a:3d:f4:d2:ff:
b3:3c:ae:5d:fa:d0:07:9c:0c:18:37:46:9b:23:6a:d9:b1:41:
d4:05:22:5e:5a:82:ae:f6:97:24:44:95:8e:7b:a2:ce:c2:53:
10:4a:ad:58:d3:a1:c4:67:e0:0e:ee:0d:3c:c2:c9:6d:64:d5:
c4:51:43:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzi/hHcmTe6TtKzhGCNZA0bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZDQ5MzA3ODgxMmQwOWUxYTFlMGViMmEzODBmYzY1NzQ5
ODNmNWMwHhcNMjYwMzEyMTcwMDI3WhcNMjYwMzEzMTcwMDI3WjAzMTEwLwYDVQQD
EygwNTcwMzQyZDRlNTVhOThhMjBjZDVjZWU3Yjk1MTUyMjExODMwOWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7qlzWJwLfARdS8wD53iVWbMFOMdE
Fs9F7sH5T3a9cixzKTUdClXr9rlogsqncjcBbOYT1joToz9VxjDXqA05SPsal4dG
hW2iWCR7EJyfQeKmqP0WSDtPLOrt7FuGok24b2fxi0UnXTheJqIqt6sSi8yILUyK
bz1KRz+NivAPPGwsjgz7sTsIfNjBtO0l9qd8HgreFjMo48/s7A0YMHrlcOdRdFk6
5fTmFBWdQItxfewiFv+9182k2TxLvw5jMvuy4USR29wQt9oK1zNItqEWhPJVG9L2
Pz8/+t/QEGsBO54zXOyfj8RiyIzU9OOa1w2KYK1lBNdPYS3GeWozEWCbrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAVwNC1OVamKIM1c7nuVFSIRgwnYMB8GA1UdIwQY
MBaAFAjUkweIEtCeGh4OsqOA/GV0mD9cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ05TVEI0Z1MwSjRhSGc2eW80RDhaWFNZUDF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9lOWEzMWYtMTUzNy00MGMxLWI2MmQt
MzFhZGY2NDM5NjQzLzEvQ05TVEI0Z1MwSjRhSGc2eW80RDhaWFNZUDF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9lOWEzMWYtMTUzNy00MGMxLWI2MmQtMzFhZGY2NDM5NjQz
LzEvQ05TVEI0Z1MwSjRhSGc2eW80RDhaWFNZUDF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZVnT62YS
z5pRAuoaY1dfC6uBUDbBN69IOIIFcBfFRyctCQvnCEEbJjUxXi628GAwtXosQfdH
DtfJvO35Th8gOGAJVhkMGCzfN3l26/kTN4kzOgjsA4Cwe4btA0BqVpGBG7exxxWD
0copH73X44DwT1KaMFLZg4IXd/n4DZDT8SGpBudNhSg/WP1kJKKJytADL/cz3aLS
RTOSjXmy3V/wrNqX1QBxf/+d7vKVSsgEo5az0wTVBqEu+4eA64twLhtyvZo99NL/
szyuXfrQB5wMGDdGmyNq2bFB1AUiXlqCrvaXJESVjnuizsJTEEqtWNOhxGfgDu4N
PMLJbWTVxFFDuA==
-----END CERTIFICATE-----
Generated at Fri Mar 13 01:12:22 2026 by rpki-client