Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft
File: RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft (raw, json)
Hash identifier: ulK3wDF5QdQwU9k/E2Gva4AuaKJbUG5Vccpr8eHHk98=
Subject key identifier: F0:60:BB:7B:0D:96:C6:7C:BE:A6:D5:A8:AA:4D:A5:1B:0D:18:4C:20
Authority key identifier: 44:EF:20:6F:E3:08:5D:99:43:CB:6A:06:3D:C9:7E:0D:EB:7F:43:84
Certificate issuer: /CN=44ef206fe3085d9943cb6a063dc97e0deb7f4384
Certificate serial: 019D37F6EDCEA86FD7ADFE4242AD57E50808
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft
Manifest number: 060D
Signing time: Sun 29 Mar 2026 05:00:22 +0000
Manifest this update: Sun 29 Mar 2026 05:00:22 +0000
Manifest next update: Mon 30 Mar 2026 05:00:22 +0000
Files and hashes: 1: RO8gb-MIXZlDy2oGPcl-Det_Q4Q.crl (hash: UVuLw6Wou/gqrVOwzowE1UdQR0Td8aucf2TCj5ZNxHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:ed:ce:a8:6f:d7:ad:fe:42:42:ad:57:e5:08:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44ef206fe3085d9943cb6a063dc97e0deb7f4384
Validity
Not Before: Mar 29 05:00:22 2026 GMT
Not After : Mar 30 05:00:22 2026 GMT
Subject: CN=f060bb7b0d96c67cbea6d5a8aa4da51b0d184c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e1:b2:3d:e9:17:5e:48:c0:f2:de:00:66:2a:
28:d0:00:be:27:8a:c2:99:dc:13:60:3b:07:5c:9b:
00:0b:28:d4:8f:9e:5e:fd:bc:89:25:c2:f7:8b:c9:
a7:29:96:c7:64:dc:09:4d:4a:24:bb:2e:1e:bb:a7:
39:32:db:cf:b1:fb:3b:09:7a:ac:71:97:24:c1:1f:
2c:57:48:6b:b0:9c:e7:5e:5e:0b:4e:2a:96:a8:25:
aa:39:d8:d3:a6:23:10:d9:43:cf:6d:f7:47:5f:6e:
75:22:3d:46:65:d9:ff:99:3a:20:35:7b:39:19:cf:
7d:c0:b8:80:91:3a:fc:48:ea:2a:4c:a8:8b:f1:f3:
1f:2a:4b:8f:3a:5a:9b:5b:c8:c3:ad:d7:5b:44:71:
f9:fa:b1:a1:aa:a2:9c:ef:ca:44:95:c1:0c:05:b7:
50:16:3c:c7:e6:b8:11:a6:7f:af:9c:52:89:07:b8:
03:ae:da:26:53:b7:e3:4b:c2:20:96:b5:62:40:77:
b9:d3:6d:f1:cb:48:7b:db:1e:79:42:a2:db:63:62:
99:e0:47:ed:85:d8:fd:de:fd:f6:b1:0d:2d:68:dd:
d7:ae:57:73:19:a2:11:88:63:b7:8e:27:dc:f6:14:
9a:4d:6e:d5:15:48:97:da:63:59:17:bf:3b:ec:60:
17:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:60:BB:7B:0D:96:C6:7C:BE:A6:D5:A8:AA:4D:A5:1B:0D:18:4C:20
X509v3 Authority Key Identifier:
keyid:44:EF:20:6F:E3:08:5D:99:43:CB:6A:06:3D:C9:7E:0D:EB:7F:43:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:bc:9b:14:5e:cd:dd:e7:37:0d:8e:4c:7e:ec:94:81:ca:de:
89:ee:3d:d2:e5:8f:ae:ff:5d:b3:b4:db:67:56:bc:e7:38:8a:
6a:5c:da:77:5e:e9:97:dd:b1:0b:c1:67:36:53:57:3f:38:29:
ac:25:79:14:d1:c4:9d:c8:57:8b:5f:16:f7:5e:e1:7b:77:4f:
08:33:e7:07:63:54:0d:ed:52:f7:e6:40:0c:00:4f:79:9d:53:
b7:9f:32:7c:02:68:64:0b:a9:1a:ed:85:c6:37:0e:88:e2:76:
98:d5:58:a3:e9:04:e7:28:5c:46:8e:9b:85:70:2c:5b:ae:36:
2f:10:28:3a:e4:6d:e5:57:62:f1:73:c6:d3:87:33:c4:44:8e:
17:22:0e:db:35:9f:3a:85:2e:98:72:e4:41:fd:a7:ae:96:25:
f8:ca:fe:9c:f2:f4:cc:13:b6:97:c5:eb:5a:c1:53:20:d8:02:
5f:d9:2e:5d:e2:f0:68:19:43:cf:d4:6e:b0:b5:81:ec:cd:9a:
cb:91:73:02:2a:d8:5f:5c:91:9d:01:33:4f:9f:21:df:11:31:
d8:a6:75:31:0e:55:04:d7:50:43:31:07:a1:2b:93:42:d2:df:
64:a9:21:fb:f8:ce:c6:f2:71:71:a8:66:cb:7f:d8:0d:9b:ec:
96:fb:5d:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ039u3OqG/Xrf5CQq1X5QgIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0ZWYyMDZmZTMwODVkOTk0M2NiNmEwNjNkYzk3ZTBkZWI3
ZjQzODQwHhcNMjYwMzI5MDUwMDIyWhcNMjYwMzMwMDUwMDIyWjAzMTEwLwYDVQQD
EyhmMDYwYmI3YjBkOTZjNjdjYmVhNmQ1YThhYTRkYTUxYjBkMTg0YzIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+GyPekXXkjA8t4AZioo0AC+J4rC
mdwTYDsHXJsACyjUj55e/byJJcL3i8mnKZbHZNwJTUokuy4eu6c5MtvPsfs7CXqs
cZckwR8sV0hrsJznXl4LTiqWqCWqOdjTpiMQ2UPPbfdHX251Ij1GZdn/mTogNXs5
Gc99wLiAkTr8SOoqTKiL8fMfKkuPOlqbW8jDrddbRHH5+rGhqqKc78pElcEMBbdQ
FjzH5rgRpn+vnFKJB7gDrtomU7fjS8IglrViQHe5023xy0h72x55QqLbY2KZ4Eft
hdj93v32sQ0taN3XrldzGaIRiGO3jifc9hSaTW7VFUiX2mNZF7877GAXFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPBgu3sNlsZ8vqbVqKpNpRsNGEwgMB8GA1UdIwQY
MBaAFETvIG/jCF2ZQ8tqBj3Jfg3rf0OEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUk84Z2ItTUlYWmxEeTJvR1BjbC1EZXRfUTRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC82MmI1ZWQtNWY4NC00YmZiLTg1ZmQt
ZmJkNTBjZDg4ZWM0LzEvUk84Z2ItTUlYWmxEeTJvR1BjbC1EZXRfUTRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC82MmI1ZWQtNWY4NC00YmZiLTg1ZmQtZmJkNTBjZDg4ZWM0
LzEvUk84Z2ItTUlYWmxEeTJvR1BjbC1EZXRfUTRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAobybFF7N
3ec3DY5MfuyUgcreie490uWPrv9ds7TbZ1a85ziKalzad17pl92xC8FnNlNXPzgp
rCV5FNHEnchXi18W917he3dPCDPnB2NUDe1S9+ZADABPeZ1Tt58yfAJoZAupGu2F
xjcOiOJ2mNVYo+kE5yhcRo6bhXAsW642LxAoOuRt5Vdi8XPG04czxESOFyIO2zWf
OoUumHLkQf2nrpYl+Mr+nPL0zBO2l8XrWsFTINgCX9kuXeLwaBlDz9RusLWB7M2a
y5FzAirYX1yRnQEzT58h3xEx2KZ1MQ5VBNdQQzEHoSuTQtLfZKkh+/jOxvJxcahm
y3/YDZvslvtdpQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:52 2026 by rpki-client