Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.mft
File: a_D4R-GiFudUPHUqY1DGviPHxtU.mft (raw, json)
Hash identifier: qATVpefWjcI1hYksQQwM/S14hiYX2PCwxkQLLMjkT1s=
Subject key identifier: 0F:A9:6B:BB:59:ED:FE:AE:12:8D:EE:51:D8:77:90:AC:F7:59:96:EE
Authority key identifier: 6B:F0:F8:47:E1:A2:16:E7:54:3C:75:2A:63:50:C6:BE:23:C7:C6:D5
Certificate issuer: /CN=6bf0f847e1a216e7543c752a6350c6be23c7c6d5
Certificate serial: 019D375242C11431E655F3CFBA3DFDE50AF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a_D4R-GiFudUPHUqY1DGviPHxtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 02:00:31 +0000
Manifest this update: Sun 29 Mar 2026 02:00:31 +0000
Manifest next update: Mon 30 Mar 2026 02:00:31 +0000
Files and hashes: 1: a_D4R-GiFudUPHUqY1DGviPHxtU.crl (hash: 4Fkp232Iq+uGN22F+tvPeIr5fxg7Sku+M9eNxHOEvF0=)
2: cF8uP7QlOdwZi4fd-Vewyhyr1JU.roa (hash: /tEiL73EsYnvkx71Q1CMlvgCMIyqQRf+8UDWXXfTyn4=)
3: mIHKTw-XLrmmWG8YqweQVC7V0bI.roa (hash: jyb24Oi7s06EeSQHlaZE/EE7bOHrHv2+206uhSP0nsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/a_D4R-GiFudUPHUqY1DGviPHxtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:42:c1:14:31:e6:55:f3:cf:ba:3d:fd:e5:0a:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bf0f847e1a216e7543c752a6350c6be23c7c6d5
Validity
Not Before: Mar 29 02:00:31 2026 GMT
Not After : Mar 30 02:00:31 2026 GMT
Subject: CN=0fa96bbb59edfeae128dee51d87790acf75996ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ba:4d:f7:af:fa:87:48:56:d7:94:68:8c:bf:
a0:d7:b6:23:79:e1:83:5a:d4:66:de:d7:10:b3:d7:
5d:98:9c:63:90:68:e6:de:55:8c:10:05:7e:9d:9a:
32:8c:ee:1c:ba:4c:9c:a7:fd:e8:31:13:31:d5:95:
68:35:f8:d3:c5:72:f3:9d:0a:0c:24:11:f0:96:0a:
49:5c:33:e8:bb:7f:0c:c1:16:d3:de:3b:e8:42:d4:
b1:26:6a:3b:e2:a4:82:fc:55:76:7c:63:a6:73:b4:
86:cd:cd:21:6f:30:4d:de:8a:76:60:45:20:c6:60:
68:f5:b3:57:65:b7:cf:5d:56:17:c7:aa:61:60:6a:
69:24:43:51:85:f3:e2:ee:67:26:bc:1e:44:3c:75:
ef:8b:a8:aa:6f:ae:7f:54:4e:7e:72:52:34:39:58:
aa:67:50:5f:6f:3b:11:ad:31:c5:bd:f6:b2:7a:76:
92:7a:d7:89:ab:62:0a:83:b1:54:42:b8:e2:fb:d8:
2f:22:26:4d:54:37:a2:e6:7d:59:14:35:7b:a4:f1:
c9:68:57:26:91:3a:23:ef:42:e5:e9:64:b4:e2:2d:
33:a1:82:14:0c:bb:98:d2:7f:c9:90:22:68:98:a9:
85:b9:72:99:be:9f:fe:fa:e8:e8:8e:6c:c2:da:db:
d8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A9:6B:BB:59:ED:FE:AE:12:8D:EE:51:D8:77:90:AC:F7:59:96:EE
X509v3 Authority Key Identifier:
keyid:6B:F0:F8:47:E1:A2:16:E7:54:3C:75:2A:63:50:C6:BE:23:C7:C6:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a_D4R-GiFudUPHUqY1DGviPHxtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:de:8a:9c:25:22:e6:07:3f:8d:78:9b:50:2a:c0:af:b7:32:
b8:fb:25:d6:a5:70:4e:66:31:dc:0a:f7:ba:a2:73:30:62:d3:
35:25:0a:f1:e6:ea:84:b4:f0:ba:5b:67:06:ff:73:7a:fe:42:
f0:f8:48:3d:dd:20:81:2b:fa:af:70:bf:8c:28:f2:be:89:09:
63:29:7d:ce:b9:e6:e8:e3:c9:e2:4a:18:5f:52:8d:dc:91:0e:
46:a5:01:78:8c:8c:3b:f2:a4:53:91:44:b6:04:5c:24:2a:2a:
68:85:8e:6c:0a:ac:ca:e9:20:fe:08:b2:8f:51:20:98:39:f9:
fb:65:4a:4e:1d:f4:32:b2:ea:bd:84:6c:0d:92:72:cb:f8:c7:
27:73:e5:7d:1a:bc:38:b5:94:08:df:a7:24:36:18:53:c4:c5:
ec:91:ea:1b:3e:66:b3:c9:9b:91:eb:19:57:a9:49:2a:66:8c:
96:57:39:a6:c9:fb:77:62:a1:47:33:5a:dd:d0:7f:0d:8b:7f:
44:87:79:60:76:d4:73:e1:40:57:8e:d1:65:98:46:17:bb:10:
5e:27:19:56:69:7e:cb:d8:7d:b4:6b:c4:34:02:7b:13:c7:d4:
01:d2:a9:6a:70:7d:c5:41:5f:fe:b9:2d:b6:8f:93:d3:46:0d:
9e:72:58:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03UkLBFDHmVfPPuj395QrxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiZjBmODQ3ZTFhMjE2ZTc1NDNjNzUyYTYzNTBjNmJlMjNj
N2M2ZDUwHhcNMjYwMzI5MDIwMDMxWhcNMjYwMzMwMDIwMDMxWjAzMTEwLwYDVQQD
EygwZmE5NmJiYjU5ZWRmZWFlMTI4ZGVlNTFkODc3OTBhY2Y3NTk5NmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbpN96/6h0hW15RojL+g17YjeeGD
WtRm3tcQs9ddmJxjkGjm3lWMEAV+nZoyjO4cukycp/3oMRMx1ZVoNfjTxXLznQoM
JBHwlgpJXDPou38MwRbT3jvoQtSxJmo74qSC/FV2fGOmc7SGzc0hbzBN3op2YEUg
xmBo9bNXZbfPXVYXx6phYGppJENRhfPi7mcmvB5EPHXvi6iqb65/VE5+clI0OViq
Z1BfbzsRrTHFvfayenaSeteJq2IKg7FUQrji+9gvIiZNVDei5n1ZFDV7pPHJaFcm
kToj70Ll6WS04i0zoYIUDLuY0n/JkCJomKmFuXKZvp/++ujojmzC2tvYawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA+pa7tZ7f6uEo3uUdh3kKz3WZbuMB8GA1UdIwQY
MBaAFGvw+EfhohbnVDx1KmNQxr4jx8bVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYV9ENFItR2lGdWRVUEhVcVkxREd2aVBIeHRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9lMGNkNjktZGVmZi00YzIxLWE4MDkt
Njk5OWE5OWRjZjFlLzEvYV9ENFItR2lGdWRVUEhVcVkxREd2aVBIeHRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9lMGNkNjktZGVmZi00YzIxLWE4MDktNjk5OWE5OWRjZjFl
LzEvYV9ENFItR2lGdWRVUEhVcVkxREd2aVBIeHRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV96KnCUi
5gc/jXibUCrAr7cyuPsl1qVwTmYx3Ar3uqJzMGLTNSUK8ebqhLTwultnBv9zev5C
8PhIPd0ggSv6r3C/jCjyvokJYyl9zrnm6OPJ4koYX1KN3JEORqUBeIyMO/KkU5FE
tgRcJCoqaIWObAqsyukg/giyj1EgmDn5+2VKTh30MrLqvYRsDZJyy/jHJ3PlfRq8
OLWUCN+nJDYYU8TF7JHqGz5ms8mbkesZV6lJKmaMllc5psn7d2KhRzNa3dB/DYt/
RId5YHbUc+FAV47RZZhGF7sQXicZVml+y9h9tGvENAJ7E8fUAdKpanB9xUFf/rkt
to+T00YNnnJYIQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:04 2026 by rpki-client