Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.mft
File: RDSBQfxG3AGHCHy8hlVumkSe4ec.mft (raw, json)
Hash identifier: DJUjnSZJp2XtOSlXFPIdALIK3TczFItOUYaWX/eVSrk=
Subject key identifier: 3B:E6:B5:BF:6D:76:DF:EA:44:90:B3:E9:91:6F:21:76:01:F0:B0:08
Authority key identifier: 44:34:81:41:FC:46:DC:01:87:08:7C:BC:86:55:6E:9A:44:9E:E1:E7
Certificate issuer: /CN=44348141fc46dc0187087cbc86556e9a449ee1e7
Certificate serial: 019D37C0D5E5030B6CC63F56AB1B44A911D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RDSBQfxG3AGHCHy8hlVumkSe4ec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 04:01:17 +0000
Manifest this update: Sun 29 Mar 2026 04:01:17 +0000
Manifest next update: Mon 30 Mar 2026 04:01:17 +0000
Files and hashes: 1: FZgm-m-tM7etG2QpRA9NtYKJMp0.roa (hash: UQwsai2QfSWLMJ1/MEG9VD0VHu/w7xSrHdqEgRycwjY=)
2: RDSBQfxG3AGHCHy8hlVumkSe4ec.crl (hash: xrLJPwaqpvcPSujuNBC9fr1ZAnW0HRyYJ6Yb3aYl4cM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.mft
rsync://rpki.ripe.net/repository/DEFAULT/RDSBQfxG3AGHCHy8hlVumkSe4ec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:d5:e5:03:0b:6c:c6:3f:56:ab:1b:44:a9:11:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44348141fc46dc0187087cbc86556e9a449ee1e7
Validity
Not Before: Mar 29 04:01:17 2026 GMT
Not After : Mar 30 04:01:17 2026 GMT
Subject: CN=3be6b5bf6d76dfea4490b3e9916f217601f0b008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1e:c6:6c:6e:ea:8a:8f:80:52:54:ba:66:3d:
0c:68:4c:57:61:a1:86:d0:ec:d4:7b:3e:dc:6d:1d:
a1:3e:81:92:bd:da:f7:a6:3d:b6:0f:e5:9f:55:47:
d0:41:5b:3c:11:05:bb:90:f5:e6:a2:ae:8d:ef:69:
d8:14:39:8c:7e:07:0a:52:a8:e8:ae:24:90:9c:38:
5c:ab:78:1f:35:d6:52:7d:67:97:d3:1a:4f:f1:a0:
3f:86:24:bd:5e:75:c5:13:98:0d:25:29:2f:57:b7:
f7:3c:16:22:50:1e:71:bd:78:cc:78:c7:a5:7a:e2:
48:0e:ec:66:f1:8e:77:bd:42:4a:4a:66:4a:49:99:
d9:f7:98:27:63:a5:74:e8:7f:80:d8:3c:00:09:77:
27:68:50:72:39:01:98:e7:8c:5b:e4:3a:99:21:bc:
4e:b4:92:a2:e3:a6:9f:fc:68:3e:8f:8a:75:3a:f2:
7e:68:1a:ec:ef:cf:7d:f9:82:df:8b:e7:60:ba:a7:
a2:bb:06:8a:56:89:38:ae:d1:24:50:d6:25:a9:d8:
d2:94:f1:16:9a:a3:0d:6a:f9:f4:b9:13:a4:69:6b:
3c:62:f8:3a:4f:44:1a:49:88:74:8d:12:1e:17:a5:
57:85:7b:42:1b:17:60:72:b1:ff:6f:97:c0:ba:9b:
01:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E6:B5:BF:6D:76:DF:EA:44:90:B3:E9:91:6F:21:76:01:F0:B0:08
X509v3 Authority Key Identifier:
keyid:44:34:81:41:FC:46:DC:01:87:08:7C:BC:86:55:6E:9A:44:9E:E1:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDSBQfxG3AGHCHy8hlVumkSe4ec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:ee:80:b9:5a:ab:9a:9a:45:9e:cf:68:13:29:2d:f2:05:d8:
3c:b0:f5:8e:fc:c0:11:df:5d:e6:2e:86:47:f9:08:6e:d1:f4:
a1:f4:8f:0c:37:e4:69:b5:82:96:17:e0:ba:ca:d5:ec:44:7c:
bd:1f:6a:c9:46:59:6d:96:a4:56:70:e8:fb:31:cb:8f:55:87:
9d:4c:95:80:5a:c6:73:c6:5f:c9:f3:09:d9:36:41:f8:c3:0a:
21:82:3d:83:a0:d5:37:d6:c7:8d:ac:21:62:e6:f1:d0:a3:70:
10:1c:2b:8d:5b:39:a7:9c:94:e2:99:f4:7c:02:f8:17:34:b9:
97:a6:88:b6:a1:f4:5c:87:68:2e:25:e5:6e:0f:97:e9:1a:18:
d2:a1:bd:56:c3:9a:27:35:2f:6e:75:d2:f3:02:7d:a5:20:87:
64:84:20:87:50:d1:e5:9a:2b:7f:26:1b:9d:91:4f:20:11:ce:
f8:c0:c4:b4:59:86:b7:39:e4:a6:62:89:cd:0f:ae:a3:e2:e3:
34:f8:09:42:6a:1f:26:2a:61:00:fa:35:f1:ea:b1:88:5f:88:
b1:eb:7e:0b:0a:46:62:35:b8:b8:10:f9:a2:42:90:c5:b5:e4:
cc:4c:be:2a:d8:3f:2d:0c:85:b4:84:7d:a6:70:12:fd:df:46:
b5:23:cf:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wNXlAwtsxj9WqxtEqRHVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0MzQ4MTQxZmM0NmRjMDE4NzA4N2NiYzg2NTU2ZTlhNDQ5
ZWUxZTcwHhcNMjYwMzI5MDQwMTE3WhcNMjYwMzMwMDQwMTE3WjAzMTEwLwYDVQQD
EygzYmU2YjViZjZkNzZkZmVhNDQ5MGIzZTk5MTZmMjE3NjAxZjBiMDA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuh7GbG7qio+AUlS6Zj0MaExXYaGG
0OzUez7cbR2hPoGSvdr3pj22D+WfVUfQQVs8EQW7kPXmoq6N72nYFDmMfgcKUqjo
riSQnDhcq3gfNdZSfWeX0xpP8aA/hiS9XnXFE5gNJSkvV7f3PBYiUB5xvXjMeMel
euJIDuxm8Y53vUJKSmZKSZnZ95gnY6V06H+A2DwACXcnaFByOQGY54xb5DqZIbxO
tJKi46af/Gg+j4p1OvJ+aBrs7899+YLfi+dguqeiuwaKVok4rtEkUNYlqdjSlPEW
mqMNavn0uROkaWs8Yvg6T0QaSYh0jRIeF6VXhXtCGxdgcrH/b5fAupsB8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDvmtb9tdt/qRJCz6ZFvIXYB8LAIMB8GA1UdIwQY
MBaAFEQ0gUH8RtwBhwh8vIZVbppEnuHnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkRTQlFmeEczQUdIQ0h5OGhsVnVta1NlNGVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8yMmZhNDItYjAyZi00MzExLTkwZmIt
NDVhMTEyYTFlN2FjLzEvUkRTQlFmeEczQUdIQ0h5OGhsVnVta1NlNGVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8yMmZhNDItYjAyZi00MzExLTkwZmItNDVhMTEyYTFlN2Fj
LzEvUkRTQlFmeEczQUdIQ0h5OGhsVnVta1NlNGVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbu6AuVqr
mppFns9oEykt8gXYPLD1jvzAEd9d5i6GR/kIbtH0ofSPDDfkabWClhfgusrV7ER8
vR9qyUZZbZakVnDo+zHLj1WHnUyVgFrGc8ZfyfMJ2TZB+MMKIYI9g6DVN9bHjawh
Yubx0KNwEBwrjVs5p5yU4pn0fAL4FzS5l6aItqH0XIdoLiXlbg+X6RoY0qG9VsOa
JzUvbnXS8wJ9pSCHZIQgh1DR5ZorfyYbnZFPIBHO+MDEtFmGtznkpmKJzQ+uo+Lj
NPgJQmofJiphAPo18eqxiF+Iset+CwpGYjW4uBD5okKQxbXkzEy+Ktg/LQyFtIR9
pnAS/d9GtSPPYA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:03:42 2026 by rpki-client