Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
File: CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft (raw, json)
Hash identifier: HWcVC+KWBm0lSlSGddSiKsFlKzrV8jErvhGyl5GvorI=
Subject key identifier: 3C:9D:64:7C:CD:9C:B3:0E:90:2A:A3:5A:15:BF:5D:67:19:63:6B:73
Authority key identifier: 0A:B3:66:68:89:3A:82:44:D5:53:EF:CA:46:88:D0:F1:01:9E:4E:25
Certificate issuer: /CN=0ab36668893a8244d553efca4688d0f1019e4e25
Certificate serial: 019D382DE8403C3FFED371D73290324E590C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
Manifest number: 182C
Signing time: Sun 29 Mar 2026 06:00:25 +0000
Manifest this update: Sun 29 Mar 2026 06:00:25 +0000
Manifest next update: Mon 30 Mar 2026 06:00:25 +0000
Files and hashes: 1: 0vUi9Ds7lR5ez_iB-H5z8Ibu_oU.roa (hash: odBVQf5CTONo7ECDi0W2aiY2l10V9TC9k1dYuEgLfXs=)
2: CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl (hash: ZPYsZp0RVFAQm4uUsJ60XWoexL0V1OEzuCar+3+e67o=)
3: RGc5fLjcJNmYdApzBeBRT1sTX8U.roa (hash: uNISFL+Bf976cPDti8VfFL3EbAdAai6udEnq+KK5wTU=)
4: sd_bm3gEOw7-0JVpKG8yK2OptLc.roa (hash: vdK8pGyhUzW2rMUKQmqHoaPCdID9Elq/G9yRotJFgFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:e8:40:3c:3f:fe:d3:71:d7:32:90:32:4e:59:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab36668893a8244d553efca4688d0f1019e4e25
Validity
Not Before: Mar 29 06:00:25 2026 GMT
Not After : Mar 30 06:00:25 2026 GMT
Subject: CN=3c9d647ccd9cb30e902aa35a15bf5d6719636b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b8:de:82:2d:ca:4b:22:3e:57:e5:4d:41:7f:
71:52:a7:bf:20:e6:92:b9:b9:cc:ea:94:c0:33:3b:
a6:b8:ea:e7:0b:d4:e7:07:be:24:6e:3f:18:de:6b:
f6:e8:17:91:e8:bb:6f:29:b7:7e:8b:b5:0f:3f:d8:
2a:a1:9f:c9:b0:c1:bb:af:de:36:b2:d8:2e:aa:77:
ae:41:7a:ee:36:62:5c:f8:bf:34:30:95:7b:15:5b:
a5:f0:b0:d3:4b:12:aa:3a:b5:23:0e:83:ce:8a:9f:
d5:73:06:4f:b1:68:a2:c8:41:f9:65:53:4a:cb:15:
be:6d:7c:ee:29:9a:be:a7:27:0e:f8:ab:2d:f7:ad:
6c:04:36:76:a8:78:0c:9c:c2:e2:cd:06:43:c1:7a:
f1:4e:21:06:a9:95:cb:2d:c8:06:2e:cb:1b:d2:3a:
ab:b5:98:be:a0:32:d0:70:0e:e4:54:5f:00:e2:ba:
9f:83:1c:93:a9:d0:d3:e1:91:3b:b7:b0:8e:d0:c2:
f5:e1:07:91:53:54:ec:ba:8d:18:69:b5:6e:0e:83:
05:84:27:b3:aa:eb:97:ab:8a:a3:3c:24:2c:80:e7:
a8:e0:6d:1d:06:e0:d7:be:cf:ca:01:3f:5a:9d:46:
43:3a:3d:00:9e:86:a7:74:60:f6:74:3c:0b:42:50:
e1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:9D:64:7C:CD:9C:B3:0E:90:2A:A3:5A:15:BF:5D:67:19:63:6B:73
X509v3 Authority Key Identifier:
keyid:0A:B3:66:68:89:3A:82:44:D5:53:EF:CA:46:88:D0:F1:01:9E:4E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:e9:7b:88:0a:4e:b8:8d:fb:d4:86:00:6e:b9:0f:95:83:44:
5b:a7:f2:83:3f:57:4a:46:3c:d7:7d:00:a7:1b:4b:1c:c1:13:
ac:b3:a4:25:35:1b:5b:0d:49:3c:ab:4e:b8:89:0f:01:24:76:
50:60:a2:b1:65:08:5f:3a:25:e9:6b:f5:82:b4:3a:ad:51:d8:
28:75:a5:57:fb:d5:ce:8b:c1:10:b9:12:30:2a:8d:2d:eb:51:
ff:dc:37:d1:b3:ba:14:4a:12:e8:32:5d:19:fa:33:be:a8:9c:
25:8a:cc:ef:b3:48:ee:88:33:0a:27:cc:4b:74:8c:36:cd:74:
e7:a5:49:71:3f:f4:b5:fe:72:8a:f3:b8:4d:27:8b:99:bf:06:
d6:e3:d5:4d:1f:10:48:46:a8:d0:9a:e9:6e:f4:d6:01:89:f4:
61:47:6e:95:af:33:a4:93:43:3f:a1:7a:24:ae:dd:aa:6e:22:
a0:6e:f5:f1:4b:31:9f:72:da:cd:e2:d5:98:2f:f1:24:f8:16:
bc:c5:c5:58:86:f5:31:37:ba:c3:55:fb:c8:91:b9:77:9f:0e:
37:d7:1c:cb:fc:c2:3d:2e:95:ff:43:60:2e:1f:d5:3f:a7:4f:
03:71:1b:97:db:82:91:0d:70:fd:c4:3c:0d:6a:08:33:51:1d:
6b:0c:4b:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LehAPD/+03HXMpAyTlkMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhYjM2NjY4ODkzYTgyNDRkNTUzZWZjYTQ2ODhkMGYxMDE5
ZTRlMjUwHhcNMjYwMzI5MDYwMDI1WhcNMjYwMzMwMDYwMDI1WjAzMTEwLwYDVQQD
EygzYzlkNjQ3Y2NkOWNiMzBlOTAyYWEzNWExNWJmNWQ2NzE5NjM2YjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbjegi3KSyI+V+VNQX9xUqe/IOaS
ubnM6pTAMzumuOrnC9TnB74kbj8Y3mv26BeR6LtvKbd+i7UPP9gqoZ/JsMG7r942
stguqneuQXruNmJc+L80MJV7FVul8LDTSxKqOrUjDoPOip/VcwZPsWiiyEH5ZVNK
yxW+bXzuKZq+pycO+Kst961sBDZ2qHgMnMLizQZDwXrxTiEGqZXLLcgGLssb0jqr
tZi+oDLQcA7kVF8A4rqfgxyTqdDT4ZE7t7CO0ML14QeRU1Tsuo0YabVuDoMFhCez
quuXq4qjPCQsgOeo4G0dBuDXvs/KAT9anUZDOj0AnoandGD2dDwLQlDhqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDydZHzNnLMOkCqjWhW/XWcZY2tzMB8GA1UdIwQY
MBaAFAqzZmiJOoJE1VPvykaI0PEBnk4lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3JObWFJazZna1RWVS1fS1JvalE4UUdlVGlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9lNTc1MDMtZjY1OC00M2UyLTkzYTkt
MmFmMDY3YTEzMGFhLzEvQ3JObWFJazZna1RWVS1fS1JvalE4UUdlVGlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS9lNTc1MDMtZjY1OC00M2UyLTkzYTktMmFmMDY3YTEzMGFh
LzEvQ3JObWFJazZna1RWVS1fS1JvalE4UUdlVGlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlul7iApO
uI371IYAbrkPlYNEW6fygz9XSkY8130ApxtLHMETrLOkJTUbWw1JPKtOuIkPASR2
UGCisWUIXzol6Wv1grQ6rVHYKHWlV/vVzovBELkSMCqNLetR/9w30bO6FEoS6DJd
GfozvqicJYrM77NI7ogzCifMS3SMNs1056VJcT/0tf5yivO4TSeLmb8G1uPVTR8Q
SEao0JrpbvTWAYn0YUdula8zpJNDP6F6JK7dqm4ioG718Usxn3LazeLVmC/xJPgW
vMXFWIb1MTe6w1X7yJG5d58ON9ccy/zCPS6V/0NgLh/VP6dPA3Ebl9uCkQ1w/cQ8
DWoIM1EdawxL4A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:13:06 2026 by rpki-client