Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.mft
File: rPbqD_sq7k927hoQSJabi1Bl2kU.mft (raw, json)
Hash identifier: XebQYmYptMn8yLcSxuzIkFw4wXwVMmT2NOKt6zmS4AY=
Subject key identifier: 8A:6C:42:2F:66:18:76:FA:86:10:1A:26:1A:E8:48:ED:98:21:89:86
Authority key identifier: AC:F6:EA:0F:FB:2A:EE:4F:76:EE:1A:10:48:96:9B:8B:50:65:DA:45
Certificate issuer: /CN=acf6ea0ffb2aee4f76ee1a1048969b8b5065da45
Certificate serial: 019D39780D24650841A357AFC0B6CCB9649E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.mft
Manifest number: 0C51
Signing time: Sun 29 Mar 2026 12:01:02 +0000
Manifest this update: Sun 29 Mar 2026 12:01:02 +0000
Manifest next update: Mon 30 Mar 2026 12:01:02 +0000
Files and hashes: 1: CXD8wfMhKiKiO997lKcwfqvgnd4.roa (hash: GXzecNWlAWU/oBfDZ4cMgGfToo/UFOLMCS/xikLLiZA=)
2: Nj5WcVxMsB8s2IvjCOfX6OYyL9c.roa (hash: rf5S758DEbKW96IfUMXXqn9C0gkyLzbP4cr3lVYPPio=)
3: p5jfW6ha4amA42QcQVPgAaZ9Pmw.roa (hash: hdqNSuQrQNGkaTv7LpPhrSIwMr6CxzgGsrUQLxZoMvg=)
4: rPbqD_sq7k927hoQSJabi1Bl2kU.crl (hash: l8S0ptBs1vTKLwjVjYTuoxZ9x5qbG0+H7k309Iv6DJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:78:0d:24:65:08:41:a3:57:af:c0:b6:cc:b9:64:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acf6ea0ffb2aee4f76ee1a1048969b8b5065da45
Validity
Not Before: Mar 29 12:01:02 2026 GMT
Not After : Mar 30 12:01:02 2026 GMT
Subject: CN=8a6c422f661876fa86101a261ae848ed98218986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b1:0f:15:58:25:92:85:f3:fc:c3:a9:95:d8:
be:e0:4c:64:99:df:d7:0d:02:a0:35:bc:33:3d:2f:
36:7d:40:0f:bb:4d:06:cf:53:a4:b8:bf:a4:4c:e1:
8a:6f:ff:64:b2:e5:07:35:d0:94:63:e6:f4:ec:2e:
70:c4:c8:72:60:3a:c0:4d:35:23:3f:5e:ab:d2:1a:
86:a1:4f:a9:8f:96:ee:bf:5e:24:36:9b:9e:8e:c1:
12:3d:ee:24:94:99:8d:0f:3e:14:f7:ee:d5:9d:9e:
6e:cb:3d:90:d1:55:e0:a7:d3:15:73:5d:92:d5:c2:
c3:52:c1:52:e3:b0:6e:fe:96:df:25:ac:5f:d2:ce:
7c:5a:05:d7:02:ab:55:8a:af:8d:5b:7a:c9:10:2c:
5f:7e:83:45:c3:f9:12:35:7d:74:16:18:d8:86:b1:
c5:81:05:ff:7e:be:c0:74:5a:6e:c7:17:34:49:b1:
f2:ef:fd:d6:f0:d6:b4:92:be:9e:ab:66:d6:20:88:
2d:e3:84:87:1e:60:34:ee:7a:3d:83:7b:f1:ea:22:
fe:be:be:3b:2e:25:a6:70:78:4b:95:9b:02:2b:61:
55:ac:79:18:5c:94:4d:28:2b:55:7d:7c:b9:b1:af:
a9:a3:d0:47:86:37:42:2b:8c:4f:a6:f2:de:22:94:
fd:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:6C:42:2F:66:18:76:FA:86:10:1A:26:1A:E8:48:ED:98:21:89:86
X509v3 Authority Key Identifier:
keyid:AC:F6:EA:0F:FB:2A:EE:4F:76:EE:1A:10:48:96:9B:8B:50:65:DA:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:2e:67:a5:c1:04:43:6c:0f:e2:ec:ef:84:57:38:af:e4:b8:
2a:91:d2:bc:f1:13:c1:e0:03:30:30:a1:35:51:e2:62:f9:ed:
72:d8:be:62:44:58:e2:65:70:9f:8a:f2:c3:51:72:64:a7:00:
14:37:15:40:9f:c1:7d:b9:63:fa:ef:08:c5:95:b8:6e:2c:79:
0f:bc:d4:bd:71:3d:94:fb:16:44:1a:0a:e0:1a:e4:07:0b:e4:
e7:4a:f5:71:ec:24:3a:74:21:72:bd:f4:ea:5b:4e:6f:6b:fc:
81:87:2d:93:4b:2c:d9:38:9c:28:d5:d4:19:25:7a:bc:9b:9d:
60:98:cd:a1:44:a3:58:fd:17:14:c9:a8:79:14:b1:af:93:99:
73:4d:bd:f8:ba:14:d8:dc:3b:30:2f:15:0d:82:ff:ce:7c:37:
a5:94:11:fb:71:d5:2c:5f:90:2e:93:14:1a:d0:9f:73:f7:82:
cf:bb:6e:b4:73:6a:f6:c8:40:0e:21:fc:cf:35:26:f4:09:84:
71:6b:bf:0c:2c:5b:ee:d1:56:a4:2e:be:09:dc:ce:77:36:fe:
c3:ce:be:fd:4c:bd:3f:de:70:f4:da:7c:87:79:01:88:04:05:
5d:b2:4c:24:3e:ae:32:eb:fc:c9:b6:be:c5:56:a4:03:2d:87:
e5:08:b1:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05eA0kZQhBo1evwLbMuWSeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjZjZlYTBmZmIyYWVlNGY3NmVlMWExMDQ4OTY5YjhiNTA2
NWRhNDUwHhcNMjYwMzI5MTIwMTAyWhcNMjYwMzMwMTIwMTAyWjAzMTEwLwYDVQQD
Eyg4YTZjNDIyZjY2MTg3NmZhODYxMDFhMjYxYWU4NDhlZDk4MjE4OTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bEPFVglkoXz/MOpldi+4Exkmd/X
DQKgNbwzPS82fUAPu00Gz1OkuL+kTOGKb/9ksuUHNdCUY+b07C5wxMhyYDrATTUj
P16r0hqGoU+pj5buv14kNpuejsESPe4klJmNDz4U9+7VnZ5uyz2Q0VXgp9MVc12S
1cLDUsFS47Bu/pbfJaxf0s58WgXXAqtViq+NW3rJECxffoNFw/kSNX10FhjYhrHF
gQX/fr7AdFpuxxc0SbHy7/3W8Na0kr6eq2bWIIgt44SHHmA07no9g3vx6iL+vr47
LiWmcHhLlZsCK2FVrHkYXJRNKCtVfXy5sa+po9BHhjdCK4xPpvLeIpT9VQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIpsQi9mGHb6hhAaJhroSO2YIYmGMB8GA1UdIwQY
MBaAFKz26g/7Ku5Pdu4aEEiWm4tQZdpFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclBicURfc3E3azkyN2hvUVNKYWJpMUJsMmtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8zNDQzOWUtOWNkMi00NGM1LTljZmQt
NTU1ZjNmMThlNTRmLzEvclBicURfc3E3azkyN2hvUVNKYWJpMUJsMmtVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi8zNDQzOWUtOWNkMi00NGM1LTljZmQtNTU1ZjNmMThlNTRm
LzEvclBicURfc3E3azkyN2hvUVNKYWJpMUJsMmtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARy5npcEE
Q2wP4uzvhFc4r+S4KpHSvPETweADMDChNVHiYvntcti+YkRY4mVwn4ryw1FyZKcA
FDcVQJ/Bfblj+u8IxZW4bix5D7zUvXE9lPsWRBoK4BrkBwvk50r1cewkOnQhcr30
6ltOb2v8gYctk0ss2TicKNXUGSV6vJudYJjNoUSjWP0XFMmoeRSxr5OZc029+LoU
2Nw7MC8VDYL/znw3pZQR+3HVLF+QLpMUGtCfc/eCz7tutHNq9shADiH8zzUm9AmE
cWu/DCxb7tFWpC6+CdzOdzb+w86+/Uy9P95w9Np8h3kBiAQFXbJMJD6uMuv8yba+
xVakAy2H5QixJw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:25:16 2026 by rpki-client