Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.mft
File: p5860xQqLAL5krlqsLm2OQr3_gI.mft (raw, json)
Hash identifier: BvRGUj7qhtGvVJI3Ycu4oBikJYBb9+FDvYhuLyC4H5g=
Subject key identifier: DE:E2:D5:7C:D9:7E:5E:AC:92:BC:A2:1A:47:BD:1C:8A:98:10:E7:17
Authority key identifier: A7:9F:3A:D3:14:2A:2C:02:F9:92:B9:6A:B0:B9:B6:39:0A:F7:FE:02
Certificate issuer: /CN=a79f3ad3142a2c02f992b96ab0b9b6390af7fe02
Certificate serial: 019D37C0458F60D9027028DCA74246625BCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5860xQqLAL5krlqsLm2OQr3_gI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.mft
Manifest number: 08E3
Signing time: Sun 29 Mar 2026 04:00:40 +0000
Manifest this update: Sun 29 Mar 2026 04:00:40 +0000
Manifest next update: Mon 30 Mar 2026 04:00:40 +0000
Files and hashes: 1: JWCAfjjh5zsM89EhT5JBBpHJm28.roa (hash: +D0zzkFTWspOvvhGzzd00EXqwAQzFC2yhaPbQUOWqZU=)
2: p5860xQqLAL5krlqsLm2OQr3_gI.crl (hash: you/juXyIIX7WdGwswpxrSfQvXAd3RTFYAPK2PpaZEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p5860xQqLAL5krlqsLm2OQr3_gI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:45:8f:60:d9:02:70:28:dc:a7:42:46:62:5b:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a79f3ad3142a2c02f992b96ab0b9b6390af7fe02
Validity
Not Before: Mar 29 04:00:40 2026 GMT
Not After : Mar 30 04:00:40 2026 GMT
Subject: CN=dee2d57cd97e5eac92bca21a47bd1c8a9810e717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d2:79:a1:37:a7:a9:82:2f:99:1e:20:a6:7c:
19:35:21:d0:eb:5d:49:22:46:b6:51:9d:26:ef:02:
2b:91:00:ff:c7:6e:50:22:19:96:7d:9b:ae:08:e8:
96:ec:b3:17:55:03:1d:80:10:f2:ae:16:06:ac:ac:
09:4d:9b:19:82:5a:d3:98:48:43:a5:64:ce:c0:68:
fd:46:67:6a:d1:ca:97:1b:c8:eb:0f:7c:23:ee:19:
fb:95:d1:2a:38:1f:84:43:19:7a:19:94:93:d3:8c:
fc:73:da:19:5c:37:53:39:c2:2f:89:04:32:d5:ed:
cc:67:92:09:76:5d:53:34:f4:2f:de:5c:c1:e1:50:
c0:16:55:8d:27:0e:db:2b:d5:d2:49:0f:5c:11:eb:
24:a4:58:6c:2b:38:33:df:9b:92:64:e1:77:70:45:
b3:57:76:a0:2c:71:6e:79:66:70:e8:e5:e2:21:5e:
ac:24:3b:8e:1a:ed:5e:ad:d0:b0:76:8a:69:2a:6b:
f3:6a:98:c4:b8:30:8e:1d:8f:fc:41:46:0e:70:a0:
b6:7c:bd:be:51:c3:05:47:d8:8d:14:61:b4:16:4f:
00:47:a7:d8:35:e8:a9:43:f9:e9:96:b8:ab:07:2e:
3d:39:5b:d8:0a:b7:52:dd:c4:36:c6:4a:2b:07:54:
5a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:E2:D5:7C:D9:7E:5E:AC:92:BC:A2:1A:47:BD:1C:8A:98:10:E7:17
X509v3 Authority Key Identifier:
keyid:A7:9F:3A:D3:14:2A:2C:02:F9:92:B9:6A:B0:B9:B6:39:0A:F7:FE:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5860xQqLAL5krlqsLm2OQr3_gI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6363ce-c8a0-4961-ae80-d5a785517bbf/1/p5860xQqLAL5krlqsLm2OQr3_gI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:87:cc:04:44:92:02:75:7c:37:28:89:36:4f:b9:b8:7b:9b:
b8:1b:22:e3:e8:44:7c:72:f8:8e:96:e4:f5:27:0e:37:c5:24:
e5:4e:cd:1d:b1:93:4d:df:82:c6:6c:99:42:b2:78:e3:82:d8:
9a:c3:31:dc:b8:ed:e8:30:83:be:fa:8c:7f:01:ba:2d:28:d5:
0f:a6:df:93:cb:40:a2:99:73:55:36:fa:7b:fd:1a:70:a5:45:
89:de:6d:5a:cd:d5:68:14:1c:8d:15:11:76:7d:7b:98:69:e6:
b7:cf:0f:3f:e6:3d:5d:f3:54:b9:9f:bb:c9:81:27:84:a4:ea:
e2:d1:3b:ac:3b:83:fc:97:23:93:89:38:74:e5:24:37:27:fc:
e3:53:51:ca:69:18:01:89:1a:10:be:ec:6e:0c:d7:73:e0:05:
7c:0b:fa:1f:b9:16:24:7a:76:2f:2b:33:d5:f1:0a:59:de:fb:
ce:d1:0b:31:bd:35:07:a4:b0:64:f0:da:29:c2:3a:3f:9b:22:
33:8e:5a:86:93:2f:94:15:c3:1f:79:c0:8e:4c:2e:27:d2:b0:
63:e4:b3:cd:bc:11:07:ac:62:35:23:f7:d6:e8:14:11:79:47:
af:95:5d:8a:d6:f4:53:06:39:b0:1d:f9:10:05:c5:36:78:2b:
9c:49:3d:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wEWPYNkCcCjcp0JGYlvMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3OWYzYWQzMTQyYTJjMDJmOTkyYjk2YWIwYjliNjM5MGFm
N2ZlMDIwHhcNMjYwMzI5MDQwMDQwWhcNMjYwMzMwMDQwMDQwWjAzMTEwLwYDVQQD
EyhkZWUyZDU3Y2Q5N2U1ZWFjOTJiY2EyMWE0N2JkMWM4YTk4MTBlNzE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNJ5oTenqYIvmR4gpnwZNSHQ611J
Ika2UZ0m7wIrkQD/x25QIhmWfZuuCOiW7LMXVQMdgBDyrhYGrKwJTZsZglrTmEhD
pWTOwGj9Rmdq0cqXG8jrD3wj7hn7ldEqOB+EQxl6GZST04z8c9oZXDdTOcIviQQy
1e3MZ5IJdl1TNPQv3lzB4VDAFlWNJw7bK9XSSQ9cEeskpFhsKzgz35uSZOF3cEWz
V3agLHFueWZw6OXiIV6sJDuOGu1erdCwdoppKmvzapjEuDCOHY/8QUYOcKC2fL2+
UcMFR9iNFGG0Fk8AR6fYNeipQ/nplrirBy49OVvYCrdS3cQ2xkorB1RaRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN7i1XzZfl6skryiGke9HIqYEOcXMB8GA1UdIwQY
MBaAFKefOtMUKiwC+ZK5arC5tjkK9/4CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDU4NjB4UXFMQUw1a3JscXNMbTJPUXIzX2dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi82MzYzY2UtYzhhMC00OTYxLWFlODAt
ZDVhNzg1NTE3YmJmLzEvcDU4NjB4UXFMQUw1a3JscXNMbTJPUXIzX2dJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi82MzYzY2UtYzhhMC00OTYxLWFlODAtZDVhNzg1NTE3YmJm
LzEvcDU4NjB4UXFMQUw1a3JscXNMbTJPUXIzX2dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOYfMBESS
AnV8NyiJNk+5uHubuBsi4+hEfHL4jpbk9ScON8Uk5U7NHbGTTd+CxmyZQrJ444LY
msMx3Ljt6DCDvvqMfwG6LSjVD6bfk8tAoplzVTb6e/0acKVFid5tWs3VaBQcjRUR
dn17mGnmt88PP+Y9XfNUuZ+7yYEnhKTq4tE7rDuD/Jcjk4k4dOUkNyf841NRymkY
AYkaEL7sbgzXc+AFfAv6H7kWJHp2Lysz1fEKWd77ztELMb01B6SwZPDaKcI6P5si
M45ahpMvlBXDH3nAjkwuJ9KwY+SzzbwRB6xiNSP31ugUEXlHr5Vditb0UwY5sB35
EAXFNngrnEk9EQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:43 2026 by rpki-client