Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.mft
File: p0j74dfTpqpHTeQ_qIXOLQkcUps.mft (raw, json)
Hash identifier: o/etTXxGgA8M7QGjBFVyn00oR1tBC7gNU7PsPnVf0LE=
Subject key identifier: 59:D4:A5:5A:C1:AF:57:74:0E:F1:6A:DA:B5:F8:F0:0A:4F:55:7B:7D
Authority key identifier: A7:48:FB:E1:D7:D3:A6:AA:47:4D:E4:3F:A8:85:CE:2D:09:1C:52:9B
Certificate issuer: /CN=a748fbe1d7d3a6aa474de43fa885ce2d091c529b
Certificate serial: 019D382EBD1152DAFBC3768EE9EAEC9E4EC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0j74dfTpqpHTeQ_qIXOLQkcUps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.mft
Manifest number: 15E1
Signing time: Sun 29 Mar 2026 06:01:20 +0000
Manifest this update: Sun 29 Mar 2026 06:01:20 +0000
Manifest next update: Mon 30 Mar 2026 06:01:20 +0000
Files and hashes: 1: X2Acde_AXJbiIzf4WSQxKTMikWM.roa (hash: BQtrWQacm7ByC/7TCno2qFJsSN/6VxyfhO1qrX07bW4=)
2: p0j74dfTpqpHTeQ_qIXOLQkcUps.crl (hash: T4Q62SdnmeBBEfJe0aqeZmV8614/AUyjH+N4GQTXryc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.mft
rsync://rpki.ripe.net/repository/DEFAULT/p0j74dfTpqpHTeQ_qIXOLQkcUps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:bd:11:52:da:fb:c3:76:8e:e9:ea:ec:9e:4e:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a748fbe1d7d3a6aa474de43fa885ce2d091c529b
Validity
Not Before: Mar 29 06:01:20 2026 GMT
Not After : Mar 30 06:01:20 2026 GMT
Subject: CN=59d4a55ac1af57740ef16adab5f8f00a4f557b7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:47:3e:16:2b:db:74:5a:88:34:f5:c2:3f:67:
e2:0a:60:c8:80:e5:83:24:4b:c3:c3:dc:5e:9e:9f:
46:7e:6e:5c:42:7a:e3:f3:25:a8:68:54:a1:f3:04:
df:69:5e:96:04:a9:18:e6:c1:cc:c9:8d:4b:58:5a:
89:90:ee:f4:ff:06:97:93:fa:26:25:dd:22:e5:8c:
b5:72:d7:c0:a6:7a:e1:e6:80:4d:07:c6:d9:fb:b1:
7b:17:38:b6:29:db:43:37:a3:9e:7e:b5:56:1a:bb:
2e:b4:61:5c:d1:c7:41:21:87:66:b5:bc:6c:da:20:
2d:46:93:55:54:fb:90:d6:38:bc:de:71:16:de:78:
55:3f:3a:86:c4:7a:92:d9:73:cb:f5:9b:1a:41:18:
bc:20:fd:87:6c:c2:e6:22:d7:d4:02:2b:64:ad:1f:
ff:f7:65:ad:62:98:b1:47:b8:cd:33:36:2e:8a:44:
3a:3f:b6:07:20:7e:90:c9:ba:5b:b4:42:52:ce:39:
be:0b:c7:22:02:f2:9b:01:99:b9:99:7a:d0:2b:a6:
7a:0f:59:d1:08:bc:9c:7c:91:dd:3e:48:08:22:7f:
99:ff:70:e3:55:8b:68:56:ed:3f:46:b1:d7:6f:2c:
54:40:1d:9a:c4:2a:23:14:40:ff:86:bb:e6:aa:a5:
59:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D4:A5:5A:C1:AF:57:74:0E:F1:6A:DA:B5:F8:F0:0A:4F:55:7B:7D
X509v3 Authority Key Identifier:
keyid:A7:48:FB:E1:D7:D3:A6:AA:47:4D:E4:3F:A8:85:CE:2D:09:1C:52:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0j74dfTpqpHTeQ_qIXOLQkcUps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:97:a6:ed:84:8f:e0:c3:06:42:7c:87:cc:b5:dd:e8:1b:35:
fa:39:cc:8c:9d:79:3c:4c:0f:8a:cb:93:21:72:8e:f8:ac:78:
91:af:63:58:47:32:70:9a:25:83:8c:0d:fc:43:fc:48:be:bf:
dd:ff:05:df:a2:b6:16:27:24:6d:26:2d:1f:2d:aa:86:aa:6d:
a2:d5:98:5c:ea:08:c4:cf:5b:14:18:0b:54:7e:cc:a8:c3:10:
05:b6:7f:da:eb:7e:33:69:f3:2b:16:d4:4c:9e:c2:3d:d3:1e:
81:ee:9d:78:0f:48:5f:f8:24:01:c9:69:df:4e:5b:fa:e3:33:
b5:14:90:4f:aa:4d:43:11:cc:01:41:16:4c:7c:8e:eb:ad:d1:
0b:a4:06:c4:5e:29:4a:91:95:3c:f3:f3:b5:25:d3:87:3d:e6:
ee:ac:58:5f:0d:0e:63:07:8e:e3:ef:46:ab:96:f3:87:d7:a3:
84:cc:96:53:15:8b:32:e1:b4:e9:19:39:af:06:b3:63:de:7a:
c6:46:52:7b:c6:3c:28:8f:aa:39:8c:e6:c6:41:3f:37:f5:cb:
90:7b:5f:e4:eb:f6:20:b9:7f:a2:2b:85:53:64:cd:56:74:e8:
cf:81:bc:01:72:6d:60:2a:21:8c:d8:75:5e:a6:14:8d:61:93:
48:70:4d:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Lr0RUtr7w3aO6ersnk7FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3NDhmYmUxZDdkM2E2YWE0NzRkZTQzZmE4ODVjZTJkMDkx
YzUyOWIwHhcNMjYwMzI5MDYwMTIwWhcNMjYwMzMwMDYwMTIwWjAzMTEwLwYDVQQD
Eyg1OWQ0YTU1YWMxYWY1Nzc0MGVmMTZhZGFiNWY4ZjAwYTRmNTU3YjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUc+FivbdFqINPXCP2fiCmDIgOWD
JEvDw9xenp9Gfm5cQnrj8yWoaFSh8wTfaV6WBKkY5sHMyY1LWFqJkO70/waXk/om
Jd0i5Yy1ctfApnrh5oBNB8bZ+7F7Fzi2KdtDN6OefrVWGrsutGFc0cdBIYdmtbxs
2iAtRpNVVPuQ1ji83nEW3nhVPzqGxHqS2XPL9ZsaQRi8IP2HbMLmItfUAitkrR//
92WtYpixR7jNMzYuikQ6P7YHIH6QybpbtEJSzjm+C8ciAvKbAZm5mXrQK6Z6D1nR
CLycfJHdPkgIIn+Z/3DjVYtoVu0/RrHXbyxUQB2axCojFED/hrvmqqVZDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFnUpVrBr1d0DvFq2rX48ApPVXt9MB8GA1UdIwQY
MBaAFKdI++HX06aqR03kP6iFzi0JHFKbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDBqNzRkZlRwcXBIVGVRX3FJWE9MUWtjVXBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9hNzIzZDgtZDhjYy00ZTYwLTg1YWIt
NmM5YjVjOWJmYTc1LzEvcDBqNzRkZlRwcXBIVGVRX3FJWE9MUWtjVXBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9hNzIzZDgtZDhjYy00ZTYwLTg1YWItNmM5YjVjOWJmYTc1
LzEvcDBqNzRkZlRwcXBIVGVRX3FJWE9MUWtjVXBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiZem7YSP
4MMGQnyHzLXd6Bs1+jnMjJ15PEwPisuTIXKO+Kx4ka9jWEcycJolg4wN/EP8SL6/
3f8F36K2FickbSYtHy2qhqptotWYXOoIxM9bFBgLVH7MqMMQBbZ/2ut+M2nzKxbU
TJ7CPdMege6deA9IX/gkAclp305b+uMztRSQT6pNQxHMAUEWTHyO663RC6QGxF4p
SpGVPPPztSXThz3m7qxYXw0OYweO4+9Gq5bzh9ejhMyWUxWLMuG06Rk5rwazY956
xkZSe8Y8KI+qOYzmxkE/N/XLkHtf5Ov2ILl/oiuFU2TNVnToz4G8AXJtYCohjNh1
XqYUjWGTSHBNEw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:04 2026 by rpki-client