Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft
File: v85V0V6xGeUtb6_NOXPi9tTyI_I.mft (raw, json)
Hash identifier: 2f1gzQGFSBPTzuvzSwOAbFwHkMVEzsWmBsimC/lTt7E=
Subject key identifier: 53:15:0D:EB:61:EB:AC:2A:D4:1F:9A:C0:A1:9B:54:F5:AE:05:1D:E6
Authority key identifier: BF:CE:55:D1:5E:B1:19:E5:2D:6F:AF:CD:39:73:E2:F6:D4:F2:23:F2
Certificate issuer: /CN=bfce55d15eb119e52d6fafcd3973e2f6d4f223f2
Certificate serial: 019D37C03BC11D90F68B3CF64EF4C749B69D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v85V0V6xGeUtb6_NOXPi9tTyI_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 04:00:38 +0000
Manifest this update: Sun 29 Mar 2026 04:00:38 +0000
Manifest next update: Mon 30 Mar 2026 04:00:38 +0000
Files and hashes: 1: OflZg6TFsEKRZGwqwFjxO_4uzgA.roa (hash: 9iTUJuItwJxSzT9lJ39rRuHUjdkumJ61tcp/ZIi1CnM=)
2: v85V0V6xGeUtb6_NOXPi9tTyI_I.crl (hash: YIsaJumrou6MODIl/vj5cqVcaXdKXMF0Db+8SWEfMPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/v85V0V6xGeUtb6_NOXPi9tTyI_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:3b:c1:1d:90:f6:8b:3c:f6:4e:f4:c7:49:b6:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfce55d15eb119e52d6fafcd3973e2f6d4f223f2
Validity
Not Before: Mar 29 04:00:38 2026 GMT
Not After : Mar 30 04:00:38 2026 GMT
Subject: CN=53150deb61ebac2ad41f9ac0a19b54f5ae051de6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:9c:3f:ad:fa:15:3a:91:aa:2f:1d:8b:1a:2e:
66:ae:4b:e6:1e:ae:bd:90:f4:49:86:90:fa:71:a1:
0e:29:d8:6d:14:f0:b4:19:ce:9f:7d:6b:ae:4a:00:
81:3a:b8:0a:3f:e2:aa:39:37:22:13:42:c7:05:f0:
c1:25:8e:2c:42:f7:8b:08:de:96:76:4d:15:f4:1d:
43:5f:98:0e:42:49:90:61:04:26:09:62:ab:77:9f:
65:f8:79:76:c2:3f:2e:40:49:36:14:9e:5b:c7:d7:
77:a4:70:25:bd:6a:f9:67:69:ca:c0:17:cd:a6:1e:
d6:ff:e0:18:59:41:63:ee:8a:5e:82:3a:06:f6:45:
c4:e3:f2:b7:bd:ed:eb:d6:d2:0c:7d:d8:aa:f3:30:
6e:85:fc:74:b8:2c:03:07:24:aa:ed:cc:80:bb:e9:
b0:9e:ef:fd:e8:7d:af:29:63:b2:92:27:33:55:c2:
3d:2e:df:bb:bc:52:f1:55:98:3e:39:5a:5c:6f:90:
6d:91:cb:a0:e9:0b:9b:2e:43:8d:be:a0:9f:6e:11:
5f:82:b0:32:0a:a8:1f:d4:9b:c3:df:b2:22:46:91:
64:49:43:8d:a1:b8:57:66:02:68:c1:43:59:ab:34:
f5:0c:1d:58:2a:81:28:c5:84:7a:95:d8:e1:d9:75:
9b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:15:0D:EB:61:EB:AC:2A:D4:1F:9A:C0:A1:9B:54:F5:AE:05:1D:E6
X509v3 Authority Key Identifier:
keyid:BF:CE:55:D1:5E:B1:19:E5:2D:6F:AF:CD:39:73:E2:F6:D4:F2:23:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v85V0V6xGeUtb6_NOXPi9tTyI_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:b4:b4:b7:b1:ca:e4:69:77:79:bd:7f:a1:e0:52:3a:92:8a:
18:88:a6:8b:c1:e4:63:4b:44:27:98:34:ce:1a:b6:67:40:54:
82:74:de:06:ae:d6:c4:97:3e:3c:31:83:cc:af:9a:a1:a3:64:
11:9e:0e:42:3a:86:f1:c3:e2:3e:05:17:1f:d0:2a:ce:3d:e0:
f6:b4:90:41:00:1a:ae:62:e7:51:8c:4d:e3:6f:76:54:94:1a:
c8:3a:f0:c3:fc:a3:ac:bd:fa:ce:ee:ab:e1:9d:32:8a:a6:03:
9f:ec:0e:70:30:5f:4b:13:2e:b4:98:4f:35:b2:e9:be:85:17:
d2:cb:01:da:32:38:c8:1c:f0:13:19:e4:f3:b4:46:af:1d:ef:
ce:05:58:1f:77:c7:28:2c:a6:ff:a9:c5:8a:53:1e:c1:d0:ae:
8e:7e:91:ed:0d:a7:f2:dd:7e:e9:2f:98:ad:ee:6f:8e:c2:54:
27:af:01:16:6e:a2:dd:94:4a:a0:3b:bf:f4:2d:28:7d:17:d7:
5a:01:4b:a1:73:a7:12:8a:3f:18:eb:dd:49:49:53:74:dd:96:
1c:20:47:ef:e2:a7:36:98:93:1a:73:98:8f:d7:b9:2f:3b:17:
45:3c:a9:48:79:e3:30:7e:83:af:07:28:25:a3:f8:98:10:99:
ca:60:b1:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wDvBHZD2izz2TvTHSbadMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmY2U1NWQxNWViMTE5ZTUyZDZmYWZjZDM5NzNlMmY2ZDRm
MjIzZjIwHhcNMjYwMzI5MDQwMDM4WhcNMjYwMzMwMDQwMDM4WjAzMTEwLwYDVQQD
Eyg1MzE1MGRlYjYxZWJhYzJhZDQxZjlhYzBhMTliNTRmNWFlMDUxZGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA45w/rfoVOpGqLx2LGi5mrkvmHq69
kPRJhpD6caEOKdhtFPC0Gc6ffWuuSgCBOrgKP+KqOTciE0LHBfDBJY4sQveLCN6W
dk0V9B1DX5gOQkmQYQQmCWKrd59l+Hl2wj8uQEk2FJ5bx9d3pHAlvWr5Z2nKwBfN
ph7W/+AYWUFj7opegjoG9kXE4/K3ve3r1tIMfdiq8zBuhfx0uCwDBySq7cyAu+mw
nu/96H2vKWOykiczVcI9Lt+7vFLxVZg+OVpcb5Btkcug6QubLkONvqCfbhFfgrAy
Cqgf1JvD37IiRpFkSUONobhXZgJowUNZqzT1DB1YKoEoxYR6ldjh2XWb7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFMVDeth66wq1B+awKGbVPWuBR3mMB8GA1UdIwQY
MBaAFL/OVdFesRnlLW+vzTlz4vbU8iPyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjg1VjBWNnhHZVV0YjZfTk9YUGk5dFR5SV9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9lY2U1YzctMjE0My00ZGI0LTk4NTct
MDUyY2YwMWQyMDQ4LzEvdjg1VjBWNnhHZVV0YjZfTk9YUGk5dFR5SV9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9lY2U1YzctMjE0My00ZGI0LTk4NTctMDUyY2YwMWQyMDQ4
LzEvdjg1VjBWNnhHZVV0YjZfTk9YUGk5dFR5SV9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuLS0t7HK
5Gl3eb1/oeBSOpKKGIimi8HkY0tEJ5g0zhq2Z0BUgnTeBq7WxJc+PDGDzK+aoaNk
EZ4OQjqG8cPiPgUXH9Aqzj3g9rSQQQAarmLnUYxN4292VJQayDrww/yjrL36zu6r
4Z0yiqYDn+wOcDBfSxMutJhPNbLpvoUX0ssB2jI4yBzwExnk87RGrx3vzgVYH3fH
KCym/6nFilMewdCujn6R7Q2n8t1+6S+Yre5vjsJUJ68BFm6i3ZRKoDu/9C0ofRfX
WgFLoXOnEoo/GOvdSUlTdN2WHCBH7+KnNpiTGnOYj9e5LzsXRTypSHnjMH6Drwco
JaP4mBCZymCxYA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:30 2026 by rpki-client