Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/373414-9ce4-46f5-940e-49c24292e9bd/1/RlDGwCqb3k4XGH8FsOypUEg7-S0.mft
File: RlDGwCqb3k4XGH8FsOypUEg7-S0.mft (raw, json)
Hash identifier: BaaR1Pw4JKaZzdO6PsoS5r3ZNNfBuflNaoCVaaltxzE=
Subject key identifier: 79:9B:26:9E:6D:72:44:EA:CB:76:BB:FA:90:EE:39:71:AA:C6:0D:A5
Authority key identifier: 46:50:C6:C0:2A:9B:DE:4E:17:18:7F:05:B0:EC:A9:50:48:3B:F9:2D
Certificate issuer: /CN=4650c6c02a9bde4e17187f05b0eca950483bf92d
Certificate serial: 019D3A1C71AB3BDFB2C6051542F3086432C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RlDGwCqb3k4XGH8FsOypUEg7-S0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/373414-9ce4-46f5-940e-49c24292e9bd/1/RlDGwCqb3k4XGH8FsOypUEg7-S0.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 15:00:35 +0000
Manifest this update: Sun 29 Mar 2026 15:00:35 +0000
Manifest next update: Mon 30 Mar 2026 15:00:35 +0000
Files and hashes: 1: NmmcVUfgK3TWQwUhMMatVOxVYB4.roa (hash: 9DQYkjCMrtUdnqAskr29sPlJq2qt06fWYtuUEIlYHZc=)
2: RlDGwCqb3k4XGH8FsOypUEg7-S0.crl (hash: DwSg4oCXPeVWV7NQg1X6w0WTM22ODs3zDOg1+pjw0eQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/373414-9ce4-46f5-940e-49c24292e9bd/1/RlDGwCqb3k4XGH8FsOypUEg7-S0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/373414-9ce4-46f5-940e-49c24292e9bd/1/RlDGwCqb3k4XGH8FsOypUEg7-S0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RlDGwCqb3k4XGH8FsOypUEg7-S0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:71:ab:3b:df:b2:c6:05:15:42:f3:08:64:32:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4650c6c02a9bde4e17187f05b0eca950483bf92d
Validity
Not Before: Mar 29 15:00:35 2026 GMT
Not After : Mar 30 15:00:35 2026 GMT
Subject: CN=799b269e6d7244eacb76bbfa90ee3971aac60da5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6b:03:e6:26:62:0a:c4:ea:ff:2c:08:bf:c1:
84:ae:5e:60:9f:77:5b:92:ef:9e:02:82:1d:c7:8c:
a1:b6:48:39:a4:e9:5b:2e:18:bf:06:f0:62:6b:4c:
6b:75:57:6d:4f:e1:89:f0:fb:9c:36:05:0d:fb:fd:
88:0a:0c:b3:eb:c5:4e:53:24:db:5f:8e:11:95:24:
27:34:40:b4:31:91:47:81:41:76:b2:bb:4b:95:ef:
77:6e:cb:bc:0f:eb:02:e1:56:ea:c9:9e:6e:bd:a4:
69:ed:0d:31:cd:19:6e:1f:6a:3b:52:f4:8a:9a:6e:
0c:b5:87:4a:63:32:e8:cd:de:01:f1:9a:5e:a2:70:
6d:5c:2c:2f:49:78:28:1a:ee:4b:8e:18:06:15:9e:
7c:80:8c:bb:40:f1:b1:10:9b:9f:e1:73:e7:3e:65:
22:00:2d:be:72:17:82:cf:35:a3:4a:24:1d:01:95:
20:77:f4:4f:ab:2b:e1:a6:56:24:13:39:fc:41:18:
3e:af:45:6d:1a:54:32:70:df:65:b5:ba:be:53:a2:
b2:d1:09:d7:4f:be:8c:c6:b1:17:87:09:85:61:e4:
59:d1:df:79:ba:18:ea:de:ae:ed:56:4c:bb:5f:53:
45:01:b2:68:87:a3:cb:a5:d1:8c:bb:19:9f:32:ab:
10:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:9B:26:9E:6D:72:44:EA:CB:76:BB:FA:90:EE:39:71:AA:C6:0D:A5
X509v3 Authority Key Identifier:
keyid:46:50:C6:C0:2A:9B:DE:4E:17:18:7F:05:B0:EC:A9:50:48:3B:F9:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RlDGwCqb3k4XGH8FsOypUEg7-S0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/373414-9ce4-46f5-940e-49c24292e9bd/1/RlDGwCqb3k4XGH8FsOypUEg7-S0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/373414-9ce4-46f5-940e-49c24292e9bd/1/RlDGwCqb3k4XGH8FsOypUEg7-S0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:bc:32:2f:e2:a7:cc:ea:70:15:8e:e4:c3:33:97:60:ae:9f:
5a:07:09:92:d2:b6:2d:29:53:05:00:15:d8:20:d6:d9:59:d5:
4e:63:22:14:e0:0f:b7:57:7e:e6:40:3a:bb:19:1c:32:62:ca:
12:a0:fe:f5:40:14:df:e3:62:02:52:f0:38:5f:94:42:f2:b1:
cd:40:cb:ed:50:d6:eb:bd:e9:30:c3:03:94:d0:cb:60:4b:e8:
1e:f2:80:da:50:9b:75:4f:0b:15:08:46:96:5c:52:f5:9e:35:
35:a0:6b:97:e4:9c:46:5f:72:ff:d7:9e:eb:95:1a:87:ef:bd:
cb:17:4a:c2:6f:7b:f8:d7:16:3d:14:3f:8c:4b:fb:ec:5d:75:
fc:d3:78:33:61:39:48:b9:c0:62:c2:25:97:66:15:ca:f6:b9:
eb:87:70:1a:b7:01:2b:58:db:21:2a:1a:f8:cb:28:dc:be:e2:
4b:b3:8a:fd:9a:87:94:5f:b1:c2:20:7f:c1:14:1b:ae:b8:19:
39:80:91:f1:6d:a2:b4:82:7a:66:c9:04:88:cd:63:39:b7:ad:
1e:ff:b6:c9:a1:b6:4d:a0:c7:12:7e:f7:08:4d:17:6e:1a:00:
50:da:b4:ee:e1:71:7b:06:5a:78:ad:97:6b:03:59:26:67:5b:
02:83:5b:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06HHGrO9+yxgUVQvMIZDLEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2NTBjNmMwMmE5YmRlNGUxNzE4N2YwNWIwZWNhOTUwNDgz
YmY5MmQwHhcNMjYwMzI5MTUwMDM1WhcNMjYwMzMwMTUwMDM1WjAzMTEwLwYDVQQD
Eyg3OTliMjY5ZTZkNzI0NGVhY2I3NmJiZmE5MGVlMzk3MWFhYzYwZGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWsD5iZiCsTq/ywIv8GErl5gn3db
ku+eAoIdx4yhtkg5pOlbLhi/BvBia0xrdVdtT+GJ8PucNgUN+/2ICgyz68VOUyTb
X44RlSQnNEC0MZFHgUF2srtLle93bsu8D+sC4VbqyZ5uvaRp7Q0xzRluH2o7UvSK
mm4MtYdKYzLozd4B8ZpeonBtXCwvSXgoGu5LjhgGFZ58gIy7QPGxEJuf4XPnPmUi
AC2+cheCzzWjSiQdAZUgd/RPqyvhplYkEzn8QRg+r0VtGlQycN9ltbq+U6Ky0QnX
T76MxrEXhwmFYeRZ0d95uhjq3q7tVky7X1NFAbJoh6PLpdGMuxmfMqsQIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHmbJp5tckTqy3a7+pDuOXGqxg2lMB8GA1UdIwQY
MBaAFEZQxsAqm95OFxh/BbDsqVBIO/ktMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmxER3dDcWIzazRYR0g4RnNPeXBVRWc3LVMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zNzM0MTQtOWNlNC00NmY1LTk0MGUt
NDljMjQyOTJlOWJkLzEvUmxER3dDcWIzazRYR0g4RnNPeXBVRWc3LVMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8zNzM0MTQtOWNlNC00NmY1LTk0MGUtNDljMjQyOTJlOWJk
LzEvUmxER3dDcWIzazRYR0g4RnNPeXBVRWc3LVMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN7wyL+Kn
zOpwFY7kwzOXYK6fWgcJktK2LSlTBQAV2CDW2VnVTmMiFOAPt1d+5kA6uxkcMmLK
EqD+9UAU3+NiAlLwOF+UQvKxzUDL7VDW673pMMMDlNDLYEvoHvKA2lCbdU8LFQhG
llxS9Z41NaBrl+ScRl9y/9ee65Uah++9yxdKwm97+NcWPRQ/jEv77F11/NN4M2E5
SLnAYsIll2YVyva564dwGrcBK1jbISoa+Mso3L7iS7OK/ZqHlF+xwiB/wRQbrrgZ
OYCR8W2itIJ6ZskEiM1jObetHv+2yaG2TaDHEn73CE0XbhoAUNq07uFxewZaeK2X
awNZJmdbAoNbkw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:50:04 2026 by rpki-client