Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.mft
File: rF6twAMoUCNv7nVutY-_BeExa14.mft (raw, json)
Hash identifier: GphUHB7eEQ4ONMZu2UxItLh5XPVKqTETaL/G1jX00G4=
Subject key identifier: E0:41:87:92:14:1C:4D:EF:70:33:34:8B:5D:FC:69:25:04:ED:17:DA
Authority key identifier: AC:5E:AD:C0:03:28:50:23:6F:EE:75:6E:B5:8F:BF:05:E1:31:6B:5E
Certificate issuer: /CN=ac5eadc0032850236fee756eb58fbf05e1316b5e
Certificate serial: 019D3A537C74602E8FC3C45A54B7E18C8EFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rF6twAMoUCNv7nVutY-_BeExa14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.mft
Manifest number: 1895
Signing time: Sun 29 Mar 2026 16:00:42 +0000
Manifest this update: Sun 29 Mar 2026 16:00:42 +0000
Manifest next update: Mon 30 Mar 2026 16:00:42 +0000
Files and hashes: 1: HtxMXqqhzKqnM-81Q366LSa5VRM.roa (hash: lOeWJNKuBfP6Er8Y1VwMR1oQUbvjX1dy4GlVvc3GRBU=)
2: SmT1BUT7BtnuZLJ6_6jIBBoQ70s.roa (hash: RYBd7FR6OZyKgfNBGxNgxiTa308oNZjB95Z8XVN3KKA=)
3: rF6twAMoUCNv7nVutY-_BeExa14.crl (hash: ym8zZTrSHhw9ZBRRMiNEZSijr/bVaHMVmPw7n9MdH2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.mft
rsync://rpki.ripe.net/repository/DEFAULT/rF6twAMoUCNv7nVutY-_BeExa14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:7c:74:60:2e:8f:c3:c4:5a:54:b7:e1:8c:8e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac5eadc0032850236fee756eb58fbf05e1316b5e
Validity
Not Before: Mar 29 16:00:42 2026 GMT
Not After : Mar 30 16:00:42 2026 GMT
Subject: CN=e0418792141c4def7033348b5dfc692504ed17da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:41:78:24:d9:6a:5c:fb:07:1d:91:fd:02:ba:
a0:a4:5b:79:80:ea:70:19:92:0d:c9:23:d5:1d:fe:
ec:d6:64:e3:38:d8:e5:9c:6e:fd:1c:80:c6:58:90:
cc:50:88:35:cf:9b:43:bd:f9:7e:ff:66:e6:e3:94:
7b:71:63:88:f5:d2:4f:dd:b8:c5:33:8c:e5:3d:10:
31:18:77:25:43:60:97:02:00:08:a6:f8:25:e5:67:
d2:aa:90:ba:4e:20:1d:39:77:9e:bf:fd:1e:2f:8d:
ae:8f:61:a2:f4:26:31:36:ac:70:2d:4b:fd:ff:de:
22:af:c0:58:af:a9:42:dd:67:dc:16:3b:8a:ae:3c:
18:df:b5:49:b1:3f:7f:6c:26:99:4a:4e:c3:f1:ee:
32:aa:4c:be:32:b0:61:81:3f:ba:11:53:3e:37:dc:
08:1a:05:0e:80:e2:12:2c:9c:d6:31:99:49:b1:38:
20:8e:7c:04:51:66:1e:6c:71:52:d0:66:2f:fb:bb:
72:b4:29:1f:88:ac:d0:05:14:27:2a:f3:bc:dd:0c:
45:37:73:83:2a:48:07:aa:db:80:51:2d:29:84:e9:
cd:ef:ac:60:22:d8:15:7f:37:1a:2d:9c:8d:bd:2f:
8d:85:a3:a1:cf:f4:bc:b0:0a:41:af:9b:86:48:08:
58:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:41:87:92:14:1C:4D:EF:70:33:34:8B:5D:FC:69:25:04:ED:17:DA
X509v3 Authority Key Identifier:
keyid:AC:5E:AD:C0:03:28:50:23:6F:EE:75:6E:B5:8F:BF:05:E1:31:6B:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rF6twAMoUCNv7nVutY-_BeExa14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:15:1d:8d:6a:41:7a:b6:3a:f3:c6:ba:97:da:f8:06:82:60:
ea:e5:c4:50:d2:c6:6d:fd:3c:cd:e5:0d:74:30:ed:20:8d:b3:
83:d0:69:eb:8d:ec:5d:98:a0:3b:3c:36:c5:9b:a4:22:e0:28:
8a:42:70:fc:5b:23:01:54:65:07:91:10:f7:92:9b:86:0e:a9:
4e:9e:00:ac:40:03:8d:13:99:2e:72:13:1b:6b:34:01:72:0b:
40:37:14:6e:75:3c:94:8d:27:a1:26:b4:ae:0f:e1:ea:48:b5:
bc:f4:ee:1a:e4:32:90:c6:bb:21:24:fc:92:ac:5c:cd:db:e6:
05:68:85:a4:0d:a7:0b:92:73:39:13:99:34:3f:7d:ce:26:50:
2b:f4:94:f1:61:2e:1f:8b:87:ed:18:07:91:ca:93:d9:26:78:
2d:91:78:bb:89:8d:58:e7:04:44:f2:05:ea:a1:29:69:c9:92:
56:ea:e2:6d:af:08:a4:24:16:38:ae:7b:e1:17:4f:ca:05:3f:
20:11:6e:c4:83:95:64:ef:a9:96:7d:4d:30:24:70:90:13:67:
fa:70:6d:a6:e2:37:51:de:0d:b9:34:a0:8a:5d:45:e4:22:09:
b4:d7:65:89:2c:24:7a:8a:e1:96:3b:e7:eb:5d:9f:54:df:a9:
38:32:d4:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06U3x0YC6Pw8RaVLfhjI7/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjNWVhZGMwMDMyODUwMjM2ZmVlNzU2ZWI1OGZiZjA1ZTEz
MTZiNWUwHhcNMjYwMzI5MTYwMDQyWhcNMjYwMzMwMTYwMDQyWjAzMTEwLwYDVQQD
EyhlMDQxODc5MjE0MWM0ZGVmNzAzMzM0OGI1ZGZjNjkyNTA0ZWQxN2RhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kF4JNlqXPsHHZH9ArqgpFt5gOpw
GZINySPVHf7s1mTjONjlnG79HIDGWJDMUIg1z5tDvfl+/2bm45R7cWOI9dJP3bjF
M4zlPRAxGHclQ2CXAgAIpvgl5WfSqpC6TiAdOXeev/0eL42uj2Gi9CYxNqxwLUv9
/94ir8BYr6lC3WfcFjuKrjwY37VJsT9/bCaZSk7D8e4yqky+MrBhgT+6EVM+N9wI
GgUOgOISLJzWMZlJsTggjnwEUWYebHFS0GYv+7tytCkfiKzQBRQnKvO83QxFN3OD
KkgHqtuAUS0phOnN76xgItgVfzcaLZyNvS+NhaOhz/S8sApBr5uGSAhYxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOBBh5IUHE3vcDM0i138aSUE7RfaMB8GA1UdIwQY
MBaAFKxercADKFAjb+51brWPvwXhMWteMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckY2dHdBTW9VQ052N25WdXRZLV9CZUV4YTE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi81Mjk3NWYtZmViMi00MzNiLWIyZGMt
YzIzOGNlNDgxN2RiLzEvckY2dHdBTW9VQ052N25WdXRZLV9CZUV4YTE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi81Mjk3NWYtZmViMi00MzNiLWIyZGMtYzIzOGNlNDgxN2Ri
LzEvckY2dHdBTW9VQ052N25WdXRZLV9CZUV4YTE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJhUdjWpB
erY688a6l9r4BoJg6uXEUNLGbf08zeUNdDDtII2zg9Bp643sXZigOzw2xZukIuAo
ikJw/FsjAVRlB5EQ95Kbhg6pTp4ArEADjROZLnITG2s0AXILQDcUbnU8lI0noSa0
rg/h6ki1vPTuGuQykMa7IST8kqxczdvmBWiFpA2nC5JzOROZND99ziZQK/SU8WEu
H4uH7RgHkcqT2SZ4LZF4u4mNWOcERPIF6qEpacmSVuriba8IpCQWOK574RdPygU/
IBFuxIOVZO+pln1NMCRwkBNn+nBtpuI3Ud4NuTSgil1F5CIJtNdliSwkeorhljvn
612fVN+pODLUGQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:12:55 2026 by rpki-client