Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft
File: _nB-d2cwwsLsumue6VchKtWNXNs.mft (raw, json)
Hash identifier: yPX1/d0FNh7SgpeRz1CoP2b8MFqu2QP90MJnxHNzhY0=
Subject key identifier: E3:82:06:18:A7:57:35:96:C3:23:C2:6C:62:BC:58:2F:78:07:CB:4E
Authority key identifier: FE:70:7E:77:67:30:C2:C2:EC:BA:6B:9E:E9:57:21:2A:D5:8D:5C:DB
Certificate issuer: /CN=fe707e776730c2c2ecba6b9ee957212ad58d5cdb
Certificate serial: 019D389C335D59B8AD854D3D91022F7DFB83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft
Manifest number: 0F65
Signing time: Sun 29 Mar 2026 08:00:53 +0000
Manifest this update: Sun 29 Mar 2026 08:00:53 +0000
Manifest next update: Mon 30 Mar 2026 08:00:53 +0000
Files and hashes: 1: DMGubU8hxCTGRODvSctDVfieplo.roa (hash: Phcij8bggmf+/AXpZc+JPHtEh1M9qDukJgittDIR+o0=)
2: _nB-d2cwwsLsumue6VchKtWNXNs.crl (hash: 65vqG9oYp/5zBHdRcdN+Rk45/1Y5raeoyfDiBfKKOV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:33:5d:59:b8:ad:85:4d:3d:91:02:2f:7d:fb:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe707e776730c2c2ecba6b9ee957212ad58d5cdb
Validity
Not Before: Mar 29 08:00:53 2026 GMT
Not After : Mar 30 08:00:53 2026 GMT
Subject: CN=e3820618a7573596c323c26c62bc582f7807cb4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a3:c8:10:99:df:d9:11:99:90:5a:00:ed:48:
01:ee:1f:9d:5f:3f:24:c8:89:12:c9:4a:19:45:7c:
fc:5f:c3:6e:e4:69:7e:f0:f7:df:45:ca:f5:06:6d:
51:eb:c2:ab:e3:2b:ab:9d:ab:df:20:12:d0:b4:ae:
e7:ef:40:2e:56:45:5f:c3:20:8b:29:80:98:f1:ce:
ad:de:8b:86:62:dd:00:57:ed:9a:66:42:6f:94:90:
32:f5:6b:cb:f1:cd:fe:ee:b4:0b:de:b1:33:cf:ea:
bd:2f:cb:9e:a1:69:b3:1f:1d:6a:5f:61:b7:48:75:
c1:4b:7b:54:9c:e9:b1:17:11:5f:b4:b6:35:79:b7:
bd:70:a4:64:52:e2:f7:b8:3d:80:c0:dd:5b:43:c0:
f4:b7:48:65:bd:a7:0a:ba:16:2b:8f:6c:2a:2b:e8:
8e:f1:3c:14:8c:54:f7:29:5e:ab:81:09:4d:68:c2:
59:8d:dd:21:83:f2:87:cc:51:e3:e3:07:ad:6e:bc:
53:80:9a:77:20:15:93:66:88:42:84:31:06:d8:36:
8d:2a:a6:47:7f:bc:43:97:ea:33:39:9a:b0:2b:34:
97:5b:83:82:eb:7a:48:4c:8c:e5:19:74:00:f3:1d:
32:2a:fb:a0:fb:7b:0e:ff:46:6c:89:8f:79:62:78:
e2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:82:06:18:A7:57:35:96:C3:23:C2:6C:62:BC:58:2F:78:07:CB:4E
X509v3 Authority Key Identifier:
keyid:FE:70:7E:77:67:30:C2:C2:EC:BA:6B:9E:E9:57:21:2A:D5:8D:5C:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:da:18:2d:3f:05:80:23:2e:c0:df:5c:94:cb:c3:7f:fb:b6:
23:d3:50:d2:b6:c2:52:e4:57:72:b4:b0:68:59:25:52:11:ad:
ea:0f:16:87:1f:e8:4b:91:8c:4f:b0:c3:db:56:f0:2c:f6:bc:
5d:06:bc:da:18:ff:65:f7:de:31:10:3d:57:56:12:e5:b1:c3:
d8:05:a1:e0:03:5f:c6:09:d8:e4:76:20:ed:9a:48:02:b6:45:
fa:8f:17:b2:02:7e:e5:87:d3:3e:ab:20:49:12:e4:c8:fa:59:
ea:cf:dc:d0:09:9d:60:22:41:60:a5:f4:d7:f0:07:78:ed:f4:
65:95:01:7a:6a:32:39:53:96:b5:06:71:54:e8:c9:26:ab:f7:
da:34:84:e1:f6:26:96:99:43:3e:69:01:dd:02:9b:fc:a9:e7:
81:3d:8f:8b:9f:70:fc:5c:0f:26:43:53:a1:71:81:54:3b:ef:
5c:f1:33:f8:52:b4:b4:4e:94:32:0b:21:c2:f5:22:90:27:d3:
24:ef:b5:4e:69:92:1c:4b:aa:97:ba:fa:84:71:28:a4:3b:ea:
a4:ca:30:26:c7:7a:b5:b9:cb:df:14:d8:29:b5:6c:c1:fe:eb:
09:13:ae:66:cf:1b:f9:2e:79:0c:c5:47:73:11:7c:0e:0a:59:
ee:af:37:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nDNdWbithU09kQIvffuDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNzA3ZTc3NjczMGMyYzJlY2JhNmI5ZWU5NTcyMTJhZDU4
ZDVjZGIwHhcNMjYwMzI5MDgwMDUzWhcNMjYwMzMwMDgwMDUzWjAzMTEwLwYDVQQD
EyhlMzgyMDYxOGE3NTczNTk2YzMyM2MyNmM2MmJjNTgyZjc4MDdjYjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6PIEJnf2RGZkFoA7UgB7h+dXz8k
yIkSyUoZRXz8X8Nu5Gl+8PffRcr1Bm1R68Kr4yurnavfIBLQtK7n70AuVkVfwyCL
KYCY8c6t3ouGYt0AV+2aZkJvlJAy9WvL8c3+7rQL3rEzz+q9L8ueoWmzHx1qX2G3
SHXBS3tUnOmxFxFftLY1ebe9cKRkUuL3uD2AwN1bQ8D0t0hlvacKuhYrj2wqK+iO
8TwUjFT3KV6rgQlNaMJZjd0hg/KHzFHj4wetbrxTgJp3IBWTZohChDEG2DaNKqZH
f7xDl+ozOZqwKzSXW4OC63pITIzlGXQA8x0yKvug+3sO/0ZsiY95YnjiiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOOCBhinVzWWwyPCbGK8WC94B8tOMB8GA1UdIwQY
MBaAFP5wfndnMMLC7LprnulXISrVjVzbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX25CLWQyY3d3c0xzdW11ZTZWY2hLdFdOWE5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81ZmJkYTYtYmZjZS00ZDlkLWE0ZGIt
ODcxNTQwMzMwODU5LzEvX25CLWQyY3d3c0xzdW11ZTZWY2hLdFdOWE5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC81ZmJkYTYtYmZjZS00ZDlkLWE0ZGItODcxNTQwMzMwODU5
LzEvX25CLWQyY3d3c0xzdW11ZTZWY2hLdFdOWE5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgNoYLT8F
gCMuwN9clMvDf/u2I9NQ0rbCUuRXcrSwaFklUhGt6g8Whx/oS5GMT7DD21bwLPa8
XQa82hj/ZffeMRA9V1YS5bHD2AWh4ANfxgnY5HYg7ZpIArZF+o8XsgJ+5YfTPqsg
SRLkyPpZ6s/c0AmdYCJBYKX01/AHeO30ZZUBemoyOVOWtQZxVOjJJqv32jSE4fYm
lplDPmkB3QKb/KnngT2Pi59w/FwPJkNToXGBVDvvXPEz+FK0tE6UMgshwvUikCfT
JO+1TmmSHEuql7r6hHEopDvqpMowJsd6tbnL3xTYKbVswf7rCROuZs8b+S55DMVH
cxF8DgpZ7q83tg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:34 2026 by rpki-client