Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft
File: rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft (raw, json)
Hash identifier: J0eoiiwhCwWerkc+VYs1C3G05AfoCAVi0pHARjJf1XM=
Subject key identifier: CF:F6:99:7F:BA:72:7D:6E:E8:C6:AB:A3:D2:DB:11:08:34:10:4A:9D
Authority key identifier: AC:67:C9:3B:82:25:D0:4C:37:61:C1:3C:EF:EE:5F:83:29:35:8E:23
Certificate issuer: /CN=ac67c93b8225d04c3761c13cefee5f8329358e23
Certificate serial: 019D371BF16270A74722EEBB0F04B0F64A86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft
Manifest number: 18A2
Signing time: Sun 29 Mar 2026 01:01:11 +0000
Manifest this update: Sun 29 Mar 2026 01:01:11 +0000
Manifest next update: Mon 30 Mar 2026 01:01:11 +0000
Files and hashes: 1: 9yXjetA_9LZJZxTsSX9y22ZXwZI.roa (hash: lMfThegQdVTCBwkXRaAXX4LmXRlXKEgH0ZgEcCTMjEk=)
2: WcITaUECKrRS-00UJB2toA0EWBA.roa (hash: 7Dbd0N6O8xlvKSw9ngaRpgSG6WpLRxBISHsmkzDSkD8=)
3: ldmxJAkKvmlHgUpkQnhFLSPjlKg.roa (hash: f+2m7+QBQ2xNK66onBBuHDLsOd1zJ2s1AavJSLAavCU=)
4: rGfJO4Il0Ew3YcE87-5fgyk1jiM.crl (hash: X4bZn89MJoi2DGePHv65hOYjwZp81Z1Rm6D736tcpdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:f1:62:70:a7:47:22:ee:bb:0f:04:b0:f6:4a:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac67c93b8225d04c3761c13cefee5f8329358e23
Validity
Not Before: Mar 29 01:01:11 2026 GMT
Not After : Mar 30 01:01:11 2026 GMT
Subject: CN=cff6997fba727d6ee8c6aba3d2db110834104a9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:d9:3d:5a:14:34:9f:96:43:6d:b4:88:46:3c:
ad:44:f4:09:bd:cd:dc:f8:51:bb:92:5f:8a:46:33:
56:02:1e:31:e1:c6:b6:95:27:bb:4c:26:aa:44:05:
fe:ec:15:74:6a:0f:9a:69:82:df:e2:ee:4f:11:01:
48:66:45:8b:ff:29:56:f9:10:41:81:ff:3d:2b:df:
ee:44:e2:6b:34:58:79:80:c0:ea:3c:26:e3:e8:20:
b2:78:92:f1:98:1b:9d:3e:0f:ed:6b:90:d1:5d:0f:
c2:32:72:fa:4d:55:1a:6d:1f:50:30:4e:c4:1e:ef:
3f:d3:0a:bc:53:a8:b6:3a:e7:3d:07:58:2e:5a:d1:
cf:60:03:1f:21:a2:9d:32:a6:64:28:9b:53:8a:af:
d4:59:05:ba:d1:2b:99:58:f8:4a:b0:d9:74:02:9e:
07:04:13:37:bd:07:2d:45:59:03:39:34:5e:03:07:
cb:47:6f:40:52:86:e4:f9:97:3a:f8:8b:f0:b2:d9:
1d:08:fa:db:b9:e1:0b:d6:4f:45:9f:fd:6e:ad:02:
b9:b6:6d:d9:cf:aa:8d:2e:ef:1f:af:bc:dc:21:36:
67:92:cf:ab:7f:17:32:18:d3:2b:62:b3:29:fc:c8:
86:f8:5b:e1:8b:c9:1a:11:3e:5b:6d:8a:fe:9b:60:
d9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F6:99:7F:BA:72:7D:6E:E8:C6:AB:A3:D2:DB:11:08:34:10:4A:9D
X509v3 Authority Key Identifier:
keyid:AC:67:C9:3B:82:25:D0:4C:37:61:C1:3C:EF:EE:5F:83:29:35:8E:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:c0:3a:62:79:00:f4:0a:b8:f8:4b:51:68:2e:f4:7a:32:2a:
93:24:97:17:be:c4:c0:dc:72:70:37:9c:19:28:46:0c:c6:2e:
78:99:de:36:09:96:fe:cc:53:90:8b:6a:c9:5a:8f:f1:22:84:
5e:08:7f:76:83:a6:87:d5:af:65:36:8b:0d:c6:da:ca:42:eb:
e1:f4:14:d2:cb:94:48:2c:f3:fa:a6:84:65:8c:41:c0:ec:01:
99:89:a6:0e:7e:f5:55:c5:df:80:1b:71:4d:d1:74:7e:9b:40:
c5:54:88:5e:00:df:ff:e1:66:bd:e3:2e:4d:0d:26:a7:84:16:
cb:ab:5c:12:a3:e1:65:35:64:47:b8:16:ab:8c:36:4c:1f:2b:
8c:7d:00:f9:a2:3f:c4:b6:1b:6d:2c:05:5b:a0:96:a8:11:44:
ee:c7:be:93:1e:8d:45:96:62:26:59:9f:d7:a3:a7:5a:33:0a:
1b:86:5e:ac:3c:27:77:04:69:09:ed:bf:80:f3:28:be:ce:7d:
c6:15:27:8f:b7:52:e5:6d:e8:42:04:08:2e:37:70:67:e1:38:
c4:9b:7e:2f:1d:69:70:87:90:a6:5d:17:73:24:1b:e9:8a:1d:
df:d2:66:21:99:d5:92:88:bd:d8:1f:a8:06:b9:3d:2b:d0:40:
bd:48:8f:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03G/FicKdHIu67DwSw9kqGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjNjdjOTNiODIyNWQwNGMzNzYxYzEzY2VmZWU1ZjgzMjkz
NThlMjMwHhcNMjYwMzI5MDEwMTExWhcNMjYwMzMwMDEwMTExWjAzMTEwLwYDVQQD
EyhjZmY2OTk3ZmJhNzI3ZDZlZThjNmFiYTNkMmRiMTEwODM0MTA0YTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7tk9WhQ0n5ZDbbSIRjytRPQJvc3c
+FG7kl+KRjNWAh4x4ca2lSe7TCaqRAX+7BV0ag+aaYLf4u5PEQFIZkWL/ylW+RBB
gf89K9/uROJrNFh5gMDqPCbj6CCyeJLxmBudPg/ta5DRXQ/CMnL6TVUabR9QME7E
Hu8/0wq8U6i2Ouc9B1guWtHPYAMfIaKdMqZkKJtTiq/UWQW60SuZWPhKsNl0Ap4H
BBM3vQctRVkDOTReAwfLR29AUobk+Zc6+IvwstkdCPrbueEL1k9Fn/1urQK5tm3Z
z6qNLu8fr7zcITZnks+rfxcyGNMrYrMp/MiG+Fvhi8kaET5bbYr+m2DZbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM/2mX+6cn1u6Maro9LbEQg0EEqdMB8GA1UdIwQY
MBaAFKxnyTuCJdBMN2HBPO/uX4MpNY4jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckdmSk80SWwwRXczWWNFODctNWZneWsxamlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9hYzhlNmYtNWY4My00NDliLThjOWQt
NzdjMTA0ODQyMmQ4LzEvckdmSk80SWwwRXczWWNFODctNWZneWsxamlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9hYzhlNmYtNWY4My00NDliLThjOWQtNzdjMTA0ODQyMmQ4
LzEvckdmSk80SWwwRXczWWNFODctNWZneWsxamlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHsA6YnkA
9Aq4+EtRaC70ejIqkySXF77EwNxycDecGShGDMYueJneNgmW/sxTkItqyVqP8SKE
Xgh/doOmh9WvZTaLDcbaykLr4fQU0suUSCzz+qaEZYxBwOwBmYmmDn71VcXfgBtx
TdF0fptAxVSIXgDf/+FmveMuTQ0mp4QWy6tcEqPhZTVkR7gWq4w2TB8rjH0A+aI/
xLYbbSwFW6CWqBFE7se+kx6NRZZiJlmf16OnWjMKG4ZerDwndwRpCe2/gPMovs59
xhUnj7dS5W3oQgQILjdwZ+E4xJt+Lx1pcIeQpl0XcyQb6Yod39JmIZnVkoi92B+o
Brk9K9BAvUiPUw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:26 2026 by rpki-client