Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft
File: R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft (raw, json)
Hash identifier: hIdOHPrbiX3Xo74qYz2QEcTwqsvoCW3PXEu59OJs5as=
Subject key identifier: 7D:1E:7D:28:7D:68:F7:D7:41:34:86:4B:F0:87:CD:DD:4A:E3:7A:90
Authority key identifier: 47:8D:24:89:8D:1C:F5:2D:23:F9:56:1D:C6:AC:0F:13:63:E6:C7:60
Certificate issuer: /CN=478d24898d1cf52d23f9561dc6ac0f1363e6c760
Certificate serial: 019D382E89816A4A4C67D2C4F760D9D1977F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R40kiY0c9S0j-VYdxqwPE2Pmx2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 06:01:07 +0000
Manifest this update: Sun 29 Mar 2026 06:01:07 +0000
Manifest next update: Mon 30 Mar 2026 06:01:07 +0000
Files and hashes: 1: R40kiY0c9S0j-VYdxqwPE2Pmx2A.crl (hash: f1/i63ThSWb2DmzX+TZWBBoKFCXgGAdGAMj7h79cHzU=)
2: wkMmp6s5tIiVOMhQ-G1Z3odbkBA.roa (hash: E+8cABzHZlQUHHuKZ16h6fJZng3ckrzig4shYxP7eeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/R40kiY0c9S0j-VYdxqwPE2Pmx2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:89:81:6a:4a:4c:67:d2:c4:f7:60:d9:d1:97:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=478d24898d1cf52d23f9561dc6ac0f1363e6c760
Validity
Not Before: Mar 29 06:01:07 2026 GMT
Not After : Mar 30 06:01:07 2026 GMT
Subject: CN=7d1e7d287d68f7d74134864bf087cddd4ae37a90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:24:93:32:60:a9:f8:47:a9:a6:25:3d:28:79:
59:4a:d6:ff:53:26:d0:f0:ca:1d:bb:cf:59:d2:ae:
de:c2:fd:3a:dc:60:f8:d3:8c:c7:2e:15:a9:fa:b4:
29:b2:a7:ad:3f:91:1c:3e:c5:9c:23:67:6d:14:31:
a7:a0:fd:5c:6e:09:77:a2:2a:10:26:78:e2:3c:f3:
cd:53:63:b6:42:8b:8b:54:a6:10:0c:1a:ea:fe:5b:
ee:27:a4:a2:fc:d3:9b:08:0e:ca:c3:b8:37:d9:5a:
ca:e4:22:3b:ce:73:25:0d:a1:99:74:05:9f:ba:fa:
4a:cd:8b:36:90:b4:88:4e:52:1b:4e:77:ab:33:17:
07:c2:a7:bd:74:3f:43:40:22:91:29:11:db:49:10:
ad:cd:bc:10:98:ea:bc:81:33:6d:dc:0b:0b:5b:a8:
a7:4c:37:21:9a:56:85:7a:6e:09:2c:16:ee:ea:24:
15:34:f6:2f:c5:6c:a3:80:f7:6e:dc:2d:fc:5a:46:
7a:a1:3b:91:ce:af:16:73:83:79:7d:3f:92:69:28:
51:55:b6:cb:ce:24:6f:55:2a:85:52:bd:4f:d7:8f:
05:bc:9e:7a:87:eb:22:d6:04:a5:98:20:67:39:d2:
75:e4:0d:94:6f:50:1c:9e:4f:ce:3f:9b:6b:21:25:
e2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:1E:7D:28:7D:68:F7:D7:41:34:86:4B:F0:87:CD:DD:4A:E3:7A:90
X509v3 Authority Key Identifier:
keyid:47:8D:24:89:8D:1C:F5:2D:23:F9:56:1D:C6:AC:0F:13:63:E6:C7:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R40kiY0c9S0j-VYdxqwPE2Pmx2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:f3:40:6d:01:f0:4d:1c:b9:ad:09:7d:de:47:b4:bc:b8:87:
b3:f4:58:ed:2a:ac:a4:de:e6:43:41:42:13:02:ad:c2:8f:70:
2e:ed:56:bf:39:eb:03:1e:83:b3:bf:80:86:1e:95:ef:46:5f:
50:ee:c2:9c:c2:82:d2:5b:63:d6:fb:70:67:17:d0:b6:07:b5:
04:63:e7:77:bd:1a:f6:9a:c3:b9:4e:94:67:ec:70:d9:21:f6:
db:19:2b:bd:6b:cb:d4:1c:9a:ac:b2:eb:e0:94:3e:e8:f7:28:
3b:41:b7:2e:ab:bb:6d:64:88:45:d4:4f:76:c6:e8:28:34:7d:
75:a6:b4:38:fc:0a:99:df:45:1a:39:b0:48:3e:41:fb:ac:2d:
6d:1c:e6:d8:37:26:a6:c0:49:2a:3b:38:04:42:60:f9:b5:09:
4c:b2:81:8d:3a:d0:f9:a4:0b:e8:e4:7d:7a:1b:20:83:2b:5a:
e2:31:59:fa:37:3d:ce:a6:66:c3:e8:8c:e8:16:02:22:4e:07:
68:ea:31:b6:c5:bc:31:ac:c3:ab:e9:a5:bd:58:a1:61:07:06:
7c:7c:fd:c8:a7:c3:68:22:8c:9e:f7:4f:51:47:a4:8e:d3:9d:
bb:96:da:60:18:8a:37:b9:28:00:9b:c0:28:d4:19:4a:dc:d8:
f0:db:dd:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LomBakpMZ9LE92DZ0Zd/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3OGQyNDg5OGQxY2Y1MmQyM2Y5NTYxZGM2YWMwZjEzNjNl
NmM3NjAwHhcNMjYwMzI5MDYwMTA3WhcNMjYwMzMwMDYwMTA3WjAzMTEwLwYDVQQD
Eyg3ZDFlN2QyODdkNjhmN2Q3NDEzNDg2NGJmMDg3Y2RkZDRhZTM3YTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSSTMmCp+EeppiU9KHlZStb/UybQ
8Modu89Z0q7ewv063GD404zHLhWp+rQpsqetP5EcPsWcI2dtFDGnoP1cbgl3oioQ
JnjiPPPNU2O2QouLVKYQDBrq/lvuJ6Si/NObCA7Kw7g32VrK5CI7znMlDaGZdAWf
uvpKzYs2kLSITlIbTnerMxcHwqe9dD9DQCKRKRHbSRCtzbwQmOq8gTNt3AsLW6in
TDchmlaFem4JLBbu6iQVNPYvxWyjgPdu3C38WkZ6oTuRzq8Wc4N5fT+SaShRVbbL
ziRvVSqFUr1P148FvJ56h+si1gSlmCBnOdJ15A2Ub1Acnk/OP5trISXiGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH0efSh9aPfXQTSGS/CHzd1K43qQMB8GA1UdIwQY
MBaAFEeNJImNHPUtI/lWHcasDxNj5sdgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjQwa2lZMGM5UzBqLVZZZHhxd1BFMlBteDJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy82Y2I3MmQtNDVhNy00NDkwLTljNTkt
OTNlYWQzNWExMmNhLzEvUjQwa2lZMGM5UzBqLVZZZHhxd1BFMlBteDJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy82Y2I3MmQtNDVhNy00NDkwLTljNTktOTNlYWQzNWExMmNh
LzEvUjQwa2lZMGM5UzBqLVZZZHhxd1BFMlBteDJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEvNAbQHw
TRy5rQl93ke0vLiHs/RY7SqspN7mQ0FCEwKtwo9wLu1WvznrAx6Ds7+Ahh6V70Zf
UO7CnMKC0ltj1vtwZxfQtge1BGPnd70a9prDuU6UZ+xw2SH22xkrvWvL1ByarLLr
4JQ+6PcoO0G3Lqu7bWSIRdRPdsboKDR9daa0OPwKmd9FGjmwSD5B+6wtbRzm2Dcm
psBJKjs4BEJg+bUJTLKBjTrQ+aQL6OR9ehsggyta4jFZ+jc9zqZmw+iM6BYCIk4H
aOoxtsW8MazDq+mlvVihYQcGfHz9yKfDaCKMnvdPUUekjtOdu5baYBiKN7koAJvA
KNQZStzY8NvdTQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:26 2026 by rpki-client