Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
File: dPEFnCc8UO3PPc7fxYABUuyR26I.mft (raw, json)
Hash identifier: Qvgv/fraA2EF03xAgDtT5diFxtHGtCzQKDCa2ZFbvHA=
Subject key identifier: CF:CF:91:4F:0E:4A:4E:A6:1E:26:C9:34:CF:E1:E2:13:23:A0:21:F2
Authority key identifier: 74:F1:05:9C:27:3C:50:ED:CF:3D:CE:DF:C5:80:01:52:EC:91:DB:A2
Certificate issuer: /CN=74f1059c273c50edcf3dcedfc5800152ec91dba2
Certificate serial: 019D378972571B6BE2F1BC06C87A85971E43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 03:00:47 +0000
Manifest this update: Sun 29 Mar 2026 03:00:47 +0000
Manifest next update: Mon 30 Mar 2026 03:00:47 +0000
Files and hashes: 1: 4zHqkXwTdPpErUuwool8-zX-SB4.roa (hash: LHnM5v5Sz1IzlHeFp2joapwPeszU3VAj2kHXfdYdwu4=)
2: dPEFnCc8UO3PPc7fxYABUuyR26I.crl (hash: UdDKBVNcEXq0LrtYyBDqfDWKKsBACuloL8mu+CWfjlg=)
3: f_myMJMSIIWO9m-PmHiygg0XXSs.roa (hash: 3LE3GccOE6KqVlj9DZ+EFPId6e66LFjW7NsGN3ZdmPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:72:57:1b:6b:e2:f1:bc:06:c8:7a:85:97:1e:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f1059c273c50edcf3dcedfc5800152ec91dba2
Validity
Not Before: Mar 29 03:00:47 2026 GMT
Not After : Mar 30 03:00:47 2026 GMT
Subject: CN=cfcf914f0e4a4ea61e26c934cfe1e21323a021f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:90:b1:43:fb:90:2d:64:e6:c0:51:ce:75:99:
18:70:b1:ce:fc:92:29:03:84:99:03:a8:9a:f5:85:
ad:ae:69:78:f9:23:44:65:55:09:96:4f:13:35:dc:
61:ae:4b:1d:73:db:36:1e:3b:2d:b3:08:6c:85:b7:
92:77:09:b5:24:4b:d1:06:98:24:26:49:4c:bc:d7:
a7:19:dc:46:7c:89:0f:08:a9:57:5a:8d:99:de:1e:
56:9f:b2:2d:ef:28:a9:80:c6:3f:ec:d8:0c:bf:44:
90:d1:d0:4a:41:8d:53:2b:a4:60:43:fd:0e:38:1d:
b9:ce:89:1d:5b:e0:91:52:a9:3f:b2:af:23:3e:6e:
91:c7:fb:0a:85:0a:fd:da:85:9c:df:d1:4b:b0:9a:
cb:cf:f2:99:d2:34:14:88:d3:9e:69:0d:72:bf:3d:
ac:8c:fa:48:35:d3:01:ad:20:3e:23:b3:78:3f:0a:
ae:71:4f:55:8f:3c:f6:41:93:47:d8:cd:59:d7:25:
b4:16:fa:c5:63:f2:ff:82:10:17:f6:97:f6:7e:34:
24:55:12:41:77:ac:58:a3:91:ae:cb:e8:fa:a6:56:
11:0e:43:b6:f2:81:af:15:51:af:ea:52:22:53:28:
14:76:f7:44:19:99:ec:7c:6f:0e:71:8a:86:67:09:
95:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:CF:91:4F:0E:4A:4E:A6:1E:26:C9:34:CF:E1:E2:13:23:A0:21:F2
X509v3 Authority Key Identifier:
keyid:74:F1:05:9C:27:3C:50:ED:CF:3D:CE:DF:C5:80:01:52:EC:91:DB:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:97:91:27:65:2b:94:d4:51:db:af:75:d4:53:5e:da:00:df:
d2:22:1c:a9:3b:c1:55:ca:6e:9b:17:ed:89:e2:ad:8a:35:5e:
54:5f:f9:03:79:14:d6:07:4c:cd:c8:70:28:03:44:7a:fc:10:
b2:ee:a6:eb:79:43:e7:f9:1f:7b:f4:59:ec:20:d2:29:27:41:
50:63:a8:0c:59:f7:57:6d:e8:20:e0:11:66:94:17:3e:91:4f:
50:7c:7e:ba:06:f9:28:cd:41:ad:fb:df:04:d7:64:89:1c:9b:
b0:c3:bf:11:08:67:17:88:01:02:47:5a:c0:6e:a5:15:13:bb:
b9:e3:56:56:ab:eb:3b:18:ba:e3:36:be:ae:e6:08:ae:57:4b:
a0:6a:b1:79:e0:cb:b6:30:38:f9:ac:4f:0c:df:d6:44:df:8c:
23:77:b2:1d:1c:38:86:90:db:64:32:4f:b5:22:08:2f:4a:d5:
d6:3f:bc:f7:d4:ca:bd:ee:e7:58:8d:8c:26:7c:98:7a:0b:0e:
77:ef:05:05:1c:d0:0d:58:90:a5:11:ef:9e:42:8a:bd:bf:58:
bc:b2:2d:b0:47:8c:c1:19:fb:ee:ba:f0:3b:5e:4f:e1:10:6b:
9c:ea:00:44:24:57:4a:39:3a:1f:94:12:cd:0a:78:dd:90:eb:
f9:27:97:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iXJXG2vi8bwGyHqFlx5DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0ZjEwNTljMjczYzUwZWRjZjNkY2VkZmM1ODAwMTUyZWM5
MWRiYTIwHhcNMjYwMzI5MDMwMDQ3WhcNMjYwMzMwMDMwMDQ3WjAzMTEwLwYDVQQD
EyhjZmNmOTE0ZjBlNGE0ZWE2MWUyNmM5MzRjZmUxZTIxMzIzYTAyMWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JCxQ/uQLWTmwFHOdZkYcLHO/JIp
A4SZA6ia9YWtrml4+SNEZVUJlk8TNdxhrksdc9s2HjstswhshbeSdwm1JEvRBpgk
JklMvNenGdxGfIkPCKlXWo2Z3h5Wn7It7yipgMY/7NgMv0SQ0dBKQY1TK6RgQ/0O
OB25zokdW+CRUqk/sq8jPm6Rx/sKhQr92oWc39FLsJrLz/KZ0jQUiNOeaQ1yvz2s
jPpINdMBrSA+I7N4PwqucU9Vjzz2QZNH2M1Z1yW0FvrFY/L/ghAX9pf2fjQkVRJB
d6xYo5Guy+j6plYRDkO28oGvFVGv6lIiUygUdvdEGZnsfG8OcYqGZwmVGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM/PkU8OSk6mHibJNM/h4hMjoCHyMB8GA1UdIwQY
MBaAFHTxBZwnPFDtzz3O38WAAVLskduiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFBFRm5DYzhVTzNQUGM3ZnhZQUJVdXlSMjZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS83MGY4YmItOWEzNy00ZjNlLWE1ODEt
M2VhODE5NGZiNDQ2LzEvZFBFRm5DYzhVTzNQUGM3ZnhZQUJVdXlSMjZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS83MGY4YmItOWEzNy00ZjNlLWE1ODEtM2VhODE5NGZiNDQ2
LzEvZFBFRm5DYzhVTzNQUGM3ZnhZQUJVdXlSMjZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAepeRJ2Ur
lNRR26911FNe2gDf0iIcqTvBVcpumxftieKtijVeVF/5A3kU1gdMzchwKANEevwQ
su6m63lD5/kfe/RZ7CDSKSdBUGOoDFn3V23oIOARZpQXPpFPUHx+ugb5KM1Brfvf
BNdkiRybsMO/EQhnF4gBAkdawG6lFRO7ueNWVqvrOxi64za+ruYIrldLoGqxeeDL
tjA4+axPDN/WRN+MI3eyHRw4hpDbZDJPtSIIL0rV1j+899TKve7nWI2MJnyYegsO
d+8FBRzQDViQpRHvnkKKvb9YvLItsEeMwRn77rrwO15P4RBrnOoARCRXSjk6H5QS
zQp43ZDr+SeXag==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:58 2026 by rpki-client