Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/bce18c-7203-44c9-bec8-df01b4eb25e9/1/ROkQGinJOPhPhgRda-XfSz9Re9E.mft
File: ROkQGinJOPhPhgRda-XfSz9Re9E.mft (raw, json)
Hash identifier: W8Gpf2iUsWs3U/ijqHKGGpVYEBPvS/nRnOkS2t/5+ok=
Subject key identifier: 85:32:D2:44:6F:06:78:4A:E0:82:BD:0C:F6:E7:91:66:98:13:FC:04
Authority key identifier: 44:E9:10:1A:29:C9:38:F8:4F:86:04:5D:6B:E5:DF:4B:3F:51:7B:D1
Certificate issuer: /CN=44e9101a29c938f84f86045d6be5df4b3f517bd1
Certificate serial: 019D3A538B475FE77E52CB6001182F3D1054
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ROkQGinJOPhPhgRda-XfSz9Re9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/bce18c-7203-44c9-bec8-df01b4eb25e9/1/ROkQGinJOPhPhgRda-XfSz9Re9E.mft
Manifest number: 035B
Signing time: Sun 29 Mar 2026 16:00:46 +0000
Manifest this update: Sun 29 Mar 2026 16:00:46 +0000
Manifest next update: Mon 30 Mar 2026 16:00:46 +0000
Files and hashes: 1: ROkQGinJOPhPhgRda-XfSz9Re9E.crl (hash: HDLIZdwx7xw7y9Xh5kFxZFNsxS+Hs9OquxI8eknqZuI=)
2: mLc4nrUmR72L5a_hibMuCOUOjes.roa (hash: Oiq1+1if7qn5D54vTTs160dOXJEuE6xP7iBsVrbNwmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/bce18c-7203-44c9-bec8-df01b4eb25e9/1/ROkQGinJOPhPhgRda-XfSz9Re9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/bce18c-7203-44c9-bec8-df01b4eb25e9/1/ROkQGinJOPhPhgRda-XfSz9Re9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ROkQGinJOPhPhgRda-XfSz9Re9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:8b:47:5f:e7:7e:52:cb:60:01:18:2f:3d:10:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44e9101a29c938f84f86045d6be5df4b3f517bd1
Validity
Not Before: Mar 29 16:00:46 2026 GMT
Not After : Mar 30 16:00:46 2026 GMT
Subject: CN=8532d2446f06784ae082bd0cf6e791669813fc04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4d:f4:a7:e0:66:b6:da:38:4b:15:25:28:10:
d7:f5:38:73:74:a1:7b:84:ec:c6:5f:04:70:36:f1:
d4:c9:df:87:ce:05:12:a4:b8:82:75:93:cf:15:6f:
66:08:3e:39:17:04:43:c2:4b:62:af:1c:96:0d:27:
c8:63:81:e1:be:a1:aa:7b:5f:2e:dd:04:2a:ce:da:
8d:ab:2d:e7:15:13:be:45:3d:3e:06:96:26:92:23:
88:d3:bb:01:6c:19:9b:51:10:f1:ce:a9:15:74:ee:
ef:77:21:ec:f1:f8:98:92:72:8c:c8:c4:93:37:0c:
f9:1d:d7:f5:ab:90:f9:2f:73:05:5c:52:d6:82:58:
b3:2d:9d:65:db:ac:9b:9d:9d:1d:01:cf:1a:20:cf:
bc:f1:34:99:e2:eb:00:a7:d5:93:de:8d:3e:35:cc:
fa:9a:02:77:15:bc:32:8c:fd:d4:d2:9a:3a:2a:7a:
3a:25:20:0f:68:fc:11:99:3e:c3:1e:02:09:d8:74:
22:41:5c:50:b1:49:de:21:31:16:fa:30:bb:9a:5c:
2f:a5:02:d1:d5:16:7c:70:8a:92:bf:f6:6f:40:45:
9e:90:b8:58:b8:af:8b:eb:e5:19:d8:a4:32:9c:35:
55:a5:f9:e9:36:92:34:37:4b:db:a4:79:d2:56:fd:
dc:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:32:D2:44:6F:06:78:4A:E0:82:BD:0C:F6:E7:91:66:98:13:FC:04
X509v3 Authority Key Identifier:
keyid:44:E9:10:1A:29:C9:38:F8:4F:86:04:5D:6B:E5:DF:4B:3F:51:7B:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ROkQGinJOPhPhgRda-XfSz9Re9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/bce18c-7203-44c9-bec8-df01b4eb25e9/1/ROkQGinJOPhPhgRda-XfSz9Re9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/bce18c-7203-44c9-bec8-df01b4eb25e9/1/ROkQGinJOPhPhgRda-XfSz9Re9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:fa:55:81:58:ba:60:6c:f0:c7:1f:e6:26:c9:a1:ef:83:4a:
e2:c5:6b:09:ed:73:55:da:91:50:b9:67:e8:86:d9:a6:08:33:
14:38:e3:6a:7f:16:fa:7a:fd:a8:74:6d:43:08:5b:c7:76:e4:
fa:81:99:64:aa:d3:f6:ed:e6:b8:3a:d2:3a:21:48:ea:05:cb:
a5:ca:6f:0b:91:16:0e:85:50:13:df:1a:83:55:12:fa:82:11:
88:ad:38:51:e9:b1:1a:5d:6a:54:e6:5e:ea:13:5c:88:4f:33:
e9:7a:cd:c6:33:28:97:78:ad:a9:51:78:f4:32:5b:9b:83:86:
9d:6d:ec:51:1f:36:39:79:ac:fd:1d:a2:4b:2c:5c:7d:1d:bf:
2e:09:ec:9e:9f:f9:e5:60:ee:2e:ab:03:53:f7:73:ad:57:d9:
f9:07:b6:9a:66:5f:24:ac:72:b4:54:dd:6e:34:33:a3:e4:45:
45:75:95:94:45:0b:a5:e5:8b:a0:8e:7c:20:d6:df:81:1c:0b:
ca:b7:16:8e:c2:88:79:e7:a2:c3:98:c7:31:a4:e4:69:7b:3d:
f0:02:ac:46:11:69:02:ee:db:53:b3:4d:1c:39:55:a3:a0:3c:
5e:61:64:7d:fe:00:b4:31:1e:3a:2b:51:67:48:5d:d1:ac:5d:
dd:cf:c2:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06U4tHX+d+UstgARgvPRBUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0ZTkxMDFhMjljOTM4Zjg0Zjg2MDQ1ZDZiZTVkZjRiM2Y1
MTdiZDEwHhcNMjYwMzI5MTYwMDQ2WhcNMjYwMzMwMTYwMDQ2WjAzMTEwLwYDVQQD
Eyg4NTMyZDI0NDZmMDY3ODRhZTA4MmJkMGNmNmU3OTE2Njk4MTNmYzA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw030p+Bmtto4SxUlKBDX9ThzdKF7
hOzGXwRwNvHUyd+HzgUSpLiCdZPPFW9mCD45FwRDwktirxyWDSfIY4HhvqGqe18u
3QQqztqNqy3nFRO+RT0+BpYmkiOI07sBbBmbURDxzqkVdO7vdyHs8fiYknKMyMST
Nwz5Hdf1q5D5L3MFXFLWglizLZ1l26ybnZ0dAc8aIM+88TSZ4usAp9WT3o0+Ncz6
mgJ3FbwyjP3U0po6Kno6JSAPaPwRmT7DHgIJ2HQiQVxQsUneITEW+jC7mlwvpQLR
1RZ8cIqSv/ZvQEWekLhYuK+L6+UZ2KQynDVVpfnpNpI0N0vbpHnSVv3cNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIUy0kRvBnhK4IK9DPbnkWaYE/wEMB8GA1UdIwQY
MBaAFETpEBopyTj4T4YEXWvl30s/UXvRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUk9rUUdpbkpPUGhQaGdSZGEtWGZTejlSZTlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9iY2UxOGMtNzIwMy00NGM5LWJlYzgt
ZGYwMWI0ZWIyNWU5LzEvUk9rUUdpbkpPUGhQaGdSZGEtWGZTejlSZTlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9iY2UxOGMtNzIwMy00NGM5LWJlYzgtZGYwMWI0ZWIyNWU5
LzEvUk9rUUdpbkpPUGhQaGdSZGEtWGZTejlSZTlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWvpVgVi6
YGzwxx/mJsmh74NK4sVrCe1zVdqRULln6IbZpggzFDjjan8W+nr9qHRtQwhbx3bk
+oGZZKrT9u3muDrSOiFI6gXLpcpvC5EWDoVQE98ag1US+oIRiK04UemxGl1qVOZe
6hNciE8z6XrNxjMol3itqVF49DJbm4OGnW3sUR82OXms/R2iSyxcfR2/Lgnsnp/5
5WDuLqsDU/dzrVfZ+Qe2mmZfJKxytFTdbjQzo+RFRXWVlEULpeWLoI58INbfgRwL
yrcWjsKIeeeiw5jHMaTkaXs98AKsRhFpAu7bU7NNHDlVo6A8XmFkff4AtDEeOitR
Z0hd0axd3c/CPA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:13:21 2026 by rpki-client