Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft
File: sUqqmwhIZPRLrhi6B2smBndU-2I.mft (raw, json)
Hash identifier: kjWjJv3pgbwpQbrLxtNNpRPIKYgSRV6HP6g0k9fNRTo=
Subject key identifier: 33:53:AD:87:4D:84:1C:86:AF:6C:7C:AB:E6:29:78:DC:B3:20:47:B2
Authority key identifier: B1:4A:AA:9B:08:48:64:F4:4B:AE:18:BA:07:6B:26:06:77:54:FB:62
Certificate issuer: /CN=b14aaa9b084864f44bae18ba076b26067754fb62
Certificate serial: 019D288464F248B4B0F7A463190B6575A286
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUqqmwhIZPRLrhi6B2smBndU-2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 05:00:58 +0000
Manifest this update: Thu 26 Mar 2026 05:00:58 +0000
Manifest next update: Fri 27 Mar 2026 05:00:58 +0000
Files and hashes: 1: ICjM29Ho5ilzx2CC9UyPCpBHk08.roa (hash: iDThEuTUmWf3SPJoG/mF6aomqM2YAji1cqVmI0Zj0pI=)
2: d6GlurZjrrwt2Mzk129b7bT_DCU.roa (hash: 2ZHYIA1Xr0+oHcfnaFr8fQOS6BVciW3KH+j7gwm8oEg=)
3: sUqqmwhIZPRLrhi6B2smBndU-2I.crl (hash: cuQx3jy2LdpiL01KhOVqdb3aWH49B4b5n6jk0X0NRgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/sUqqmwhIZPRLrhi6B2smBndU-2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:64:f2:48:b4:b0:f7:a4:63:19:0b:65:75:a2:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b14aaa9b084864f44bae18ba076b26067754fb62
Validity
Not Before: Mar 26 05:00:58 2026 GMT
Not After : Mar 27 05:00:58 2026 GMT
Subject: CN=3353ad874d841c86af6c7cabe62978dcb32047b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7c:fc:32:16:83:e5:85:f6:71:73:a3:a5:25:
2a:c8:46:2b:45:fb:0a:27:e7:e9:2c:cd:6b:2f:c4:
f6:b5:01:be:89:52:f4:39:53:d4:46:77:cd:ea:cf:
4c:90:f8:f7:47:ca:26:13:1f:0a:c2:96:b0:3e:c0:
2c:fd:f3:e1:03:71:dc:fd:bf:cc:74:9a:99:d9:eb:
74:2e:1b:49:79:7d:0c:9e:e6:54:78:41:4e:74:38:
21:fc:55:54:b1:a5:88:49:a4:8a:07:28:9b:19:4c:
82:1b:87:15:96:5a:50:2c:b1:df:08:e5:56:dc:18:
62:cf:7e:da:d6:5a:42:14:6e:fc:72:e9:38:6b:c2:
83:69:a0:49:1d:88:a6:49:10:27:c1:fb:6f:f4:bb:
2f:21:95:eb:bb:99:8c:0c:a4:11:b5:6a:75:bc:c2:
62:79:4f:31:51:1c:b7:48:46:ca:31:bf:d9:38:84:
2d:c2:a1:bc:70:84:35:2f:df:a3:55:12:91:b6:0c:
0a:e2:a8:f1:12:a9:5c:1d:c9:58:5c:ee:d8:7e:26:
d8:c6:d3:e6:57:56:4f:7e:6a:1d:dc:8e:ff:e5:11:
a8:82:96:be:37:9b:fe:54:92:ff:42:45:22:f4:66:
c7:1e:0d:ff:00:cf:ed:ca:fc:5b:d7:8f:cc:30:c8:
35:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:53:AD:87:4D:84:1C:86:AF:6C:7C:AB:E6:29:78:DC:B3:20:47:B2
X509v3 Authority Key Identifier:
keyid:B1:4A:AA:9B:08:48:64:F4:4B:AE:18:BA:07:6B:26:06:77:54:FB:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUqqmwhIZPRLrhi6B2smBndU-2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:ad:b8:62:14:ff:9c:c9:a3:ef:57:ab:d9:69:91:1c:2b:eb:
c3:74:c9:a4:67:23:c3:58:85:56:d2:2f:e0:09:fe:64:81:e2:
f7:b3:4d:31:8f:9c:c4:0e:ee:2d:a7:f9:97:d9:3a:d0:14:85:
c6:d4:d5:10:09:89:20:55:31:6f:ea:ad:42:2b:44:5d:d5:13:
6d:b2:f7:f1:02:93:23:95:62:a1:fe:08:40:7e:9f:43:48:68:
5a:7c:ce:a2:82:8f:4d:a8:fd:17:38:52:1d:51:61:08:f6:6c:
01:72:52:6f:33:ec:61:45:ca:80:4d:fa:36:83:e3:c3:c3:ff:
b7:5b:1a:80:51:3f:71:68:e3:65:c3:f2:15:25:90:10:ac:ca:
d3:77:93:15:f4:92:08:57:9a:8b:f3:a3:3c:6f:5c:c0:af:61:
27:a2:d6:c3:d5:7c:8f:0e:29:47:e1:1c:57:92:40:d5:d6:29:
3a:f2:bf:ee:95:c5:d1:84:fc:ed:48:ca:c0:70:97:e1:3e:3c:
c1:2e:ea:c9:5c:69:a3:e4:c9:9b:e8:29:a4:2d:0b:90:3a:9a:
8b:c1:55:ab:34:38:9c:8a:28:bb:8a:fa:66:99:0c:7c:bd:9f:
2e:be:34:f7:d1:93:e8:bd:17:e7:5f:89:e1:85:f8:4a:f9:2a:
cb:4a:fa:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ohGTySLSw96RjGQtldaKGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNGFhYTliMDg0ODY0ZjQ0YmFlMThiYTA3NmIyNjA2Nzc1
NGZiNjIwHhcNMjYwMzI2MDUwMDU4WhcNMjYwMzI3MDUwMDU4WjAzMTEwLwYDVQQD
EygzMzUzYWQ4NzRkODQxYzg2YWY2YzdjYWJlNjI5NzhkY2IzMjA0N2IyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHz8MhaD5YX2cXOjpSUqyEYrRfsK
J+fpLM1rL8T2tQG+iVL0OVPURnfN6s9MkPj3R8omEx8KwpawPsAs/fPhA3Hc/b/M
dJqZ2et0LhtJeX0MnuZUeEFOdDgh/FVUsaWISaSKByibGUyCG4cVllpQLLHfCOVW
3Bhiz37a1lpCFG78cuk4a8KDaaBJHYimSRAnwftv9LsvIZXru5mMDKQRtWp1vMJi
eU8xURy3SEbKMb/ZOIQtwqG8cIQ1L9+jVRKRtgwK4qjxEqlcHclYXO7YfibYxtPm
V1ZPfmod3I7/5RGogpa+N5v+VJL/QkUi9GbHHg3/AM/tyvxb14/MMMg1qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDNTrYdNhByGr2x8q+YpeNyzIEeyMB8GA1UdIwQY
MBaAFLFKqpsISGT0S64YugdrJgZ3VPtiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1VxcW13aElaUFJMcmhpNkIyc21CbmRVLTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8yMjdhZmEtZGRlYy00NjQ0LTk4MmEt
NThmYWEyN2U1NTQ5LzEvc1VxcW13aElaUFJMcmhpNkIyc21CbmRVLTJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8yMjdhZmEtZGRlYy00NjQ0LTk4MmEtNThmYWEyN2U1NTQ5
LzEvc1VxcW13aElaUFJMcmhpNkIyc21CbmRVLTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvK24YhT/
nMmj71er2WmRHCvrw3TJpGcjw1iFVtIv4An+ZIHi97NNMY+cxA7uLaf5l9k60BSF
xtTVEAmJIFUxb+qtQitEXdUTbbL38QKTI5Viof4IQH6fQ0hoWnzOooKPTaj9FzhS
HVFhCPZsAXJSbzPsYUXKgE36NoPjw8P/t1sagFE/cWjjZcPyFSWQEKzK03eTFfSS
CFeai/OjPG9cwK9hJ6LWw9V8jw4pR+EcV5JA1dYpOvK/7pXF0YT87UjKwHCX4T48
wS7qyVxpo+TJm+gppC0LkDqai8FVqzQ4nIoou4r6ZpkMfL2fLr4099GT6L0X51+J
4YX4Svkqy0r6jA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:57:36 2026 by rpki-client