Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.mft
File: sEsc31Bs5emTfnf4Jj7PbdslWwU.mft (raw, json)
Hash identifier: DOpn2YrYtw8ZmpBQKCFkyXS6JbtXeWBL8zstmQbubdw=
Subject key identifier: 5B:22:20:AD:9A:7C:0E:2F:FB:0C:19:4C:A2:19:CA:35:3A:F6:9C:41
Authority key identifier: B0:4B:1C:DF:50:6C:E5:E9:93:7E:77:F8:26:3E:CF:6D:DB:25:5B:05
Certificate issuer: /CN=b04b1cdf506ce5e9937e77f8263ecf6ddb255b05
Certificate serial: 019D28BB2F4EAD3E992DA1F3B769A0D02C9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sEsc31Bs5emTfnf4Jj7PbdslWwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.mft
Manifest number: 16E3
Signing time: Thu 26 Mar 2026 06:00:49 +0000
Manifest this update: Thu 26 Mar 2026 06:00:49 +0000
Manifest next update: Fri 27 Mar 2026 06:00:49 +0000
Files and hashes: 1: cMQiZnAEZAcj3C0lkcgvF6RD5y8.roa (hash: 42uo0Cj9Z9TNuXBZG2n2ywXXuk81qWLkR5LdFIJRmv0=)
2: sEsc31Bs5emTfnf4Jj7PbdslWwU.crl (hash: j1AspIFK2Mlf1Gm46rFTF4XhcGYcOngP4rUGGr/053g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sEsc31Bs5emTfnf4Jj7PbdslWwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:2f:4e:ad:3e:99:2d:a1:f3:b7:69:a0:d0:2c:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b04b1cdf506ce5e9937e77f8263ecf6ddb255b05
Validity
Not Before: Mar 26 06:00:49 2026 GMT
Not After : Mar 27 06:00:49 2026 GMT
Subject: CN=5b2220ad9a7c0e2ffb0c194ca219ca353af69c41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4e:30:ea:32:b1:b8:9a:60:92:dd:d1:4e:3b:
40:d7:4f:7b:63:33:27:20:6b:5a:4a:a6:64:19:56:
ab:22:48:6d:a2:2b:6b:a5:47:bd:0c:dd:63:93:51:
5b:66:4b:aa:b4:7d:3f:cb:82:2c:ac:a4:83:e2:ba:
46:a3:20:4a:c8:b4:09:ba:93:98:33:6b:7c:07:25:
9e:0f:62:4b:f9:f9:cd:22:94:54:be:85:7c:40:10:
e5:64:b2:8b:d7:39:f9:d5:21:49:3f:c2:2f:3d:d1:
50:5d:1f:ca:ee:88:4d:a7:4a:f1:c9:61:53:d8:71:
db:83:e4:1c:a6:7a:01:b4:83:0d:60:54:57:db:bd:
99:87:fe:ce:d6:cd:bb:aa:9e:58:c9:07:69:31:63:
12:d5:aa:76:74:2e:8e:39:11:8b:5f:ca:f8:0d:2c:
53:d4:bf:87:ae:e4:bc:78:4d:eb:a7:c0:6e:c0:75:
1c:ca:00:5b:cc:56:8e:6b:ca:a2:1a:58:00:d3:65:
71:23:02:ad:ed:56:81:81:dd:ec:e3:3a:8b:c2:90:
21:30:58:52:38:73:db:16:07:68:91:1a:d6:a7:47:
2a:a8:1a:02:6b:0c:b1:3c:78:e9:3e:72:53:37:cf:
7c:e7:54:59:dc:50:7b:ef:11:e4:6b:16:31:81:a7:
47:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:22:20:AD:9A:7C:0E:2F:FB:0C:19:4C:A2:19:CA:35:3A:F6:9C:41
X509v3 Authority Key Identifier:
keyid:B0:4B:1C:DF:50:6C:E5:E9:93:7E:77:F8:26:3E:CF:6D:DB:25:5B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sEsc31Bs5emTfnf4Jj7PbdslWwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:6d:45:97:34:a2:95:06:4b:24:f1:a4:c3:ef:00:8c:d8:ed:
ff:e0:d3:13:e1:52:2f:44:83:8d:9a:5c:4e:a9:ef:16:e8:66:
3f:34:c1:7e:27:49:c6:4a:3c:55:69:1b:0e:99:b1:2a:3f:22:
69:16:8d:08:2b:4c:8a:06:e4:87:04:1d:ee:98:d0:0e:4a:e9:
63:a8:b7:30:8d:a8:31:1b:40:42:07:65:c9:7d:15:2e:60:23:
d0:61:45:b1:e7:67:d9:35:ab:e9:66:eb:a0:d6:23:da:4f:06:
b4:50:83:29:89:99:22:5d:8f:58:55:af:00:70:1c:66:3f:9d:
3d:78:92:64:2d:5d:70:eb:c4:14:aa:82:e0:07:5d:9c:a5:3e:
20:84:10:03:e1:ee:c1:5c:e6:1c:8d:89:b7:07:3b:6a:0a:67:
50:3b:fd:af:31:1c:84:4f:71:de:be:10:ce:d9:c4:c2:f2:71:
e7:48:0a:2d:bd:e6:50:51:f8:54:34:c1:cd:aa:6f:f3:fc:d9:
bb:e0:27:a2:26:62:c1:f5:5b:3a:6c:3f:64:bd:84:97:b7:a1:
f1:01:df:23:05:64:8b:f2:c9:61:b0:9d:ae:6b:a7:77:14:2e:
bf:28:fd:fd:d6:77:c1:ec:22:48:22:24:05:cf:98:f5:e1:8f:
fe:af:72:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ouy9OrT6ZLaHzt2mg0CyeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwNGIxY2RmNTA2Y2U1ZTk5MzdlNzdmODI2M2VjZjZkZGIy
NTViMDUwHhcNMjYwMzI2MDYwMDQ5WhcNMjYwMzI3MDYwMDQ5WjAzMTEwLwYDVQQD
Eyg1YjIyMjBhZDlhN2MwZTJmZmIwYzE5NGNhMjE5Y2EzNTNhZjY5YzQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqU4w6jKxuJpgkt3RTjtA1097YzMn
IGtaSqZkGVarIkhtoitrpUe9DN1jk1FbZkuqtH0/y4IsrKSD4rpGoyBKyLQJupOY
M2t8ByWeD2JL+fnNIpRUvoV8QBDlZLKL1zn51SFJP8IvPdFQXR/K7ohNp0rxyWFT
2HHbg+QcpnoBtIMNYFRX272Zh/7O1s27qp5YyQdpMWMS1ap2dC6OORGLX8r4DSxT
1L+HruS8eE3rp8BuwHUcygBbzFaOa8qiGlgA02VxIwKt7VaBgd3s4zqLwpAhMFhS
OHPbFgdokRrWp0cqqBoCawyxPHjpPnJTN89851RZ3FB77xHkaxYxgadH9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFsiIK2afA4v+wwZTKIZyjU69pxBMB8GA1UdIwQY
MBaAFLBLHN9QbOXpk353+CY+z23bJVsFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0VzYzMxQnM1ZW1UZm5mNEpqN1BiZHNsV3dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi84MzliMzQtMzUyOS00MzhiLTg3ZDAt
Y2U1MDE5MjY0ODk1LzEvc0VzYzMxQnM1ZW1UZm5mNEpqN1BiZHNsV3dVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi84MzliMzQtMzUyOS00MzhiLTg3ZDAtY2U1MDE5MjY0ODk1
LzEvc0VzYzMxQnM1ZW1UZm5mNEpqN1BiZHNsV3dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHm1FlzSi
lQZLJPGkw+8AjNjt/+DTE+FSL0SDjZpcTqnvFuhmPzTBfidJxko8VWkbDpmxKj8i
aRaNCCtMigbkhwQd7pjQDkrpY6i3MI2oMRtAQgdlyX0VLmAj0GFFsedn2TWr6Wbr
oNYj2k8GtFCDKYmZIl2PWFWvAHAcZj+dPXiSZC1dcOvEFKqC4AddnKU+IIQQA+Hu
wVzmHI2Jtwc7agpnUDv9rzEchE9x3r4QztnEwvJx50gKLb3mUFH4VDTBzapv8/zZ
u+AnoiZiwfVbOmw/ZL2El7eh8QHfIwVki/LJYbCdrmundxQuvyj9/dZ3wewiSCIk
Bc+Y9eGP/q9yfw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:40:00 2026 by rpki-client