Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft
File: sWq92UIPBLqcHNLDTcezUpiK-Nk.mft (raw, json)
Hash identifier: 8hOvnPrzCp3COebfzvt2uvp5vic0BPJQxGpD8imBsyk=
Subject key identifier: 3E:33:34:15:C8:90:07:B5:5F:AF:78:9E:E8:36:3B:2F:FA:51:F7:EA
Authority key identifier: B1:6A:BD:D9:42:0F:04:BA:9C:1C:D2:C3:4D:C7:B3:52:98:8A:F8:D9
Certificate issuer: /CN=b16abdd9420f04ba9c1cd2c34dc7b352988af8d9
Certificate serial: 019D2A72DAEAB12B58AB2ED73324DCA1CF47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWq92UIPBLqcHNLDTcezUpiK-Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft
Manifest number: 15C5
Signing time: Thu 26 Mar 2026 14:01:03 +0000
Manifest this update: Thu 26 Mar 2026 14:01:03 +0000
Manifest next update: Fri 27 Mar 2026 14:01:03 +0000
Files and hashes: 1: 0WZc2xB5hVDGIEXjZ-HhqIhObPU.roa (hash: yv7agGUqeUNNQCncCwHxi4NpbbYoTQ6AYByrG78CfM4=)
2: sWq92UIPBLqcHNLDTcezUpiK-Nk.crl (hash: ks+oet7EcOKRjuljFCNPXos6hzvadYKlXa44dhaXlCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sWq92UIPBLqcHNLDTcezUpiK-Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:da:ea:b1:2b:58:ab:2e:d7:33:24:dc:a1:cf:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b16abdd9420f04ba9c1cd2c34dc7b352988af8d9
Validity
Not Before: Mar 26 14:01:03 2026 GMT
Not After : Mar 27 14:01:03 2026 GMT
Subject: CN=3e333415c89007b55faf789ee8363b2ffa51f7ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fd:d1:32:c6:73:1b:5c:a3:b0:0d:ad:74:8a:
0b:3b:5a:94:54:ce:35:a5:cf:fe:71:b2:09:e5:fe:
66:df:02:c6:45:1f:05:cd:7d:5f:11:c3:4c:8f:01:
19:b2:f6:b4:6a:fe:d9:5d:90:04:0d:4d:af:d7:26:
e3:a9:43:99:d2:06:61:92:b9:c0:ef:b9:96:cb:69:
e0:0e:22:fb:e7:13:2d:ca:fb:8f:4b:c7:44:19:d2:
d7:c2:8b:4a:1a:7c:f6:03:77:7d:8e:08:95:63:dd:
a8:d3:31:e1:ef:75:7c:10:40:f5:82:b0:24:8a:b8:
ff:fd:68:92:f5:cb:1c:2c:4b:4a:3a:71:80:97:95:
ba:6f:b3:40:ff:bd:ab:04:5b:bf:63:32:d2:ce:b9:
97:d9:a5:30:c7:07:83:22:8f:6a:5a:03:31:71:16:
be:f5:2f:ba:8c:3b:e6:c0:ca:12:3d:99:13:65:88:
de:f5:87:e8:93:6a:0e:ca:6e:53:a7:7f:0c:16:ba:
8f:ac:45:df:cd:35:50:d8:84:02:db:29:6a:e5:82:
a9:db:9e:60:6c:ac:dc:f8:e3:e2:77:50:ea:bd:c4:
92:d6:ed:2f:ba:13:fd:51:79:43:8e:49:9a:93:88:
f9:d6:7b:ce:52:37:29:54:54:f4:46:c5:38:10:99:
0d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:33:34:15:C8:90:07:B5:5F:AF:78:9E:E8:36:3B:2F:FA:51:F7:EA
X509v3 Authority Key Identifier:
keyid:B1:6A:BD:D9:42:0F:04:BA:9C:1C:D2:C3:4D:C7:B3:52:98:8A:F8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWq92UIPBLqcHNLDTcezUpiK-Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:1a:3b:4e:15:e6:1e:99:34:35:02:b1:4b:51:21:5e:f5:31:
a5:ac:48:59:41:d3:24:63:d0:b4:43:a5:0d:75:f4:01:ea:b9:
ed:d3:5e:bf:0d:1c:38:e6:84:2b:b3:a5:c0:bc:8d:81:41:99:
cb:00:6f:5d:50:83:da:f0:52:50:9a:d1:cb:3a:6a:bc:5b:68:
54:6f:d2:73:1d:7f:37:a5:1f:37:cb:cc:b0:96:54:09:9d:3c:
6f:7b:59:c1:ff:4d:3e:f0:e9:55:56:0d:a3:3f:0e:3b:94:bc:
35:77:e2:fe:d6:86:19:6d:cb:df:aa:d8:43:3f:5e:64:89:7d:
1a:57:51:c4:18:ee:c5:35:e9:13:4b:98:c2:6b:8b:f6:00:ba:
35:73:a6:73:f6:9d:06:77:5d:18:d5:ba:d1:40:63:a3:27:c9:
60:92:6b:6a:39:a2:a2:c0:4e:95:8e:65:34:c8:5a:80:25:2c:
c2:bb:f1:7d:51:22:39:a0:22:31:54:4c:e5:d2:2c:64:af:a9:
b3:70:42:b2:b7:bf:24:6f:63:46:75:05:81:00:a2:9f:66:63:
2f:e3:4e:0e:ef:5a:4b:e3:7b:50:e4:eb:20:ee:8c:47:49:f1:
1a:21:61:36:a2:c2:f2:2c:6b:19:52:5c:07:60:8f:e3:80:e1:
f6:a2:e0:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qctrqsStYqy7XMyTcoc9HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNmFiZGQ5NDIwZjA0YmE5YzFjZDJjMzRkYzdiMzUyOTg4
YWY4ZDkwHhcNMjYwMzI2MTQwMTAzWhcNMjYwMzI3MTQwMTAzWjAzMTEwLwYDVQQD
EygzZTMzMzQxNWM4OTAwN2I1NWZhZjc4OWVlODM2M2IyZmZhNTFmN2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwP3RMsZzG1yjsA2tdIoLO1qUVM41
pc/+cbIJ5f5m3wLGRR8FzX1fEcNMjwEZsva0av7ZXZAEDU2v1ybjqUOZ0gZhkrnA
77mWy2ngDiL75xMtyvuPS8dEGdLXwotKGnz2A3d9jgiVY92o0zHh73V8EED1grAk
irj//WiS9cscLEtKOnGAl5W6b7NA/72rBFu/YzLSzrmX2aUwxweDIo9qWgMxcRa+
9S+6jDvmwMoSPZkTZYje9Yfok2oOym5Tp38MFrqPrEXfzTVQ2IQC2ylq5YKp255g
bKzc+OPid1DqvcSS1u0vuhP9UXlDjkmak4j51nvOUjcpVFT0RsU4EJkNPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD4zNBXIkAe1X694nug2Oy/6UffqMB8GA1UdIwQY
MBaAFLFqvdlCDwS6nBzSw03Hs1KYivjZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1dxOTJVSVBCTHFjSE5MRFRjZXpVcGlLLU5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8yYWRjMzktMzYzMC00MjVmLWFmMjkt
ZmJiMGQzYzEwNDIzLzEvc1dxOTJVSVBCTHFjSE5MRFRjZXpVcGlLLU5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8yYWRjMzktMzYzMC00MjVmLWFmMjktZmJiMGQzYzEwNDIz
LzEvc1dxOTJVSVBCTHFjSE5MRFRjZXpVcGlLLU5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEho7ThXm
Hpk0NQKxS1EhXvUxpaxIWUHTJGPQtEOlDXX0Aeq57dNevw0cOOaEK7OlwLyNgUGZ
ywBvXVCD2vBSUJrRyzpqvFtoVG/Scx1/N6UfN8vMsJZUCZ08b3tZwf9NPvDpVVYN
oz8OO5S8NXfi/taGGW3L36rYQz9eZIl9GldRxBjuxTXpE0uYwmuL9gC6NXOmc/ad
BnddGNW60UBjoyfJYJJrajmiosBOlY5lNMhagCUswrvxfVEiOaAiMVRM5dIsZK+p
s3BCsre/JG9jRnUFgQCin2ZjL+NODu9aS+N7UOTrIO6MR0nxGiFhNqLC8ixrGVJc
B2CP44Dh9qLg5A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:11:36 2026 by rpki-client