Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft
File: s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft (raw, json)
Hash identifier: E8G+HS3yYbFNWRxhjlSpBGyktQF7GzOOMxKu/ZYz0B4=
Subject key identifier: A4:40:42:DB:DF:A4:CC:68:33:2B:82:4A:86:AC:DB:22:62:17:47:D2
Authority key identifier: B3:43:51:46:30:DC:17:F3:FE:9B:51:DD:43:41:84:D0:B6:2B:03:C0
Certificate issuer: /CN=b343514630dc17f3fe9b51dd434184d0b62b03c0
Certificate serial: 019D2628740EFD3E4930987DCB099EDB9075
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft
Manifest number: 1581
Signing time: Wed 25 Mar 2026 18:01:18 +0000
Manifest this update: Wed 25 Mar 2026 18:01:18 +0000
Manifest next update: Thu 26 Mar 2026 18:01:18 +0000
Files and hashes: 1: 3tG3zwbaaFuFl6cpIqxTe91Iu4g.roa (hash: JJoTnqlPPDa1SmZHbLUdf1Go4yaIrlgXIH2dNpLzAn8=)
2: 53l_D5g_N2hEJkJMJ3_8BjIEv2Y.roa (hash: XGQ+zMpVhvmcmw4I8+8i5OdAGzf1VzpgvnNvlvgbkC0=)
3: ChfnxGz0VKQRsVnjHyIAinMMsIk.roa (hash: eW5OJ9VGVnnfrTZ+gpRAKAP747DliU0KHrN7X11TVIw=)
4: Ep5Ojkz3GkSwJsrA11qdsEM5pQk.roa (hash: w1Q8xSxbmL/6LZW2i41+YiB+eNvVEBq+XNQ8qrTEQhU=)
5: OZvI4MXWtnolgxghoQ6_cphW1W4.roa (hash: Oi9ZbYQx2WEELwMB6HBFHb18B/3Zxcuia5/qRlgnoFw=)
6: aDzvIFmPuasW-wZl4h5nCLEftQ0.roa (hash: V99/4bZyDIbs4HJhhHYscdVnYmUcdsRDsQGQFwRiELE=)
7: gqMBDEDRSu4xKONst1tdj1bPNsI.asa (hash: x0HezPZk/P/a+aIvTJaAXkz2eR1qdgdIUhB+jiHUu9k=)
8: lXLif39D5KxldHNZbTu-0rsSDYY.roa (hash: mVxFtPQntFOFsnZXkQ8/rUjDQRMlvViyOfc1fE3bjpY=)
9: s0NRRjDcF_P-m1HdQ0GE0LYrA8A.crl (hash: mUawJ9zKb486v3pU99+IUMLz5yZVONa4daWJ8/OMdOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:74:0e:fd:3e:49:30:98:7d:cb:09:9e:db:90:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b343514630dc17f3fe9b51dd434184d0b62b03c0
Validity
Not Before: Mar 25 18:01:18 2026 GMT
Not After : Mar 26 18:01:18 2026 GMT
Subject: CN=a44042dbdfa4cc68332b824a86acdb22621747d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ca:b8:af:83:38:6f:b7:41:fe:2c:34:9d:5f:
70:0e:19:aa:42:fa:73:df:ef:68:da:c1:ab:0d:79:
d1:27:9b:b7:75:19:ea:2b:3f:fb:4d:88:ce:31:2d:
dd:ba:b1:f1:ef:c5:48:47:bf:c5:c1:22:a7:70:11:
90:2a:68:aa:12:ce:74:6a:af:a1:0f:f3:a0:53:7d:
17:37:d4:75:9e:57:51:0a:5e:9d:9d:7b:30:1c:ff:
50:86:a4:5f:34:d3:8b:34:e5:b7:a5:18:ca:21:fa:
82:84:20:50:41:1a:57:09:f2:a4:26:13:80:20:4b:
61:d2:38:5a:f4:81:10:41:b6:1f:74:43:7b:71:d2:
a6:c8:4b:03:50:fb:2e:dc:cf:6f:d2:eb:7c:4b:3b:
5f:02:29:76:3c:b0:e8:26:19:de:e7:76:68:cb:a7:
1b:ca:54:96:5e:6a:cf:d6:6d:bc:ef:e2:d1:a8:91:
71:27:dc:97:a1:9d:8f:62:f5:5a:84:24:7e:87:2a:
c2:1e:dd:94:30:77:28:ac:fd:58:d5:74:3f:a2:da:
f5:3d:f1:05:70:ea:e7:ec:1e:eb:f0:61:e6:e0:96:
c3:22:af:8a:0b:6f:25:83:d8:2e:e9:4f:e2:3a:d2:
5d:ae:58:dc:8d:ae:2e:e8:76:a2:5a:21:f6:2d:aa:
34:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:40:42:DB:DF:A4:CC:68:33:2B:82:4A:86:AC:DB:22:62:17:47:D2
X509v3 Authority Key Identifier:
keyid:B3:43:51:46:30:DC:17:F3:FE:9B:51:DD:43:41:84:D0:B6:2B:03:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:71:31:98:ce:b5:cc:12:e0:9b:c8:78:cb:3a:34:47:90:cc:
6c:a5:12:6b:e8:3a:c9:72:6b:73:10:d1:40:9f:26:04:02:65:
2d:7c:a2:d0:cd:4c:73:8a:70:c6:2a:f4:15:5b:01:c6:06:b1:
0e:20:ba:f6:31:2d:fe:1e:e5:2f:6d:08:55:ca:f5:20:74:1f:
dd:d9:c8:7f:79:ab:87:cf:f2:54:b7:89:5f:2f:65:2b:f4:4c:
7e:5a:32:bd:f0:77:c1:21:8f:3b:2c:5f:f1:05:54:8f:c3:a1:
99:62:22:9f:51:f5:2f:eb:7c:93:ee:ad:e0:5d:98:46:2d:b7:
93:7c:c2:7e:ff:e9:6f:59:c7:5a:f8:47:df:02:d6:ba:83:77:
6f:23:4f:c9:b3:0e:f5:52:b7:4b:05:01:01:db:64:f5:b8:97:
2e:cd:32:77:46:ca:28:ce:bf:73:98:15:07:0d:6d:3e:e5:af:
eb:fb:d2:5b:e8:14:d3:14:4e:b5:e2:95:19:01:66:22:b5:75:
c7:51:c1:ec:82:15:c9:7d:bd:03:5f:a1:e0:c0:bd:e5:5c:cd:
54:b0:05:0b:47:16:a8:4e:40:a9:35:22:d2:05:e9:78:91:1f:
5e:8a:34:3c:a2:eb:66:af:d7:c8:d7:45:d8:6b:d8:78:77:c3:
84:2e:7a:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mKHQO/T5JMJh9ywme25B1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzNDM1MTQ2MzBkYzE3ZjNmZTliNTFkZDQzNDE4NGQwYjYy
YjAzYzAwHhcNMjYwMzI1MTgwMTE4WhcNMjYwMzI2MTgwMTE4WjAzMTEwLwYDVQQD
EyhhNDQwNDJkYmRmYTRjYzY4MzMyYjgyNGE4NmFjZGIyMjYyMTc0N2QyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsq4r4M4b7dB/iw0nV9wDhmqQvpz
3+9o2sGrDXnRJ5u3dRnqKz/7TYjOMS3durHx78VIR7/FwSKncBGQKmiqEs50aq+h
D/OgU30XN9R1nldRCl6dnXswHP9QhqRfNNOLNOW3pRjKIfqChCBQQRpXCfKkJhOA
IEth0jha9IEQQbYfdEN7cdKmyEsDUPsu3M9v0ut8SztfAil2PLDoJhne53Zoy6cb
ylSWXmrP1m287+LRqJFxJ9yXoZ2PYvVahCR+hyrCHt2UMHcorP1Y1XQ/otr1PfEF
cOrn7B7r8GHm4JbDIq+KC28lg9gu6U/iOtJdrljcja4u6HaiWiH2Lao0IQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKRAQtvfpMxoMyuCSoas2yJiF0fSMB8GA1UdIwQY
MBaAFLNDUUYw3Bfz/ptR3UNBhNC2KwPAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczBOUlJqRGNGX1AtbTFIZFEwR0UwTFlyQThBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xMzgwNDYtN2JlMC00MDE3LWE5OGIt
YTcyNDdlOWQ1ZjNhLzEvczBOUlJqRGNGX1AtbTFIZFEwR0UwTFlyQThBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8xMzgwNDYtN2JlMC00MDE3LWE5OGItYTcyNDdlOWQ1ZjNh
LzEvczBOUlJqRGNGX1AtbTFIZFEwR0UwTFlyQThBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn3ExmM61
zBLgm8h4yzo0R5DMbKUSa+g6yXJrcxDRQJ8mBAJlLXyi0M1Mc4pwxir0FVsBxgax
DiC69jEt/h7lL20IVcr1IHQf3dnIf3mrh8/yVLeJXy9lK/RMfloyvfB3wSGPOyxf
8QVUj8OhmWIin1H1L+t8k+6t4F2YRi23k3zCfv/pb1nHWvhH3wLWuoN3byNPybMO
9VK3SwUBAdtk9biXLs0yd0bKKM6/c5gVBw1tPuWv6/vSW+gU0xROteKVGQFmIrV1
x1HB7IIVyX29A1+h4MC95VzNVLAFC0cWqE5AqTUi0gXpeJEfXoo0PKLrZq/XyNdF
2GvYeHfDhC567w==
-----END CERTIFICATE-----
Generated at Wed Mar 25 22:46:50 2026 by rpki-client