Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.mft
File: S_asD7A5JnNFTDlH9DV-RZTtJm0.mft (raw, json)
Hash identifier: Ike62mvPAy2jHn6svo4PUYhFVikKxb+HuVz+YNeT5gw=
Subject key identifier: 13:73:5B:3A:B8:C7:8C:D6:C0:99:DF:C9:0B:8C:7D:9F:16:C5:93:71
Authority key identifier: 4B:F6:AC:0F:B0:39:26:73:45:4C:39:47:F4:35:7E:45:94:ED:26:6D
Certificate issuer: /CN=4bf6ac0fb0392673454c3947f4357e4594ed266d
Certificate serial: 019D265F4BB0B1DFDBDB0EFA568288F19970
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_asD7A5JnNFTDlH9DV-RZTtJm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 19:01:12 +0000
Manifest this update: Wed 25 Mar 2026 19:01:12 +0000
Manifest next update: Thu 26 Mar 2026 19:01:12 +0000
Files and hashes: 1: NW-rkeD4Q3i4CBn4OpnLQGqqn1o.roa (hash: h8M7ms2bpqiMtf9k+v+XnZ9DC8UMB3Fa8eDf6MLIXMk=)
2: S_asD7A5JnNFTDlH9DV-RZTtJm0.crl (hash: 1ICFXpkjXpldYwL9UJBSpiP0olSCpKxs8bdzb2j3Od4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/S_asD7A5JnNFTDlH9DV-RZTtJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:4b:b0:b1:df:db:db:0e:fa:56:82:88:f1:99:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bf6ac0fb0392673454c3947f4357e4594ed266d
Validity
Not Before: Mar 25 19:01:12 2026 GMT
Not After : Mar 26 19:01:12 2026 GMT
Subject: CN=13735b3ab8c78cd6c099dfc90b8c7d9f16c59371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:80:10:15:a4:0a:ff:5a:1a:3f:f3:a9:6a:b6:
4a:91:6a:a5:d6:73:1f:89:1a:a7:b6:63:e4:91:9d:
e2:51:9b:9e:97:f0:c6:ce:f1:08:41:ac:d3:63:58:
b9:6a:25:0a:94:29:35:7e:28:15:d2:f0:b0:39:f2:
ea:1a:1c:21:c1:80:b6:35:d5:01:9d:81:bf:34:3b:
68:eb:7c:ca:6f:8d:3d:8c:52:ea:51:18:68:72:1d:
65:a5:c9:95:11:08:b0:79:01:9b:ac:71:7d:c1:06:
fd:2e:28:ed:4d:f7:71:c1:34:11:ff:5a:9e:88:57:
f8:40:20:08:25:31:ab:07:89:8f:42:0a:ad:fb:74:
97:bc:9e:5d:da:31:af:12:e4:b1:c5:ef:e0:bb:21:
00:9c:4d:94:15:35:8d:7e:1d:cb:32:88:96:d1:df:
5c:26:98:79:19:d0:66:54:f9:84:9f:03:8e:0e:4c:
b4:f2:d2:7f:8b:90:3e:67:81:bb:31:63:cb:ee:4d:
ca:d4:1e:b8:b4:66:f5:e7:17:89:a7:01:82:27:5b:
a7:41:f8:89:77:3a:91:3a:ba:05:12:b6:68:8e:91:
37:3e:0c:43:89:c3:2f:d9:d9:03:c0:ec:bc:0b:26:
57:84:b2:05:9d:1e:6e:52:7a:0c:5a:31:5e:6e:56:
ca:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:73:5B:3A:B8:C7:8C:D6:C0:99:DF:C9:0B:8C:7D:9F:16:C5:93:71
X509v3 Authority Key Identifier:
keyid:4B:F6:AC:0F:B0:39:26:73:45:4C:39:47:F4:35:7E:45:94:ED:26:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_asD7A5JnNFTDlH9DV-RZTtJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:46:93:c4:54:e0:98:34:e6:63:38:b2:ae:73:01:eb:60:05:
8f:55:2e:71:08:2e:d1:f1:46:c1:92:3f:70:11:11:b7:d1:d9:
09:3c:97:e0:fa:b0:14:22:eb:04:5b:12:c2:d0:36:3f:8a:03:
4f:59:12:71:0b:76:84:54:06:1c:43:5c:2f:08:d1:95:7a:83:
83:01:b6:11:d7:d1:1f:18:3d:84:70:3f:df:11:f0:e5:48:88:
03:4e:1f:01:49:cb:27:cc:8f:d0:3e:1d:b3:c0:74:c8:1f:63:
ee:9e:be:76:b8:ce:f5:00:0d:3d:c2:77:1e:f2:ad:61:d3:bc:
dc:39:d3:d3:f7:5f:c1:79:8e:ff:21:c9:65:a5:f2:95:9e:62:
15:c2:ee:10:ae:db:d3:ef:99:5f:e7:e2:2e:73:05:1a:f0:50:
27:47:d7:97:4d:94:c5:47:86:d5:1a:6e:66:45:0d:64:a9:66:
6b:73:28:d8:c7:a0:7d:d9:29:0d:5c:3e:ed:60:3c:65:d2:d0:
42:6d:d7:c3:72:0e:be:5a:f7:75:2a:c3:1b:78:77:5e:d4:ec:
71:5c:d3:f9:c8:e6:d0:19:3a:3c:a8:d1:fe:a5:35:4e:7d:00:
55:5b:b2:1f:9f:05:57:df:c2:cb:33:f0:c8:02:37:7b:00:80:
08:95:d2:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX0uwsd/b2w76VoKI8ZlwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZjZhYzBmYjAzOTI2NzM0NTRjMzk0N2Y0MzU3ZTQ1OTRl
ZDI2NmQwHhcNMjYwMzI1MTkwMTEyWhcNMjYwMzI2MTkwMTEyWjAzMTEwLwYDVQQD
EygxMzczNWIzYWI4Yzc4Y2Q2YzA5OWRmYzkwYjhjN2Q5ZjE2YzU5MzcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIAQFaQK/1oaP/OparZKkWql1nMf
iRqntmPkkZ3iUZuel/DGzvEIQazTY1i5aiUKlCk1figV0vCwOfLqGhwhwYC2NdUB
nYG/NDto63zKb409jFLqURhoch1lpcmVEQiweQGbrHF9wQb9LijtTfdxwTQR/1qe
iFf4QCAIJTGrB4mPQgqt+3SXvJ5d2jGvEuSxxe/guyEAnE2UFTWNfh3LMoiW0d9c
Jph5GdBmVPmEnwOODky08tJ/i5A+Z4G7MWPL7k3K1B64tGb15xeJpwGCJ1unQfiJ
dzqROroFErZojpE3PgxDicMv2dkDwOy8CyZXhLIFnR5uUnoMWjFeblbKVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBNzWzq4x4zWwJnfyQuMfZ8WxZNxMB8GA1UdIwQY
MBaAFEv2rA+wOSZzRUw5R/Q1fkWU7SZtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU19hc0Q3QTVKbk5GVERsSDlEVi1SWlR0Sm0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yZDYyMGUtNWFhNC00NzU5LWIwODgt
YmFjMjAwMjkzMmQ5LzEvU19hc0Q3QTVKbk5GVERsSDlEVi1SWlR0Sm0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8yZDYyMGUtNWFhNC00NzU5LWIwODgtYmFjMjAwMjkzMmQ5
LzEvU19hc0Q3QTVKbk5GVERsSDlEVi1SWlR0Sm0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeEaTxFTg
mDTmYziyrnMB62AFj1UucQgu0fFGwZI/cBERt9HZCTyX4PqwFCLrBFsSwtA2P4oD
T1kScQt2hFQGHENcLwjRlXqDgwG2EdfRHxg9hHA/3xHw5UiIA04fAUnLJ8yP0D4d
s8B0yB9j7p6+drjO9QANPcJ3HvKtYdO83DnT0/dfwXmO/yHJZaXylZ5iFcLuEK7b
0++ZX+fiLnMFGvBQJ0fXl02UxUeG1RpuZkUNZKlma3Mo2MegfdkpDVw+7WA8ZdLQ
Qm3Xw3IOvlr3dSrDG3h3XtTscVzT+cjm0Bk6PKjR/qU1Tn0AVVuyH58FV9/CyzPw
yAI3ewCACJXSVQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:20:47 2026 by rpki-client