Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
File: mFS9ioY6MYlcxsuSLzAIs_CKra4.mft (raw, json)
Hash identifier: NiYPaUVB5tdQs35R33Xor09DLKLkUyRwt3A3hMOFusk=
Subject key identifier: 25:7A:35:51:74:83:72:9F:BC:35:F5:AD:B6:23:2C:71:E1:B5:CE:18
Authority key identifier: 98:54:BD:8A:86:3A:31:89:5C:C6:CB:92:2F:30:08:B3:F0:8A:AD:AE
Certificate issuer: /CN=9854bd8a863a31895cc6cb922f3008b3f08aadae
Certificate serial: 019D292910C7C7D083DC06D335FFD94E4728
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
Manifest number: 181A
Signing time: Thu 26 Mar 2026 08:00:50 +0000
Manifest this update: Thu 26 Mar 2026 08:00:50 +0000
Manifest next update: Fri 27 Mar 2026 08:00:50 +0000
Files and hashes: 1: 42Oa6hAtTxZiFbmEwvIO-2OcwoM.roa (hash: SkLlsU0plCQ3OmjzWWaN+6X8mXDGCP5VlIK1uTpu/is=)
2: V0-osk911oZBoXIEbj4rnci62yY.roa (hash: rYxJFA3gAE6iirrxlQ+evDRo4zqxQB5y71GogsBIQ7c=)
3: mFS9ioY6MYlcxsuSLzAIs_CKra4.crl (hash: nL3V4cTRLreF2tqOykorYb6fap1UBdws5iuVcz1JaPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:10:c7:c7:d0:83:dc:06:d3:35:ff:d9:4e:47:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9854bd8a863a31895cc6cb922f3008b3f08aadae
Validity
Not Before: Mar 26 08:00:50 2026 GMT
Not After : Mar 27 08:00:50 2026 GMT
Subject: CN=257a35517483729fbc35f5adb6232c71e1b5ce18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:67:bf:e0:a4:0e:b2:b9:0d:fb:aa:06:f2:d5:
3e:de:b1:03:6d:88:fc:b2:6a:34:cc:98:46:ee:40:
a3:bb:83:f5:05:77:7a:0a:30:23:1d:d2:34:87:8b:
3e:86:36:50:73:b6:cf:89:72:02:e5:7b:a2:22:bb:
7d:ef:81:21:40:54:f1:8d:68:fa:b5:e7:17:f8:a6:
55:7b:1e:77:cb:dd:25:89:9a:05:83:74:34:f7:15:
41:e7:aa:1c:f8:dd:42:65:a7:42:b7:a6:cb:d0:9a:
93:b0:1f:91:8f:cc:9c:40:a4:37:cd:df:96:3d:96:
14:c7:e3:e7:ca:d4:93:aa:36:bb:7d:e4:91:59:fc:
03:aa:9e:e1:ad:70:57:42:69:32:4e:32:f2:2a:d2:
79:36:98:28:ae:9f:a7:a1:0c:3b:5e:7a:e3:c4:b5:
53:1f:a0:21:0b:6a:15:63:02:ed:07:ef:24:1c:93:
cb:f5:3c:c6:cc:1b:74:91:2f:dc:3b:ff:11:56:4a:
84:d0:36:bd:c5:ad:8e:9c:d9:0f:38:fe:07:bc:a0:
ab:88:cf:0f:77:31:1b:ae:32:02:7d:b5:35:b8:61:
a6:98:52:dc:76:52:d7:dc:e5:63:a5:cc:c1:6d:44:
0c:b1:54:d8:3b:e0:0e:ab:1e:49:05:8c:b2:71:f8:
e4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:7A:35:51:74:83:72:9F:BC:35:F5:AD:B6:23:2C:71:E1:B5:CE:18
X509v3 Authority Key Identifier:
keyid:98:54:BD:8A:86:3A:31:89:5C:C6:CB:92:2F:30:08:B3:F0:8A:AD:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:96:ed:6e:c5:80:07:cf:f2:2a:56:4a:54:52:84:29:30:78:
1c:8b:0d:fe:5b:3f:4f:79:8d:db:8d:95:4a:2a:c0:fb:8c:dc:
81:13:4c:07:20:36:d8:e4:d6:ce:0a:2a:61:d1:e7:75:2f:80:
75:76:80:a4:2b:1c:5c:3c:0c:6f:d8:f3:75:29:2f:18:48:6d:
b5:7d:98:bb:66:e1:b1:01:81:cd:f9:0e:ad:51:01:e5:b5:8a:
38:6a:b2:1f:4f:ba:5c:ce:21:70:91:7f:ce:67:05:80:cb:6c:
38:03:77:d7:10:0d:01:91:0c:72:55:da:ae:b8:b6:29:81:a7:
3e:20:32:f4:05:6a:f1:53:ba:1c:48:61:34:0c:54:7b:05:df:
ad:61:2b:4c:89:68:d1:7e:4a:6d:23:87:24:60:04:8d:3f:3b:
a1:74:c5:f7:99:97:03:80:f1:c9:9c:38:94:51:3e:45:6c:f3:
d2:a9:f1:2e:ac:ab:03:cc:cf:2c:a8:42:5f:1a:67:c2:e4:23:
54:7e:53:13:6a:61:60:d8:4f:8d:61:2a:09:85:60:62:54:22:
48:30:9f:43:ec:12:1d:cd:60:db:30:e3:cb:a9:25:79:d7:bf:
41:66:4f:df:78:41:3f:bb:7e:03:61:c9:e8:2e:f7:68:82:9a:
9b:cf:59:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pKRDHx9CD3AbTNf/ZTkcoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4NTRiZDhhODYzYTMxODk1Y2M2Y2I5MjJmMzAwOGIzZjA4
YWFkYWUwHhcNMjYwMzI2MDgwMDUwWhcNMjYwMzI3MDgwMDUwWjAzMTEwLwYDVQQD
EygyNTdhMzU1MTc0ODM3MjlmYmMzNWY1YWRiNjIzMmM3MWUxYjVjZTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGe/4KQOsrkN+6oG8tU+3rEDbYj8
smo0zJhG7kCju4P1BXd6CjAjHdI0h4s+hjZQc7bPiXIC5XuiIrt974EhQFTxjWj6
tecX+KZVex53y90liZoFg3Q09xVB56oc+N1CZadCt6bL0JqTsB+Rj8ycQKQ3zd+W
PZYUx+PnytSTqja7feSRWfwDqp7hrXBXQmkyTjLyKtJ5Npgorp+noQw7XnrjxLVT
H6AhC2oVYwLtB+8kHJPL9TzGzBt0kS/cO/8RVkqE0Da9xa2OnNkPOP4HvKCriM8P
dzEbrjICfbU1uGGmmFLcdlLX3OVjpczBbUQMsVTYO+AOqx5JBYyycfjksQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCV6NVF0g3KfvDX1rbYjLHHhtc4YMB8GA1UdIwQY
MBaAFJhUvYqGOjGJXMbLki8wCLPwiq2uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUZTOWlvWTZNWWxjeHN1U0x6QUlzX0NLcmE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8yZWQxMGMtMDRiMC00ODY2LTliODIt
YzUyMmI3NGRkY2ZkLzEvbUZTOWlvWTZNWWxjeHN1U0x6QUlzX0NLcmE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8yZWQxMGMtMDRiMC00ODY2LTliODItYzUyMmI3NGRkY2Zk
LzEvbUZTOWlvWTZNWWxjeHN1U0x6QUlzX0NLcmE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp5btbsWA
B8/yKlZKVFKEKTB4HIsN/ls/T3mN242VSirA+4zcgRNMByA22OTWzgoqYdHndS+A
dXaApCscXDwMb9jzdSkvGEhttX2Yu2bhsQGBzfkOrVEB5bWKOGqyH0+6XM4hcJF/
zmcFgMtsOAN31xANAZEMclXarri2KYGnPiAy9AVq8VO6HEhhNAxUewXfrWErTIlo
0X5KbSOHJGAEjT87oXTF95mXA4DxyZw4lFE+RWzz0qnxLqyrA8zPLKhCXxpnwuQj
VH5TE2phYNhPjWEqCYVgYlQiSDCfQ+wSHc1g2zDjy6klede/QWZP33hBP7t+A2HJ
6C73aIKam89Z2g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:54:03 2026 by rpki-client