Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/66cbc2-bc7b-4759-8726-ed75c6fb1694/1/srXfZQUs6Uo3qFB5R8Un8Mz_pSI.mft
File: srXfZQUs6Uo3qFB5R8Un8Mz_pSI.mft (raw, json)
Hash identifier: h0eIi/8KA2tb4zWoQxAOhptQR1HWoawAgoZY7sfXXOc=
Subject key identifier: 97:F0:8B:F2:90:15:78:EF:95:C4:DF:85:8D:E5:88:80:07:2A:79:71
Authority key identifier: B2:B5:DF:65:05:2C:E9:4A:37:A8:50:79:47:C5:27:F0:CC:FF:A5:22
Certificate issuer: /CN=b2b5df65052ce94a37a8507947c527f0ccffa522
Certificate serial: 019D2772235CA182A71670080B05399F58DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/srXfZQUs6Uo3qFB5R8Un8Mz_pSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/66cbc2-bc7b-4759-8726-ed75c6fb1694/1/srXfZQUs6Uo3qFB5R8Un8Mz_pSI.mft
Manifest number: 0179
Signing time: Thu 26 Mar 2026 00:01:24 +0000
Manifest this update: Thu 26 Mar 2026 00:01:24 +0000
Manifest next update: Fri 27 Mar 2026 00:01:24 +0000
Files and hashes: 1: LbCi_KsYmyO6E2-uQ716HAH-5w4.roa (hash: a6rDpMDbXgXlq+kjKeEf0WeU/+kUP8GdRzZOi1ik3SY=)
2: srXfZQUs6Uo3qFB5R8Un8Mz_pSI.crl (hash: i0JJMLFj6xq02TKxZdNcI04+sjhbrpNGomjljYGqLuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/66cbc2-bc7b-4759-8726-ed75c6fb1694/1/srXfZQUs6Uo3qFB5R8Un8Mz_pSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/66cbc2-bc7b-4759-8726-ed75c6fb1694/1/srXfZQUs6Uo3qFB5R8Un8Mz_pSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/srXfZQUs6Uo3qFB5R8Un8Mz_pSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:23:5c:a1:82:a7:16:70:08:0b:05:39:9f:58:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2b5df65052ce94a37a8507947c527f0ccffa522
Validity
Not Before: Mar 26 00:01:24 2026 GMT
Not After : Mar 27 00:01:24 2026 GMT
Subject: CN=97f08bf2901578ef95c4df858de58880072a7971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:69:bc:67:a5:99:1d:25:73:71:a8:be:e0:87:
07:78:8a:df:44:e9:65:bf:83:4f:f0:37:c5:bb:27:
00:c4:e3:8f:45:01:e8:08:13:d3:00:31:38:2f:3d:
60:b6:04:f0:e1:13:a2:41:44:f9:35:a8:c8:79:fa:
a9:c2:15:bf:b7:01:67:71:20:66:21:1e:de:bb:7e:
52:34:5c:93:e8:e9:05:9d:d8:49:93:6c:ad:42:12:
5c:4f:54:3e:a4:f5:a1:96:25:6a:26:26:2e:51:65:
56:5f:ed:ac:e5:be:eb:be:ff:36:aa:d5:36:c6:5c:
99:40:44:40:f2:2c:52:04:d6:3a:6e:c0:79:f6:6b:
36:9c:c1:5b:59:78:28:fa:a5:46:4c:18:67:b2:d1:
3b:fa:49:36:d1:79:d4:d6:b9:ae:6b:56:f4:1a:cc:
8f:d0:f0:ff:55:80:91:72:ca:4d:01:61:e1:5f:39:
77:62:b6:a3:ca:95:42:02:02:42:dd:85:73:5e:45:
04:5d:a5:06:f1:0e:98:52:ea:e6:97:91:df:6f:4a:
65:57:33:42:30:ab:32:44:79:73:1a:2a:91:1b:61:
d0:59:b7:33:f8:22:eb:79:cb:88:99:cc:fc:0b:16:
b9:de:69:27:0b:b0:80:98:03:1f:dc:db:d4:7a:44:
c8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F0:8B:F2:90:15:78:EF:95:C4:DF:85:8D:E5:88:80:07:2A:79:71
X509v3 Authority Key Identifier:
keyid:B2:B5:DF:65:05:2C:E9:4A:37:A8:50:79:47:C5:27:F0:CC:FF:A5:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/srXfZQUs6Uo3qFB5R8Un8Mz_pSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/66cbc2-bc7b-4759-8726-ed75c6fb1694/1/srXfZQUs6Uo3qFB5R8Un8Mz_pSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/66cbc2-bc7b-4759-8726-ed75c6fb1694/1/srXfZQUs6Uo3qFB5R8Un8Mz_pSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:45:b7:3a:0e:dc:9e:2c:46:51:eb:fd:f1:68:38:b7:24:fa:
37:6c:e8:19:6f:6f:27:0c:39:1a:d8:22:71:e8:87:ad:43:40:
46:67:4a:7b:67:bb:83:00:a7:e1:08:53:3b:a1:00:d1:27:bf:
5c:07:47:93:81:a8:b9:e3:af:ca:38:01:84:93:b7:26:76:24:
65:9a:8b:55:da:95:27:c7:17:77:93:09:df:4c:16:bf:d8:f0:
66:ab:6a:f4:32:fc:bf:fd:b3:bb:37:d5:12:de:d4:3f:5f:dc:
24:b9:6f:58:3a:e7:c0:d7:94:84:9e:af:4f:69:ae:b4:9b:09:
97:d4:d4:18:be:b4:51:6c:49:bb:91:5c:0b:3c:5a:38:8b:71:
bb:ff:dc:3c:42:d7:64:ed:12:12:b1:cf:36:e1:02:87:97:ec:
7e:b2:be:7c:eb:57:49:9e:df:99:3c:61:58:ca:71:79:99:f4:
44:1a:c0:a0:c0:f8:02:be:f4:19:54:dd:55:af:c0:61:11:3d:
4a:be:25:ca:e8:5e:d1:98:d0:f2:7f:17:1a:3c:56:14:5d:f6:
32:5a:8a:06:70:ee:ea:30:34:70:01:74:75:c3:5a:6f:e1:a8:
a1:e1:68:a0:a0:d1:b5:5b:47:03:34:8e:a9:22:cb:90:8e:05:
bd:4f:c2:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nciNcoYKnFnAICwU5n1jdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYjVkZjY1MDUyY2U5NGEzN2E4NTA3OTQ3YzUyN2YwY2Nm
ZmE1MjIwHhcNMjYwMzI2MDAwMTI0WhcNMjYwMzI3MDAwMTI0WjAzMTEwLwYDVQQD
Eyg5N2YwOGJmMjkwMTU3OGVmOTVjNGRmODU4ZGU1ODg4MDA3MmE3OTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGm8Z6WZHSVzcai+4IcHeIrfROll
v4NP8DfFuycAxOOPRQHoCBPTADE4Lz1gtgTw4ROiQUT5NajIefqpwhW/twFncSBm
IR7eu35SNFyT6OkFndhJk2ytQhJcT1Q+pPWhliVqJiYuUWVWX+2s5b7rvv82qtU2
xlyZQERA8ixSBNY6bsB59ms2nMFbWXgo+qVGTBhnstE7+kk20XnU1rmua1b0GsyP
0PD/VYCRcspNAWHhXzl3YrajypVCAgJC3YVzXkUEXaUG8Q6YUurml5Hfb0plVzNC
MKsyRHlzGiqRG2HQWbcz+CLrecuImcz8Cxa53mknC7CAmAMf3NvUekTIMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJfwi/KQFXjvlcTfhY3liIAHKnlxMB8GA1UdIwQY
MBaAFLK132UFLOlKN6hQeUfFJ/DM/6UiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3JYZlpRVXM2VW8zcUZCNVI4VW44TXpfcFNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi82NmNiYzItYmM3Yi00NzU5LTg3MjYt
ZWQ3NWM2ZmIxNjk0LzEvc3JYZlpRVXM2VW8zcUZCNVI4VW44TXpfcFNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi82NmNiYzItYmM3Yi00NzU5LTg3MjYtZWQ3NWM2ZmIxNjk0
LzEvc3JYZlpRVXM2VW8zcUZCNVI4VW44TXpfcFNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU0W3Og7c
nixGUev98Wg4tyT6N2zoGW9vJww5GtgiceiHrUNARmdKe2e7gwCn4QhTO6EA0Se/
XAdHk4GoueOvyjgBhJO3JnYkZZqLVdqVJ8cXd5MJ30wWv9jwZqtq9DL8v/2zuzfV
Et7UP1/cJLlvWDrnwNeUhJ6vT2mutJsJl9TUGL60UWxJu5FcCzxaOItxu//cPELX
ZO0SErHPNuECh5fsfrK+fOtXSZ7fmTxhWMpxeZn0RBrAoMD4Ar70GVTdVa/AYRE9
Sr4lyuhe0ZjQ8n8XGjxWFF32MlqKBnDu6jA0cAF0dcNab+GooeFooKDRtVtHAzSO
qSLLkI4FvU/CUw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:11:17 2026 by rpki-client