Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft
File: sFoGBOdodvoD5q2Gh_odtsY9OQg.mft (raw, json)
Hash identifier: wLIpkB4MQU4ZYWrYS1XcUqRLTyYx6tIn0XBSInYAfes=
Subject key identifier: 62:17:A3:90:D0:11:D2:C8:BD:9E:F0:4B:77:42:39:2E:93:39:CC:8A
Authority key identifier: B0:5A:06:04:E7:68:76:FA:03:E6:AD:86:87:FA:1D:B6:C6:3D:39:08
Certificate issuer: /CN=b05a0604e76876fa03e6ad8687fa1db6c63d3908
Certificate serial: 019D29294DD288AE8912EFA2BF9FB9FF11AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFoGBOdodvoD5q2Gh_odtsY9OQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 08:01:05 +0000
Manifest this update: Thu 26 Mar 2026 08:01:05 +0000
Manifest next update: Fri 27 Mar 2026 08:01:05 +0000
Files and hashes: 1: YVVSxC4wbNTE6amPOj_aUWu9KmQ.roa (hash: jx8KSb9gYYltGS0dfqO/0sgILL/tPjue23+E+n9mHYY=)
2: jvfuzQB2Ic8Lkn_v-fU0vD7KZUI.roa (hash: wTQiDytgLASjhAyRpE2k4salmmSbcvPsNpIE4v8G2dw=)
3: sFoGBOdodvoD5q2Gh_odtsY9OQg.crl (hash: CZ0F6NjBmuV728jxRqierlevbmOtkbnpbQGST6//Z4c=)
4: xgkVb7jGmrVMuFNZV5uC54rwBLc.roa (hash: U7zPiRVnuj8K+WrtUv0kblwys87NbJBaEKGAwaoWJcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/sFoGBOdodvoD5q2Gh_odtsY9OQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:4d:d2:88:ae:89:12:ef:a2:bf:9f:b9:ff:11:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05a0604e76876fa03e6ad8687fa1db6c63d3908
Validity
Not Before: Mar 26 08:01:05 2026 GMT
Not After : Mar 27 08:01:05 2026 GMT
Subject: CN=6217a390d011d2c8bd9ef04b7742392e9339cc8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:05:02:ac:49:38:ce:9e:86:7d:bb:6e:e8:58:
c4:e8:b5:82:64:a7:fe:9d:a1:01:c5:34:fa:62:7e:
e4:85:bd:a9:3e:db:66:cf:e5:80:7c:b2:92:37:92:
f7:00:7e:b6:2a:39:2c:bd:d2:21:75:4f:6a:8c:17:
85:7a:94:1a:c0:de:27:98:25:e8:f9:20:2b:64:a3:
39:73:21:55:6b:b6:35:3b:7c:76:b5:10:e7:be:fb:
1e:ce:5d:7d:b7:fa:29:a9:c5:4a:95:1c:84:70:e1:
d1:5c:cc:67:4e:b3:b6:5d:e2:02:2e:8d:08:b5:ea:
b9:67:8a:48:b9:66:3d:64:0f:3c:4d:1b:3a:d6:07:
fa:80:b0:1a:74:79:d7:f5:ce:ea:28:39:dd:48:75:
2a:72:81:0b:e4:41:6b:c1:e5:e8:91:4f:f5:1a:71:
96:22:2d:15:1c:57:c1:fa:4f:6e:d9:f8:e7:70:e4:
89:cd:6a:99:b8:fc:9d:ce:1b:15:e7:45:e5:a0:17:
93:98:84:ee:63:05:05:2e:7b:ff:ce:a7:0b:d4:b9:
e7:13:e0:5e:86:6e:0c:75:e2:c4:7c:5d:ce:e7:05:
9f:d8:f7:10:40:27:17:37:33:f0:4c:19:fa:00:3e:
57:84:ed:84:97:66:7a:b4:37:67:03:78:14:01:7b:
44:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:17:A3:90:D0:11:D2:C8:BD:9E:F0:4B:77:42:39:2E:93:39:CC:8A
X509v3 Authority Key Identifier:
keyid:B0:5A:06:04:E7:68:76:FA:03:E6:AD:86:87:FA:1D:B6:C6:3D:39:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFoGBOdodvoD5q2Gh_odtsY9OQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:b1:d8:f6:23:2f:fb:ef:1b:51:a7:21:2c:4e:42:32:a1:26:
7e:cd:48:4b:6b:8b:cc:ad:e9:10:1f:61:cd:24:ec:f2:03:23:
fd:7f:b2:b0:c1:ae:74:86:54:dc:ab:ef:b3:d3:59:f9:3b:5c:
83:1b:57:db:2e:f1:70:51:35:10:40:50:7e:b3:65:aa:47:78:
e9:8f:ab:bd:e4:e1:57:f8:12:96:67:81:13:92:8e:49:23:00:
0b:30:b5:07:5b:22:d5:f9:79:64:2f:e9:2b:07:10:3e:13:dc:
4f:8c:75:35:79:70:94:2b:05:53:41:69:52:f1:31:b9:d4:b8:
a0:d9:c3:02:0f:5f:c5:e4:ed:78:4d:f4:df:eb:6f:52:74:30:
db:1f:ca:ba:b5:63:df:e1:44:31:4f:8a:2d:39:19:af:2f:28:
85:12:fd:a6:1a:ff:23:cc:37:89:b5:5e:61:53:8e:b3:0e:67:
b5:d9:f2:ec:f8:3c:cb:a0:16:42:20:2e:4b:52:6d:e4:96:c8:
7a:1e:b3:53:2a:6d:9a:b3:5a:69:1c:f9:62:d9:b7:4b:af:5a:
6b:13:e4:a5:d5:9c:16:d9:cb:8e:8b:b0:9f:ad:bb:5c:10:f1:
b4:4c:cb:1b:6d:98:67:5e:79:8f:88:d5:26:60:94:ce:1b:16:
63:41:81:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pKU3SiK6JEu+iv5+5/xGsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwNWEwNjA0ZTc2ODc2ZmEwM2U2YWQ4Njg3ZmExZGI2YzYz
ZDM5MDgwHhcNMjYwMzI2MDgwMTA1WhcNMjYwMzI3MDgwMTA1WjAzMTEwLwYDVQQD
Eyg2MjE3YTM5MGQwMTFkMmM4YmQ5ZWYwNGI3NzQyMzkyZTkzMzljYzhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAUCrEk4zp6Gfbtu6FjE6LWCZKf+
naEBxTT6Yn7khb2pPttmz+WAfLKSN5L3AH62KjksvdIhdU9qjBeFepQawN4nmCXo
+SArZKM5cyFVa7Y1O3x2tRDnvvsezl19t/opqcVKlRyEcOHRXMxnTrO2XeICLo0I
teq5Z4pIuWY9ZA88TRs61gf6gLAadHnX9c7qKDndSHUqcoEL5EFrweXokU/1GnGW
Ii0VHFfB+k9u2fjncOSJzWqZuPydzhsV50XloBeTmITuYwUFLnv/zqcL1LnnE+Be
hm4MdeLEfF3O5wWf2PcQQCcXNzPwTBn6AD5XhO2El2Z6tDdnA3gUAXtElwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGIXo5DQEdLIvZ7wS3dCOS6TOcyKMB8GA1UdIwQY
MBaAFLBaBgTnaHb6A+athof6HbbGPTkIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0ZvR0JPZG9kdm9ENXEyR2hfb2R0c1k5T1FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi84MWFhNDktOGI0YS00YzI4LWE1Nzgt
YTYwNTcxN2QzNGFlLzEvc0ZvR0JPZG9kdm9ENXEyR2hfb2R0c1k5T1FnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi84MWFhNDktOGI0YS00YzI4LWE1NzgtYTYwNTcxN2QzNGFl
LzEvc0ZvR0JPZG9kdm9ENXEyR2hfb2R0c1k5T1FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb7HY9iMv
++8bUachLE5CMqEmfs1IS2uLzK3pEB9hzSTs8gMj/X+ysMGudIZU3Kvvs9NZ+Ttc
gxtX2y7xcFE1EEBQfrNlqkd46Y+rveThV/gSlmeBE5KOSSMACzC1B1si1fl5ZC/p
KwcQPhPcT4x1NXlwlCsFU0FpUvExudS4oNnDAg9fxeTteE303+tvUnQw2x/KurVj
3+FEMU+KLTkZry8ohRL9phr/I8w3ibVeYVOOsw5ntdny7Pg8y6AWQiAuS1Jt5JbI
eh6zUyptmrNaaRz5Ytm3S69aaxPkpdWcFtnLjouwn627XBDxtEzLG22YZ155j4jV
JmCUzhsWY0GB3A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:07:52 2026 by rpki-client