Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft
File: s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft (raw, json)
Hash identifier: shNElWW8RSDi/VmtnJ9CHjVjlzhrYLEVY4clrMkJm+Y=
Subject key identifier: F8:73:96:22:A2:39:74:88:36:00:25:C1:22:DE:56:FC:C5:94:22:74
Authority key identifier: B3:D6:62:97:C5:CD:BD:36:D8:68:49:DD:EA:E7:98:59:79:F4:50:CA
Certificate issuer: /CN=b3d66297c5cdbd36d86849ddeae7985979f450ca
Certificate serial: 019D27E01507433433C6C775133B8B434362
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 02:01:29 +0000
Manifest this update: Thu 26 Mar 2026 02:01:29 +0000
Manifest next update: Fri 27 Mar 2026 02:01:29 +0000
Files and hashes: 1: 5pbnClUh_kjLeLo2LMo1Y3vUlB0.roa (hash: Df2su1WC1f8Y96ErLqJKLUxdchUeDa/xX3IGKu6zDvE=)
2: cvG-jh0yKd3zLB32ubBPh1-7dwo.roa (hash: V6xzuEneOg5ndhVSUWtzhVClWw0yZUrA/g0C/6rX9iw=)
3: gBeSyX3OIacsVNGP8Mb0jV9GelU.roa (hash: /xqQeuzxIVD73VffQlPGbA5YqJe0ZE3mXWCLH1Yq3B8=)
4: jgJjnBaMcQo884ecdwwWeiiVGwE.roa (hash: uwiSgB/KcqJF3KmjqsXsLwBRecZ/E7ry8OXiZq9C8PQ=)
5: s9Zil8XNvTbYaEnd6ueYWXn0UMo.crl (hash: NOiEKaduKRjcAulvTnZ5r3LzaaqlQLrWEQ0iG01PBIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:15:07:43:34:33:c6:c7:75:13:3b:8b:43:43:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d66297c5cdbd36d86849ddeae7985979f450ca
Validity
Not Before: Mar 26 02:01:29 2026 GMT
Not After : Mar 27 02:01:29 2026 GMT
Subject: CN=f8739622a2397488360025c122de56fcc5942274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c0:e0:b5:b8:99:ad:5b:05:26:6f:31:40:6b:
1b:49:f1:31:5e:b8:07:ff:a8:8e:51:3e:1d:92:59:
46:fe:15:68:c7:fd:15:de:cb:db:e6:27:11:83:71:
ec:a4:69:8c:f3:c6:22:d6:50:43:ef:98:14:17:59:
96:ce:e7:77:38:a0:87:10:9c:c3:8f:6a:93:66:49:
68:cf:37:a9:1a:58:d3:20:41:ae:69:1d:fd:d3:d4:
38:e9:65:7b:a8:89:d2:6e:4f:39:bd:2c:f2:13:a8:
17:14:04:cb:73:58:68:07:fb:b9:21:c4:b3:10:a0:
2c:45:19:b4:2d:30:9e:6b:77:a0:a0:54:c0:b6:53:
03:36:73:45:d6:46:a7:d4:43:a3:e5:06:2e:11:cb:
e8:28:c3:77:59:59:83:3c:50:56:de:4c:65:5f:ea:
b5:55:a9:3a:8d:b5:f2:c2:d5:41:6f:ae:f6:0a:f3:
0b:ab:0c:86:d0:42:78:fa:0f:2d:09:08:0d:ea:ac:
52:99:83:93:0a:f0:27:18:38:fe:c6:db:fe:23:db:
5c:a7:15:97:8e:1d:f9:14:6e:db:e2:1a:f6:f1:f8:
c4:8a:31:c6:60:00:4c:e2:95:77:14:a8:b2:13:9d:
4f:22:02:20:db:83:1f:b3:42:e0:5a:76:03:be:d3:
86:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:73:96:22:A2:39:74:88:36:00:25:C1:22:DE:56:FC:C5:94:22:74
X509v3 Authority Key Identifier:
keyid:B3:D6:62:97:C5:CD:BD:36:D8:68:49:DD:EA:E7:98:59:79:F4:50:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:c3:4e:69:66:85:8d:00:4a:ca:a7:53:cc:3e:b3:f8:76:09:
7a:f7:11:66:89:72:8f:db:87:e4:87:fd:52:74:31:ed:e7:ff:
69:30:45:48:69:c3:26:dc:8c:00:ed:c7:73:8f:3b:92:12:3d:
46:23:ec:c6:c3:71:b3:23:48:4b:97:fd:e3:09:fd:e2:a3:4c:
07:20:8f:93:8f:92:21:51:e4:26:92:2c:5b:46:54:06:98:9a:
86:0c:94:5f:51:e1:7c:08:f0:e9:e8:c2:03:24:4a:c9:af:38:
37:f7:32:25:e1:05:40:f0:98:71:13:ac:0d:5b:05:3f:f7:51:
f0:13:01:c6:24:31:56:2a:7f:54:e4:c5:0f:7d:e5:f3:ac:4d:
0d:89:47:73:57:0b:d6:15:65:24:f3:c5:16:c6:2b:7b:0a:5d:
c7:da:f3:ed:cf:e0:2e:6d:c4:cf:13:62:07:3a:d6:16:31:3d:
d2:3c:44:44:0d:ea:df:a9:9c:36:63:a9:ca:a8:a4:59:08:15:
d6:62:4f:86:bb:6a:74:12:21:c9:f0:11:8f:c1:1a:ad:b3:7d:
d9:f9:a2:87:3c:02:fb:e5:d0:2f:ef:07:2c:c8:ae:55:eb:10:
10:7c:35:41:a9:42:eb:02:0d:4e:a4:1a:87:86:5c:e2:a6:00:
53:6b:19:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n4BUHQzQzxsd1EzuLQ0NiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzZDY2Mjk3YzVjZGJkMzZkODY4NDlkZGVhZTc5ODU5Nzlm
NDUwY2EwHhcNMjYwMzI2MDIwMTI5WhcNMjYwMzI3MDIwMTI5WjAzMTEwLwYDVQQD
EyhmODczOTYyMmEyMzk3NDg4MzYwMDI1YzEyMmRlNTZmY2M1OTQyMjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8DgtbiZrVsFJm8xQGsbSfExXrgH
/6iOUT4dkllG/hVox/0V3svb5icRg3HspGmM88Yi1lBD75gUF1mWzud3OKCHEJzD
j2qTZklozzepGljTIEGuaR3909Q46WV7qInSbk85vSzyE6gXFATLc1hoB/u5IcSz
EKAsRRm0LTCea3egoFTAtlMDNnNF1kan1EOj5QYuEcvoKMN3WVmDPFBW3kxlX+q1
Vak6jbXywtVBb672CvMLqwyG0EJ4+g8tCQgN6qxSmYOTCvAnGDj+xtv+I9tcpxWX
jh35FG7b4hr28fjEijHGYABM4pV3FKiyE51PIgIg24Mfs0LgWnYDvtOGtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPhzliKiOXSINgAlwSLeVvzFlCJ0MB8GA1UdIwQY
MBaAFLPWYpfFzb022GhJ3ernmFl59FDKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczlaaWw4WE52VGJZYUVuZDZ1ZVlXWG4wVU1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS85MmMxY2YtNWEyMi00NTNjLTkwN2Yt
ZWIxZjg3MTVlZWMwLzEvczlaaWw4WE52VGJZYUVuZDZ1ZVlXWG4wVU1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS85MmMxY2YtNWEyMi00NTNjLTkwN2YtZWIxZjg3MTVlZWMw
LzEvczlaaWw4WE52VGJZYUVuZDZ1ZVlXWG4wVU1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbcNOaWaF
jQBKyqdTzD6z+HYJevcRZolyj9uH5If9UnQx7ef/aTBFSGnDJtyMAO3Hc487khI9
RiPsxsNxsyNIS5f94wn94qNMByCPk4+SIVHkJpIsW0ZUBpiahgyUX1HhfAjw6ejC
AyRKya84N/cyJeEFQPCYcROsDVsFP/dR8BMBxiQxVip/VOTFD33l86xNDYlHc1cL
1hVlJPPFFsYrewpdx9rz7c/gLm3EzxNiBzrWFjE90jxERA3q36mcNmOpyqikWQgV
1mJPhrtqdBIhyfARj8EarbN92fmihzwC++XQL+8HLMiuVesQEHw1QalC6wINTqQa
h4Zc4qYAU2sZig==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:19:37 2026 by rpki-client