Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.mft
File: _sTvIAvJ0n6e1_O8a1wFKS2EMro.mft (raw, json)
Hash identifier: z/oiVXRDz0EYWK9jTId8FZu5kicDrgzL26I6yweCrLY=
Subject key identifier: 97:09:78:E7:19:AE:4A:72:51:59:97:E3:7F:EF:34:55:A0:24:86:E2
Authority key identifier: FE:C4:EF:20:0B:C9:D2:7E:9E:D7:F3:BC:6B:5C:05:29:2D:84:32:BA
Certificate issuer: /CN=fec4ef200bc9d27e9ed7f3bc6b5c05292d8432ba
Certificate serial: 019D29618350CA3697E4E9132E1AD09033DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sTvIAvJ0n6e1_O8a1wFKS2EMro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.mft
Manifest number: 05A5
Signing time: Thu 26 Mar 2026 09:02:29 +0000
Manifest this update: Thu 26 Mar 2026 09:02:29 +0000
Manifest next update: Fri 27 Mar 2026 09:02:29 +0000
Files and hashes: 1: _sTvIAvJ0n6e1_O8a1wFKS2EMro.crl (hash: neYW7PXrsgBd2h1TlBVDTO5wIK+dUN9vukONZGPifuo=)
2: zwsKXVVMmv0-EwryV2b3Xyq5PW4.roa (hash: 5ydnlDVv4t0zmXg2O1tzQDXDv+ERwDuwKHdXunX5QqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.mft
rsync://rpki.ripe.net/repository/DEFAULT/_sTvIAvJ0n6e1_O8a1wFKS2EMro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:83:50:ca:36:97:e4:e9:13:2e:1a:d0:90:33:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fec4ef200bc9d27e9ed7f3bc6b5c05292d8432ba
Validity
Not Before: Mar 26 09:02:29 2026 GMT
Not After : Mar 27 09:02:29 2026 GMT
Subject: CN=970978e719ae4a72515997e37fef3455a02486e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:27:73:8e:cf:e4:d4:03:eb:ec:38:72:f2:cd:
97:1b:c9:93:5c:69:a1:ca:ab:2b:0e:58:c5:a0:86:
92:b6:c4:e4:6d:ee:ce:cc:f2:22:f8:76:e3:23:89:
06:24:ca:31:3c:39:99:aa:aa:e6:4c:da:dd:da:63:
11:d8:8c:9e:8b:ab:98:ea:f5:e5:7d:c7:25:c2:3f:
da:25:eb:30:45:6f:19:88:1a:5c:43:11:e1:5e:6b:
79:30:fb:88:61:d3:8e:31:21:68:31:2f:7a:aa:b2:
a9:52:82:72:7f:f7:d0:90:e6:50:53:8a:b5:c1:96:
80:99:6a:2a:01:12:9a:14:6a:9d:23:ad:48:d8:15:
cf:66:dd:05:38:d6:12:cf:10:28:29:11:90:ff:76:
2e:b9:e1:24:63:9d:fa:23:f5:fb:bd:e3:d1:0e:25:
74:c3:30:83:90:aa:c6:35:99:79:1f:fe:9e:18:87:
03:58:67:f2:37:b6:b3:d0:bc:fc:3f:93:53:64:6d:
dd:c5:3f:6d:1b:6e:79:85:56:df:a8:1e:d6:0a:7b:
e2:c0:89:cc:01:34:16:f6:5b:0d:0d:1b:fd:8d:e8:
69:d2:56:09:c9:25:a2:eb:98:c3:27:f1:56:e8:9c:
37:2f:35:7f:a8:ae:5f:97:3a:49:e6:fc:df:0f:f7:
3b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:09:78:E7:19:AE:4A:72:51:59:97:E3:7F:EF:34:55:A0:24:86:E2
X509v3 Authority Key Identifier:
keyid:FE:C4:EF:20:0B:C9:D2:7E:9E:D7:F3:BC:6B:5C:05:29:2D:84:32:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sTvIAvJ0n6e1_O8a1wFKS2EMro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:90:07:05:84:22:e5:35:be:2c:90:91:b4:14:f4:1e:37:45:
71:56:bc:a2:16:65:60:74:c5:4f:e7:c2:40:9f:db:a4:8f:19:
a2:80:09:28:ed:22:fd:5b:95:29:76:d5:fa:e2:23:8d:d5:56:
e3:6f:ac:e6:f1:4d:9b:74:ef:ab:84:32:c8:b1:b8:58:17:38:
1d:b8:c6:74:2f:5d:17:6b:97:12:fe:eb:9c:09:11:86:72:0c:
6b:9d:ac:68:b6:15:50:a4:33:eb:d9:18:0e:18:e2:c1:fe:f4:
10:47:24:a4:23:f9:73:9b:54:f7:95:76:d9:42:f1:7c:4a:96:
f0:dc:a9:de:0a:66:41:d9:20:c8:63:fb:cc:08:64:cf:97:82:
2e:9c:d4:6f:7f:1f:8c:39:76:f3:c4:f3:2d:7c:24:70:99:0a:
e7:9a:98:33:dc:98:e8:87:d2:e8:dd:c5:1a:08:43:47:c7:05:
df:e4:c9:92:13:a8:d0:fe:75:b8:3d:e3:ca:ef:d4:c0:5f:a4:
ce:50:fd:28:5a:39:24:ea:94:29:ea:40:5c:75:e6:c4:86:8e:
60:67:85:10:b7:f5:a3:fc:ad:29:8c:cb:80:43:19:ec:26:8d:
fc:6d:51:43:49:f6:9b:ea:4c:97:61:5f:bd:a2:70:1d:05:8d:
15:1f:0f:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pYYNQyjaX5OkTLhrQkDPeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYzRlZjIwMGJjOWQyN2U5ZWQ3ZjNiYzZiNWMwNTI5MmQ4
NDMyYmEwHhcNMjYwMzI2MDkwMjI5WhcNMjYwMzI3MDkwMjI5WjAzMTEwLwYDVQQD
Eyg5NzA5NzhlNzE5YWU0YTcyNTE1OTk3ZTM3ZmVmMzQ1NWEwMjQ4NmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAridzjs/k1APr7Dhy8s2XG8mTXGmh
yqsrDljFoIaStsTkbe7OzPIi+HbjI4kGJMoxPDmZqqrmTNrd2mMR2Iyei6uY6vXl
fcclwj/aJeswRW8ZiBpcQxHhXmt5MPuIYdOOMSFoMS96qrKpUoJyf/fQkOZQU4q1
wZaAmWoqARKaFGqdI61I2BXPZt0FONYSzxAoKRGQ/3YuueEkY536I/X7vePRDiV0
wzCDkKrGNZl5H/6eGIcDWGfyN7az0Lz8P5NTZG3dxT9tG255hVbfqB7WCnviwInM
ATQW9lsNDRv9jehp0lYJySWi65jDJ/FW6Jw3LzV/qK5flzpJ5vzfD/c7qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJcJeOcZrkpyUVmX43/vNFWgJIbiMB8GA1UdIwQY
MBaAFP7E7yALydJ+ntfzvGtcBSkthDK6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3NUdklBdkowbjZlMV9POGExd0ZLUzJFTXJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jMDViODYtNmYxNi00OTY0LWE1MDMt
NWVjY2VjOGQ5M2I0LzEvX3NUdklBdkowbjZlMV9POGExd0ZLUzJFTXJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9jMDViODYtNmYxNi00OTY0LWE1MDMtNWVjY2VjOGQ5M2I0
LzEvX3NUdklBdkowbjZlMV9POGExd0ZLUzJFTXJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsJAHBYQi
5TW+LJCRtBT0HjdFcVa8ohZlYHTFT+fCQJ/bpI8ZooAJKO0i/VuVKXbV+uIjjdVW
42+s5vFNm3Tvq4QyyLG4WBc4HbjGdC9dF2uXEv7rnAkRhnIMa52saLYVUKQz69kY
Dhjiwf70EEckpCP5c5tU95V22ULxfEqW8Nyp3gpmQdkgyGP7zAhkz5eCLpzUb38f
jDl288TzLXwkcJkK55qYM9yY6IfS6N3FGghDR8cF3+TJkhOo0P51uD3jyu/UwF+k
zlD9KFo5JOqUKepAXHXmxIaOYGeFELf1o/ytKYzLgEMZ7CaN/G1RQ0n2m+pMl2Ff
vaJwHQWNFR8PKg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:52:12 2026 by rpki-client