Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft
File: sFRCxP_pwddh58VpNg6tBCQ4-QM.mft (raw, json)
Hash identifier: RrJOoCyqvrwPAe/48cpUcot8oQXeYxHxJUPJZH59/zE=
Subject key identifier: 1B:4D:20:B1:3E:ED:EE:FD:98:30:0B:2E:70:DB:C0:60:2D:A5:16:85
Authority key identifier: B0:54:42:C4:FF:E9:C1:D7:61:E7:C5:69:36:0E:AD:04:24:38:F9:03
Certificate issuer: /CN=b05442c4ffe9c1d761e7c569360ead042438f903
Certificate serial: 019D254CEEB3473717638F906D7D8880A986
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft
Manifest number: 1642
Signing time: Wed 25 Mar 2026 14:01:31 +0000
Manifest this update: Wed 25 Mar 2026 14:01:31 +0000
Manifest next update: Thu 26 Mar 2026 14:01:31 +0000
Files and hashes: 1: RSgAiFfFUDOLRRmOCmbncd53Jto.roa (hash: R29MYZiBKSn2Fy47uX6Yiye7bvq2OW5L5W2duo3Eaes=)
2: SwUYDEAlxO6M5eWOj4TfdQ0JQ2c.roa (hash: kp4VVBnJ9x9RoYER3ShnXFsDjH+5JSgU9IM02fkmGYw=)
3: p16cU-7zatx3ndSU5oxcouZGGsA.asa (hash: 2m9k8zrzrHn7HIAqTxycPMDWckYHPav0fwCmzqUUYGo=)
4: sFRCxP_pwddh58VpNg6tBCQ4-QM.crl (hash: ezxdNmJ/enOTRZUwA1zQvC1NB6CvtOMbGEz+qD7Mm+c=)
5: zQ__yCcwrvF4SpWJekyRseIBHM0.asa (hash: 5Ccdj50AwmV19PztW4Q1959SDmAm1f7TUTOUsxH1IQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft
rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:ee:b3:47:37:17:63:8f:90:6d:7d:88:80:a9:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05442c4ffe9c1d761e7c569360ead042438f903
Validity
Not Before: Mar 25 14:01:31 2026 GMT
Not After : Mar 26 14:01:31 2026 GMT
Subject: CN=1b4d20b13eedeefd98300b2e70dbc0602da51685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:48:23:2a:79:82:da:8e:1c:83:04:3b:74:3f:
9d:0e:f6:f4:88:be:37:0b:08:35:e5:84:f4:66:29:
a1:0c:73:78:e7:8c:a5:8c:aa:ed:ae:67:e0:2d:c6:
3f:d6:ce:fb:00:43:8a:9f:7f:ec:83:ac:37:88:d1:
da:7d:d1:f8:dc:21:b9:06:05:54:54:24:1c:9c:ee:
12:2c:fc:b1:75:68:7f:6d:63:1e:8b:b1:8d:42:aa:
22:ba:b1:90:04:8a:b0:ec:33:e3:df:a3:77:e0:6c:
f0:29:e4:66:84:95:a4:db:b9:2b:4f:f1:74:1d:c3:
10:a4:08:5e:36:2e:c9:33:9d:16:2e:41:e1:e4:ee:
83:61:34:33:9c:8a:0f:5c:a1:1e:95:de:ba:27:4a:
64:59:fc:69:c6:bb:43:45:b2:5e:ec:b6:c0:29:ce:
84:99:26:9c:5c:6b:9b:0e:72:32:c8:7b:82:f2:4c:
ed:ff:eb:30:bb:6f:15:77:fb:ae:3b:74:16:33:cd:
f1:80:e2:9a:98:ad:2d:85:fc:7b:38:ff:81:19:09:
99:88:4d:fc:a1:27:29:7b:83:2d:be:f1:8a:06:90:
60:74:d0:33:74:14:66:8b:e5:8a:15:22:ea:22:86:
47:70:f0:e7:1c:e7:73:e3:23:d3:e7:9e:59:cf:d1:
81:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:4D:20:B1:3E:ED:EE:FD:98:30:0B:2E:70:DB:C0:60:2D:A5:16:85
X509v3 Authority Key Identifier:
keyid:B0:54:42:C4:FF:E9:C1:D7:61:E7:C5:69:36:0E:AD:04:24:38:F9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:68:6a:55:c8:85:de:2d:56:bb:4b:6a:65:6d:9f:17:36:18:
e5:ff:73:6d:4c:9f:e6:4a:af:cc:49:18:e1:c3:4a:d5:4c:79:
a4:1d:11:5f:be:d7:27:f0:4a:76:5d:79:66:06:99:a2:6e:37:
96:ef:15:50:fa:57:66:fe:88:df:53:6b:9d:21:01:53:79:ba:
af:72:d6:c5:d9:b2:c3:e9:9a:62:95:6a:f9:29:f9:90:85:ce:
10:87:5b:0f:7a:57:97:de:dc:03:31:89:f8:89:a0:45:cd:6d:
74:ae:07:59:6d:0d:3b:cc:e8:b0:2d:5d:1e:d9:70:e1:d5:4e:
43:b1:f3:25:ec:e7:c0:9e:33:ea:e0:d0:af:13:37:b2:d0:f5:
da:71:e0:d6:d8:ce:08:36:67:b1:71:9d:99:da:34:17:32:14:
0b:30:c9:0e:4d:63:65:1d:86:3a:af:24:64:88:11:12:ee:24:
4a:0b:87:52:ce:71:5d:18:7b:da:b0:69:e3:3f:f4:63:96:f9:
81:e0:e3:48:be:94:db:d4:e3:4d:02:d3:2d:db:89:bd:99:f1:
d1:33:fe:b0:a8:02:03:af:e6:2d:8d:1b:76:35:52:78:8b:35:
66:2e:28:51:0c:d1:1c:1c:4a:36:9e:09:0c:e5:61:6c:7f:ef:
09:b8:e8:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lTO6zRzcXY4+QbX2IgKmGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwNTQ0MmM0ZmZlOWMxZDc2MWU3YzU2OTM2MGVhZDA0MjQz
OGY5MDMwHhcNMjYwMzI1MTQwMTMxWhcNMjYwMzI2MTQwMTMxWjAzMTEwLwYDVQQD
EygxYjRkMjBiMTNlZWRlZWZkOTgzMDBiMmU3MGRiYzA2MDJkYTUxNjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEgjKnmC2o4cgwQ7dD+dDvb0iL43
Cwg15YT0ZimhDHN454yljKrtrmfgLcY/1s77AEOKn3/sg6w3iNHafdH43CG5BgVU
VCQcnO4SLPyxdWh/bWMei7GNQqoiurGQBIqw7DPj36N34GzwKeRmhJWk27krT/F0
HcMQpAheNi7JM50WLkHh5O6DYTQznIoPXKEeld66J0pkWfxpxrtDRbJe7LbAKc6E
mSacXGubDnIyyHuC8kzt/+swu28Vd/uuO3QWM83xgOKamK0thfx7OP+BGQmZiE38
oScpe4MtvvGKBpBgdNAzdBRmi+WKFSLqIoZHcPDnHOdz4yPT555Zz9GBawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBtNILE+7e79mDALLnDbwGAtpRaFMB8GA1UdIwQY
MBaAFLBUQsT/6cHXYefFaTYOrQQkOPkDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0ZSQ3hQX3B3ZGRoNThWcE5nNnRCQ1E0LVFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS80Yjc3ZTctMzQ3Yy00OWZhLTgwOGIt
NmVkMzMxZjMxZTA5LzEvc0ZSQ3hQX3B3ZGRoNThWcE5nNnRCQ1E0LVFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS80Yjc3ZTctMzQ3Yy00OWZhLTgwOGItNmVkMzMxZjMxZTA5
LzEvc0ZSQ3hQX3B3ZGRoNThWcE5nNnRCQ1E0LVFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACWhqVciF
3i1Wu0tqZW2fFzYY5f9zbUyf5kqvzEkY4cNK1Ux5pB0RX77XJ/BKdl15ZgaZom43
lu8VUPpXZv6I31NrnSEBU3m6r3LWxdmyw+maYpVq+Sn5kIXOEIdbD3pXl97cAzGJ
+ImgRc1tdK4HWW0NO8zosC1dHtlw4dVOQ7HzJeznwJ4z6uDQrxM3stD12nHg1tjO
CDZnsXGdmdo0FzIUCzDJDk1jZR2GOq8kZIgREu4kSguHUs5xXRh72rBp4z/0Y5b5
geDjSL6U29TjTQLTLduJvZnx0TP+sKgCA6/mLY0bdjVSeIs1Zi4oUQzRHBxKNp4J
DOVhbH/vCbjozg==
-----END CERTIFICATE-----
Generated at Wed Mar 25 21:25:51 2026 by rpki-client