Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.mft
File: 1SrUBolIgw2enlis5eHxcDSOQCQ.mft (raw, json)
Hash identifier: /VMa8Lp9THhMWv6NOWg+aWnDBfqR3ZUBFiPb44FO9Ds=
Subject key identifier: 55:67:03:7D:A0:E3:B5:D3:1F:06:8E:C1:DD:9C:08:2A:8E:D6:0A:5C
Authority key identifier: D5:2A:D4:06:89:48:83:0D:9E:9E:58:AC:E5:E1:F1:70:34:8E:40:24
Certificate issuer: /CN=d52ad4068948830d9e9e58ace5e1f170348e4024
Certificate serial: 019D26CCFBD29DA48A0387289C44A92924D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1SrUBolIgw2enlis5eHxcDSOQCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.mft
Manifest number: 110D
Signing time: Wed 25 Mar 2026 21:01:00 +0000
Manifest this update: Wed 25 Mar 2026 21:01:00 +0000
Manifest next update: Thu 26 Mar 2026 21:01:00 +0000
Files and hashes: 1: 1SrUBolIgw2enlis5eHxcDSOQCQ.crl (hash: urLNfyLLGv//i+yB406dFWRXikQEbSYUFT7lOLKOfUM=)
2: ubq_xBKrBDVmoRiicjeCjxM9yfM.roa (hash: 0xkkVTV2725zH3I8++A4kA66tUTB4Kd5cJoEJ4T50Pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1SrUBolIgw2enlis5eHxcDSOQCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:fb:d2:9d:a4:8a:03:87:28:9c:44:a9:29:24:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d52ad4068948830d9e9e58ace5e1f170348e4024
Validity
Not Before: Mar 25 21:01:00 2026 GMT
Not After : Mar 26 21:01:00 2026 GMT
Subject: CN=5567037da0e3b5d31f068ec1dd9c082a8ed60a5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4b:1d:41:d3:9e:37:fa:88:51:43:d3:51:f3:
da:b2:ab:bf:82:3d:e1:db:cd:ab:59:49:c8:fa:d8:
17:25:71:6c:fc:83:c7:7f:8c:03:b6:00:8a:08:25:
d2:b9:11:aa:11:98:d9:dc:b3:94:37:33:a7:2d:8a:
f6:3f:a1:5c:5c:70:72:b9:3e:2a:35:28:52:26:28:
05:75:f1:9a:2f:8c:42:49:fa:1a:65:a2:68:f2:23:
d7:9d:f6:49:61:5b:1a:79:0f:7d:c8:31:8d:76:f7:
bc:ac:f7:bf:37:55:ba:12:c8:82:09:cd:70:b4:58:
61:1f:8e:a9:8f:8a:ed:af:79:25:aa:3a:a4:4c:34:
88:49:96:83:a1:eb:8b:32:8f:ff:3e:f6:a2:04:c7:
ed:a2:a3:a6:96:07:3b:b1:05:3c:b8:c1:d9:aa:29:
f4:ad:dd:b7:72:d3:a7:67:f0:1d:a7:b5:17:e1:90:
15:62:ac:52:21:bb:5d:16:e7:08:ff:49:d1:49:4a:
7b:41:ad:6c:fa:38:f1:61:5d:2c:32:f7:6f:87:da:
f4:ba:43:09:ab:43:98:30:74:17:25:53:a3:ae:c0:
c8:1b:de:bd:40:b7:ce:91:c2:ff:35:69:d4:85:c3:
2e:3f:31:60:77:29:58:86:68:a3:08:7e:dc:15:43:
a7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:67:03:7D:A0:E3:B5:D3:1F:06:8E:C1:DD:9C:08:2A:8E:D6:0A:5C
X509v3 Authority Key Identifier:
keyid:D5:2A:D4:06:89:48:83:0D:9E:9E:58:AC:E5:E1:F1:70:34:8E:40:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1SrUBolIgw2enlis5eHxcDSOQCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:92:6d:50:38:45:93:a7:58:c0:38:6b:ce:ec:cd:3c:a6:d9:
ee:15:24:aa:b9:44:68:62:20:e3:85:d4:2a:00:88:59:3e:96:
25:25:11:8c:59:50:14:48:87:3b:c3:68:8d:43:32:87:dd:35:
d0:3b:96:68:c3:b1:f1:c1:a8:60:f7:4d:a3:70:a3:32:f4:39:
71:f1:66:f4:85:6f:a5:d1:95:27:ef:e1:0d:e7:5d:64:14:c7:
4a:e7:cb:03:52:48:6e:90:39:d4:e9:f9:21:3f:8c:f5:d5:c1:
35:03:8d:e4:3d:9e:11:0e:52:a5:e7:95:8b:37:48:3d:4e:f6:
5b:32:4f:66:45:c8:fc:7a:84:7c:07:5e:46:6a:6c:a4:d5:96:
2f:6a:f2:fd:e0:6d:b4:11:23:d0:c1:cb:4e:4b:42:53:86:7a:
94:d9:78:61:75:47:da:a6:35:98:7f:bd:95:21:a2:56:d3:11:
ce:06:4e:24:aa:35:2c:11:2d:24:04:b1:6a:27:66:98:0b:3a:
33:27:e5:58:df:9f:be:bd:3e:ab:cb:ce:bd:35:fb:08:d1:83:
36:b7:be:93:93:a9:a9:c9:f2:59:5b:c2:78:8f:aa:9b:bf:e0:
69:38:41:46:cf:5f:a5:a8:75:35:50:74:0b:66:2c:71:90:f1:
4f:d7:90:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzPvSnaSKA4conESpKSTUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1MmFkNDA2ODk0ODgzMGQ5ZTllNThhY2U1ZTFmMTcwMzQ4
ZTQwMjQwHhcNMjYwMzI1MjEwMTAwWhcNMjYwMzI2MjEwMTAwWjAzMTEwLwYDVQQD
Eyg1NTY3MDM3ZGEwZTNiNWQzMWYwNjhlYzFkZDljMDgyYThlZDYwYTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0sdQdOeN/qIUUPTUfPasqu/gj3h
282rWUnI+tgXJXFs/IPHf4wDtgCKCCXSuRGqEZjZ3LOUNzOnLYr2P6FcXHByuT4q
NShSJigFdfGaL4xCSfoaZaJo8iPXnfZJYVsaeQ99yDGNdve8rPe/N1W6EsiCCc1w
tFhhH46pj4rtr3klqjqkTDSISZaDoeuLMo//PvaiBMftoqOmlgc7sQU8uMHZqin0
rd23ctOnZ/Adp7UX4ZAVYqxSIbtdFucI/0nRSUp7Qa1s+jjxYV0sMvdvh9r0ukMJ
q0OYMHQXJVOjrsDIG969QLfOkcL/NWnUhcMuPzFgdylYhmijCH7cFUOnewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFVnA32g47XTHwaOwd2cCCqO1gpcMB8GA1UdIwQY
MBaAFNUq1AaJSIMNnp5YrOXh8XA0jkAkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVNyVUJvbElndzJlbmxpczVlSHhjRFNPUUNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82ZGI4ZTAtMTc4MC00MDFhLTljYjct
YjhjZjA0YjU0MjUxLzEvMVNyVUJvbElndzJlbmxpczVlSHhjRFNPUUNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS82ZGI4ZTAtMTc4MC00MDFhLTljYjctYjhjZjA0YjU0MjUx
LzEvMVNyVUJvbElndzJlbmxpczVlSHhjRFNPUUNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApZJtUDhF
k6dYwDhrzuzNPKbZ7hUkqrlEaGIg44XUKgCIWT6WJSURjFlQFEiHO8NojUMyh901
0DuWaMOx8cGoYPdNo3CjMvQ5cfFm9IVvpdGVJ+/hDeddZBTHSufLA1JIbpA51On5
IT+M9dXBNQON5D2eEQ5SpeeVizdIPU72WzJPZkXI/HqEfAdeRmpspNWWL2ry/eBt
tBEj0MHLTktCU4Z6lNl4YXVH2qY1mH+9lSGiVtMRzgZOJKo1LBEtJASxaidmmAs6
MyflWN+fvr0+q8vOvTX7CNGDNre+k5OpqcnyWVvCeI+qm7/gaThBRs9fpah1NVB0
C2YscZDxT9eQeQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:36:23 2026 by rpki-client