Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.mft
File: sA09NPYeSEaIv_-cxwN1WCN3WZg.mft (raw, json)
Hash identifier: kob7G8NMbymBEbbjyNMixHBLWR8cPPAHxV0FUFtndBc=
Subject key identifier: E9:50:A7:8B:AC:80:D3:59:FE:4D:1B:2B:02:6A:9D:15:C0:E6:ED:72
Authority key identifier: B0:0D:3D:34:F6:1E:48:46:88:BF:FF:9C:C7:03:75:58:23:77:59:98
Certificate issuer: /CN=b00d3d34f61e484688bfff9cc703755823775998
Certificate serial: 019D26966FDAF0BE929489ED52661A650A3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sA09NPYeSEaIv_-cxwN1WCN3WZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.mft
Manifest number: 153D
Signing time: Wed 25 Mar 2026 20:01:26 +0000
Manifest this update: Wed 25 Mar 2026 20:01:26 +0000
Manifest next update: Thu 26 Mar 2026 20:01:26 +0000
Files and hashes: 1: i-A0G1xNSw4VydVA7TAj4sDFMVk.roa (hash: kMsiOD5BYe1zMMRan05rFNja/Pm689GMM1lIhaKqC7o=)
2: sA09NPYeSEaIv_-cxwN1WCN3WZg.crl (hash: v+uBmquTpNLPfwpT4nORWx/4brOfrDKslUqVVoLyLa4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/sA09NPYeSEaIv_-cxwN1WCN3WZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:6f:da:f0:be:92:94:89:ed:52:66:1a:65:0a:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b00d3d34f61e484688bfff9cc703755823775998
Validity
Not Before: Mar 25 20:01:26 2026 GMT
Not After : Mar 26 20:01:26 2026 GMT
Subject: CN=e950a78bac80d359fe4d1b2b026a9d15c0e6ed72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ca:b8:3b:19:9e:ad:f2:00:1b:0a:8a:75:04:
da:5d:6e:0d:7a:2e:5a:34:95:62:13:f2:3d:c6:cf:
e7:af:48:60:06:36:cd:33:b8:9e:61:e0:08:a8:e8:
7b:1f:64:07:d8:de:eb:8d:20:79:57:5a:e3:0e:47:
c9:de:7b:44:16:c1:86:83:d7:0b:d1:6b:55:d7:6a:
5d:ac:38:dd:e3:b2:4f:83:ac:ff:e0:ca:ca:f9:f7:
97:f7:c0:8f:3e:28:50:24:a7:bc:f6:51:5f:de:67:
2d:a5:6c:ea:55:5b:9a:98:18:b3:cd:0d:4d:25:36:
75:42:85:c6:83:f1:ca:6d:f5:ba:2e:e1:91:33:1b:
1d:be:4e:75:ac:e2:e4:c1:ad:37:73:ca:a9:93:63:
fd:c4:e6:3a:11:87:36:b0:b3:4d:d0:87:d9:d9:6e:
25:06:3e:dd:b4:89:52:02:82:49:db:1c:e9:48:4b:
49:b9:a8:30:c7:35:6f:aa:3b:5b:2a:21:d1:cd:4e:
0d:a2:45:be:c9:fd:9c:6d:50:48:ad:21:3f:a7:c4:
52:aa:a3:11:c2:f9:05:32:bd:4f:6c:cf:3a:bc:3c:
77:47:1d:0d:9c:fa:7c:1b:3a:f9:cc:5b:9e:70:9f:
53:1d:f5:84:4c:d1:98:b3:40:ab:c5:5e:7a:fa:b3:
83:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:50:A7:8B:AC:80:D3:59:FE:4D:1B:2B:02:6A:9D:15:C0:E6:ED:72
X509v3 Authority Key Identifier:
keyid:B0:0D:3D:34:F6:1E:48:46:88:BF:FF:9C:C7:03:75:58:23:77:59:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sA09NPYeSEaIv_-cxwN1WCN3WZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:9f:39:32:b3:81:86:5f:f9:e2:40:28:71:db:50:4e:68:53:
7f:98:a5:0c:0f:8f:bf:0a:0f:86:28:6e:ae:be:2e:5d:b1:17:
a2:08:04:37:2c:45:f8:2b:b1:ed:95:cd:67:b0:f7:c1:a4:0f:
80:8e:ef:84:4d:d7:68:06:43:9c:09:fc:21:46:ef:62:77:93:
1e:98:d1:d7:2e:8f:cb:b9:99:a4:75:47:91:c9:4d:c8:da:58:
be:af:f8:99:c0:fb:5b:85:98:45:2a:22:db:ed:6d:96:57:e6:
6b:f3:97:2c:f4:22:e7:a8:f7:05:dd:16:07:8d:ef:65:92:d6:
e2:cd:6d:05:8c:88:b7:f6:86:8a:b9:4e:8f:77:f6:f7:c9:47:
bf:67:04:d9:3a:9c:7a:33:c0:c1:02:60:65:78:ee:22:ff:c3:
0a:e4:f5:63:fd:1d:4f:1d:d3:70:18:33:d0:dd:c6:f9:20:47:
a3:cd:ac:e9:62:a3:a4:18:be:fe:89:30:f5:19:57:b8:dc:79:
3f:2c:84:89:ff:21:c0:9b:89:ff:3d:49:70:1c:3c:37:c5:4f:
23:4f:df:91:6b:d5:37:88:0e:9f:5b:1c:fa:2a:45:6d:e2:c4:
ba:ca:3b:e3:46:4e:cd:93:cf:45:a2:5e:2a:89:da:59:5f:49:
43:55:42:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mlm/a8L6SlIntUmYaZQo6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwMGQzZDM0ZjYxZTQ4NDY4OGJmZmY5Y2M3MDM3NTU4MjM3
NzU5OTgwHhcNMjYwMzI1MjAwMTI2WhcNMjYwMzI2MjAwMTI2WjAzMTEwLwYDVQQD
EyhlOTUwYTc4YmFjODBkMzU5ZmU0ZDFiMmIwMjZhOWQxNWMwZTZlZDcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8q4OxmerfIAGwqKdQTaXW4Nei5a
NJViE/I9xs/nr0hgBjbNM7ieYeAIqOh7H2QH2N7rjSB5V1rjDkfJ3ntEFsGGg9cL
0WtV12pdrDjd47JPg6z/4MrK+feX98CPPihQJKe89lFf3mctpWzqVVuamBizzQ1N
JTZ1QoXGg/HKbfW6LuGRMxsdvk51rOLkwa03c8qpk2P9xOY6EYc2sLNN0IfZ2W4l
Bj7dtIlSAoJJ2xzpSEtJuagwxzVvqjtbKiHRzU4NokW+yf2cbVBIrSE/p8RSqqMR
wvkFMr1PbM86vDx3Rx0NnPp8Gzr5zFuecJ9THfWETNGYs0CrxV56+rODTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOlQp4usgNNZ/k0bKwJqnRXA5u1yMB8GA1UdIwQY
MBaAFLANPTT2HkhGiL//nMcDdVgjd1mYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0EwOU5QWWVTRWFJdl8tY3h3TjFXQ04zV1pnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8zYjI1ZjUtYTE5MC00OGZmLWEzZTEt
MTcxZGM1YTk4NDc0LzEvc0EwOU5QWWVTRWFJdl8tY3h3TjFXQ04zV1pnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8zYjI1ZjUtYTE5MC00OGZmLWEzZTEtMTcxZGM1YTk4NDc0
LzEvc0EwOU5QWWVTRWFJdl8tY3h3TjFXQ04zV1pnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP585MrOB
hl/54kAocdtQTmhTf5ilDA+PvwoPhihurr4uXbEXoggENyxF+Cux7ZXNZ7D3waQP
gI7vhE3XaAZDnAn8IUbvYneTHpjR1y6Py7mZpHVHkclNyNpYvq/4mcD7W4WYRSoi
2+1tllfma/OXLPQi56j3Bd0WB43vZZLW4s1tBYyIt/aGirlOj3f298lHv2cE2Tqc
ejPAwQJgZXjuIv/DCuT1Y/0dTx3TcBgz0N3G+SBHo82s6WKjpBi+/okw9RlXuNx5
PyyEif8hwJuJ/z1JcBw8N8VPI0/fkWvVN4gOn1sc+ipFbeLEuso740ZOzZPPRaJe
KonaWV9JQ1VCvQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:20 2026 by rpki-client