Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.mft
File: 1SGSgT0i76BLy7JOC_D-NNjfukg.mft (raw, json)
Hash identifier: vp7sPixT8TuoYFB46nbC7H9plzFRxDIpQeg8BHhWrys=
Subject key identifier: C6:58:6C:E9:EE:8B:29:2E:EA:08:10:7B:8D:E0:62:6F:1F:BE:9D:5D
Authority key identifier: D5:21:92:81:3D:22:EF:A0:4B:CB:B2:4E:0B:F0:FE:34:D8:DF:BA:48
Certificate issuer: /CN=d52192813d22efa04bcbb24e0bf0fe34d8dfba48
Certificate serial: 019D25F2021E0FFF43A0A08E4B247BF17231
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1SGSgT0i76BLy7JOC_D-NNjfukg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.mft
Manifest number: 04A8
Signing time: Wed 25 Mar 2026 17:01:50 +0000
Manifest this update: Wed 25 Mar 2026 17:01:50 +0000
Manifest next update: Thu 26 Mar 2026 17:01:50 +0000
Files and hashes: 1: 1SGSgT0i76BLy7JOC_D-NNjfukg.crl (hash: 1WSJHfvz+2hGo/OFDcscZdf6ntnjpbri+3yTjlvMeNI=)
2: irsd6se3UI4Vehs4kcliozefsFU.roa (hash: fTkE3KDW/GsXrLu5wWzp0YdBO44h0Y6GslfTVrGJEkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1SGSgT0i76BLy7JOC_D-NNjfukg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f2:02:1e:0f:ff:43:a0:a0:8e:4b:24:7b:f1:72:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d52192813d22efa04bcbb24e0bf0fe34d8dfba48
Validity
Not Before: Mar 25 17:01:50 2026 GMT
Not After : Mar 26 17:01:50 2026 GMT
Subject: CN=c6586ce9ee8b292eea08107b8de0626f1fbe9d5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b1:21:cd:f0:07:b7:e1:8c:0d:fd:84:89:18:
b4:c9:7f:c2:c4:3d:07:3b:38:9a:8e:9c:55:22:d6:
51:de:eb:87:a6:6e:c6:68:f3:38:61:b4:0c:9e:12:
d0:ec:bb:20:cc:2d:a7:3b:93:18:42:4e:b8:e6:40:
f3:82:92:95:7b:2e:a6:b2:c8:be:5a:4a:f1:95:9d:
1d:dd:04:0d:e4:c6:b1:f7:d4:1e:40:5b:c5:ea:0f:
1c:8b:9d:02:4b:c3:11:07:8c:c7:2f:a8:4c:e5:20:
5d:91:65:27:23:fb:e8:8e:89:53:cb:d9:cd:fb:ae:
9e:52:6d:21:07:cb:68:f5:e0:bc:09:7b:75:4e:6e:
7a:4c:36:a4:63:9b:64:cb:f3:69:95:6c:82:da:1c:
34:58:16:36:29:1a:3e:d1:6b:f2:4f:19:4b:92:a7:
51:ac:ee:09:7b:94:a1:98:12:35:a2:b2:44:c0:5b:
73:35:9c:48:a2:53:b7:fa:42:2b:4e:36:ab:63:de:
b9:29:91:81:80:e7:d5:0c:8f:45:fa:80:e2:29:1b:
69:c1:55:00:73:f0:56:2d:bf:66:69:97:9a:9d:16:
6e:2d:32:be:0a:57:2c:ac:75:1d:7b:62:42:5c:7d:
c8:80:ff:3c:86:f7:c1:5e:40:0f:9f:31:00:8f:13:
69:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:58:6C:E9:EE:8B:29:2E:EA:08:10:7B:8D:E0:62:6F:1F:BE:9D:5D
X509v3 Authority Key Identifier:
keyid:D5:21:92:81:3D:22:EF:A0:4B:CB:B2:4E:0B:F0:FE:34:D8:DF:BA:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1SGSgT0i76BLy7JOC_D-NNjfukg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:18:2e:33:8b:5f:c7:eb:e3:29:7b:12:7e:0a:d0:d7:a0:ee:
09:a9:a7:f5:21:40:ce:28:6e:0c:8a:ed:d0:19:ad:96:bf:f3:
a0:0d:2d:29:86:04:c4:dc:e4:af:1c:7d:2d:01:4c:f3:21:65:
15:a0:4e:b5:bf:e1:cd:cd:24:8f:55:3b:b6:65:a4:6c:e2:d6:
17:cd:95:3d:ba:b5:8b:01:88:39:07:cd:8d:f9:5e:36:a4:10:
07:26:bc:ee:5e:bb:c9:35:66:67:89:03:8b:1b:8b:6a:fd:83:
ea:32:5c:9b:68:32:72:13:a8:a8:19:48:39:e9:22:66:87:70:
43:fb:db:cf:89:66:b1:ee:ed:8e:3f:ce:51:00:f8:63:94:d1:
8e:9e:11:25:1e:12:a6:a4:0c:5f:42:7c:d3:4e:7e:fe:65:a6:
de:48:ee:39:8a:57:93:af:8d:63:f9:f4:7a:72:1d:0d:d8:f8:
b2:13:3b:86:60:ed:a1:5b:53:b6:ed:16:25:1c:3f:df:b0:52:
40:7b:96:0f:1b:c1:ec:04:5d:54:42:b9:cf:0f:eb:a7:b2:f7:
9e:f7:46:4b:3e:e6:16:93:a3:34:47:6d:4d:71:0a:e2:7f:35:
5e:4d:01:02:d7:2e:bf:10:ad:ea:4b:2c:ea:76:44:06:7f:1d:
e0:51:9b:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8gIeD/9DoKCOSyR78XIxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1MjE5MjgxM2QyMmVmYTA0YmNiYjI0ZTBiZjBmZTM0ZDhk
ZmJhNDgwHhcNMjYwMzI1MTcwMTUwWhcNMjYwMzI2MTcwMTUwWjAzMTEwLwYDVQQD
EyhjNjU4NmNlOWVlOGIyOTJlZWEwODEwN2I4ZGUwNjI2ZjFmYmU5ZDVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurEhzfAHt+GMDf2EiRi0yX/CxD0H
OziajpxVItZR3uuHpm7GaPM4YbQMnhLQ7LsgzC2nO5MYQk645kDzgpKVey6mssi+
WkrxlZ0d3QQN5Max99QeQFvF6g8ci50CS8MRB4zHL6hM5SBdkWUnI/vojolTy9nN
+66eUm0hB8to9eC8CXt1Tm56TDakY5tky/NplWyC2hw0WBY2KRo+0WvyTxlLkqdR
rO4Je5ShmBI1orJEwFtzNZxIolO3+kIrTjarY965KZGBgOfVDI9F+oDiKRtpwVUA
c/BWLb9maZeanRZuLTK+ClcsrHUde2JCXH3IgP88hvfBXkAPnzEAjxNpLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMZYbOnuiyku6ggQe43gYm8fvp1dMB8GA1UdIwQY
MBaAFNUhkoE9Iu+gS8uyTgvw/jTY37pIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVNHU2dUMGk3NkJMeTdKT0NfRC1OTmpmdWtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9hZjQ4NzktMDVkZS00MjY4LTlhZDIt
ZDhjNDRkNjA0YmMyLzEvMVNHU2dUMGk3NkJMeTdKT0NfRC1OTmpmdWtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9hZjQ4NzktMDVkZS00MjY4LTlhZDItZDhjNDRkNjA0YmMy
LzEvMVNHU2dUMGk3NkJMeTdKT0NfRC1OTmpmdWtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATRguM4tf
x+vjKXsSfgrQ16DuCamn9SFAzihuDIrt0Bmtlr/zoA0tKYYExNzkrxx9LQFM8yFl
FaBOtb/hzc0kj1U7tmWkbOLWF82VPbq1iwGIOQfNjfleNqQQBya87l67yTVmZ4kD
ixuLav2D6jJcm2gychOoqBlIOekiZodwQ/vbz4lmse7tjj/OUQD4Y5TRjp4RJR4S
pqQMX0J8005+/mWm3kjuOYpXk6+NY/n0enIdDdj4shM7hmDtoVtTtu0WJRw/37BS
QHuWDxvB7ARdVEK5zw/rp7L3nvdGSz7mFpOjNEdtTXEK4n81Xk0BAtcuvxCt6kss
6nZEBn8d4FGbiw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:34:55 2026 by rpki-client