Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.mft
File: sJDUC_zVpKMIdRYOzG-f5TwFpuY.mft (raw, json)
Hash identifier: i2TJYlRBz3iBOusvuh2ZFhVl8rTfKV+oSVGBXglxDRo=
Subject key identifier: E8:D5:45:C2:55:34:3C:82:9E:8A:E7:E5:76:41:3F:8A:F3:4F:A4:2F
Authority key identifier: B0:90:D4:0B:FC:D5:A4:A3:08:75:16:0E:CC:6F:9F:E5:3C:05:A6:E6
Certificate issuer: /CN=b090d40bfcd5a4a30875160ecc6f9fe53c05a6e6
Certificate serial: 019D29CE2DFD2887EFE3D17CC7F369669CFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sJDUC_zVpKMIdRYOzG-f5TwFpuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.mft
Manifest number: 181A
Signing time: Thu 26 Mar 2026 11:01:11 +0000
Manifest this update: Thu 26 Mar 2026 11:01:11 +0000
Manifest next update: Fri 27 Mar 2026 11:01:11 +0000
Files and hashes: 1: YGVi9IufxaUy4qxtQ0vR5M4Kjyk.roa (hash: GG+KZY/DsNiZCRN1+BVms1rbvVxcFkZrjnSVRWlHuMg=)
2: sJDUC_zVpKMIdRYOzG-f5TwFpuY.crl (hash: UFcsyf1XbMuPhuDS3YkxS+ykw0ip41ONMDYXyhCDqZg=)
3: v9qEJJrE4bIoJLkvQpDIDEFgGF4.roa (hash: kl+PP56wx1175s4ViXBlwNJra6/Xw7Fsdl6qvV23Cuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sJDUC_zVpKMIdRYOzG-f5TwFpuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 11:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:2d:fd:28:87:ef:e3:d1:7c:c7:f3:69:66:9c:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b090d40bfcd5a4a30875160ecc6f9fe53c05a6e6
Validity
Not Before: Mar 26 11:01:11 2026 GMT
Not After : Mar 27 11:01:11 2026 GMT
Subject: CN=e8d545c255343c829e8ae7e576413f8af34fa42f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7e:24:86:00:23:68:55:75:47:d0:9a:09:c1:
43:7f:e8:49:ec:72:ff:ea:9f:c5:d1:dc:d4:39:e5:
ad:c3:29:6f:50:51:16:5e:59:fd:5b:6d:2f:c6:61:
2c:e2:f1:d2:8f:2d:69:38:41:8e:03:17:a0:94:10:
03:38:08:53:5c:c0:7b:a1:07:f3:77:77:8f:c2:d8:
3f:55:4a:d5:78:d8:db:dd:ac:ea:8c:c8:33:b3:e5:
1d:4f:b6:4b:ca:94:80:88:10:0a:ac:f3:aa:31:64:
13:cb:b7:8f:97:2e:74:e7:0a:50:6c:d5:b3:da:e9:
a4:78:65:15:33:f8:a9:ec:a5:5c:85:4c:72:d3:00:
89:97:29:5b:8a:81:03:f9:65:5b:25:53:ff:7e:c5:
b1:69:ee:55:56:dd:35:2f:bc:2c:e0:d3:11:e3:59:
9b:88:46:35:ae:96:7b:5d:b3:18:e2:01:9a:0d:68:
f5:7c:f4:2e:71:81:c8:48:ac:02:0e:ac:9f:d3:55:
61:d3:f5:3a:59:8d:8e:38:58:1e:ed:5c:2d:35:5a:
38:0a:20:57:a5:3e:33:dc:b4:ce:44:a8:d4:6f:4c:
5e:d9:2e:c3:0a:c0:ab:1d:b6:62:c8:d5:da:c9:87:
eb:7d:58:42:af:9e:79:5e:40:88:5f:b3:b2:c7:2f:
2f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D5:45:C2:55:34:3C:82:9E:8A:E7:E5:76:41:3F:8A:F3:4F:A4:2F
X509v3 Authority Key Identifier:
keyid:B0:90:D4:0B:FC:D5:A4:A3:08:75:16:0E:CC:6F:9F:E5:3C:05:A6:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJDUC_zVpKMIdRYOzG-f5TwFpuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:b8:df:66:71:fd:ac:6a:8c:58:f8:25:cf:b1:35:f7:d1:68:
7e:15:3b:4e:34:b2:a6:c7:27:71:67:5a:de:dc:3b:80:2b:e2:
30:24:30:80:b0:ce:37:61:54:46:57:d0:51:06:16:1c:87:b3:
7b:4d:2f:db:94:b1:00:e1:e0:00:1c:7d:4a:5d:b0:3a:b5:36:
3e:28:76:d0:be:ba:6e:5e:97:0a:92:71:e2:e6:9a:6b:27:4a:
2a:61:35:40:c2:05:02:cc:63:52:0a:a5:f4:16:80:1a:67:f1:
cf:05:aa:a8:a5:4c:bf:4b:99:ff:19:e4:bb:f6:26:48:75:12:
4c:aa:24:ae:e5:4e:96:54:0b:5f:26:fd:9a:92:3e:92:f8:cf:
79:5f:50:4c:f9:62:67:6a:4a:4a:52:9d:c0:69:81:c5:c0:04:
eb:a4:be:7c:fe:aa:dc:b5:e8:4f:da:d7:13:24:fa:70:37:a8:
ed:c5:be:ac:ad:0d:64:0e:10:ec:90:d3:4d:61:ba:bf:b8:2d:
cb:4f:c9:1b:3e:51:4c:e7:12:98:90:c0:28:82:a0:f1:c8:37:
60:8d:ce:3e:a6:9d:5a:0c:9d:43:3c:3e:76:08:48:f1:34:07:
b0:17:62:1b:57:c8:7f:5e:46:f1:7e:31:e8:8e:f4:f6:3c:ec:
53:8b:d7:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pzi39KIfv49F8x/NpZpz+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwOTBkNDBiZmNkNWE0YTMwODc1MTYwZWNjNmY5ZmU1M2Mw
NWE2ZTYwHhcNMjYwMzI2MTEwMTExWhcNMjYwMzI3MTEwMTExWjAzMTEwLwYDVQQD
EyhlOGQ1NDVjMjU1MzQzYzgyOWU4YWU3ZTU3NjQxM2Y4YWYzNGZhNDJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxX4khgAjaFV1R9CaCcFDf+hJ7HL/
6p/F0dzUOeWtwylvUFEWXln9W20vxmEs4vHSjy1pOEGOAxeglBADOAhTXMB7oQfz
d3ePwtg/VUrVeNjb3azqjMgzs+UdT7ZLypSAiBAKrPOqMWQTy7ePly505wpQbNWz
2umkeGUVM/ip7KVchUxy0wCJlylbioED+WVbJVP/fsWxae5VVt01L7ws4NMR41mb
iEY1rpZ7XbMY4gGaDWj1fPQucYHISKwCDqyf01Vh0/U6WY2OOFge7VwtNVo4CiBX
pT4z3LTORKjUb0xe2S7DCsCrHbZiyNXayYfrfVhCr555XkCIX7Oyxy8vkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOjVRcJVNDyCnorn5XZBP4rzT6QvMB8GA1UdIwQY
MBaAFLCQ1Av81aSjCHUWDsxvn+U8BabmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0pEVUNfelZwS01JZFJZT3pHLWY1VHdGcHVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni83MWE0MDAtNGVkZS00NWYxLWI1NWIt
ODEwOWQ0MDg5ODI4LzEvc0pEVUNfelZwS01JZFJZT3pHLWY1VHdGcHVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni83MWE0MDAtNGVkZS00NWYxLWI1NWItODEwOWQ0MDg5ODI4
LzEvc0pEVUNfelZwS01JZFJZT3pHLWY1VHdGcHVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf7jfZnH9
rGqMWPglz7E199FofhU7TjSypscncWda3tw7gCviMCQwgLDON2FURlfQUQYWHIez
e00v25SxAOHgABx9Sl2wOrU2Pih20L66bl6XCpJx4uaaaydKKmE1QMIFAsxjUgql
9BaAGmfxzwWqqKVMv0uZ/xnku/YmSHUSTKokruVOllQLXyb9mpI+kvjPeV9QTPli
Z2pKSlKdwGmBxcAE66S+fP6q3LXoT9rXEyT6cDeo7cW+rK0NZA4Q7JDTTWG6v7gt
y0/JGz5RTOcSmJDAKIKg8cg3YI3OPqadWgydQzw+dghI8TQHsBdiG1fIf15G8X4x
6I709jzsU4vXKA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:39:54 2026 by rpki-client