Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.mft
File: sDHiyoJMqNVWJAanAhrjwToUJdg.mft (raw, json)
Hash identifier: ERPS18SGbD3HpWa9hyXYXRDFhz6hj6gaqheRdKhl+3w=
Subject key identifier: AA:D6:7A:90:DD:FD:BB:77:E5:B0:84:3A:CC:86:5C:D6:69:EC:F6:1A
Authority key identifier: B0:31:E2:CA:82:4C:A8:D5:56:24:06:A7:02:1A:E3:C1:3A:14:25:D8
Certificate issuer: /CN=b031e2ca824ca8d5562406a7021ae3c13a1425d8
Certificate serial: 019D29CE56CED593F5D8B9ADA9E45F143120
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sDHiyoJMqNVWJAanAhrjwToUJdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 11:01:21 +0000
Manifest this update: Thu 26 Mar 2026 11:01:21 +0000
Manifest next update: Fri 27 Mar 2026 11:01:21 +0000
Files and hashes: 1: Ve64xTr98MUDsiJSZXk12KQ3yVc.roa (hash: wfd77vHmSmUiY8IWmiT9ZwxLolfac6GRsY7+Cx91Rus=)
2: dN5Ucpkm5kNY0YR-q9sxfd6c9rc.roa (hash: ZLBcri8/aXQmB4WoSvVto5wYAi5xFB1PoBjafKyFXT8=)
3: sDHiyoJMqNVWJAanAhrjwToUJdg.crl (hash: iVTrn8dOtAiTXRPFmdcDu/rraXu3TmO17XPvCeC5yqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/sDHiyoJMqNVWJAanAhrjwToUJdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:56:ce:d5:93:f5:d8:b9:ad:a9:e4:5f:14:31:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b031e2ca824ca8d5562406a7021ae3c13a1425d8
Validity
Not Before: Mar 26 11:01:21 2026 GMT
Not After : Mar 27 11:01:21 2026 GMT
Subject: CN=aad67a90ddfdbb77e5b0843acc865cd669ecf61a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:12:78:15:79:bc:8d:8a:1e:c3:13:06:e2:7b:
d4:42:d3:02:62:a9:07:9f:9f:0c:02:9c:75:a9:60:
2c:b6:ac:65:82:55:3d:d1:b0:06:d2:c5:97:a0:b2:
34:7c:2d:e6:30:35:ab:40:04:3b:58:0f:20:b3:78:
ed:8d:be:6d:60:e6:82:9c:f3:b0:33:da:d9:17:22:
18:a6:d0:f2:42:8c:d2:e2:2a:d2:6e:85:96:d2:35:
ac:38:63:16:80:4f:b9:7a:e0:c1:93:ef:b4:d7:5e:
89:ab:ce:e8:4a:d3:25:2f:bc:a2:3a:bd:83:6c:fc:
d9:fc:94:7f:2a:d2:f2:cd:a1:95:01:47:10:1a:d7:
1f:d6:39:33:ee:e4:4c:11:e7:c7:70:08:40:ef:11:
d5:01:f8:f7:a8:96:3f:7c:07:ce:67:29:36:31:00:
41:8d:53:98:64:f2:bd:04:ef:d8:73:fd:bb:7c:0b:
68:7e:3d:fb:6b:72:25:2a:c3:85:b8:63:d5:6c:7a:
d6:68:ff:bd:03:6b:86:cf:3e:d4:9c:11:dc:07:86:
52:ce:7a:89:4e:c1:78:07:57:77:78:29:40:ea:0a:
68:de:17:25:42:1c:56:bc:5f:8d:22:7c:10:ac:fe:
60:7a:32:3e:5a:2d:15:70:7a:4d:e1:df:70:5a:a7:
43:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D6:7A:90:DD:FD:BB:77:E5:B0:84:3A:CC:86:5C:D6:69:EC:F6:1A
X509v3 Authority Key Identifier:
keyid:B0:31:E2:CA:82:4C:A8:D5:56:24:06:A7:02:1A:E3:C1:3A:14:25:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDHiyoJMqNVWJAanAhrjwToUJdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:cc:2a:cf:80:19:81:b0:d7:81:aa:2d:8c:ac:a7:60:64:23:
f4:54:52:c8:da:59:4f:c4:8b:fc:19:73:9a:74:9b:ed:5b:fc:
95:b6:1b:28:f2:e7:18:ad:40:4b:b2:c6:cf:0b:c4:43:5a:27:
e4:c1:62:0b:03:7d:09:8e:b8:6e:c1:9b:61:37:c0:02:47:95:
03:78:ae:8d:2b:27:6f:80:3e:25:47:a6:d7:9e:18:a9:a0:85:
4d:e9:8d:4a:14:5e:a9:7e:7d:ae:82:89:19:62:7e:64:16:7d:
0d:ef:5c:4e:a8:53:e9:48:48:b6:71:34:fe:6f:6f:55:d4:95:
f0:77:a8:cd:07:65:78:bb:bd:fe:6c:9e:5d:d7:af:b9:da:de:
3f:df:fa:a1:10:3b:87:fb:6a:d5:c8:10:8e:b7:83:49:78:4f:
e0:26:f0:20:60:b0:4d:15:36:dc:03:74:2e:66:95:f5:ae:d9:
9a:33:0e:53:47:25:ed:83:72:f9:c4:9c:d5:f0:db:e7:95:d9:
ce:4e:83:05:5f:a5:0b:b6:88:4f:d3:de:d8:79:34:3c:f4:66:
03:56:c8:90:d1:45:17:97:c0:6b:d5:3e:32:30:2e:8f:50:50:
14:b6:7e:09:c8:73:82:4f:fc:fd:44:9d:ed:3d:c4:4f:b3:bb:
d5:29:f0:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pzlbO1ZP12LmtqeRfFDEgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwMzFlMmNhODI0Y2E4ZDU1NjI0MDZhNzAyMWFlM2MxM2Ex
NDI1ZDgwHhcNMjYwMzI2MTEwMTIxWhcNMjYwMzI3MTEwMTIxWjAzMTEwLwYDVQQD
EyhhYWQ2N2E5MGRkZmRiYjc3ZTViMDg0M2FjYzg2NWNkNjY5ZWNmNjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRJ4FXm8jYoewxMG4nvUQtMCYqkH
n58MApx1qWAstqxlglU90bAG0sWXoLI0fC3mMDWrQAQ7WA8gs3jtjb5tYOaCnPOw
M9rZFyIYptDyQozS4irSboWW0jWsOGMWgE+5euDBk++0116Jq87oStMlL7yiOr2D
bPzZ/JR/KtLyzaGVAUcQGtcf1jkz7uRMEefHcAhA7xHVAfj3qJY/fAfOZyk2MQBB
jVOYZPK9BO/Yc/27fAtofj37a3IlKsOFuGPVbHrWaP+9A2uGzz7UnBHcB4ZSznqJ
TsF4B1d3eClA6gpo3hclQhxWvF+NInwQrP5gejI+Wi0VcHpN4d9wWqdDGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKrWepDd/bt35bCEOsyGXNZp7PYaMB8GA1UdIwQY
MBaAFLAx4sqCTKjVViQGpwIa48E6FCXYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0RIaXlvSk1xTlZXSkFhbkFocmp3VG9VSmRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9iN2I5MzMtN2U4MC00YjM3LWEyODUt
MTMwZTRkYzAxNWFiLzEvc0RIaXlvSk1xTlZXSkFhbkFocmp3VG9VSmRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9iN2I5MzMtN2U4MC00YjM3LWEyODUtMTMwZTRkYzAxNWFi
LzEvc0RIaXlvSk1xTlZXSkFhbkFocmp3VG9VSmRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcswqz4AZ
gbDXgaotjKynYGQj9FRSyNpZT8SL/BlzmnSb7Vv8lbYbKPLnGK1AS7LGzwvEQ1on
5MFiCwN9CY64bsGbYTfAAkeVA3iujSsnb4A+JUem154YqaCFTemNShReqX59roKJ
GWJ+ZBZ9De9cTqhT6UhItnE0/m9vVdSV8HeozQdleLu9/myeXdevudreP9/6oRA7
h/tq1cgQjreDSXhP4CbwIGCwTRU23AN0LmaV9a7ZmjMOU0cl7YNy+cSc1fDb55XZ
zk6DBV+lC7aIT9Pe2Hk0PPRmA1bIkNFFF5fAa9U+MjAuj1BQFLZ+Cchzgk/8/USd
7T3ET7O71SnwEA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:20:43 2026 by rpki-client