Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/bb0482-44b4-4e83-8196-02e6bdcdb3ec/1/tS9aQQsVd1kaeAzbPqzCbaLf_fE.mft
File: tS9aQQsVd1kaeAzbPqzCbaLf_fE.mft (raw, json)
Hash identifier: l2i+9/PPv95HIJU38T4odifBgL1E5eSGaeha8gbSTKk=
Subject key identifier: AD:A8:5F:60:F9:8B:4D:E4:7B:1B:DF:81:BF:59:5B:00:4C:95:24:8C
Authority key identifier: B5:2F:5A:41:0B:15:77:59:1A:78:0C:DB:3E:AC:C2:6D:A2:DF:FD:F1
Certificate issuer: /CN=b52f5a410b1577591a780cdb3eacc26da2dffdf1
Certificate serial: 019D2816C4A057959D698C6322ED15ABE2A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tS9aQQsVd1kaeAzbPqzCbaLf_fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/bb0482-44b4-4e83-8196-02e6bdcdb3ec/1/tS9aQQsVd1kaeAzbPqzCbaLf_fE.mft
Manifest number: 65
Signing time: Thu 26 Mar 2026 03:01:13 +0000
Manifest this update: Thu 26 Mar 2026 03:01:13 +0000
Manifest next update: Fri 27 Mar 2026 03:01:13 +0000
Files and hashes: 1: BXFdN1Z5TwgsjoWnWzPCB_vcA-o.roa (hash: 4V056W0njPwGeLmfiU9boZW/Yf0SKKmhujbcJt/lGHw=)
2: lbvJdX8vGOpaTahOJAPiEyACl7w.roa (hash: 0orYn9G5IVROjCboDVwfjh8n823lF/daaJTT0RRwFeA=)
3: tS9aQQsVd1kaeAzbPqzCbaLf_fE.crl (hash: GnMl9CGm4+vfvlvA9B9U+vfDzhg6A9wJTBxsrnNbc+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/bb0482-44b4-4e83-8196-02e6bdcdb3ec/1/tS9aQQsVd1kaeAzbPqzCbaLf_fE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/bb0482-44b4-4e83-8196-02e6bdcdb3ec/1/tS9aQQsVd1kaeAzbPqzCbaLf_fE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tS9aQQsVd1kaeAzbPqzCbaLf_fE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:c4:a0:57:95:9d:69:8c:63:22:ed:15:ab:e2:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b52f5a410b1577591a780cdb3eacc26da2dffdf1
Validity
Not Before: Mar 26 03:01:13 2026 GMT
Not After : Mar 27 03:01:13 2026 GMT
Subject: CN=ada85f60f98b4de47b1bdf81bf595b004c95248c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e0:26:68:0f:af:64:0d:25:87:f2:9c:77:09:
d0:1e:48:0c:38:5b:b1:2c:25:cb:50:77:d4:15:e9:
05:16:15:03:ba:dc:21:9d:a0:d1:88:42:f9:b6:c0:
05:0d:36:89:c1:e9:6f:d3:13:5f:f1:d0:a7:80:e2:
09:32:15:e3:f2:b7:ba:9b:62:dc:7f:cc:d6:ba:22:
a0:d7:3d:a0:6a:fe:60:35:1e:49:0d:12:96:aa:50:
f1:87:61:a7:30:1f:95:11:e3:00:e2:1a:49:3f:89:
44:0e:e0:81:c8:e2:eb:45:86:a9:8b:7a:a6:41:6c:
42:a4:33:78:a5:19:8d:dd:bc:b4:11:8a:82:67:2a:
a8:c3:5e:de:7e:7b:1f:ab:85:1a:ce:4d:9d:77:82:
c4:02:82:e6:63:5d:0f:a9:80:de:4d:df:23:71:94:
60:c7:5c:39:07:32:f9:af:51:e9:9c:1d:4c:a7:53:
60:fd:60:11:49:eb:d3:29:2b:50:fb:37:c4:27:7f:
72:fa:d2:4f:48:0e:e7:1d:13:72:65:54:bf:1e:99:
f2:08:6a:ef:52:31:db:4e:45:9b:42:4e:d7:b4:99:
7f:6a:0b:b4:f3:2d:56:b0:ef:2a:1b:8b:27:4b:8c:
5c:0a:fe:c8:56:c4:33:63:23:a4:19:45:f5:70:f4:
3c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A8:5F:60:F9:8B:4D:E4:7B:1B:DF:81:BF:59:5B:00:4C:95:24:8C
X509v3 Authority Key Identifier:
keyid:B5:2F:5A:41:0B:15:77:59:1A:78:0C:DB:3E:AC:C2:6D:A2:DF:FD:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tS9aQQsVd1kaeAzbPqzCbaLf_fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/bb0482-44b4-4e83-8196-02e6bdcdb3ec/1/tS9aQQsVd1kaeAzbPqzCbaLf_fE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/bb0482-44b4-4e83-8196-02e6bdcdb3ec/1/tS9aQQsVd1kaeAzbPqzCbaLf_fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:26:43:b4:27:f8:18:4e:3d:b4:ee:ed:ce:d4:26:ab:f7:16:
b8:89:27:8c:7e:2f:71:86:76:6c:e6:19:b6:20:c1:b5:68:35:
22:ee:f9:e8:50:f0:a3:23:cc:28:f6:c8:3a:14:57:41:07:4d:
bd:04:fe:54:94:70:19:37:4d:33:63:fb:a1:92:7b:23:c8:ab:
e4:5e:3d:65:ae:d3:9c:c5:83:0b:9a:cb:fa:d1:ab:c7:ea:85:
6b:84:a8:d1:04:c7:c0:e0:13:51:4e:84:3c:e2:b0:49:a2:3d:
26:95:01:83:62:b0:c1:60:48:d1:7e:18:be:a4:fc:61:8a:d3:
25:cf:e1:67:d9:c8:ca:03:61:69:60:c5:7d:53:6e:3d:48:9a:
09:dc:67:bf:b5:9f:e6:90:d5:ff:88:37:75:94:19:d8:d1:22:
32:25:db:29:8e:ac:85:33:81:20:13:f4:64:7a:a0:2d:cd:83:
d9:7c:a6:22:7f:7e:46:48:9a:e0:c2:5a:f3:0e:33:55:d4:99:
58:99:e7:36:b4:93:13:43:b6:14:c0:c1:2d:02:c8:5e:38:e3:
66:67:1c:57:5a:de:f0:e2:0a:19:48:67:f2:f4:63:5d:d2:84:
7b:48:ab:0a:a2:d5:c4:4f:6a:24:e9:3e:6b:e9:8d:7a:74:0b:
66:8f:64:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFsSgV5WdaYxjIu0Vq+KgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MmY1YTQxMGIxNTc3NTkxYTc4MGNkYjNlYWNjMjZkYTJk
ZmZkZjEwHhcNMjYwMzI2MDMwMTEzWhcNMjYwMzI3MDMwMTEzWjAzMTEwLwYDVQQD
EyhhZGE4NWY2MGY5OGI0ZGU0N2IxYmRmODFiZjU5NWIwMDRjOTUyNDhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseAmaA+vZA0lh/KcdwnQHkgMOFux
LCXLUHfUFekFFhUDutwhnaDRiEL5tsAFDTaJwelv0xNf8dCngOIJMhXj8re6m2Lc
f8zWuiKg1z2gav5gNR5JDRKWqlDxh2GnMB+VEeMA4hpJP4lEDuCByOLrRYapi3qm
QWxCpDN4pRmN3by0EYqCZyqow17efnsfq4Uazk2dd4LEAoLmY10PqYDeTd8jcZRg
x1w5BzL5r1HpnB1Mp1Ng/WARSevTKStQ+zfEJ39y+tJPSA7nHRNyZVS/HpnyCGrv
UjHbTkWbQk7XtJl/agu08y1WsO8qG4snS4xcCv7IVsQzYyOkGUX1cPQ8RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK2oX2D5i03kexvfgb9ZWwBMlSSMMB8GA1UdIwQY
MBaAFLUvWkELFXdZGngM2z6swm2i3/3xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFM5YVFRc1ZkMWthZUF6YlBxekNiYUxmX2ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9iYjA0ODItNDRiNC00ZTgzLTgxOTYt
MDJlNmJkY2RiM2VjLzEvdFM5YVFRc1ZkMWthZUF6YlBxekNiYUxmX2ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9iYjA0ODItNDRiNC00ZTgzLTgxOTYtMDJlNmJkY2RiM2Vj
LzEvdFM5YVFRc1ZkMWthZUF6YlBxekNiYUxmX2ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAziZDtCf4
GE49tO7tztQmq/cWuIknjH4vcYZ2bOYZtiDBtWg1Iu756FDwoyPMKPbIOhRXQQdN
vQT+VJRwGTdNM2P7oZJ7I8ir5F49Za7TnMWDC5rL+tGrx+qFa4So0QTHwOATUU6E
POKwSaI9JpUBg2KwwWBI0X4YvqT8YYrTJc/hZ9nIygNhaWDFfVNuPUiaCdxnv7Wf
5pDV/4g3dZQZ2NEiMiXbKY6shTOBIBP0ZHqgLc2D2XymIn9+Rkia4MJa8w4zVdSZ
WJnnNrSTE0O2FMDBLQLIXjjjZmccV1re8OIKGUhn8vRjXdKEe0irCqLVxE9qJOk+
a+mNenQLZo9kDQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:47:11 2026 by rpki-client