Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.mft
File: SGfTe3Yct6BfxzPj20M2b6NiU2w.mft (raw, json)
Hash identifier: W4x+D/2MuuWwcnaIxTsz2kaz6fFl34d5WEDw25aJLBk=
Subject key identifier: 4C:63:29:BE:75:8E:E0:13:58:EE:DB:1C:CD:95:B9:83:92:84:7B:A0
Authority key identifier: 48:67:D3:7B:76:1C:B7:A0:5F:C7:33:E3:DB:43:36:6F:A3:62:53:6C
Certificate issuer: /CN=4867d37b761cb7a05fc733e3db43366fa362536c
Certificate serial: 019D27721A3AC86C2C875A5B9FE0E9CCAD6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGfTe3Yct6BfxzPj20M2b6NiU2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.mft
Manifest number: 115C
Signing time: Thu 26 Mar 2026 00:01:22 +0000
Manifest this update: Thu 26 Mar 2026 00:01:22 +0000
Manifest next update: Fri 27 Mar 2026 00:01:22 +0000
Files and hashes: 1: 7eg3o94jzF6MWPTPt5NbTvs7jJs.roa (hash: uBhb3oqgOc4SEMDE6pXGmihKzbDqsdvpsyNNplPMk2I=)
2: SGfTe3Yct6BfxzPj20M2b6NiU2w.crl (hash: sGtxFmhFBD5UXWuGbTje4EhqHmWophCMR5aZRKtQ4to=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/SGfTe3Yct6BfxzPj20M2b6NiU2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:1a:3a:c8:6c:2c:87:5a:5b:9f:e0:e9:cc:ad:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4867d37b761cb7a05fc733e3db43366fa362536c
Validity
Not Before: Mar 26 00:01:22 2026 GMT
Not After : Mar 27 00:01:22 2026 GMT
Subject: CN=4c6329be758ee01358eedb1ccd95b98392847ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e5:a0:73:cc:02:cf:39:85:e2:25:58:36:6d:
d6:f8:96:20:d9:e6:30:43:f4:38:9f:0f:54:a0:37:
9d:77:e9:3b:3b:16:ad:5a:85:51:3a:7d:c0:9b:a1:
88:b1:90:5a:2a:be:85:9c:ee:fc:81:4d:dc:b0:0f:
ad:4a:0d:da:ae:b6:34:5e:9a:8b:1a:e5:10:b7:be:
21:3d:dc:2c:5c:f1:cf:63:d3:8f:80:1a:ea:17:1b:
7f:a4:67:7f:8d:d2:32:7e:ed:a1:59:b3:9f:f0:e9:
f3:74:6c:a4:a6:75:af:e2:5f:30:4c:3a:e8:82:4f:
67:82:51:1d:b8:45:03:a6:02:b0:8b:87:e7:96:9f:
38:b1:be:3f:ce:3b:04:13:35:b3:64:0d:62:5a:87:
17:97:b9:59:09:bb:93:93:99:dc:54:2a:4c:21:57:
a5:06:45:8f:f3:ca:62:dc:ad:c6:52:49:d4:49:91:
80:da:44:e2:f0:25:93:9e:79:79:4b:3c:21:ea:1d:
62:bd:ca:90:16:b5:c6:59:34:9f:69:b2:9e:9b:31:
26:ab:25:5f:c7:c0:09:ec:18:ee:2a:c2:a6:4b:c9:
d7:5d:9d:d0:f2:4a:4b:cd:31:32:8c:c7:f2:06:d4:
71:00:20:fd:a0:e4:f3:7b:3b:d5:a8:75:25:7a:c4:
34:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:63:29:BE:75:8E:E0:13:58:EE:DB:1C:CD:95:B9:83:92:84:7B:A0
X509v3 Authority Key Identifier:
keyid:48:67:D3:7B:76:1C:B7:A0:5F:C7:33:E3:DB:43:36:6F:A3:62:53:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGfTe3Yct6BfxzPj20M2b6NiU2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:7c:a8:2a:6a:33:77:28:1f:cd:fd:e7:97:ca:c3:2e:5d:48:
4b:e5:39:a5:bb:c4:e7:b4:a9:01:f2:b5:04:32:8f:37:fb:27:
21:4a:3f:6e:d6:e6:2b:4e:cf:05:4f:0e:47:c5:75:da:da:58:
6b:64:6e:d4:27:32:a7:e3:22:6f:34:c6:99:c0:ee:c1:f0:24:
b0:6e:8d:77:75:5a:8f:30:79:5a:69:2f:50:9b:8c:04:98:a4:
2a:a3:50:cf:6a:5c:24:e4:b5:19:13:f1:ff:e3:bc:93:39:31:
7a:33:54:ea:12:e8:4a:8b:db:82:86:9e:1f:46:a8:8a:a2:f9:
81:c4:2e:ba:cf:41:77:66:fe:03:0b:95:90:be:ed:dd:20:20:
9b:c8:20:f4:51:f2:0a:27:a3:be:1f:ff:3f:b4:a4:75:a8:1f:
50:1c:0b:03:f4:50:f5:26:f0:a4:3a:75:08:98:ee:fb:87:22:
c3:1b:df:ab:b3:1b:8e:84:a1:98:73:96:9c:99:af:1e:6d:86:
2b:7b:cc:74:83:db:86:f8:d3:fc:4e:6c:1f:c7:d0:a6:b7:0b:
9c:d1:7e:6c:ec:9c:1d:93:e5:26:34:5d:a4:91:d7:01:91:a1:
a7:a7:9a:7c:ee:9f:42:82:f2:1c:49:95:ff:4d:f8:e6:ee:6f:
99:ec:7a:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncho6yGwsh1pbn+DpzK1qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4NjdkMzdiNzYxY2I3YTA1ZmM3MzNlM2RiNDMzNjZmYTM2
MjUzNmMwHhcNMjYwMzI2MDAwMTIyWhcNMjYwMzI3MDAwMTIyWjAzMTEwLwYDVQQD
Eyg0YzYzMjliZTc1OGVlMDEzNThlZWRiMWNjZDk1Yjk4MzkyODQ3YmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+Wgc8wCzzmF4iVYNm3W+JYg2eYw
Q/Q4nw9UoDedd+k7OxatWoVROn3Am6GIsZBaKr6FnO78gU3csA+tSg3arrY0XpqL
GuUQt74hPdwsXPHPY9OPgBrqFxt/pGd/jdIyfu2hWbOf8OnzdGykpnWv4l8wTDro
gk9nglEduEUDpgKwi4fnlp84sb4/zjsEEzWzZA1iWocXl7lZCbuTk5ncVCpMIVel
BkWP88pi3K3GUknUSZGA2kTi8CWTnnl5Szwh6h1ivcqQFrXGWTSfabKemzEmqyVf
x8AJ7BjuKsKmS8nXXZ3Q8kpLzTEyjMfyBtRxACD9oOTzezvVqHUlesQ0mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFExjKb51juATWO7bHM2VuYOShHugMB8GA1UdIwQY
MBaAFEhn03t2HLegX8cz49tDNm+jYlNsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0dmVGUzWWN0NkJmeHpQajIwTTJiNk5pVTJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9lMGM1YjctZDJhYy00YTVhLTgwOTgt
NjBmOWRlYTQzODk5LzEvU0dmVGUzWWN0NkJmeHpQajIwTTJiNk5pVTJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9lMGM1YjctZDJhYy00YTVhLTgwOTgtNjBmOWRlYTQzODk5
LzEvU0dmVGUzWWN0NkJmeHpQajIwTTJiNk5pVTJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk3yoKmoz
dygfzf3nl8rDLl1IS+U5pbvE57SpAfK1BDKPN/snIUo/btbmK07PBU8OR8V12tpY
a2Ru1Ccyp+MibzTGmcDuwfAksG6Nd3VajzB5WmkvUJuMBJikKqNQz2pcJOS1GRPx
/+O8kzkxejNU6hLoSovbgoaeH0aoiqL5gcQuus9Bd2b+AwuVkL7t3SAgm8gg9FHy
Ciejvh//P7SkdagfUBwLA/RQ9SbwpDp1CJju+4ciwxvfq7MbjoShmHOWnJmvHm2G
K3vMdIPbhvjT/E5sH8fQprcLnNF+bOycHZPlJjRdpJHXAZGhp6eafO6fQoLyHEmV
/0345u5vmex6eQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:19 2026 by rpki-client