Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.mft
File: Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.mft (raw, json)
Hash identifier: IWIq/A4OhT5Q1RixgNIwNwIespecWzqq+XIXGJISSgo=
Subject key identifier: 34:82:C8:06:3C:00:FD:AE:AD:13:A3:6C:B0:8D:F7:9F:49:F9:F5:04
Authority key identifier: 4A:7F:4F:8A:C8:CA:73:43:ED:1B:4F:F1:2C:E2:76:31:8B:69:D1:0E
Certificate issuer: /CN=4a7f4f8ac8ca7343ed1b4ff12ce276318b69d10e
Certificate serial: 019D333EF63DA74E328C7A04B7EF18ADEE87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.mft
Manifest number: 1426
Signing time: Sat 28 Mar 2026 07:00:57 +0000
Manifest this update: Sat 28 Mar 2026 07:00:57 +0000
Manifest next update: Sun 29 Mar 2026 07:00:57 +0000
Files and hashes: 1: 24FTYWICcL1IJMQzkDfWg_xAqy0.roa (hash: wR9QeEuSdjQ+0/1YXf2bsDaKWqR9jJk06EOJ2Q73fWE=)
2: DuCPfh0BtVEkEb46CmQmkJTEoiA.roa (hash: 4H+ADRlPO/G+o1dwkSRBoJP9og9DDlqIZuQkG2ZaHhA=)
3: Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.crl (hash: Nt0Dw9COUIct1YrIz/GmnTVfugfeHINhDdSg5mGM/Zw=)
4: wqS_wfIdBlK7kC9o4zizHf0FBlk.roa (hash: Dvd4isDlS6MYBBiZdCyk9gJMQ1pHNGRCGxx3yyLp9qE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:3e:f6:3d:a7:4e:32:8c:7a:04:b7:ef:18:ad:ee:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a7f4f8ac8ca7343ed1b4ff12ce276318b69d10e
Validity
Not Before: Mar 28 07:00:57 2026 GMT
Not After : Mar 29 07:00:57 2026 GMT
Subject: CN=3482c8063c00fdaead13a36cb08df79f49f9f504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:b2:82:76:57:82:40:40:78:fa:0c:7b:cf:0a:
ed:a2:df:ae:78:ae:6f:46:55:d1:9f:d2:18:af:7e:
32:ae:4f:06:90:ea:8d:56:00:d3:e5:ac:3c:d6:ad:
14:ca:c5:dc:48:d3:32:71:c5:3d:89:04:4c:92:ca:
a5:fe:27:09:66:2d:f1:dc:a9:b7:02:08:27:48:2b:
d6:13:6f:a5:0d:e4:23:db:d3:77:f3:c8:41:7a:9e:
2d:66:60:b0:07:c0:7d:f9:69:01:7e:32:7a:a4:23:
68:0d:f3:65:5d:df:72:8d:f5:09:fa:1c:fb:c0:f1:
64:6c:53:bb:bb:5b:af:76:7a:de:ff:b3:8a:b2:a1:
13:f1:91:6d:5b:9f:3d:41:89:c1:45:b2:9e:63:39:
42:19:2c:c4:65:9c:1f:44:06:a8:27:6e:d1:86:c5:
de:9b:6f:6a:6e:8b:de:c5:65:c8:61:e7:ac:0e:6c:
03:fd:f1:4a:4b:b7:96:05:fa:f8:f0:1f:a4:11:cd:
9c:f8:4a:10:31:a3:34:68:84:94:9b:d8:f8:86:0f:
1e:28:5b:ae:32:20:56:23:80:f1:64:16:d0:38:ab:
25:59:0f:80:91:ed:8c:e3:0c:4c:0c:0c:59:e3:b9:
0e:37:36:97:cd:3f:98:09:12:09:36:d3:12:02:87:
92:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:82:C8:06:3C:00:FD:AE:AD:13:A3:6C:B0:8D:F7:9F:49:F9:F5:04
X509v3 Authority Key Identifier:
keyid:4A:7F:4F:8A:C8:CA:73:43:ED:1B:4F:F1:2C:E2:76:31:8B:69:D1:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:06:c3:7e:dd:b4:9c:c5:99:72:c2:37:9d:2c:02:27:73:ae:
fc:ff:cd:8b:05:eb:f0:f8:f6:e0:99:ca:87:62:1f:3a:5f:d7:
e1:45:08:73:fc:c3:22:9d:57:61:ee:c9:42:37:e6:fc:8c:d7:
e8:f9:3b:39:10:71:5d:a4:5e:d3:ad:74:e5:a5:d8:b9:2f:3f:
27:29:d3:71:dc:09:00:80:9e:3e:ad:f1:b2:cc:77:6a:bf:32:
b9:66:8a:c7:7f:16:ab:c0:1a:d8:2c:20:68:60:2e:a6:9b:de:
0f:18:5e:4f:6c:9d:11:ed:55:df:43:6b:8a:30:69:91:8d:50:
7f:a0:d0:df:24:72:a5:65:64:44:24:93:02:18:64:b4:4c:b9:
7a:59:47:ca:69:4a:7b:d5:6a:ef:54:7e:46:80:04:73:d7:99:
ec:fb:df:69:ed:2b:98:55:f7:78:24:df:e3:05:a0:42:29:fa:
1c:5c:c6:8c:36:89:0e:4b:a5:f3:bd:3f:1b:51:a5:42:69:f9:
23:a9:11:32:88:2f:e9:cf:fb:f5:bc:be:68:28:05:ac:eb:25:
0e:84:cf:d4:b0:33:1c:23:c8:d2:ab:8f:1c:dd:8a:dd:a7:d5:
ce:ae:75:51:3c:b5:c3:6c:0c:09:8b:96:b2:5f:9f:81:5e:09:
55:8c:ae:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0zPvY9p04yjHoEt+8Yre6HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhN2Y0ZjhhYzhjYTczNDNlZDFiNGZmMTJjZTI3NjMxOGI2
OWQxMGUwHhcNMjYwMzI4MDcwMDU3WhcNMjYwMzI5MDcwMDU3WjAzMTEwLwYDVQQD
EygzNDgyYzgwNjNjMDBmZGFlYWQxM2EzNmNiMDhkZjc5ZjQ5ZjlmNTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA77KCdleCQEB4+gx7zwrtot+ueK5v
RlXRn9IYr34yrk8GkOqNVgDT5aw81q0UysXcSNMyccU9iQRMksql/icJZi3x3Km3
AggnSCvWE2+lDeQj29N388hBep4tZmCwB8B9+WkBfjJ6pCNoDfNlXd9yjfUJ+hz7
wPFkbFO7u1uvdnre/7OKsqET8ZFtW589QYnBRbKeYzlCGSzEZZwfRAaoJ27RhsXe
m29qbovexWXIYeesDmwD/fFKS7eWBfr48B+kEc2c+EoQMaM0aISUm9j4hg8eKFuu
MiBWI4DxZBbQOKslWQ+Ake2M4wxMDAxZ47kONzaXzT+YCRIJNtMSAoeSnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDSCyAY8AP2urROjbLCN959J+fUEMB8GA1UdIwQY
MBaAFEp/T4rIynND7RtP8SzidjGLadEOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU245UGlzaktjMFB0RzBfeExPSjJNWXRwMFE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8wZTY5NjItOTZiNy00ZmI4LWE4Mzkt
OWVjN2FkZDBlYjY4LzEvU245UGlzaktjMFB0RzBfeExPSjJNWXRwMFE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8wZTY5NjItOTZiNy00ZmI4LWE4MzktOWVjN2FkZDBlYjY4
LzEvU245UGlzaktjMFB0RzBfeExPSjJNWXRwMFE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACwbDft20
nMWZcsI3nSwCJ3Ou/P/NiwXr8Pj24JnKh2IfOl/X4UUIc/zDIp1XYe7JQjfm/IzX
6Pk7ORBxXaRe06105aXYuS8/JynTcdwJAICePq3xssx3ar8yuWaKx38Wq8Aa2Cwg
aGAuppveDxheT2ydEe1V30NrijBpkY1Qf6DQ3yRypWVkRCSTAhhktEy5ellHymlK
e9Vq71R+RoAEc9eZ7Pvfae0rmFX3eCTf4wWgQin6HFzGjDaJDkul870/G1GlQmn5
I6kRMogv6c/79by+aCgFrOslDoTP1LAzHCPI0quPHN2K3afVzq51UTy1w2wMCYuW
sl+fgV4JVYyudg==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:34:12 2026 by rpki-client