Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
File: cS8iadFWM728cdjNP0WMvQP-Ax8.mft (raw, json)
Hash identifier: fOSeruKUzdZMCYSfYJVNPGg53iQW0J4Q5EzPvK46PfM=
Subject key identifier: 02:FF:24:58:F5:75:85:A5:20:B4:08:14:FA:01:D4:74:85:32:4B:85
Authority key identifier: 71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F
Certificate issuer: /CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
Certificate serial: 019D26CCD1931D2677B710F4ED159756C623
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
Manifest number: 0C33
Signing time: Wed 25 Mar 2026 21:00:50 +0000
Manifest this update: Wed 25 Mar 2026 21:00:50 +0000
Manifest next update: Thu 26 Mar 2026 21:00:50 +0000
Files and hashes: 1: 6Tbppy4MQkLuvQtyLGsGd3CPcic.roa (hash: 7/QkF9HhHe+dG7SWSPYfgjpwfSEFuQhLwXrd2nTq/qU=)
2: NzZA0ZJSkjRaWslFXPndZfar7cg.roa (hash: RJF0xypUlCqc73vpWjXekHDMqnQ2dCd2RLXFaZqKXeQ=)
3: T6_UDLgOp2Kr0SqLbwdbPGeDTkA.roa (hash: gTWxLHMemzdxPWumDbDMhn2BGfQjWXuVToW8lRVJiYA=)
4: W1ZhWsdodClad0dJ8wh53Ch0fp8.roa (hash: VKkRvsz7R9Hk3QEeT4dAIBuH8DXYchOllD8/vRJTJCI=)
5: cS8iadFWM728cdjNP0WMvQP-Ax8.crl (hash: 8vOIWJhssq4M3f4cz7MTBl8xE1k+Nlx35o5YRj8Zmek=)
6: iafYMwA1CChI3CF3y86ruCA7o6I.roa (hash: tTSoeaNC29Xke1fF6xeZHo/CiLM3GLD82IygoT7IYr4=)
7: iioQdMFsttIkzLsks2Jp19kCC1I.roa (hash: 8e3WC7/8HWnnhrJ3InF3EeTww9JbZ0JooKgafOgwKoI=)
8: yHbHdVra8JQS6bdIo32Jx7OYffk.roa (hash: ScC+mBQJVOrQxUSi9bIaW+yLlmfLXJYJdtutIzPb38o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:d1:93:1d:26:77:b7:10:f4:ed:15:97:56:c6:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
Validity
Not Before: Mar 25 21:00:50 2026 GMT
Not After : Mar 26 21:00:50 2026 GMT
Subject: CN=02ff2458f57585a520b40814fa01d47485324b85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4f:ba:4b:d7:b5:22:ac:3d:54:6a:c6:30:d0:
68:9a:ff:d6:5b:20:05:b9:cf:7e:2f:fc:57:32:c2:
7f:8b:71:c7:4d:c3:57:80:c4:ab:6c:be:17:46:3d:
29:20:1f:eb:22:11:50:51:a9:77:66:49:80:53:b9:
80:34:70:31:5b:e5:37:73:9a:c6:20:1b:8a:60:2a:
9a:05:71:18:45:ff:49:80:e5:1d:d1:64:8b:2f:3f:
3f:f2:26:c4:d3:e6:67:5e:cb:4f:16:19:95:79:40:
8d:e0:87:4d:e9:c3:c0:30:d2:a4:8c:c5:94:cf:c5:
2e:d5:e5:2b:16:75:3e:21:bd:b1:88:63:d6:b9:c1:
62:90:02:fb:af:1d:7b:da:b6:85:b4:fa:8e:d0:e2:
cf:84:68:38:97:22:c3:66:62:db:d0:af:d2:c5:bb:
35:13:b4:c6:76:cf:6f:3e:d5:2e:1c:4f:ae:12:16:
c6:ee:85:96:0a:7d:8b:0b:6b:27:e0:62:60:5d:fa:
9d:a1:1b:93:9d:c5:0e:76:bc:fb:c6:a3:cc:cc:8e:
84:49:02:6c:eb:fb:e2:6c:45:40:cc:99:74:aa:f5:
69:fa:96:cd:56:47:0e:b0:ec:bb:ad:24:28:58:c8:
e0:92:a7:79:ed:97:92:b4:6c:ad:33:7c:e8:d6:0e:
4c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:FF:24:58:F5:75:85:A5:20:B4:08:14:FA:01:D4:74:85:32:4B:85
X509v3 Authority Key Identifier:
keyid:71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:a8:85:e8:17:8b:b1:93:3f:ff:31:0c:12:d2:93:98:f4:ec:
16:52:3b:a2:44:c9:4e:cc:3e:c8:ac:ea:02:a9:2c:54:e1:bc:
84:ee:13:80:15:f0:82:46:38:ee:dd:cb:59:00:4f:91:21:84:
d7:fb:ea:4d:29:be:c7:5c:89:e6:9c:c3:f7:f4:bb:fd:05:9d:
9b:77:96:db:b0:41:1f:da:bf:9b:00:3b:ee:93:3e:80:ff:14:
63:1e:9c:a4:42:25:28:fe:6f:88:b5:46:97:b9:7a:63:de:2a:
5a:0b:e6:2b:4c:be:2a:e2:08:6f:af:74:63:e8:f4:00:17:e2:
70:76:14:a5:7d:d3:49:93:05:9a:27:9c:2e:df:de:df:14:16:
2c:dd:e3:de:5e:08:ec:09:10:f2:e6:07:c8:f6:97:56:09:18:
34:a5:ed:c4:96:52:c6:6f:1b:29:ea:d4:f3:91:a5:f7:f9:95:
ca:af:5a:53:91:24:16:dd:02:6c:9d:ea:49:ea:86:d7:f5:3f:
a4:26:45:16:f7:82:38:8d:8a:61:40:13:f4:a0:84:d2:88:fd:
ca:2b:14:b4:f9:6e:c7:10:94:aa:90:2e:2e:17:c7:63:c2:20:
0b:c9:14:71:ef:eb:81:14:df:49:1e:bb:2f:08:4e:b2:d2:a2:
c2:a0:9c:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzNGTHSZ3txD07RWXVsYjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMmYyMjY5ZDE1NjMzYmRiYzcxZDhjZDNmNDU4Y2JkMDNm
ZTAzMWYwHhcNMjYwMzI1MjEwMDUwWhcNMjYwMzI2MjEwMDUwWjAzMTEwLwYDVQQD
EygwMmZmMjQ1OGY1NzU4NWE1MjBiNDA4MTRmYTAxZDQ3NDg1MzI0Yjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1k+6S9e1Iqw9VGrGMNBomv/WWyAF
uc9+L/xXMsJ/i3HHTcNXgMSrbL4XRj0pIB/rIhFQUal3ZkmAU7mANHAxW+U3c5rG
IBuKYCqaBXEYRf9JgOUd0WSLLz8/8ibE0+ZnXstPFhmVeUCN4IdN6cPAMNKkjMWU
z8Uu1eUrFnU+Ib2xiGPWucFikAL7rx172raFtPqO0OLPhGg4lyLDZmLb0K/Sxbs1
E7TGds9vPtUuHE+uEhbG7oWWCn2LC2sn4GJgXfqdoRuTncUOdrz7xqPMzI6ESQJs
6/vibEVAzJl0qvVp+pbNVkcOsOy7rSQoWMjgkqd57ZeStGytM3zo1g5MgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAL/JFj1dYWlILQIFPoB1HSFMkuFMB8GA1UdIwQY
MBaAFHEvImnRVjO9vHHYzT9FjL0D/gMfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1M4aWFkRldNNzI4Y2RqTlAwV012UVAtQXg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9lNjM3M2MtNTNjZC00ZmQ1LWE0MzUt
ZDE4YmFiOTUxNWJmLzEvY1M4aWFkRldNNzI4Y2RqTlAwV012UVAtQXg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9lNjM3M2MtNTNjZC00ZmQ1LWE0MzUtZDE4YmFiOTUxNWJm
LzEvY1M4aWFkRldNNzI4Y2RqTlAwV012UVAtQXg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfqiF6BeL
sZM//zEMEtKTmPTsFlI7okTJTsw+yKzqAqksVOG8hO4TgBXwgkY47t3LWQBPkSGE
1/vqTSm+x1yJ5pzD9/S7/QWdm3eW27BBH9q/mwA77pM+gP8UYx6cpEIlKP5viLVG
l7l6Y94qWgvmK0y+KuIIb690Y+j0ABficHYUpX3TSZMFmiecLt/e3xQWLN3j3l4I
7AkQ8uYHyPaXVgkYNKXtxJZSxm8bKerU85Gl9/mVyq9aU5EkFt0CbJ3qSeqG1/U/
pCZFFveCOI2KYUAT9KCE0oj9yisUtPluxxCUqpAuLhfHY8IgC8kUce/rgRTfSR67
LwhOstKiwqCcWQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:20:06 2026 by rpki-client