Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/adfa7b-cf37-49d2-96af-bd7caf0541b8/1/SRdsODQdjHE7eV5Y9QAupnUFlyg.mft
File: SRdsODQdjHE7eV5Y9QAupnUFlyg.mft (raw, json)
Hash identifier: 8joRM4UN0E84B9gOBhLs1p+ISoimtkkptqeAhK8htUU=
Subject key identifier: 2E:C4:B9:09:F7:6A:FF:A5:11:C9:72:F1:C0:E1:B0:D3:46:67:E0:89
Authority key identifier: 49:17:6C:38:34:1D:8C:71:3B:79:5E:58:F5:00:2E:A6:75:05:97:28
Certificate issuer: /CN=49176c38341d8c713b795e58f5002ea675059728
Certificate serial: 019D25BA21256EDCA9AF3AF4202BD341F930
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SRdsODQdjHE7eV5Y9QAupnUFlyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/adfa7b-cf37-49d2-96af-bd7caf0541b8/1/SRdsODQdjHE7eV5Y9QAupnUFlyg.mft
Manifest number: 93
Signing time: Wed 25 Mar 2026 16:00:48 +0000
Manifest this update: Wed 25 Mar 2026 16:00:48 +0000
Manifest next update: Thu 26 Mar 2026 16:00:48 +0000
Files and hashes: 1: RQ5Cbf5xDKk_APMnlbM6ZHm4l7Q.roa (hash: l7hYvOlaLLwFZOpMeD6wZKlD7HWG7TlnqA+KkK5p5ho=)
2: SRdsODQdjHE7eV5Y9QAupnUFlyg.crl (hash: DbH2Np7hewa5HKhmO5LEA6G9tzpRxZd63890xYLdtvw=)
3: WQHG1u9PCPjDbr0POILKlVvCtIo.asa (hash: BrveTBrYvbvgxputKeZw7R7kBDu/ApcK0fbWPjyFnTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/adfa7b-cf37-49d2-96af-bd7caf0541b8/1/SRdsODQdjHE7eV5Y9QAupnUFlyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/adfa7b-cf37-49d2-96af-bd7caf0541b8/1/SRdsODQdjHE7eV5Y9QAupnUFlyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SRdsODQdjHE7eV5Y9QAupnUFlyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:21:25:6e:dc:a9:af:3a:f4:20:2b:d3:41:f9:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49176c38341d8c713b795e58f5002ea675059728
Validity
Not Before: Mar 25 16:00:48 2026 GMT
Not After : Mar 26 16:00:48 2026 GMT
Subject: CN=2ec4b909f76affa511c972f1c0e1b0d34667e089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:48:85:e9:5f:4c:6e:63:d1:6c:a2:50:56:fd:
72:06:20:38:81:ba:ab:7c:dd:29:23:8f:84:4b:7d:
1b:fd:03:51:46:4a:1b:90:cf:ba:38:ed:cc:b0:c9:
4e:5d:f5:68:9e:1f:11:ce:15:e2:b2:06:ce:f0:2b:
cc:3e:56:f7:e0:cf:e7:d6:39:76:96:14:69:ea:3e:
07:ba:46:49:83:ca:67:65:7e:ea:d3:15:1d:99:4c:
95:c2:b7:6b:94:be:f5:f5:06:0e:2d:25:3b:0c:e8:
a2:e3:c3:f4:47:9f:be:f3:79:ea:bc:7d:5b:a5:42:
1b:d9:f7:d5:bf:01:17:6b:bd:b9:a2:5c:50:2e:a4:
3b:d9:b3:c4:2f:4e:fa:e4:79:f8:63:0c:fe:5d:0e:
37:92:21:b9:d4:f9:15:b3:ac:89:da:3e:00:15:ae:
e1:98:c7:b2:83:31:37:a8:64:6e:18:78:c5:9f:30:
8f:44:8c:8d:2f:a5:5c:24:db:62:59:90:15:d3:8a:
f9:fc:87:ef:e1:a3:35:39:8c:12:ac:f1:f3:5c:ca:
6e:e7:37:01:e6:2e:5c:a7:3d:e0:42:b3:90:66:d3:
bb:b9:89:87:53:12:32:7a:84:63:9f:d1:39:b2:ed:
3a:3e:de:5f:82:19:0d:eb:15:25:44:b0:87:53:d7:
f5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C4:B9:09:F7:6A:FF:A5:11:C9:72:F1:C0:E1:B0:D3:46:67:E0:89
X509v3 Authority Key Identifier:
keyid:49:17:6C:38:34:1D:8C:71:3B:79:5E:58:F5:00:2E:A6:75:05:97:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SRdsODQdjHE7eV5Y9QAupnUFlyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/adfa7b-cf37-49d2-96af-bd7caf0541b8/1/SRdsODQdjHE7eV5Y9QAupnUFlyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/adfa7b-cf37-49d2-96af-bd7caf0541b8/1/SRdsODQdjHE7eV5Y9QAupnUFlyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:b2:1f:01:18:eb:e6:9c:63:19:aa:6c:2c:1e:3e:8b:84:70:
45:d7:f9:a6:16:08:97:33:31:19:51:7b:f9:32:b6:05:98:16:
9e:30:5a:c0:11:34:41:1b:6c:94:07:4f:40:64:33:10:93:a6:
84:cf:ee:82:4b:cd:44:b8:98:bc:f2:4b:64:1f:c6:a7:c5:9b:
0a:b0:4f:e1:b7:3f:4f:9b:52:8f:03:2b:5c:c8:4e:0c:1a:1c:
51:91:6a:4a:3c:75:9c:f1:8d:1a:ac:de:ba:cc:d7:b8:c7:73:
81:67:b2:15:59:bb:c3:83:51:ef:9d:f2:23:96:3a:11:e3:46:
e9:a7:ba:32:e3:fc:5b:ef:15:ea:cf:40:c2:00:56:5f:8e:77:
53:9f:84:9e:6e:52:aa:1e:68:66:6c:b7:2d:65:f4:3d:6f:3d:
35:82:7f:c2:8f:fd:80:9c:45:3d:d9:8b:e8:87:0b:b9:85:99:
cc:db:bf:74:2d:ba:f4:9c:93:fc:71:8d:24:53:6a:79:49:2e:
a4:b8:79:48:d6:08:13:90:c3:08:cc:08:74:3a:65:e7:19:46:
70:92:d1:f0:2a:7a:da:93:ed:cd:76:cd:fd:35:c9:0c:02:57:
17:75:60:8b:45:a1:69:f3:54:07:1f:25:cb:62:5a:5e:ae:52:
f4:0b:96:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0luiElbtyprzr0ICvTQfkwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5MTc2YzM4MzQxZDhjNzEzYjc5NWU1OGY1MDAyZWE2NzUw
NTk3MjgwHhcNMjYwMzI1MTYwMDQ4WhcNMjYwMzI2MTYwMDQ4WjAzMTEwLwYDVQQD
EygyZWM0YjkwOWY3NmFmZmE1MTFjOTcyZjFjMGUxYjBkMzQ2NjdlMDg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0iF6V9MbmPRbKJQVv1yBiA4gbqr
fN0pI4+ES30b/QNRRkobkM+6OO3MsMlOXfVonh8RzhXisgbO8CvMPlb34M/n1jl2
lhRp6j4HukZJg8pnZX7q0xUdmUyVwrdrlL719QYOLSU7DOii48P0R5++83nqvH1b
pUIb2ffVvwEXa725olxQLqQ72bPEL0765Hn4Ywz+XQ43kiG51PkVs6yJ2j4AFa7h
mMeygzE3qGRuGHjFnzCPRIyNL6VcJNtiWZAV04r5/Ifv4aM1OYwSrPHzXMpu5zcB
5i5cpz3gQrOQZtO7uYmHUxIyeoRjn9E5su06Pt5fghkN6xUlRLCHU9f1pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC7EuQn3av+lEcly8cDhsNNGZ+CJMB8GA1UdIwQY
MBaAFEkXbDg0HYxxO3leWPUALqZ1BZcoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1Jkc09EUWRqSEU3ZVY1WTlRQXVwblVGbHlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9hZGZhN2ItY2YzNy00OWQyLTk2YWYt
YmQ3Y2FmMDU0MWI4LzEvU1Jkc09EUWRqSEU3ZVY1WTlRQXVwblVGbHlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9hZGZhN2ItY2YzNy00OWQyLTk2YWYtYmQ3Y2FmMDU0MWI4
LzEvU1Jkc09EUWRqSEU3ZVY1WTlRQXVwblVGbHlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbrIfARjr
5pxjGapsLB4+i4RwRdf5phYIlzMxGVF7+TK2BZgWnjBawBE0QRtslAdPQGQzEJOm
hM/ugkvNRLiYvPJLZB/Gp8WbCrBP4bc/T5tSjwMrXMhODBocUZFqSjx1nPGNGqze
uszXuMdzgWeyFVm7w4NR753yI5Y6EeNG6ae6MuP8W+8V6s9AwgBWX453U5+Enm5S
qh5oZmy3LWX0PW89NYJ/wo/9gJxFPdmL6IcLuYWZzNu/dC269JyT/HGNJFNqeUku
pLh5SNYIE5DDCMwIdDpl5xlGcJLR8Cp62pPtzXbN/TXJDAJXF3Vgi0WhafNUBx8l
y2JaXq5S9AuWyg==
-----END CERTIFICATE-----
Generated at Wed Mar 25 23:53:19 2026 by rpki-client