Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.mft
File: mR-saFXyKWutFZhw-cvtIjVmE6s.mft (raw, json)
Hash identifier: 8EcH4FMz/yPAJEsZwMLp2z+2BSJXQBWiyYonSOMF/VQ=
Subject key identifier: B2:CF:6B:8F:1C:A1:89:7F:0C:4C:C4:AB:05:70:C1:19:60:8A:F4:0C
Authority key identifier: 99:1F:AC:68:55:F2:29:6B:AD:15:98:70:F9:CB:ED:22:35:66:13:AB
Certificate issuer: /CN=991fac6855f2296bad159870f9cbed22356613ab
Certificate serial: 019D27DF78EACE2A40F55124DD96C2EFF710
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mR-saFXyKWutFZhw-cvtIjVmE6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.mft
Manifest number: 1227
Signing time: Thu 26 Mar 2026 02:00:50 +0000
Manifest this update: Thu 26 Mar 2026 02:00:50 +0000
Manifest next update: Fri 27 Mar 2026 02:00:50 +0000
Files and hashes: 1: Ua0FvX2Mxp7XblXDKae0F_P3DVA.roa (hash: Gd0TE+m9XBYfCgcDLlJ0ZvcbYTgV+bDawl8hdljezh4=)
2: mR-saFXyKWutFZhw-cvtIjVmE6s.crl (hash: vJJGpUfPEi8MUVgfA7ayY0mibCjSCUMDOQz+CtCDjzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/mR-saFXyKWutFZhw-cvtIjVmE6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:78:ea:ce:2a:40:f5:51:24:dd:96:c2:ef:f7:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=991fac6855f2296bad159870f9cbed22356613ab
Validity
Not Before: Mar 26 02:00:50 2026 GMT
Not After : Mar 27 02:00:50 2026 GMT
Subject: CN=b2cf6b8f1ca1897f0c4cc4ab0570c119608af40c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b4:0e:a4:75:a7:33:35:f1:2f:9f:64:f6:07:
3a:8f:0e:8b:c9:cd:60:70:7c:ef:33:27:6d:12:c9:
5b:4c:c8:9d:cf:d2:31:1e:ef:1a:e3:bd:fb:c6:7d:
f3:b7:70:37:d2:94:2e:67:f5:58:5c:eb:5b:a2:37:
d7:3c:85:b0:bc:2d:cd:a4:99:52:e8:7c:11:be:ba:
39:dc:65:8a:ba:d4:9c:fb:ce:1c:fb:18:28:52:1c:
5c:21:4d:69:ac:3a:d6:2e:55:cd:f9:80:4a:0e:81:
56:76:14:22:a2:15:ae:9d:6e:37:ec:3f:9c:9e:5b:
6f:5e:a7:44:5a:0e:53:fc:ea:b2:cd:70:98:47:1e:
c0:49:5e:ac:2f:d4:2c:58:d4:25:30:08:94:7b:ae:
03:90:09:02:9f:05:02:24:da:de:9a:78:52:00:a5:
29:d5:89:b7:9a:9b:7d:32:22:ef:ba:09:99:25:61:
e1:18:97:b8:56:c5:ee:6f:a7:5e:4b:00:ac:5d:be:
5a:d7:64:00:13:ec:dd:55:7d:71:f3:03:d8:e7:2f:
b1:37:ba:a9:4a:a4:50:4d:15:c8:15:fc:2c:41:7f:
77:d0:97:2a:dd:61:be:84:c2:57:44:7a:c9:bd:7d:
82:fe:3a:19:92:b6:5d:10:87:96:d7:8c:80:df:41:
0c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:CF:6B:8F:1C:A1:89:7F:0C:4C:C4:AB:05:70:C1:19:60:8A:F4:0C
X509v3 Authority Key Identifier:
keyid:99:1F:AC:68:55:F2:29:6B:AD:15:98:70:F9:CB:ED:22:35:66:13:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mR-saFXyKWutFZhw-cvtIjVmE6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f0b320-9991-4e71-b3ee-494d91aeb655/1/mR-saFXyKWutFZhw-cvtIjVmE6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:2a:d1:36:42:f3:09:d1:1e:68:29:1e:3b:df:4a:cd:e6:3d:
62:6c:a4:b6:b9:f3:ce:21:3f:f9:9c:f2:aa:34:4e:74:4c:08:
e1:00:e7:72:39:85:f8:51:c3:30:1b:65:62:7d:80:58:3d:01:
ee:77:64:f2:cd:4c:de:71:37:3d:9b:fb:03:70:cd:89:39:38:
1c:08:1b:4f:13:13:5d:bc:ce:22:2f:c1:9d:cc:f0:62:d2:d4:
2c:11:c4:23:c5:f3:60:f9:e2:2c:17:27:d3:60:0a:e1:05:6f:
72:6b:04:a0:e0:27:e7:64:81:07:2b:40:06:02:2f:5a:44:f9:
27:47:85:74:b1:18:72:6a:26:6c:c3:82:b1:9a:a8:9c:84:da:
d0:b7:16:e9:3c:7c:88:8c:8c:87:bd:31:1c:ab:30:5d:07:09:
c3:78:34:94:6f:3f:49:8e:d3:ce:b8:a2:8f:c8:da:fc:54:6c:
bd:2d:a7:b0:6c:44:c8:51:9a:9a:18:cb:c9:d8:e6:9a:13:8d:
6a:32:7f:8c:35:a7:a6:44:d3:51:c6:d8:40:7c:e5:57:ac:14:
c4:77:41:08:01:5c:08:ee:1a:7c:08:c9:a1:9a:71:59:c2:26:
fc:83:f0:2a:bc:9e:31:d8:73:8e:73:c2:e0:95:c8:cd:7f:2e:
cf:c0:08:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n33jqzipA9VEk3ZbC7/cQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MWZhYzY4NTVmMjI5NmJhZDE1OTg3MGY5Y2JlZDIyMzU2
NjEzYWIwHhcNMjYwMzI2MDIwMDUwWhcNMjYwMzI3MDIwMDUwWjAzMTEwLwYDVQQD
EyhiMmNmNmI4ZjFjYTE4OTdmMGM0Y2M0YWIwNTcwYzExOTYwOGFmNDBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7QOpHWnMzXxL59k9gc6jw6Lyc1g
cHzvMydtEslbTMidz9IxHu8a4737xn3zt3A30pQuZ/VYXOtbojfXPIWwvC3NpJlS
6HwRvro53GWKutSc+84c+xgoUhxcIU1prDrWLlXN+YBKDoFWdhQiohWunW437D+c
nltvXqdEWg5T/OqyzXCYRx7ASV6sL9QsWNQlMAiUe64DkAkCnwUCJNremnhSAKUp
1Ym3mpt9MiLvugmZJWHhGJe4VsXub6deSwCsXb5a12QAE+zdVX1x8wPY5y+xN7qp
SqRQTRXIFfwsQX930Jcq3WG+hMJXRHrJvX2C/joZkrZdEIeW14yA30EMsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLLPa48coYl/DEzEqwVwwRlgivQMMB8GA1UdIwQY
MBaAFJkfrGhV8ilrrRWYcPnL7SI1ZhOrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVItc2FGWHlLV3V0Rlpody1jdnRJalZtRTZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9mMGIzMjAtOTk5MS00ZTcxLWIzZWUt
NDk0ZDkxYWViNjU1LzEvbVItc2FGWHlLV3V0Rlpody1jdnRJalZtRTZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9mMGIzMjAtOTk5MS00ZTcxLWIzZWUtNDk0ZDkxYWViNjU1
LzEvbVItc2FGWHlLV3V0Rlpody1jdnRJalZtRTZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYSrRNkLz
CdEeaCkeO99KzeY9YmyktrnzziE/+ZzyqjROdEwI4QDncjmF+FHDMBtlYn2AWD0B
7ndk8s1M3nE3PZv7A3DNiTk4HAgbTxMTXbzOIi/BnczwYtLULBHEI8XzYPniLBcn
02AK4QVvcmsEoOAn52SBBytABgIvWkT5J0eFdLEYcmombMOCsZqonITa0LcW6Tx8
iIyMh70xHKswXQcJw3g0lG8/SY7Tzriij8ja/FRsvS2nsGxEyFGamhjLydjmmhON
ajJ/jDWnpkTTUcbYQHzlV6wUxHdBCAFcCO4afAjJoZpxWcIm/IPwKryeMdhzjnPC
4JXIzX8uz8AIRA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:52:37 2026 by rpki-client