Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft
File: sA4l9V67rLBp8QOssIZnA4Nc_M0.mft (raw, json)
Hash identifier: AvwAwNjp3ZnyOUPyFZgAUOv0ZgE5WdnQp0XEKPrim2w=
Subject key identifier: 96:E0:9A:80:5A:7D:DF:20:97:3E:49:16:B7:06:7C:36:D5:75:3B:02
Authority key identifier: B0:0E:25:F5:5E:BB:AC:B0:69:F1:03:AC:B0:86:67:03:83:5C:FC:CD
Certificate issuer: /CN=b00e25f55ebbacb069f103acb0866703835cfccd
Certificate serial: 019D27720B4AA9210090E089A9784EA1F455
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sA4l9V67rLBp8QOssIZnA4Nc_M0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft
Manifest number: 1493
Signing time: Thu 26 Mar 2026 00:01:18 +0000
Manifest this update: Thu 26 Mar 2026 00:01:18 +0000
Manifest next update: Fri 27 Mar 2026 00:01:18 +0000
Files and hashes: 1: IxO99c5pFhRvUksjCk8RGNZdHys.roa (hash: axX2zCX5EaVP+cgNK0AwafDUwd4UVfumU6doP/6YeJg=)
2: sA4l9V67rLBp8QOssIZnA4Nc_M0.crl (hash: J+o3W3qkxZMTI9C1L5bUqD+dZ3K1ozfksf5ChDV/0Sk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sA4l9V67rLBp8QOssIZnA4Nc_M0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:0b:4a:a9:21:00:90:e0:89:a9:78:4e:a1:f4:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b00e25f55ebbacb069f103acb0866703835cfccd
Validity
Not Before: Mar 26 00:01:18 2026 GMT
Not After : Mar 27 00:01:18 2026 GMT
Subject: CN=96e09a805a7ddf20973e4916b7067c36d5753b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4e:5e:25:f6:ba:19:96:44:91:7b:7e:54:8b:
d7:83:0b:e2:eb:7e:8d:0d:9a:da:7e:db:65:4d:8a:
0c:19:16:10:e9:18:dc:33:d8:0d:83:40:0a:25:12:
71:16:98:15:da:5e:df:bd:75:e1:fd:f1:77:02:17:
c1:85:98:c6:8d:6e:38:75:8b:d1:5d:ea:98:02:89:
17:ff:78:17:27:0d:43:d8:ea:e6:d6:4f:36:d9:8f:
e0:3b:b2:cf:c7:5e:88:e0:80:d8:ff:3e:c7:80:be:
3f:43:04:58:f3:6e:b1:91:47:aa:2d:3b:25:d0:31:
72:80:77:6c:a8:96:3e:92:fc:8e:c8:a6:19:4c:25:
c8:6f:83:75:79:15:b8:06:52:50:52:f4:06:7d:29:
58:e9:e2:1a:71:e9:f9:5e:48:f2:5a:35:79:d2:53:
ee:ab:0e:97:86:e0:4a:a5:7b:15:56:90:e7:e2:14:
bb:f2:0d:70:49:52:ab:44:e7:16:cd:c6:44:c4:08:
4d:23:87:9f:72:b2:13:0b:7f:4a:f5:d0:48:9b:25:
23:9a:78:ac:5e:b2:1e:49:57:58:6f:1e:b0:26:f3:
b2:19:bc:01:4b:85:a1:5a:bc:12:dd:0c:d0:44:dc:
71:6c:01:b3:76:ba:ea:62:e4:94:61:46:ba:c3:e4:
bb:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:E0:9A:80:5A:7D:DF:20:97:3E:49:16:B7:06:7C:36:D5:75:3B:02
X509v3 Authority Key Identifier:
keyid:B0:0E:25:F5:5E:BB:AC:B0:69:F1:03:AC:B0:86:67:03:83:5C:FC:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sA4l9V67rLBp8QOssIZnA4Nc_M0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:1b:05:2a:88:f0:87:b8:68:ab:e4:3d:91:df:19:57:f7:14:
a1:d2:cd:5f:57:e7:8c:c2:ce:60:27:46:9e:86:a5:48:0f:64:
25:38:f1:2b:ae:76:a4:2a:84:8f:c7:37:b9:60:2d:7e:6c:7f:
af:35:d2:02:fa:88:33:08:9b:07:4e:ef:84:66:5f:73:17:59:
54:d2:e6:22:6a:ce:05:65:1e:78:cc:bf:1a:f1:b9:c5:aa:c8:
14:c8:a3:b0:23:1e:43:99:a3:b4:ca:07:ca:52:8c:73:64:ee:
84:de:56:34:bb:ae:d3:90:75:07:0d:81:42:95:7f:22:25:60:
f0:73:19:57:31:81:f5:f0:e9:98:7d:86:21:59:5a:b7:18:52:
27:3b:40:db:3c:9c:4f:6c:b7:31:5b:f7:ae:4d:b5:1c:a8:ee:
0d:d8:28:89:f9:73:c0:0e:4c:2a:a0:4a:2c:d9:1b:e9:8a:a0:
40:7b:ea:56:49:b9:ae:8b:1f:b0:d2:68:af:78:0b:08:a4:3f:
e8:52:f7:7f:dd:30:61:b8:79:be:fc:31:6d:12:17:28:5e:40:
ba:da:61:5b:22:32:9c:1a:a8:b2:62:3f:63:0f:95:19:af:8a:
08:f5:37:7f:3f:fd:5d:3d:87:ed:47:af:3c:c9:77:45:f5:d8:
40:40:04:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncgtKqSEAkOCJqXhOofRVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwMGUyNWY1NWViYmFjYjA2OWYxMDNhY2IwODY2NzAzODM1
Y2ZjY2QwHhcNMjYwMzI2MDAwMTE4WhcNMjYwMzI3MDAwMTE4WjAzMTEwLwYDVQQD
Eyg5NmUwOWE4MDVhN2RkZjIwOTczZTQ5MTZiNzA2N2MzNmQ1NzUzYjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArU5eJfa6GZZEkXt+VIvXgwvi636N
DZrafttlTYoMGRYQ6RjcM9gNg0AKJRJxFpgV2l7fvXXh/fF3AhfBhZjGjW44dYvR
XeqYAokX/3gXJw1D2Orm1k822Y/gO7LPx16I4IDY/z7HgL4/QwRY826xkUeqLTsl
0DFygHdsqJY+kvyOyKYZTCXIb4N1eRW4BlJQUvQGfSlY6eIacen5XkjyWjV50lPu
qw6XhuBKpXsVVpDn4hS78g1wSVKrROcWzcZExAhNI4efcrITC39K9dBImyUjmnis
XrIeSVdYbx6wJvOyGbwBS4WhWrwS3QzQRNxxbAGzdrrqYuSUYUa6w+S78wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJbgmoBafd8glz5JFrcGfDbVdTsCMB8GA1UdIwQY
MBaAFLAOJfVeu6ywafEDrLCGZwODXPzNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0E0bDlWNjdyTEJwOFFPc3NJWm5BNE5jX00wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8zMWEwZWMtZDliOC00OWU0LWI0MzYt
OGI0MjE1ZTU4MDI4LzEvc0E0bDlWNjdyTEJwOFFPc3NJWm5BNE5jX00wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS8zMWEwZWMtZDliOC00OWU0LWI0MzYtOGI0MjE1ZTU4MDI4
LzEvc0E0bDlWNjdyTEJwOFFPc3NJWm5BNE5jX00wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApxsFKojw
h7hoq+Q9kd8ZV/cUodLNX1fnjMLOYCdGnoalSA9kJTjxK652pCqEj8c3uWAtfmx/
rzXSAvqIMwibB07vhGZfcxdZVNLmImrOBWUeeMy/GvG5xarIFMijsCMeQ5mjtMoH
ylKMc2TuhN5WNLuu05B1Bw2BQpV/IiVg8HMZVzGB9fDpmH2GIVlatxhSJztA2zyc
T2y3MVv3rk21HKjuDdgoiflzwA5MKqBKLNkb6YqgQHvqVkm5rosfsNJor3gLCKQ/
6FL3f90wYbh5vvwxbRIXKF5AutphWyIynBqosmI/Yw+VGa+KCPU3fz/9XT2H7Uev
PMl3RfXYQEAEuA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:42:39 2026 by rpki-client