Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.mft
File: sUP6cD--4Eu9kc5joyFIs2uOVao.mft (raw, json)
Hash identifier: x3f9vwxNrkipAZiRJGnQt1ust+g3fRfy2yT8SL5hwd8=
Subject key identifier: 5D:CE:2E:5D:59:17:F1:F4:57:FB:5B:D9:5D:8E:99:49:13:61:9D:B4
Authority key identifier: B1:43:FA:70:3F:BE:E0:4B:BD:91:CE:63:A3:21:48:B3:6B:8E:55:AA
Certificate issuer: /CN=b143fa703fbee04bbd91ce63a32148b36b8e55aa
Certificate serial: 019D333F2BB1CA766A4DF153D02F913C5832
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUP6cD--4Eu9kc5joyFIs2uOVao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.mft
Manifest number: 1891
Signing time: Sat 28 Mar 2026 07:01:10 +0000
Manifest this update: Sat 28 Mar 2026 07:01:10 +0000
Manifest next update: Sun 29 Mar 2026 07:01:10 +0000
Files and hashes: 1: AI5iPwrPeQM75vgCBirIJ7ULXR8.roa (hash: 6BPizRCmHI1yenYS4NwhiHl3z1wmNCdGTc9GKZg1Dkg=)
2: n5pV2dNWRA_f9PGG9onX31tv0X4.roa (hash: D07pEt8gK/cdGWqE9Zyt/+iA5IXUOBq9V7PLS+yh6/A=)
3: sEzlM5R6zA-ZnYv0970VvpCyW2s.roa (hash: QcSUN0qNT/RW84mhkqVzl01FcB1TS7ALX77ko6AurMc=)
4: sUP6cD--4Eu9kc5joyFIs2uOVao.crl (hash: UQGwnQsBSBMBQTu7KP7Y7U6yv/lBFAgAfymJxOBngYA=)
5: u3Sm5CQkYvsGuCc2LmoCaugkKjw.roa (hash: QovOPnDsIRjc0fHKUk+YUhtZOJkATZJ4vmW0nQyk6FY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.mft
rsync://rpki.ripe.net/repository/DEFAULT/sUP6cD--4Eu9kc5joyFIs2uOVao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:3f:2b:b1:ca:76:6a:4d:f1:53:d0:2f:91:3c:58:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b143fa703fbee04bbd91ce63a32148b36b8e55aa
Validity
Not Before: Mar 28 07:01:10 2026 GMT
Not After : Mar 29 07:01:10 2026 GMT
Subject: CN=5dce2e5d5917f1f457fb5bd95d8e994913619db4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f4:49:cb:4f:c4:a0:c1:25:a0:83:33:b9:33:
ea:c6:14:cc:f6:5e:fb:3a:82:4d:78:8a:e8:19:0e:
41:9a:eb:99:0a:47:71:c6:33:b9:ed:6b:6f:49:33:
f7:3f:5c:21:45:be:8f:2e:ab:ca:39:0c:6a:c1:d6:
4c:55:40:88:bb:44:01:5f:37:01:17:2a:ee:bf:6f:
28:c2:81:81:5e:f0:dc:4c:4f:ea:10:b6:a9:c0:f7:
fe:34:74:70:94:da:9d:de:ba:a1:68:06:8f:a1:99:
5f:a7:eb:1b:07:dc:1a:3e:eb:8e:18:c3:f5:88:6e:
17:c9:6c:bc:ae:df:f1:a2:4a:41:c1:f8:6e:7e:f1:
89:37:99:23:61:9c:23:04:45:83:ff:96:69:b2:86:
2c:af:dc:59:c6:1f:54:0e:d2:63:d0:9d:61:a6:f6:
cb:ac:f8:5a:a4:65:33:f8:f1:39:86:7c:bc:df:c0:
30:85:7e:29:b5:0d:66:a9:37:6a:ae:05:41:a0:35:
6e:67:67:ca:47:f0:cb:fb:7d:17:82:86:1b:73:43:
50:0b:46:34:d9:31:49:33:7a:bf:18:1f:e8:75:ca:
97:21:c3:64:e1:a5:8f:58:fa:4a:6c:dd:df:05:a9:
5b:fd:f2:dd:56:06:a1:be:66:6b:6d:5d:d3:3a:f9:
98:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:CE:2E:5D:59:17:F1:F4:57:FB:5B:D9:5D:8E:99:49:13:61:9D:B4
X509v3 Authority Key Identifier:
keyid:B1:43:FA:70:3F:BE:E0:4B:BD:91:CE:63:A3:21:48:B3:6B:8E:55:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUP6cD--4Eu9kc5joyFIs2uOVao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:76:ca:5b:d6:32:5d:94:8f:e9:9e:fa:46:cf:28:e8:e4:c0:
27:a1:12:bc:51:a1:bf:45:a1:e9:ff:3e:1b:60:71:45:b4:7a:
7f:4f:2d:8a:b9:85:2b:0c:30:45:7e:a6:c2:89:90:57:4d:1d:
e1:df:44:cd:da:04:d1:77:ea:c2:18:f4:e2:52:81:90:0f:67:
0a:e8:47:65:5f:da:e7:6e:66:31:e9:fb:00:67:06:a5:d4:a1:
e1:8b:f3:d0:df:fe:aa:b2:79:3f:b1:eb:4e:d2:ad:3f:a2:45:
e7:12:70:7a:39:24:ad:d0:7e:5b:6f:80:77:39:76:f2:87:37:
33:27:73:85:a6:ff:23:eb:fd:12:65:e7:2d:0c:68:c8:b7:77:
b0:1d:ea:ab:42:9a:84:77:63:0e:00:f9:51:d0:ae:5f:06:19:
71:55:08:aa:8b:c1:16:bf:d1:c2:c0:6d:66:0a:5d:06:9d:3d:
63:38:1c:76:45:14:2a:02:2d:06:7a:2c:0e:0a:45:cc:8a:bd:
1b:7d:d7:06:0c:eb:97:7c:ff:bc:d3:31:63:0f:3d:75:b0:88:
18:21:7e:49:c0:af:16:3a:8a:49:d0:6c:2d:25:0d:54:b3:0d:
68:37:cb:fb:9d:97:cb:da:3b:95:ad:d7:f0:8d:86:89:c2:a5:
7f:20:e9:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0zPyuxynZqTfFT0C+RPFgyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNDNmYTcwM2ZiZWUwNGJiZDkxY2U2M2EzMjE0OGIzNmI4
ZTU1YWEwHhcNMjYwMzI4MDcwMTEwWhcNMjYwMzI5MDcwMTEwWjAzMTEwLwYDVQQD
Eyg1ZGNlMmU1ZDU5MTdmMWY0NTdmYjViZDk1ZDhlOTk0OTEzNjE5ZGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfRJy0/EoMEloIMzuTPqxhTM9l77
OoJNeIroGQ5BmuuZCkdxxjO57WtvSTP3P1whRb6PLqvKOQxqwdZMVUCIu0QBXzcB
Fyruv28owoGBXvDcTE/qELapwPf+NHRwlNqd3rqhaAaPoZlfp+sbB9waPuuOGMP1
iG4XyWy8rt/xokpBwfhufvGJN5kjYZwjBEWD/5ZpsoYsr9xZxh9UDtJj0J1hpvbL
rPhapGUz+PE5hny838AwhX4ptQ1mqTdqrgVBoDVuZ2fKR/DL+30XgoYbc0NQC0Y0
2TFJM3q/GB/odcqXIcNk4aWPWPpKbN3fBalb/fLdVgahvmZrbV3TOvmYoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF3OLl1ZF/H0V/tb2V2OmUkTYZ20MB8GA1UdIwQY
MBaAFLFD+nA/vuBLvZHOY6MhSLNrjlWqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1VQNmNELS00RXU5a2M1am95RklzMnVPVmFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iOTM0MmYtNTkxNi00NjQ0LWIxYWEt
MDBkMWU3YTE3MGEyLzEvc1VQNmNELS00RXU5a2M1am95RklzMnVPVmFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iOTM0MmYtNTkxNi00NjQ0LWIxYWEtMDBkMWU3YTE3MGEy
LzEvc1VQNmNELS00RXU5a2M1am95RklzMnVPVmFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOnbKW9Yy
XZSP6Z76Rs8o6OTAJ6ESvFGhv0Wh6f8+G2BxRbR6f08tirmFKwwwRX6mwomQV00d
4d9EzdoE0Xfqwhj04lKBkA9nCuhHZV/a525mMen7AGcGpdSh4Yvz0N/+qrJ5P7Hr
TtKtP6JF5xJwejkkrdB+W2+Adzl28oc3Mydzhab/I+v9EmXnLQxoyLd3sB3qq0Ka
hHdjDgD5UdCuXwYZcVUIqovBFr/RwsBtZgpdBp09YzgcdkUUKgItBnosDgpFzIq9
G33XBgzrl3z/vNMxYw89dbCIGCF+ScCvFjqKSdBsLSUNVLMNaDfL+52Xy9o7la3X
8I2GicKlfyDpSw==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:33:16 2026 by rpki-client