Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft
File: s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft (raw, json)
Hash identifier: jdPbY/tHCYsR4cAp9TQsNj2vkktaFCiUye772uzSVzU=
Subject key identifier: 1A:AB:6E:78:C1:3E:33:59:C6:BA:01:F1:82:F3:57:EC:77:D7:97:17
Authority key identifier: B3:43:51:46:30:DC:17:F3:FE:9B:51:DD:43:41:84:D0:B6:2B:03:C0
Certificate issuer: /CN=b343514630dc17f3fe9b51dd434184d0b62b03c0
Certificate serial: 019D3789506A07FDC943E937902EA59D8BA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft
Manifest number: 158A
Signing time: Sun 29 Mar 2026 03:00:39 +0000
Manifest this update: Sun 29 Mar 2026 03:00:39 +0000
Manifest next update: Mon 30 Mar 2026 03:00:39 +0000
Files and hashes: 1: 3tG3zwbaaFuFl6cpIqxTe91Iu4g.roa (hash: JJoTnqlPPDa1SmZHbLUdf1Go4yaIrlgXIH2dNpLzAn8=)
2: 53l_D5g_N2hEJkJMJ3_8BjIEv2Y.roa (hash: XGQ+zMpVhvmcmw4I8+8i5OdAGzf1VzpgvnNvlvgbkC0=)
3: ChfnxGz0VKQRsVnjHyIAinMMsIk.roa (hash: eW5OJ9VGVnnfrTZ+gpRAKAP747DliU0KHrN7X11TVIw=)
4: Ep5Ojkz3GkSwJsrA11qdsEM5pQk.roa (hash: w1Q8xSxbmL/6LZW2i41+YiB+eNvVEBq+XNQ8qrTEQhU=)
5: OZvI4MXWtnolgxghoQ6_cphW1W4.roa (hash: Oi9ZbYQx2WEELwMB6HBFHb18B/3Zxcuia5/qRlgnoFw=)
6: aDzvIFmPuasW-wZl4h5nCLEftQ0.roa (hash: V99/4bZyDIbs4HJhhHYscdVnYmUcdsRDsQGQFwRiELE=)
7: gqMBDEDRSu4xKONst1tdj1bPNsI.asa (hash: x0HezPZk/P/a+aIvTJaAXkz2eR1qdgdIUhB+jiHUu9k=)
8: lXLif39D5KxldHNZbTu-0rsSDYY.roa (hash: mVxFtPQntFOFsnZXkQ8/rUjDQRMlvViyOfc1fE3bjpY=)
9: s0NRRjDcF_P-m1HdQ0GE0LYrA8A.crl (hash: lkdrUT+9nyERgJMp+itp2cUps6FpsqKvQkNdlbsVywM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:50:6a:07:fd:c9:43:e9:37:90:2e:a5:9d:8b:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b343514630dc17f3fe9b51dd434184d0b62b03c0
Validity
Not Before: Mar 29 03:00:39 2026 GMT
Not After : Mar 30 03:00:39 2026 GMT
Subject: CN=1aab6e78c13e3359c6ba01f182f357ec77d79717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:6f:a1:22:2b:12:e8:b2:65:4d:93:de:cc:3e:
9d:b4:db:fb:01:99:d9:0b:8a:0f:a1:b1:c9:16:07:
ca:c7:76:f7:05:c0:30:50:23:1e:68:25:42:86:eb:
b6:25:0f:4d:3b:00:0f:8d:d4:f2:28:8a:00:ac:f3:
7f:e0:ef:49:06:3a:43:8b:2f:77:e5:4c:82:cd:d9:
4f:f9:09:21:56:4f:8f:3e:87:6f:e5:4b:5f:75:7a:
4f:fa:86:66:4b:51:c1:44:a8:d6:87:3c:8a:ab:39:
5d:57:6c:40:e7:93:26:83:b3:b7:07:f0:43:08:00:
0b:ad:9c:c5:41:d6:fc:d8:75:40:ed:09:34:12:4a:
5d:f3:93:01:e2:3f:04:5c:14:94:26:c9:37:5b:46:
75:14:a9:98:f5:de:1b:28:76:ca:37:bd:69:da:67:
6c:f2:d6:cc:8c:43:ef:07:52:c1:89:67:33:ed:bd:
de:f2:07:4d:c3:c1:2e:47:2a:3a:19:e1:51:df:47:
75:2c:4c:1c:4b:6e:f6:92:e4:8f:cd:58:a8:52:82:
72:1a:aa:81:8b:d7:be:4c:30:f4:19:63:ff:6f:d1:
29:87:0d:b8:7b:92:7f:5d:c2:06:af:1c:a1:4e:35:
07:00:29:f7:cc:b0:aa:f0:b0:1d:56:90:90:45:5b:
66:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:AB:6E:78:C1:3E:33:59:C6:BA:01:F1:82:F3:57:EC:77:D7:97:17
X509v3 Authority Key Identifier:
keyid:B3:43:51:46:30:DC:17:F3:FE:9B:51:DD:43:41:84:D0:B6:2B:03:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:8b:53:4d:e1:3a:fa:1b:11:86:fa:d7:d2:2e:99:75:88:5f:
b0:2b:f7:20:3c:cf:02:71:56:ae:c6:d2:76:b6:af:04:e2:e9:
c4:ac:a8:d7:02:ea:db:ad:0a:52:26:c9:01:48:60:7b:7e:48:
ca:a6:4f:b8:92:92:ed:73:7d:26:42:f7:3c:e1:c2:93:d0:8f:
3d:58:a1:6f:bf:e2:c7:c3:c4:6d:6d:d2:ce:4a:dc:ef:ee:ab:
d8:09:d0:4e:84:96:b7:12:c9:5f:ff:c6:72:6c:a7:f2:4c:28:
73:ce:19:ab:f2:54:c7:d9:4c:e3:85:3d:b6:ed:a2:b9:d6:c7:
4b:b0:99:d5:c2:00:40:81:8f:52:59:78:e7:23:2d:1b:26:19:
af:4b:63:9e:eb:2f:0c:43:53:25:33:a5:3b:db:cf:01:24:85:
1d:a0:c0:dd:b6:10:67:8f:ff:a7:d1:c3:2a:e8:ab:7a:94:76:
7f:49:de:c1:40:4f:1c:e6:cc:64:76:74:a4:ff:e7:25:3f:8d:
4b:cf:e5:2b:4d:bd:8e:e0:30:86:3e:cc:cd:84:38:37:cf:2d:
3f:cd:93:29:72:d7:fa:de:cd:34:47:b2:c9:6f:ff:c3:16:81:
3d:07:96:6b:3f:e6:46:f6:c9:c0:32:db:c8:81:fe:a9:2f:e9:
c3:cd:7e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:50:16 2026 by rpki-client