Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/f0f5ff-a820-4dba-8ee1-cda57426de22/1/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.mft
File: SAQjqhfQT1bGkAQDRdZ2K7_R-Is.mft (raw, json)
Hash identifier: l929OLCPPkiYY6mmr81OHaqGmvDjQIB6XbdwnycFsWo=
Subject key identifier: 51:F3:FA:7A:1F:EE:95:6B:E0:BB:62:F2:94:A0:55:E7:2B:36:56:5D
Authority key identifier: 48:04:23:AA:17:D0:4F:56:C6:90:04:03:45:D6:76:2B:BF:D1:F8:8B
Certificate issuer: /CN=480423aa17d04f56c690040345d6762bbfd1f88b
Certificate serial: 019D3940F22C184AF65192619575BF4C5A52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/f0f5ff-a820-4dba-8ee1-cda57426de22/1/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.mft
Manifest number: 1348
Signing time: Sun 29 Mar 2026 11:00:50 +0000
Manifest this update: Sun 29 Mar 2026 11:00:50 +0000
Manifest next update: Mon 30 Mar 2026 11:00:50 +0000
Files and hashes: 1: C3Hq4w7BM7_K6mHHdh-CUZ1B7D0.roa (hash: Ek13lasSbyTfirrWZx3Y8k/3TLG7Wg/4AVTy2yQF+F0=)
2: SAQjqhfQT1bGkAQDRdZ2K7_R-Is.crl (hash: VP0UtYWuO/wrQFYcQvneYvd5Fw9wmLITi97gCzQoyI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/f0f5ff-a820-4dba-8ee1-cda57426de22/1/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/f0f5ff-a820-4dba-8ee1-cda57426de22/1/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:f2:2c:18:4a:f6:51:92:61:95:75:bf:4c:5a:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480423aa17d04f56c690040345d6762bbfd1f88b
Validity
Not Before: Mar 29 11:00:50 2026 GMT
Not After : Mar 30 11:00:50 2026 GMT
Subject: CN=51f3fa7a1fee956be0bb62f294a055e72b36565d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:72:08:af:f8:70:d4:08:e5:5b:b5:eb:cf:3a:
d6:97:82:48:7a:32:e6:0b:df:15:f3:37:a4:5b:bc:
34:96:a8:73:dd:7f:fc:85:56:c5:1e:af:62:0a:95:
d6:c9:13:97:48:db:49:a6:58:5a:65:e9:06:e0:ba:
00:50:ea:c8:7e:25:7f:d2:74:a3:0f:7a:74:bf:26:
e0:f9:4b:e3:72:dc:b2:4a:9b:0e:af:35:78:c0:05:
4c:84:5e:80:b0:4c:82:7e:c3:cf:5d:cd:a8:61:90:
43:2b:dd:9d:3c:21:c7:f0:84:39:65:1f:c8:a5:c4:
2e:02:fc:62:fa:79:af:05:3f:56:ca:b5:a1:8d:da:
ff:24:a9:85:f9:db:8d:f8:c2:52:76:b2:35:64:e4:
41:de:5b:53:95:65:97:d5:7b:d7:50:4b:83:1b:07:
4a:6c:9f:0b:33:99:b3:b1:10:4d:9c:af:4f:3b:ca:
d7:99:ad:1f:6a:6c:34:99:c5:e3:9f:d8:66:db:b8:
c4:37:39:e0:12:f3:75:f0:d7:85:2e:d9:9e:dd:a9:
9b:fe:bb:56:42:29:03:d1:fc:49:b2:84:7d:90:2f:
a7:78:7f:70:fe:4f:d2:10:38:6e:57:d0:b9:61:16:
28:6a:88:09:ab:1e:c3:3f:af:4b:2c:91:ba:16:f9:
20:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:F3:FA:7A:1F:EE:95:6B:E0:BB:62:F2:94:A0:55:E7:2B:36:56:5D
X509v3 Authority Key Identifier:
keyid:48:04:23:AA:17:D0:4F:56:C6:90:04:03:45:D6:76:2B:BF:D1:F8:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/f0f5ff-a820-4dba-8ee1-cda57426de22/1/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/f0f5ff-a820-4dba-8ee1-cda57426de22/1/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:9a:95:5f:b3:43:1f:7f:dd:04:30:7a:51:3d:57:de:56:b9:
80:2d:54:96:d3:92:4b:74:d3:7b:9d:9c:f9:88:d2:8f:30:69:
73:13:f7:b1:dc:11:36:25:21:36:fd:8d:31:71:e5:5b:6e:84:
40:83:65:84:04:bd:6e:f4:d7:63:f9:86:78:b0:5e:7a:ce:79:
bd:5a:c3:e7:0f:65:de:e3:10:2f:83:2f:cc:15:c8:cc:63:df:
a5:47:57:de:56:61:5c:bd:44:49:79:be:6a:0e:a7:c8:a3:8c:
14:1f:e6:61:dd:2b:fb:17:c2:b6:23:d4:43:17:8d:f8:92:5a:
d1:fc:9f:17:b3:ba:74:f6:dc:d4:d4:2c:a2:e3:1e:02:73:68:
5f:8b:be:a0:6d:95:31:bd:51:ba:8b:fb:b2:8b:a3:f9:8c:a7:
c3:0d:97:d4:3f:75:2d:8d:00:5c:13:02:c2:fc:87:97:4a:a1:
d3:df:c1:a3:92:f1:71:4f:61:b1:05:da:08:c6:1e:be:88:fa:
60:09:aa:2c:fa:67:96:0d:cb:a4:36:d2:c9:59:fe:1e:66:4a:
4d:b2:6a:ca:e7:b5:2d:45:62:7c:d4:32:3e:cd:8c:ea:a6:f8:
47:f3:73:9f:44:b2:0e:03:2f:df:71:48:ec:01:77:a9:e1:b3:
cf:b3:8f:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QPIsGEr2UZJhlXW/TFpSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MDQyM2FhMTdkMDRmNTZjNjkwMDQwMzQ1ZDY3NjJiYmZk
MWY4OGIwHhcNMjYwMzI5MTEwMDUwWhcNMjYwMzMwMTEwMDUwWjAzMTEwLwYDVQQD
Eyg1MWYzZmE3YTFmZWU5NTZiZTBiYjYyZjI5NGEwNTVlNzJiMzY1NjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHIIr/hw1AjlW7XrzzrWl4JIejLm
C98V8zekW7w0lqhz3X/8hVbFHq9iCpXWyROXSNtJplhaZekG4LoAUOrIfiV/0nSj
D3p0vybg+UvjctyySpsOrzV4wAVMhF6AsEyCfsPPXc2oYZBDK92dPCHH8IQ5ZR/I
pcQuAvxi+nmvBT9WyrWhjdr/JKmF+duN+MJSdrI1ZORB3ltTlWWX1XvXUEuDGwdK
bJ8LM5mzsRBNnK9PO8rXma0famw0mcXjn9hm27jENzngEvN18NeFLtme3amb/rtW
QikD0fxJsoR9kC+neH9w/k/SEDhuV9C5YRYoaogJqx7DP69LLJG6FvkgJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFHz+nof7pVr4Lti8pSgVecrNlZdMB8GA1UdIwQY
MBaAFEgEI6oX0E9WxpAEA0XWdiu/0fiLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0FRanFoZlFUMWJHa0FRRFJkWjJLN19SLUlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9mMGY1ZmYtYTgyMC00ZGJhLThlZTEt
Y2RhNTc0MjZkZTIyLzEvU0FRanFoZlFUMWJHa0FRRFJkWjJLN19SLUlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9mMGY1ZmYtYTgyMC00ZGJhLThlZTEtY2RhNTc0MjZkZTIy
LzEvU0FRanFoZlFUMWJHa0FRRFJkWjJLN19SLUlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAepqVX7ND
H3/dBDB6UT1X3la5gC1UltOSS3TTe52c+YjSjzBpcxP3sdwRNiUhNv2NMXHlW26E
QINlhAS9bvTXY/mGeLBees55vVrD5w9l3uMQL4MvzBXIzGPfpUdX3lZhXL1ESXm+
ag6nyKOMFB/mYd0r+xfCtiPUQxeN+JJa0fyfF7O6dPbc1NQsouMeAnNoX4u+oG2V
Mb1Ruov7souj+Yynww2X1D91LY0AXBMCwvyHl0qh09/Bo5LxcU9hsQXaCMYevoj6
YAmqLPpnlg3LpDbSyVn+HmZKTbJqyue1LUVifNQyPs2M6qb4R/Nzn0SyDgMv33FI
7AF3qeGzz7OPHg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:13:11 2026 by rpki-client