Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
File: sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft (raw, json)
Hash identifier: zTJEGqONCRL/JqPpRmH2090zNlzIWZ7mjFMdo8HOhq4=
Subject key identifier: 86:00:88:F3:93:6D:2F:6C:02:BC:F4:69:E7:4C:1D:EF:13:41:5E:59
Authority key identifier: B0:09:5E:D0:11:C9:43:58:24:5C:32:75:7D:46:BE:D8:60:DF:4C:19
Certificate issuer: /CN=b0095ed011c94358245c32757d46bed860df4c19
Certificate serial: 019D39778E9B909259F2DB7C1E1FA8E133C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
Manifest number: 0839
Signing time: Sun 29 Mar 2026 12:00:29 +0000
Manifest this update: Sun 29 Mar 2026 12:00:29 +0000
Manifest next update: Mon 30 Mar 2026 12:00:29 +0000
Files and hashes: 1: 5l92TKSO_nkIuzIJ4zucDeK79pk.roa (hash: XUtIUMfFBwHG02M6rf+xdt+n5Vz/NsIVHT2NMMg6/cc=)
2: sAle0BHJQ1gkXDJ1fUa-2GDfTBk.crl (hash: ig8ViDOnGxVDI8+o4JChqNdm0/c07NzXf3z5ZIPyVak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:8e:9b:90:92:59:f2:db:7c:1e:1f:a8:e1:33:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0095ed011c94358245c32757d46bed860df4c19
Validity
Not Before: Mar 29 12:00:29 2026 GMT
Not After : Mar 30 12:00:29 2026 GMT
Subject: CN=860088f3936d2f6c02bcf469e74c1def13415e59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:1d:3e:7c:e8:c8:bf:d0:6e:6b:0b:d2:66:a5:
c0:6a:22:52:52:b9:a9:ca:9e:45:6d:df:b0:c6:4d:
1d:c1:28:de:81:ae:4b:cc:c5:0d:21:4c:fd:e3:f9:
76:4f:0d:c0:0a:30:4f:aa:c2:4e:36:8d:35:90:b6:
be:80:3d:28:32:25:6e:a3:26:85:73:0f:23:61:d4:
9d:9a:ea:76:3a:d3:a8:09:c7:3a:67:e0:77:1a:1d:
7c:d7:3e:83:de:80:db:35:30:c1:e2:ed:dd:49:e8:
8f:a0:c1:80:59:a9:07:a5:2a:9b:d7:4c:18:c8:76:
c2:85:33:0b:a8:88:38:81:d3:c7:b8:10:20:46:a0:
16:09:f4:c3:56:d2:ac:30:e2:9a:92:41:3b:bf:ea:
22:f1:bf:3b:fc:61:b5:74:8f:9e:02:1f:37:ee:f5:
75:7d:4d:04:9b:70:39:83:0c:9c:a8:b8:79:8d:72:
fd:ab:fc:f0:19:24:f6:00:6e:53:65:46:aa:98:f8:
62:9b:66:4f:9b:17:34:a7:20:05:39:fc:c5:8a:85:
df:2a:93:53:58:53:75:b9:37:f7:7f:91:9c:d2:e0:
06:d2:7f:1f:0d:4d:0e:ed:ca:39:fe:5a:26:de:ca:
79:cf:b2:f6:bf:25:f1:95:8b:02:07:91:16:c7:08:
9a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:00:88:F3:93:6D:2F:6C:02:BC:F4:69:E7:4C:1D:EF:13:41:5E:59
X509v3 Authority Key Identifier:
keyid:B0:09:5E:D0:11:C9:43:58:24:5C:32:75:7D:46:BE:D8:60:DF:4C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:38:03:d5:d2:91:ed:d9:40:0e:dc:cb:fb:e8:22:4e:b5:82:
08:17:96:cb:1b:88:1d:41:14:32:34:7c:de:69:cf:01:41:76:
ed:97:cb:e0:53:f5:3d:65:4a:8d:dd:aa:55:ee:18:c1:6e:7b:
6e:f6:f6:3d:77:fd:f5:40:f2:fe:b2:d8:b0:01:7f:46:53:b1:
8a:e4:3b:8f:37:cb:e1:4e:a5:e0:c4:61:cb:36:cb:6a:9e:6c:
1b:eb:89:e4:aa:7e:72:76:b3:b3:4d:6f:ea:84:37:6e:ec:be:
0e:77:1b:5d:9c:a0:61:21:9d:4c:64:b6:54:f1:02:2f:60:ee:
6b:e8:2e:52:51:27:22:2f:85:14:62:6d:87:d3:31:00:78:23:
48:fb:57:11:d4:50:6b:c7:b4:dd:72:87:74:7e:b4:e6:cb:74:
d6:1f:d4:e0:c3:ca:c9:7a:70:aa:4c:51:e9:1b:e6:b5:fe:54:
9a:da:2c:c4:89:75:91:f1:d6:a4:17:dc:3a:0c:40:d7:ba:3a:
57:49:c8:c7:8a:24:9f:ce:8c:d6:64:4c:7d:8d:42:36:ab:0c:
82:68:fc:a9:99:e9:24:c3:8e:16:ee:6f:88:94:90:a5:6b:12:
8b:28:3a:00:7a:8b:a1:be:47:09:6b:e3:3e:e6:16:11:5c:8b:
de:09:af:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05d46bkJJZ8tt8Hh+o4TPJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwMDk1ZWQwMTFjOTQzNTgyNDVjMzI3NTdkNDZiZWQ4NjBk
ZjRjMTkwHhcNMjYwMzI5MTIwMDI5WhcNMjYwMzMwMTIwMDI5WjAzMTEwLwYDVQQD
Eyg4NjAwODhmMzkzNmQyZjZjMDJiY2Y0NjllNzRjMWRlZjEzNDE1ZTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4x0+fOjIv9BuawvSZqXAaiJSUrmp
yp5Fbd+wxk0dwSjega5LzMUNIUz94/l2Tw3ACjBPqsJONo01kLa+gD0oMiVuoyaF
cw8jYdSdmup2OtOoCcc6Z+B3Gh181z6D3oDbNTDB4u3dSeiPoMGAWakHpSqb10wY
yHbChTMLqIg4gdPHuBAgRqAWCfTDVtKsMOKakkE7v+oi8b87/GG1dI+eAh837vV1
fU0Em3A5gwycqLh5jXL9q/zwGST2AG5TZUaqmPhim2ZPmxc0pyAFOfzFioXfKpNT
WFN1uTf3f5Gc0uAG0n8fDU0O7co5/lom3sp5z7L2vyXxlYsCB5EWxwiacwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIYAiPOTbS9sArz0aedMHe8TQV5ZMB8GA1UdIwQY
MBaAFLAJXtARyUNYJFwydX1Gvthg30wZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0FsZTBCSEpRMWdrWERKMWZVYS0yR0RmVEJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS80OWNkZWMtNjlmMC00NTQwLTg5YmEt
ZWE0NTk2OTk1MGNjLzEvc0FsZTBCSEpRMWdrWERKMWZVYS0yR0RmVEJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS80OWNkZWMtNjlmMC00NTQwLTg5YmEtZWE0NTk2OTk1MGNj
LzEvc0FsZTBCSEpRMWdrWERKMWZVYS0yR0RmVEJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASjgD1dKR
7dlADtzL++giTrWCCBeWyxuIHUEUMjR83mnPAUF27ZfL4FP1PWVKjd2qVe4YwW57
bvb2PXf99UDy/rLYsAF/RlOxiuQ7jzfL4U6l4MRhyzbLap5sG+uJ5Kp+cnazs01v
6oQ3buy+DncbXZygYSGdTGS2VPECL2Dua+guUlEnIi+FFGJth9MxAHgjSPtXEdRQ
a8e03XKHdH605st01h/U4MPKyXpwqkxR6Rvmtf5UmtosxIl1kfHWpBfcOgxA17o6
V0nIx4okn86M1mRMfY1CNqsMgmj8qZnpJMOOFu5viJSQpWsSiyg6AHqLob5HCWvj
PuYWEVyL3gmvIg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 20:25:37 2026 by rpki-client