Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft
File: s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft (raw, json)
Hash identifier: yBAEkRRiLtyfX+sfdwIyawT2RqeU66eUcsjrfk9eqKM=
Subject key identifier: D5:51:EC:20:F2:9F:04:E8:85:69:DA:4A:EB:BE:44:73:E3:8A:D9:FF
Authority key identifier: B3:5A:20:A8:69:39:C8:DE:8A:ED:C3:05:24:3B:0F:D4:AD:86:54:D0
Certificate issuer: /CN=b35a20a86939c8de8aedc305243b0fd4ad8654d0
Certificate serial: 019DCF0829B44ECC83D31292472DC58512CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft
Manifest number: 1050
Signing time: Mon 27 Apr 2026 13:01:51 +0000
Manifest this update: Mon 27 Apr 2026 13:01:51 +0000
Manifest next update: Tue 28 Apr 2026 13:01:51 +0000
Files and hashes: 1: ROos3zBuxQkxrmV-6L_KMGEOsaQ.roa (hash: yeIMYP8pUIaSbhg8Y2l0OyY+AdGzsCSyQTyWjAoPCS8=)
2: f9tlvRsRIPOuG0I4J9FyfmZyNWE.roa (hash: gD8lBkeNmMP/yM8L2z9Jlxh7FwEKNnW8Lx9hYy3Jdus=)
3: s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl (hash: pxrIb+4htFfErzovONBlleOqs56yAeNRD2pBZoJrDBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:08:29:b4:4e:cc:83:d3:12:92:47:2d:c5:85:12:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b35a20a86939c8de8aedc305243b0fd4ad8654d0
Validity
Not Before: Apr 27 13:01:51 2026 GMT
Not After : Apr 28 13:01:51 2026 GMT
Subject: CN=d551ec20f29f04e88569da4aebbe4473e38ad9ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:02:3e:22:38:63:00:3d:34:8c:a1:88:0f:ec:
7c:ad:ed:b4:80:d0:89:8d:53:44:95:5e:26:37:27:
d5:9a:e5:2e:1a:5f:40:68:67:de:5d:9a:ba:7f:7b:
0d:a4:8e:55:4d:c6:db:cd:3c:1a:b4:a0:62:dc:25:
f3:18:05:d1:15:66:fa:af:30:36:e4:d1:b3:b0:82:
06:40:14:dd:54:a1:cf:b8:fa:ee:33:83:37:a5:a9:
c1:6e:04:ca:a7:40:1f:4c:03:34:0e:20:8a:79:11:
1f:24:4d:5f:c0:0f:b9:47:8a:db:10:a3:ea:d1:72:
1a:77:5c:82:31:6c:b7:39:ae:ba:89:14:56:04:c5:
4a:a1:3e:e6:45:6e:a8:63:3a:23:63:cc:a3:0f:3a:
3b:dc:9c:16:28:6f:22:c2:cd:69:ba:9e:b6:85:9c:
fe:e6:02:aa:e6:26:bc:ce:93:d1:4d:f8:5c:6c:d7:
8c:35:0d:ba:1e:36:48:4b:a5:fd:c1:72:f8:7f:62:
0d:c5:b1:06:11:3f:7e:5f:2b:66:a9:ba:25:20:7b:
2c:1e:b9:54:a0:72:8f:05:31:c9:51:08:ab:85:26:
8c:7c:f7:f7:0b:5d:d8:e6:3b:15:39:dc:74:99:1b:
93:c5:ba:09:90:11:4e:38:0f:c8:e2:17:9e:bc:f3:
79:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:51:EC:20:F2:9F:04:E8:85:69:DA:4A:EB:BE:44:73:E3:8A:D9:FF
X509v3 Authority Key Identifier:
keyid:B3:5A:20:A8:69:39:C8:DE:8A:ED:C3:05:24:3B:0F:D4:AD:86:54:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:f9:57:fe:da:38:28:53:c8:83:3d:ad:b2:42:d4:23:99:8a:
5b:b0:92:c3:ba:02:b5:04:2d:9d:3a:dc:cd:aa:cb:d7:30:20:
76:97:08:d4:0c:ff:f9:29:aa:6e:cb:4a:63:cc:25:5d:4a:2f:
63:03:c4:9c:52:3a:e9:1b:86:1a:bb:0c:cd:94:66:5a:d3:1d:
52:f8:b1:ba:19:e0:00:56:d3:e7:c3:4e:26:a2:5b:94:6a:45:
b5:14:17:31:16:4d:a8:62:49:3e:b8:a4:9d:cb:be:63:a7:2c:
fb:88:93:8b:ef:09:aa:1f:43:51:ec:9e:87:67:29:5e:c1:ed:
1b:b7:6b:3d:f3:fc:a3:3a:d4:44:0c:b0:d2:13:74:0b:db:b5:
46:e8:fd:2d:05:da:5f:9d:be:ee:91:22:3e:be:5e:b2:95:ad:
60:b0:19:83:f4:26:96:7c:ef:d1:60:79:a5:50:0e:63:5d:ee:
b3:eb:62:37:32:3b:8b:ba:e7:6e:7d:70:95:23:8c:bd:75:ae:
1e:5a:53:89:d5:e4:be:1e:09:a9:dc:5b:4d:db:01:73:76:6b:
39:f7:67:0b:9a:eb:2e:c7:20:5f:7b:bb:05:cb:6d:93:cc:9d:
b3:7c:ca:3e:61:6f:5e:42:d5:d8:bc:ec:51:d5:54:1c:e6:ba:
e8:ec:3c:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3PCCm0TsyD0xKSRy3FhRLKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzNWEyMGE4NjkzOWM4ZGU4YWVkYzMwNTI0M2IwZmQ0YWQ4
NjU0ZDAwHhcNMjYwNDI3MTMwMTUxWhcNMjYwNDI4MTMwMTUxWjAzMTEwLwYDVQQD
EyhkNTUxZWMyMGYyOWYwNGU4ODU2OWRhNGFlYmJlNDQ3M2UzOGFkOWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1AI+IjhjAD00jKGID+x8re20gNCJ
jVNElV4mNyfVmuUuGl9AaGfeXZq6f3sNpI5VTcbbzTwatKBi3CXzGAXRFWb6rzA2
5NGzsIIGQBTdVKHPuPruM4M3panBbgTKp0AfTAM0DiCKeREfJE1fwA+5R4rbEKPq
0XIad1yCMWy3Oa66iRRWBMVKoT7mRW6oYzojY8yjDzo73JwWKG8iws1pup62hZz+
5gKq5ia8zpPRTfhcbNeMNQ26HjZIS6X9wXL4f2INxbEGET9+XytmqbolIHssHrlU
oHKPBTHJUQirhSaMfPf3C13Y5jsVOdx0mRuTxboJkBFOOA/I4heevPN5ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNVR7CDynwTohWnaSuu+RHPjitn/MB8GA1UdIwQY
MBaAFLNaIKhpOcjeiu3DBSQ7D9SthlTQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczFvZ3FHazV5TjZLN2NNRkpEc1AxSzJHVk5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8xNjIxODYtNTBkMS00NzYxLWFhZjAt
YTU0MjU4OTc5OWJjLzEvczFvZ3FHazV5TjZLN2NNRkpEc1AxSzJHVk5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC8xNjIxODYtNTBkMS00NzYxLWFhZjAtYTU0MjU4OTc5OWJj
LzEvczFvZ3FHazV5TjZLN2NNRkpEc1AxSzJHVk5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABPlX/to4
KFPIgz2tskLUI5mKW7CSw7oCtQQtnTrczarL1zAgdpcI1Az/+SmqbstKY8wlXUov
YwPEnFI66RuGGrsMzZRmWtMdUvixuhngAFbT58NOJqJblGpFtRQXMRZNqGJJPrik
ncu+Y6cs+4iTi+8Jqh9DUeyeh2cpXsHtG7drPfP8ozrURAyw0hN0C9u1Ruj9LQXa
X52+7pEiPr5espWtYLAZg/Qmlnzv0WB5pVAOY13us+tiNzI7i7rnbn1wlSOMvXWu
HlpTidXkvh4JqdxbTdsBc3ZrOfdnC5rrLscgX3u7Bcttk8yds3zKPmFvXkLV2Lzs
UdVUHOa66Ow8xA==
-----END CERTIFICATE-----
Generated at Mon Apr 27 16:14:37 2026 by rpki-client