Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft
File: s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft (raw, json)
Hash identifier: NFQeDwlCz3lig0v+MHWxLQ18Vi4xTjYyLeYEckQ9FrA=
Subject key identifier: 5A:03:A8:97:D0:EB:49:0E:20:6B:75:2D:BC:53:DD:BF:31:44:53:F8
Authority key identifier: B3:5A:20:A8:69:39:C8:DE:8A:ED:C3:05:24:3B:0F:D4:AD:86:54:D0
Certificate issuer: /CN=b35a20a86939c8de8aedc305243b0fd4ad8654d0
Certificate serial: 019CE36C801E9CF60B501444FE605D8AB986
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft
Manifest number: 0FD6
Signing time: Thu 12 Mar 2026 19:01:04 +0000
Manifest this update: Thu 12 Mar 2026 19:01:04 +0000
Manifest next update: Fri 13 Mar 2026 19:01:04 +0000
Files and hashes: 1: ROos3zBuxQkxrmV-6L_KMGEOsaQ.roa (hash: yeIMYP8pUIaSbhg8Y2l0OyY+AdGzsCSyQTyWjAoPCS8=)
2: f9tlvRsRIPOuG0I4J9FyfmZyNWE.roa (hash: gD8lBkeNmMP/yM8L2z9Jlxh7FwEKNnW8Lx9hYy3Jdus=)
3: s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl (hash: D5EEyUWF6wA8HStDzFx1C/C7q4Ye4s0XTIk768i9+04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 19:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:6c:80:1e:9c:f6:0b:50:14:44:fe:60:5d:8a:b9:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b35a20a86939c8de8aedc305243b0fd4ad8654d0
Validity
Not Before: Mar 12 19:01:04 2026 GMT
Not After : Mar 13 19:01:04 2026 GMT
Subject: CN=5a03a897d0eb490e206b752dbc53ddbf314453f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:44:ed:09:b4:93:f3:67:e7:b1:20:8f:d1:70:
b1:1d:86:72:3f:8f:64:6d:db:f8:5f:c7:a8:69:f9:
01:81:f9:c1:92:50:68:0e:c9:fc:c8:ea:3e:f1:e8:
e3:e4:52:3c:6d:f1:cd:49:ca:df:95:1c:d6:60:cb:
e9:c7:03:a1:8b:f5:cc:6c:0c:dd:d1:2d:3a:17:a1:
88:b3:e3:61:10:73:b8:d5:be:67:a0:0b:03:c1:47:
94:a7:76:b8:f1:05:e4:5d:bf:d3:54:e8:4a:48:d8:
3d:41:bb:fa:f0:58:55:9d:01:05:ab:9d:8f:43:24:
dc:bc:19:31:b5:82:d0:ac:0c:e5:cd:41:5b:bd:eb:
a3:a1:f5:fc:d6:2a:e2:a6:1d:f6:b6:c9:dd:1c:ad:
81:60:44:d9:ed:41:b8:12:e4:2f:83:c1:64:0b:7f:
58:2d:e2:a7:bf:5e:fc:a0:3b:42:69:08:76:45:ee:
6c:0c:7d:9d:b3:4e:68:cb:39:fc:45:3c:46:00:91:
bf:2a:d1:1e:1e:a3:ae:42:f8:64:5e:eb:14:1c:71:
4d:65:b5:0d:15:aa:2d:05:65:ce:1a:74:9a:36:4e:
67:78:1d:4f:02:4f:85:0d:b2:3a:35:1a:d4:73:41:
d2:19:17:31:fa:da:35:9f:bf:62:3e:a8:da:b8:df:
33:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:03:A8:97:D0:EB:49:0E:20:6B:75:2D:BC:53:DD:BF:31:44:53:F8
X509v3 Authority Key Identifier:
keyid:B3:5A:20:A8:69:39:C8:DE:8A:ED:C3:05:24:3B:0F:D4:AD:86:54:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:52:af:1d:05:6b:2d:f3:7f:e5:79:c5:58:32:09:3c:56:1b:
bf:5b:dc:c2:59:11:6a:3e:4e:1e:e1:92:23:1a:3d:5d:7f:e0:
7a:14:b8:ee:6f:ef:6c:01:4b:b7:9c:48:bb:3b:e9:f9:86:c2:
80:c8:cb:e5:2c:1d:3b:9a:9d:68:e3:8c:f2:58:8a:6e:32:87:
3e:56:71:be:1a:6a:be:45:a3:38:e2:bd:d9:7c:f9:c4:43:ee:
a1:42:4e:2a:c2:4c:89:84:0e:39:ce:ec:47:b5:76:3c:e2:ba:
cc:90:f1:72:24:17:2c:6d:a3:46:60:ef:60:1b:0b:c4:2f:50:
4d:b9:f3:76:71:47:17:7a:df:83:b5:92:42:ff:11:00:f1:c3:
ab:49:20:73:a4:24:ec:ec:09:a1:b9:d7:3f:b2:74:80:8a:b1:
30:13:f3:80:d5:ad:cc:b5:41:9b:43:3e:41:57:20:b9:a1:83:
5e:dd:52:f6:a6:06:9b:5e:c9:d8:ce:c3:c7:58:ba:73:af:a4:
ba:80:af:f8:1b:9c:2c:c2:4b:a9:b5:c0:21:f0:5a:ed:06:53:
8f:9c:c7:b1:e8:c7:b9:0f:7b:d1:03:f9:3c:9a:c5:2d:5b:2c:
f4:9b:27:76:d4:4c:c8:87:94:14:3d:ea:9d:08:5b:e1:1c:c9:
8a:4e:99:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzjbIAenPYLUBRE/mBdirmGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzNWEyMGE4NjkzOWM4ZGU4YWVkYzMwNTI0M2IwZmQ0YWQ4
NjU0ZDAwHhcNMjYwMzEyMTkwMTA0WhcNMjYwMzEzMTkwMTA0WjAzMTEwLwYDVQQD
Eyg1YTAzYTg5N2QwZWI0OTBlMjA2Yjc1MmRiYzUzZGRiZjMxNDQ1M2Y4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUTtCbST82fnsSCP0XCxHYZyP49k
bdv4X8eoafkBgfnBklBoDsn8yOo+8ejj5FI8bfHNScrflRzWYMvpxwOhi/XMbAzd
0S06F6GIs+NhEHO41b5noAsDwUeUp3a48QXkXb/TVOhKSNg9Qbv68FhVnQEFq52P
QyTcvBkxtYLQrAzlzUFbveujofX81iriph32tsndHK2BYETZ7UG4EuQvg8FkC39Y
LeKnv178oDtCaQh2Re5sDH2ds05oyzn8RTxGAJG/KtEeHqOuQvhkXusUHHFNZbUN
FaotBWXOGnSaNk5neB1PAk+FDbI6NRrUc0HSGRcx+to1n79iPqjauN8zBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFoDqJfQ60kOIGt1LbxT3b8xRFP4MB8GA1UdIwQY
MBaAFLNaIKhpOcjeiu3DBSQ7D9SthlTQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczFvZ3FHazV5TjZLN2NNRkpEc1AxSzJHVk5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8xNjIxODYtNTBkMS00NzYxLWFhZjAt
YTU0MjU4OTc5OWJjLzEvczFvZ3FHazV5TjZLN2NNRkpEc1AxSzJHVk5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC8xNjIxODYtNTBkMS00NzYxLWFhZjAtYTU0MjU4OTc5OWJj
LzEvczFvZ3FHazV5TjZLN2NNRkpEc1AxSzJHVk5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArlKvHQVr
LfN/5XnFWDIJPFYbv1vcwlkRaj5OHuGSIxo9XX/gehS47m/vbAFLt5xIuzvp+YbC
gMjL5SwdO5qdaOOM8liKbjKHPlZxvhpqvkWjOOK92Xz5xEPuoUJOKsJMiYQOOc7s
R7V2POK6zJDxciQXLG2jRmDvYBsLxC9QTbnzdnFHF3rfg7WSQv8RAPHDq0kgc6Qk
7OwJobnXP7J0gIqxMBPzgNWtzLVBm0M+QVcguaGDXt1S9qYGm17J2M7Dx1i6c6+k
uoCv+BucLMJLqbXAIfBa7QZTj5zHsejHuQ970QP5PJrFLVss9JsndtRMyIeUFD3q
nQhb4RzJik6ZDQ==
-----END CERTIFICATE-----
Generated at Fri Mar 13 02:16:58 2026 by rpki-client