Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
File: s901zP9sK4ah-tjxA7wgBw0J5Q0.mft (raw, json)
Hash identifier: Uzsg4OmE4+dxtcK7Kl2vMle8ZZq+T+PcrhhVU1MDDeo=
Subject key identifier: FF:A2:A9:16:82:46:0A:5B:F9:4C:73:0D:32:23:40:B1:B3:7E:CE:8C
Authority key identifier: B3:DD:35:CC:FF:6C:2B:86:A1:FA:D8:F1:03:BC:20:07:0D:09:E5:0D
Certificate issuer: /CN=b3dd35ccff6c2b86a1fad8f103bc20070d09e50d
Certificate serial: 019EFCF2F07E3009DB5493B50A15FE0E6FF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
Manifest number: 198E
Signing time: Thu 25 Jun 2026 04:04:00 +0000
Manifest this update: Thu 25 Jun 2026 04:04:00 +0000
Manifest next update: Fri 26 Jun 2026 04:04:00 +0000
Files and hashes: 1: _Hegz1VVkQxT8dMR4TPbzXidnGo.roa (hash: wCUCX/ENynsQM4yWKSMGJBVSMGdPMxR8qubJ5kFNMNc=)
2: rBaBGD3me64LECmMKa6dKRV8Yy0.roa (hash: K+BptzFvZJeOeMKzMOMTcV3487VC0j+Wsdpi6o13OCY=)
3: s901zP9sK4ah-tjxA7wgBw0J5Q0.crl (hash: KlRvkusU32hon2uci8vjKyz3ATYFOnzN4BPTXN6dXmo=)
4: vvTAvxdhx3NqRY7Mg6sIRjTavUM.asa (hash: B0okjC7PiUjc05N96TAWbJ82kV+SDnSQSBLWFMRkR/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fc:f2:f0:7e:30:09:db:54:93:b5:0a:15:fe:0e:6f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3dd35ccff6c2b86a1fad8f103bc20070d09e50d
Validity
Not Before: Jun 25 04:04:00 2026 GMT
Not After : Jun 26 04:04:00 2026 GMT
Subject: CN=ffa2a91682460a5bf94c730d322340b1b37ece8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2b:b4:dd:4c:13:1c:39:f7:2b:54:d0:1c:33:
20:e4:f0:13:ea:07:c7:c5:1a:4f:90:9f:ad:81:98:
d3:18:d0:9c:44:9b:29:08:54:b5:c8:77:dd:e4:13:
a1:ef:5a:7e:5b:71:c4:e8:bb:37:6d:f4:6f:94:d1:
02:08:63:9f:92:73:5a:f8:74:e4:8e:af:f1:1a:fb:
56:87:49:46:55:00:f4:9a:5f:f2:05:b7:72:30:36:
d7:d1:54:d7:e8:e4:a3:7f:74:04:6f:a4:94:c1:7b:
82:f9:0b:e8:d3:ce:da:15:ba:0a:bd:50:76:a4:c0:
41:b7:31:07:30:55:24:91:84:0c:5a:8b:c5:99:eb:
22:61:1b:e7:bb:65:ed:8e:e7:75:43:bf:ce:e9:3b:
57:88:97:6d:bb:20:98:1b:98:91:57:90:8d:86:a6:
92:1c:e1:29:43:e5:1e:d1:83:64:0a:c9:79:23:ab:
75:a5:7f:d1:a4:ce:c0:d9:9c:95:f2:58:9b:20:d8:
ff:0b:9f:42:22:ac:a2:d1:ae:88:70:32:5f:2e:69:
cb:a6:d6:de:32:fa:a1:a3:e4:87:54:78:62:00:89:
a3:48:e8:56:f2:7c:1e:db:e3:d7:92:08:b3:37:0c:
f6:d8:fb:0f:3b:f2:bf:b6:a6:da:68:91:b9:01:a6:
2f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A2:A9:16:82:46:0A:5B:F9:4C:73:0D:32:23:40:B1:B3:7E:CE:8C
X509v3 Authority Key Identifier:
keyid:B3:DD:35:CC:FF:6C:2B:86:A1:FA:D8:F1:03:BC:20:07:0D:09:E5:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:cf:8a:22:88:7b:d7:59:c2:7b:e3:a6:c5:85:ca:be:9f:60:
63:76:4b:d7:ad:46:38:46:ce:6f:8a:71:4a:58:5c:69:52:b1:
5a:49:96:ec:0f:22:f8:61:a1:8d:e7:68:67:72:e2:6d:45:20:
33:e0:f4:5f:d7:68:93:97:34:00:2b:9c:6a:40:7c:c8:af:7e:
ee:cd:13:7e:8b:02:34:f3:6a:3e:b3:1b:76:18:db:36:4e:d7:
78:4b:f4:55:ac:4c:56:75:52:7b:90:57:dd:c3:ca:9f:42:02:
52:fe:ad:bf:cc:e9:78:22:86:92:bf:77:52:a7:e6:bb:ae:0b:
b2:a3:5d:e4:12:4c:c0:d3:c3:04:76:38:1a:f1:c6:bc:dd:72:
ef:5c:d5:3d:8d:90:cc:e8:f2:0f:a3:18:8f:c9:c2:4c:44:1e:
31:2e:3c:02:a2:9f:8e:4d:49:24:fa:bd:13:5b:ce:c9:cf:16:
f1:15:49:24:8d:bc:27:7d:a7:e1:73:d6:49:1e:2d:51:aa:a6:
ca:35:6d:ee:d7:d6:56:94:a7:95:a2:a6:a1:d9:67:1e:be:a2:
9f:d4:ed:39:fd:53:2a:3c:7d:67:2b:47:9d:e6:d6:d2:e9:a7:
e5:da:db:56:3f:87:85:a6:f6:bb:fe:6e:a2:2d:74:66:75:47:
c1:f0:ef:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ788vB+MAnbVJO1ChX+Dm/zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzZGQzNWNjZmY2YzJiODZhMWZhZDhmMTAzYmMyMDA3MGQw
OWU1MGQwHhcNMjYwNjI1MDQwNDAwWhcNMjYwNjI2MDQwNDAwWjAzMTEwLwYDVQQD
EyhmZmEyYTkxNjgyNDYwYTViZjk0YzczMGQzMjIzNDBiMWIzN2VjZThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziu03UwTHDn3K1TQHDMg5PAT6gfH
xRpPkJ+tgZjTGNCcRJspCFS1yHfd5BOh71p+W3HE6Ls3bfRvlNECCGOfknNa+HTk
jq/xGvtWh0lGVQD0ml/yBbdyMDbX0VTX6OSjf3QEb6SUwXuC+Qvo087aFboKvVB2
pMBBtzEHMFUkkYQMWovFmesiYRvnu2Xtjud1Q7/O6TtXiJdtuyCYG5iRV5CNhqaS
HOEpQ+Ue0YNkCsl5I6t1pX/RpM7A2ZyV8libINj/C59CIqyi0a6IcDJfLmnLptbe
Mvqho+SHVHhiAImjSOhW8nwe2+PXkgizNwz22PsPO/K/tqbaaJG5AaYvRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP+iqRaCRgpb+UxzDTIjQLGzfs6MMB8GA1UdIwQY
MBaAFLPdNcz/bCuGofrY8QO8IAcNCeUNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczkwMXpQOXNLNGFoLXRqeEE3d2dCdzBKNVEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny80NGQ0YTMtN2E4NC00NDk5LThiNzEt
MmIxMDUwNTFiYTU5LzEvczkwMXpQOXNLNGFoLXRqeEE3d2dCdzBKNVEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny80NGQ0YTMtN2E4NC00NDk5LThiNzEtMmIxMDUwNTFiYTU5
LzEvczkwMXpQOXNLNGFoLXRqeEE3d2dCdzBKNVEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX8+KIoh7
11nCe+OmxYXKvp9gY3ZL161GOEbOb4pxSlhcaVKxWkmW7A8i+GGhjedoZ3LibUUg
M+D0X9dok5c0ACucakB8yK9+7s0TfosCNPNqPrMbdhjbNk7XeEv0VaxMVnVSe5BX
3cPKn0ICUv6tv8zpeCKGkr93Uqfmu64LsqNd5BJMwNPDBHY4GvHGvN1y71zVPY2Q
zOjyD6MYj8nCTEQeMS48AqKfjk1JJPq9E1vOyc8W8RVJJI28J32n4XPWSR4tUaqm
yjVt7tfWVpSnlaKmodlnHr6in9TtOf1TKjx9ZytHnebW0umn5drbVj+Hhab2u/5u
oi10ZnVHwfDvtg==
-----END CERTIFICATE-----
Generated at Thu Jun 25 08:33:31 2026 by rpki-client