Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.mft
File: rs1kyXg317-sBmN92VK97eDCXYU.mft (raw, json)
Hash identifier: AQl1mIEK2zvfTv/1zfM9RFfyb7Y/Q3n7VR04FE2Fdrc=
Subject key identifier: 9A:53:92:C3:10:C4:9B:6E:12:51:68:4B:8B:F9:5A:04:43:F2:4E:C3
Authority key identifier: AE:CD:64:C9:78:37:D7:BF:AC:06:63:7D:D9:52:BD:ED:E0:C2:5D:85
Certificate issuer: /CN=aecd64c97837d7bfac06637dd952bdede0c25d85
Certificate serial: 019D37C01F5CC7A40B239DB70D8A3FB4A8F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.mft
Manifest number: 11AD
Signing time: Sun 29 Mar 2026 04:00:30 +0000
Manifest this update: Sun 29 Mar 2026 04:00:30 +0000
Manifest next update: Mon 30 Mar 2026 04:00:30 +0000
Files and hashes: 1: AQy-kY2cHFUJdvCu8RaXSm0u9OQ.roa (hash: RBQiu9sWWqL4vqKsGVfSX3sl/SJ1Xr1YL1xHQKrA3HM=)
2: K-RSBEB1ZNkw3BDgpDKvXT-jHFk.roa (hash: Ek8U88NKRYg8I4QyXUu+1m6S0Vw3QVig3cYX4BA41DY=)
3: WL2FEa958Kjqled1nJg_T9tBeoM.roa (hash: JqTb5QBDeJhpoV0bTkZHjnWe5k2iGZ6/9FsmESELmIY=)
4: eeigoSZvhxriUU8uVwc0KC2ZNqg.roa (hash: BVqjzzOba75rz4RwKPXup3anTRy7Y0r6aHlcT5afx7Q=)
5: gDEbtn2Bm22RWVusEqJbEgaueu4.roa (hash: xXuFvRKXUrwVjGE6wkVPHC4STPuoOyCxY+cA2kJF334=)
6: gqcIGF4cnQ7Zo-s6vBQeyMRZ3Kw.roa (hash: 5WHbZVFPJqF6d7sQt81f3HSwNWk6p/6vqblB7r2uSB0=)
7: rs1kyXg317-sBmN92VK97eDCXYU.crl (hash: NGpe2bbDPnYI+F7YGtmZyityuc7QdcqXwp9yfkwgyao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:1f:5c:c7:a4:0b:23:9d:b7:0d:8a:3f:b4:a8:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aecd64c97837d7bfac06637dd952bdede0c25d85
Validity
Not Before: Mar 29 04:00:30 2026 GMT
Not After : Mar 30 04:00:30 2026 GMT
Subject: CN=9a5392c310c49b6e1251684b8bf95a0443f24ec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:39:3f:5d:83:da:64:55:68:94:d0:c6:e3:a7:
41:94:9f:05:92:13:78:d1:a2:e6:19:69:3d:1e:b4:
83:9f:ed:52:4d:92:8d:dd:ad:29:fd:6c:27:24:de:
b0:9b:49:2a:87:38:d3:15:18:74:89:8e:f5:c1:e9:
79:ea:1a:d6:2c:83:1a:6e:ae:25:34:8c:1c:b6:fe:
ff:ec:29:16:12:c7:57:3a:d5:3c:c1:c3:06:7c:96:
dd:27:21:44:c7:e5:e2:52:1f:26:d3:03:20:8a:8d:
88:de:ca:6a:fa:29:98:b3:06:5f:83:3b:1c:69:ef:
a7:76:67:ed:e3:b0:21:53:7f:32:9b:be:13:69:06:
f0:c5:25:f9:ee:d5:af:1e:42:9c:ce:f3:a3:05:1c:
38:89:cf:91:6c:b0:48:80:01:1d:24:63:a4:dd:93:
e8:69:1b:8c:84:a3:c7:bd:6e:e2:ee:35:81:f6:8f:
a9:e3:f7:48:57:d0:42:c3:ad:18:6f:33:cc:e4:bd:
b7:75:68:07:5f:e6:fb:3d:86:95:9b:fc:00:4a:17:
cb:f2:51:b8:8a:2e:e2:89:e8:13:60:30:85:56:43:
31:54:15:f7:ee:d0:fe:c3:2e:4b:cf:44:4a:ac:a3:
77:c0:c0:26:bc:dc:a6:7d:4c:2e:3f:30:7a:bd:5d:
13:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:53:92:C3:10:C4:9B:6E:12:51:68:4B:8B:F9:5A:04:43:F2:4E:C3
X509v3 Authority Key Identifier:
keyid:AE:CD:64:C9:78:37:D7:BF:AC:06:63:7D:D9:52:BD:ED:E0:C2:5D:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:03:b7:ef:b0:c9:01:31:7c:a3:2d:cb:e2:85:d4:35:b3:9f:
22:dd:d1:fa:3e:ec:71:b0:6f:9a:0a:6a:2f:6b:f2:2b:85:68:
e6:da:3f:d5:20:75:a4:4f:43:5a:74:24:96:ab:c4:fa:c7:fe:
80:4c:79:49:4d:5f:c3:ad:56:b3:93:cd:26:17:eb:13:e5:34:
65:52:90:82:b4:b6:52:4d:3e:a7:51:c8:89:d9:ee:8d:ec:63:
65:8c:00:39:1a:d3:96:fa:ec:69:b9:d5:e0:87:2e:98:60:62:
3d:87:7e:02:4c:1b:2a:0f:55:3b:a6:0d:6f:89:22:cf:94:02:
3d:73:d7:ee:99:7c:93:90:bc:48:33:8a:9b:20:24:04:a3:5c:
b2:6a:9c:ba:05:c6:89:1f:0a:c8:71:16:4e:41:66:22:2b:a8:
cd:ca:03:f0:44:59:fc:01:b3:2c:68:d4:6e:17:9a:ac:ed:d0:
12:39:e3:01:d6:c7:65:92:22:f2:62:73:6a:c9:ba:32:25:a9:
ed:5d:0e:95:09:59:ff:fd:dc:f9:71:a9:af:d3:81:bc:62:4b:
9f:2b:a4:3a:4f:7f:6b:2b:88:46:05:35:d5:b3:6f:1e:7a:2a:
59:29:1f:72:5c:1f:1b:9b:1e:41:80:4e:9f:95:17:40:d0:df:
ec:26:33:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wB9cx6QLI523DYo/tKj5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlY2Q2NGM5NzgzN2Q3YmZhYzA2NjM3ZGQ5NTJiZGVkZTBj
MjVkODUwHhcNMjYwMzI5MDQwMDMwWhcNMjYwMzMwMDQwMDMwWjAzMTEwLwYDVQQD
Eyg5YTUzOTJjMzEwYzQ5YjZlMTI1MTY4NGI4YmY5NWEwNDQzZjI0ZWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTk/XYPaZFVolNDG46dBlJ8FkhN4
0aLmGWk9HrSDn+1STZKN3a0p/WwnJN6wm0kqhzjTFRh0iY71wel56hrWLIMabq4l
NIwctv7/7CkWEsdXOtU8wcMGfJbdJyFEx+XiUh8m0wMgio2I3spq+imYswZfgzsc
ae+ndmft47AhU38ym74TaQbwxSX57tWvHkKczvOjBRw4ic+RbLBIgAEdJGOk3ZPo
aRuMhKPHvW7i7jWB9o+p4/dIV9BCw60YbzPM5L23dWgHX+b7PYaVm/wAShfL8lG4
ii7iiegTYDCFVkMxVBX37tD+wy5Lz0RKrKN3wMAmvNymfUwuPzB6vV0TdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJpTksMQxJtuElFoS4v5WgRD8k7DMB8GA1UdIwQY
MBaAFK7NZMl4N9e/rAZjfdlSve3gwl2FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnMxa3lYZzMxNy1zQm1OOTJWSzk3ZURDWFlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi81OTJkNGYtZDcxZS00ZThiLWE2MzIt
MWVjZGUxNzkxNTExLzEvcnMxa3lYZzMxNy1zQm1OOTJWSzk3ZURDWFlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi81OTJkNGYtZDcxZS00ZThiLWE2MzItMWVjZGUxNzkxNTEx
LzEvcnMxa3lYZzMxNy1zQm1OOTJWSzk3ZURDWFlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYwO377DJ
ATF8oy3L4oXUNbOfIt3R+j7scbBvmgpqL2vyK4Vo5to/1SB1pE9DWnQklqvE+sf+
gEx5SU1fw61Ws5PNJhfrE+U0ZVKQgrS2Uk0+p1HIidnujexjZYwAORrTlvrsabnV
4IcumGBiPYd+AkwbKg9VO6YNb4kiz5QCPXPX7pl8k5C8SDOKmyAkBKNcsmqcugXG
iR8KyHEWTkFmIiuozcoD8ERZ/AGzLGjUbhearO3QEjnjAdbHZZIi8mJzasm6MiWp
7V0OlQlZ//3c+XGpr9OBvGJLnyukOk9/ayuIRgU11bNvHnoqWSkfclwfG5seQYBO
n5UXQNDf7CYzbw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:04 2026 by rpki-client