Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6c7dab-3c1b-4d50-9ffd-ab1ea4353b7f/1/Sn94dtTFVUt3Klfn8cTO03-14Z4.mft
File: Sn94dtTFVUt3Klfn8cTO03-14Z4.mft (raw, json)
Hash identifier: qaUTpIkPv4RtWOxl/667oR8N9XIfFkEwjVRZTnECyyI=
Subject key identifier: 1B:92:BF:09:9E:81:24:9F:FD:F2:30:62:E7:9D:1E:AF:8F:5C:81:16
Authority key identifier: 4A:7F:78:76:D4:C5:55:4B:77:2A:57:E7:F1:C4:CE:D3:7F:B5:E1:9E
Certificate issuer: /CN=4a7f7876d4c5554b772a57e7f1c4ced37fb5e19e
Certificate serial: 019D36E531181726EA9AD12E4EEAD391BD7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sn94dtTFVUt3Klfn8cTO03-14Z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6c7dab-3c1b-4d50-9ffd-ab1ea4353b7f/1/Sn94dtTFVUt3Klfn8cTO03-14Z4.mft
Manifest number: 0B0A
Signing time: Sun 29 Mar 2026 00:01:23 +0000
Manifest this update: Sun 29 Mar 2026 00:01:23 +0000
Manifest next update: Mon 30 Mar 2026 00:01:23 +0000
Files and hashes: 1: BmeWkQ2qsdxjGzo0GXTJOh2jlRc.roa (hash: BpAZQxUpOARnv01FH0kV+NBxmmSBpk1Oz9AcYOSnpdI=)
2: Sn94dtTFVUt3Klfn8cTO03-14Z4.crl (hash: CdVqVySzkB/3eV11PD7ni8vWHMpfX2JkO0vfO86O9GM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6c7dab-3c1b-4d50-9ffd-ab1ea4353b7f/1/Sn94dtTFVUt3Klfn8cTO03-14Z4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/6c7dab-3c1b-4d50-9ffd-ab1ea4353b7f/1/Sn94dtTFVUt3Klfn8cTO03-14Z4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sn94dtTFVUt3Klfn8cTO03-14Z4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 00:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:36:e5:31:18:17:26:ea:9a:d1:2e:4e:ea:d3:91:bd:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a7f7876d4c5554b772a57e7f1c4ced37fb5e19e
Validity
Not Before: Mar 29 00:01:23 2026 GMT
Not After : Mar 30 00:01:23 2026 GMT
Subject: CN=1b92bf099e81249ffdf23062e79d1eaf8f5c8116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b1:bd:06:55:39:81:a3:9b:4c:29:c7:1b:66:
ef:05:95:86:35:ae:1f:ed:de:42:5b:e3:c8:19:66:
59:4e:0d:1a:e3:1c:21:99:30:f4:f7:aa:9c:c9:03:
1e:e9:d1:e6:f7:62:1b:02:62:41:56:4f:d6:64:25:
6f:93:94:0d:60:2a:4f:ad:8a:67:87:87:c3:6e:d3:
9e:0f:98:8a:93:b4:10:46:22:ec:71:3a:0f:54:20:
d9:74:0f:a3:4e:fd:bf:31:8b:42:c8:f6:c0:ed:8c:
a9:cb:de:66:0c:70:3d:1e:ff:23:69:2b:c9:ba:25:
fa:d8:44:50:24:8f:5a:0a:e6:95:65:f9:7a:f4:06:
7b:cf:2f:b8:11:2c:bc:c1:1d:13:9f:e2:46:e8:da:
2c:fc:7a:2d:64:1d:d2:64:c3:0c:f3:97:e0:fa:57:
55:2a:ec:43:a8:90:25:20:9b:f0:18:21:ea:d8:57:
67:92:90:f7:6c:6e:12:93:b5:64:a8:ee:e3:6c:1e:
57:77:18:59:c1:96:82:85:ea:d6:7a:d1:c1:a9:4a:
68:e0:ec:05:86:58:0c:0a:04:67:3f:d8:a1:16:b0:
d7:4d:72:f7:f3:f6:30:48:be:d1:a0:8e:23:e2:43:
cd:64:dd:68:6b:53:0f:ea:b9:3a:79:9b:57:d6:25:
65:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:92:BF:09:9E:81:24:9F:FD:F2:30:62:E7:9D:1E:AF:8F:5C:81:16
X509v3 Authority Key Identifier:
keyid:4A:7F:78:76:D4:C5:55:4B:77:2A:57:E7:F1:C4:CE:D3:7F:B5:E1:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sn94dtTFVUt3Klfn8cTO03-14Z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6c7dab-3c1b-4d50-9ffd-ab1ea4353b7f/1/Sn94dtTFVUt3Klfn8cTO03-14Z4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6c7dab-3c1b-4d50-9ffd-ab1ea4353b7f/1/Sn94dtTFVUt3Klfn8cTO03-14Z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:c2:36:eb:9b:9a:86:bf:6a:a7:e5:95:c1:d2:45:f4:11:96:
f0:53:a1:4d:77:66:9c:7f:78:58:a1:35:03:ce:fb:fe:11:f1:
d3:b1:e7:ef:46:c1:c9:31:fb:84:fe:c2:0f:68:43:b0:9d:a3:
70:17:88:95:fb:07:e3:da:55:a5:22:0b:d4:8a:ef:91:fb:9a:
ff:b6:68:f3:06:db:20:5f:e7:32:91:ca:e7:e0:65:c5:1a:8f:
e1:c6:3c:d5:10:19:97:c9:51:8c:1b:3c:1a:4f:4d:40:0c:fd:
bc:e4:53:b3:ba:ea:e9:61:54:c8:9e:55:23:9f:0c:73:a2:ef:
14:d0:2e:cc:3e:67:78:43:d1:64:6a:42:00:16:93:e6:59:df:
58:fc:0c:9e:56:1a:e7:86:2c:d9:38:6a:c0:04:eb:58:dc:ba:
70:e6:ad:aa:cf:81:9c:ca:4f:c1:c8:3f:d1:eb:3f:ba:c0:c4:
19:72:d0:97:10:cf:da:46:ad:2a:c8:95:27:6c:2c:24:7d:dd:
7e:94:a6:92:ff:be:c4:12:54:0f:ee:0c:fb:9e:f9:55:00:e8:
7f:81:3a:d7:af:75:42:b0:d7:e6:27:8a:09:8f:af:41:7a:f1:
c3:31:4e:a1:21:f7:ec:e8:9c:fa:8b:01:8a:58:0a:00:39:e9:
68:71:d1:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ025TEYFybqmtEuTurTkb1+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhN2Y3ODc2ZDRjNTU1NGI3NzJhNTdlN2YxYzRjZWQzN2Zi
NWUxOWUwHhcNMjYwMzI5MDAwMTIzWhcNMjYwMzMwMDAwMTIzWjAzMTEwLwYDVQQD
EygxYjkyYmYwOTllODEyNDlmZmRmMjMwNjJlNzlkMWVhZjhmNWM4MTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLG9BlU5gaObTCnHG2bvBZWGNa4f
7d5CW+PIGWZZTg0a4xwhmTD096qcyQMe6dHm92IbAmJBVk/WZCVvk5QNYCpPrYpn
h4fDbtOeD5iKk7QQRiLscToPVCDZdA+jTv2/MYtCyPbA7Yypy95mDHA9Hv8jaSvJ
uiX62ERQJI9aCuaVZfl69AZ7zy+4ESy8wR0Tn+JG6Nos/HotZB3SZMMM85fg+ldV
KuxDqJAlIJvwGCHq2FdnkpD3bG4Sk7VkqO7jbB5XdxhZwZaCherWetHBqUpo4OwF
hlgMCgRnP9ihFrDXTXL38/YwSL7RoI4j4kPNZN1oa1MP6rk6eZtX1iVl/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBuSvwmegSSf/fIwYuedHq+PXIEWMB8GA1UdIwQY
MBaAFEp/eHbUxVVLdypX5/HEztN/teGeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU245NGR0VEZWVXQzS2xmbjhjVE8wMy0xNFo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC82YzdkYWItM2MxYi00ZDUwLTlmZmQt
YWIxZWE0MzUzYjdmLzEvU245NGR0VEZWVXQzS2xmbjhjVE8wMy0xNFo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC82YzdkYWItM2MxYi00ZDUwLTlmZmQtYWIxZWE0MzUzYjdm
LzEvU245NGR0VEZWVXQzS2xmbjhjVE8wMy0xNFo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlsI265ua
hr9qp+WVwdJF9BGW8FOhTXdmnH94WKE1A877/hHx07Hn70bByTH7hP7CD2hDsJ2j
cBeIlfsH49pVpSIL1Irvkfua/7Zo8wbbIF/nMpHK5+BlxRqP4cY81RAZl8lRjBs8
Gk9NQAz9vORTs7rq6WFUyJ5VI58Mc6LvFNAuzD5neEPRZGpCABaT5lnfWPwMnlYa
54Ys2ThqwATrWNy6cOatqs+BnMpPwcg/0es/usDEGXLQlxDP2katKsiVJ2wsJH3d
fpSmkv++xBJUD+4M+575VQDof4E61691QrDX5ieKCY+vQXrxwzFOoSH37Oic+osB
ilgKADnpaHHR+Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:03 2026 by rpki-client