Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft
File: S58x5zUqhwe5jG0nNI6LxJPRqa8.mft (raw, json)
Hash identifier: lKoPyfHNryDNOCDaO1nvSG9SiCGMKja+Pp9mM5+vKAk=
Subject key identifier: 75:3A:20:04:15:29:51:CD:29:60:9F:22:30:A2:47:0A:34:36:F2:F1
Authority key identifier: 4B:9F:31:E7:35:2A:87:07:B9:8C:6D:27:34:8E:8B:C4:93:D1:A9:AF
Certificate issuer: /CN=4b9f31e7352a8707b98c6d27348e8bc493d1a9af
Certificate serial: 019CE4EC6F45AE838B2539573C12502BAD06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S58x5zUqhwe5jG0nNI6LxJPRqa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft
Manifest number: 1865
Signing time: Fri 13 Mar 2026 02:00:26 +0000
Manifest this update: Fri 13 Mar 2026 02:00:26 +0000
Manifest next update: Sat 14 Mar 2026 02:00:26 +0000
Files and hashes: 1: IMC5fjcQ_DWcsRbnT_lDAoFdkcM.roa (hash: A0aysdB2+Z1WaCKJ3yfflKSlHn0Wo7eICnmJ34jKbxA=)
2: S58x5zUqhwe5jG0nNI6LxJPRqa8.crl (hash: JTfUfHfokJmLsDiq/PB5R62l8vckQx/K9v4f9IW2djk=)
3: bwdHvKYyhs4Ju5CwlBTPEYm3sCg.roa (hash: J52qNXcYUL8Md7MHBa4Z1H074n+eMZjwdb1rZYRHD/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/S58x5zUqhwe5jG0nNI6LxJPRqa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:ec:6f:45:ae:83:8b:25:39:57:3c:12:50:2b:ad:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b9f31e7352a8707b98c6d27348e8bc493d1a9af
Validity
Not Before: Mar 13 02:00:26 2026 GMT
Not After : Mar 14 02:00:26 2026 GMT
Subject: CN=753a2004152951cd29609f2230a2470a3436f2f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4a:bc:c3:6e:5b:f0:76:e7:5d:b2:2f:6c:40:
a3:e6:4b:7e:ea:dd:a5:fa:92:49:a5:ed:a3:56:a3:
83:bc:9e:44:61:4e:11:d8:1b:e6:75:d4:be:a2:7e:
c1:4a:0e:31:62:8b:1c:6f:0c:70:6f:5b:07:c6:9e:
29:6b:05:6d:62:9b:63:28:a0:f6:b1:b0:11:3d:80:
67:b2:99:f8:b1:a1:a8:3b:ac:75:ad:c1:6d:1c:7b:
d5:d3:df:de:ff:5d:e8:91:9d:ee:3e:45:98:71:9c:
51:7b:8d:77:e4:a7:cc:2a:f7:f7:9e:95:c7:9a:4e:
ff:25:d7:8f:ed:82:94:f0:ea:87:5a:40:57:2e:a7:
f0:8c:57:4e:b5:c0:eb:a8:4c:65:76:a0:e3:74:a7:
1d:45:da:be:b5:bf:bb:41:0b:fc:0b:3b:7b:b5:f1:
88:c2:4f:41:cf:54:d5:f6:89:5a:2d:9e:36:4c:0c:
23:70:5a:6b:8c:af:20:60:c1:03:6e:b3:eb:c8:ab:
f6:06:e1:88:2a:38:8c:e1:0d:35:81:75:4f:9d:51:
41:f5:2b:66:2e:4f:f3:6a:42:b8:c6:3c:11:6d:6b:
93:d2:17:bd:9a:0b:85:f9:b8:b7:f0:6a:68:49:99:
ff:49:4f:a2:4f:8a:a0:28:99:9e:7b:bc:2b:b5:4b:
98:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:3A:20:04:15:29:51:CD:29:60:9F:22:30:A2:47:0A:34:36:F2:F1
X509v3 Authority Key Identifier:
keyid:4B:9F:31:E7:35:2A:87:07:B9:8C:6D:27:34:8E:8B:C4:93:D1:A9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S58x5zUqhwe5jG0nNI6LxJPRqa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:d9:80:92:4f:c0:38:e0:bc:42:f3:fa:38:85:a3:8c:19:da:
ef:b8:79:0e:04:21:1c:b9:24:27:ed:6f:4c:1b:96:73:b8:c8:
c8:9f:46:bf:6f:8e:16:ce:24:f8:d1:3b:dd:03:e5:ac:8a:40:
ff:c9:ec:09:bc:5d:43:5f:38:de:94:0b:06:e4:b0:d5:50:51:
45:96:52:de:64:57:b1:22:39:41:66:de:18:f2:42:28:7f:be:
ac:8d:29:bc:f9:ef:01:44:ff:8e:6e:97:13:74:f9:9f:0b:bb:
f3:60:fb:ea:b2:c6:32:a8:dc:cf:f5:cf:25:bd:49:ee:3d:c7:
85:e7:ba:93:a8:82:be:d2:7f:c0:90:3a:56:84:fa:ac:e7:46:
37:ba:26:54:92:4b:ba:2b:05:60:66:db:fa:4b:bb:98:46:fe:
65:4c:c5:85:0b:f7:83:c7:0f:74:b3:a0:ea:69:a4:30:38:c9:
0d:24:c2:75:d9:b0:fe:39:2d:d5:3b:b2:62:b5:ad:34:c8:5e:
d1:61:3f:48:0c:43:8e:f5:1e:03:b3:d1:7d:c0:af:68:1a:f2:
bf:0a:0d:a8:05:01:82:7f:06:49:51:83:de:34:5d:ed:75:ec:
16:bc:b4:33:46:4f:be:4e:c4:aa:50:68:0c:96:bb:28:d4:48:
13:32:29:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzk7G9FroOLJTlXPBJQK60GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiOWYzMWU3MzUyYTg3MDdiOThjNmQyNzM0OGU4YmM0OTNk
MWE5YWYwHhcNMjYwMzEzMDIwMDI2WhcNMjYwMzE0MDIwMDI2WjAzMTEwLwYDVQQD
Eyg3NTNhMjAwNDE1Mjk1MWNkMjk2MDlmMjIzMGEyNDcwYTM0MzZmMmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkq8w25b8HbnXbIvbECj5kt+6t2l
+pJJpe2jVqODvJ5EYU4R2BvmddS+on7BSg4xYoscbwxwb1sHxp4pawVtYptjKKD2
sbARPYBnspn4saGoO6x1rcFtHHvV09/e/13okZ3uPkWYcZxRe4135KfMKvf3npXH
mk7/JdeP7YKU8OqHWkBXLqfwjFdOtcDrqExldqDjdKcdRdq+tb+7QQv8Czt7tfGI
wk9Bz1TV9olaLZ42TAwjcFprjK8gYMEDbrPryKv2BuGIKjiM4Q01gXVPnVFB9Stm
Lk/zakK4xjwRbWuT0he9mguF+bi38GpoSZn/SU+iT4qgKJmee7wrtUuYkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHU6IAQVKVHNKWCfIjCiRwo0NvLxMB8GA1UdIwQY
MBaAFEufMec1KocHuYxtJzSOi8ST0amvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzU4eDV6VXFod2U1akcwbk5JNkx4SlBScWE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My84NWZkMzEtZmU5MS00Mzg5LWFiNjct
MzY1MWU0MGYxNDM2LzEvUzU4eDV6VXFod2U1akcwbk5JNkx4SlBScWE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My84NWZkMzEtZmU5MS00Mzg5LWFiNjctMzY1MWU0MGYxNDM2
LzEvUzU4eDV6VXFod2U1akcwbk5JNkx4SlBScWE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXtmAkk/A
OOC8QvP6OIWjjBna77h5DgQhHLkkJ+1vTBuWc7jIyJ9Gv2+OFs4k+NE73QPlrIpA
/8nsCbxdQ1843pQLBuSw1VBRRZZS3mRXsSI5QWbeGPJCKH++rI0pvPnvAUT/jm6X
E3T5nwu782D76rLGMqjcz/XPJb1J7j3Hhee6k6iCvtJ/wJA6VoT6rOdGN7omVJJL
uisFYGbb+ku7mEb+ZUzFhQv3g8cPdLOg6mmkMDjJDSTCddmw/jkt1TuyYrWtNMhe
0WE/SAxDjvUeA7PRfcCvaBryvwoNqAUBgn8GSVGD3jRd7XXsFry0M0ZPvk7EqlBo
DJa7KNRIEzIpIA==
-----END CERTIFICATE-----
Generated at Fri Mar 13 12:13:25 2026 by rpki-client