Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft
File: sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft (raw, json)
Hash identifier: ttlp9MoI44zCbmmrZERKolCHNlB9vlLYv7UFTyz7RyI=
Subject key identifier: 1E:2A:D2:9C:8C:46:6B:14:85:59:DA:54:8C:2D:65:FF:0A:BF:F9:92
Authority key identifier: B1:76:8F:0A:8D:1E:D1:17:3E:CE:DC:68:9C:17:7B:24:9E:E3:A6:8C
Certificate issuer: /CN=b1768f0a8d1ed1173ecedc689c177b249ee3a68c
Certificate serial: 019CE2591B2BE19894F2F28F996084BF2C5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXaPCo0e0Rc-ztxonBd7JJ7jpow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft
Manifest number: 01C8
Signing time: Thu 12 Mar 2026 14:00:16 +0000
Manifest this update: Thu 12 Mar 2026 14:00:16 +0000
Manifest next update: Fri 13 Mar 2026 14:00:16 +0000
Files and hashes: 1: Evg5E-8VSXY1dFWe0dsHFW-O_Jo.roa (hash: Icoysq39tLxqHCpP3ABhw3yUgnv4HKO+EMDypdb4KPE=)
2: r-GapXK3JuL-T7M03ZC61uSVfyE.roa (hash: AG5Eg1DYw6Qc5ggeZMDpUWKtb6RLHqA8/H20Z17wo7s=)
3: sXaPCo0e0Rc-ztxonBd7JJ7jpow.crl (hash: hWk2ggHo6raIN7E+ws43gNk1vsOpMH56C+3Dw1EnnS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXaPCo0e0Rc-ztxonBd7JJ7jpow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 14:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:59:1b:2b:e1:98:94:f2:f2:8f:99:60:84:bf:2c:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1768f0a8d1ed1173ecedc689c177b249ee3a68c
Validity
Not Before: Mar 12 14:00:16 2026 GMT
Not After : Mar 13 14:00:16 2026 GMT
Subject: CN=1e2ad29c8c466b148559da548c2d65ff0abff992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:97:ee:4e:f8:65:b3:a2:4e:3a:5d:d5:a0:b3:
00:0d:66:66:92:de:3f:17:85:3f:12:29:af:da:cb:
28:68:a7:60:ff:a3:09:69:aa:16:95:51:cd:1b:32:
8c:07:aa:b1:bb:63:52:76:e2:f7:9c:e6:f3:91:3e:
ff:0e:07:cf:80:a0:ef:24:92:01:de:13:ff:55:31:
99:a8:81:5e:8e:23:f0:29:e4:7f:be:c4:35:37:4c:
0b:fc:f2:47:63:b7:c8:95:c8:dd:8d:fc:1e:4d:5c:
5a:85:e3:30:54:3f:92:79:e5:f0:6e:d9:bd:9d:59:
6d:33:18:7b:2e:94:93:4b:77:45:cb:92:38:58:11:
fc:6d:2b:44:61:9b:03:c0:0f:29:ff:fb:51:7b:22:
65:60:e5:3c:c8:54:25:7b:e0:1f:8a:6d:57:12:67:
e4:35:b8:26:a7:25:25:a4:ed:61:23:2e:6a:ee:8d:
96:5b:33:6d:f4:5f:30:e2:f6:f1:70:40:bc:65:63:
7e:8e:b8:3e:3c:55:81:9c:2b:9a:2d:a6:1e:4e:28:
8f:be:c0:cb:21:b2:1e:e3:8b:8b:94:a9:4f:15:9a:
c6:de:b6:d4:dd:42:4d:7e:6a:a3:dd:da:32:eb:ff:
db:4b:df:f5:53:0b:c6:cd:a9:02:8e:d7:46:10:44:
f3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:2A:D2:9C:8C:46:6B:14:85:59:DA:54:8C:2D:65:FF:0A:BF:F9:92
X509v3 Authority Key Identifier:
keyid:B1:76:8F:0A:8D:1E:D1:17:3E:CE:DC:68:9C:17:7B:24:9E:E3:A6:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXaPCo0e0Rc-ztxonBd7JJ7jpow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:d0:74:49:37:c1:3b:14:49:54:5c:49:e6:4e:b8:d6:ff:36:
7f:57:34:23:a1:61:1e:6a:77:92:d3:37:c1:66:70:82:d0:be:
79:39:ce:05:21:82:ef:00:b2:4b:f0:a1:06:49:a0:2d:e9:5e:
20:ca:02:ac:4d:27:c0:57:1b:14:51:54:15:e2:ef:d8:52:ce:
c9:c3:47:00:bf:26:1e:1b:fb:4a:26:54:0c:19:d2:8f:1e:19:
93:15:26:0b:bc:42:0c:53:3b:9f:c3:84:99:ff:db:f0:c2:c3:
09:c8:f9:e9:d6:d9:ea:83:37:96:fd:32:24:95:e4:0b:22:34:
bc:0d:de:15:9b:0e:7f:1a:f0:b4:70:31:8c:85:80:e0:4e:8a:
ae:27:8e:29:17:9a:2d:8a:fe:41:61:b2:75:39:d9:8b:3a:7f:
a5:88:03:ff:b8:d6:4d:d2:a0:1d:3d:6e:60:19:44:bb:5b:4b:
45:eb:9b:e5:3f:c8:55:cb:30:1e:a6:dd:98:36:33:f2:44:ae:
79:14:c6:d8:95:ac:d3:3e:71:da:62:f2:33:5b:09:9b:16:43:
2b:bc:3a:f3:c1:55:11:fe:3d:e7:03:9f:f6:10:5e:6a:ff:01:
ec:8d:cb:8c:49:f4:60:9a:ba:e4:1d:5a:be:f0:62:f2:99:b3:
2a:56:a7:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZziWRsr4ZiU8vKPmWCEvyxfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNzY4ZjBhOGQxZWQxMTczZWNlZGM2ODljMTc3YjI0OWVl
M2E2OGMwHhcNMjYwMzEyMTQwMDE2WhcNMjYwMzEzMTQwMDE2WjAzMTEwLwYDVQQD
EygxZTJhZDI5YzhjNDY2YjE0ODU1OWRhNTQ4YzJkNjVmZjBhYmZmOTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5fuTvhls6JOOl3VoLMADWZmkt4/
F4U/Eimv2ssoaKdg/6MJaaoWlVHNGzKMB6qxu2NSduL3nObzkT7/DgfPgKDvJJIB
3hP/VTGZqIFejiPwKeR/vsQ1N0wL/PJHY7fIlcjdjfweTVxaheMwVD+SeeXwbtm9
nVltMxh7LpSTS3dFy5I4WBH8bStEYZsDwA8p//tReyJlYOU8yFQle+Afim1XEmfk
NbgmpyUlpO1hIy5q7o2WWzNt9F8w4vbxcEC8ZWN+jrg+PFWBnCuaLaYeTiiPvsDL
IbIe44uLlKlPFZrG3rbU3UJNfmqj3doy6//bS9/1UwvGzakCjtdGEETzjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB4q0pyMRmsUhVnaVIwtZf8Kv/mSMB8GA1UdIwQY
MBaAFLF2jwqNHtEXPs7caJwXeySe46aMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1hhUENvMGUwUmMtenR4b25CZDdKSjdqcG93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9kYTAxNGEtNDQ0Ni00M2EwLThiZDYt
MjQyMDFjMjUyOThmLzEvc1hhUENvMGUwUmMtenR4b25CZDdKSjdqcG93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9kYTAxNGEtNDQ0Ni00M2EwLThiZDYtMjQyMDFjMjUyOThm
LzEvc1hhUENvMGUwUmMtenR4b25CZDdKSjdqcG93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANNB0STfB
OxRJVFxJ5k641v82f1c0I6FhHmp3ktM3wWZwgtC+eTnOBSGC7wCyS/ChBkmgLele
IMoCrE0nwFcbFFFUFeLv2FLOycNHAL8mHhv7SiZUDBnSjx4ZkxUmC7xCDFM7n8OE
mf/b8MLDCcj56dbZ6oM3lv0yJJXkCyI0vA3eFZsOfxrwtHAxjIWA4E6KrieOKRea
LYr+QWGydTnZizp/pYgD/7jWTdKgHT1uYBlEu1tLReub5T/IVcswHqbdmDYz8kSu
eRTG2JWs0z5x2mLyM1sJmxZDK7w688FVEf495wOf9hBeav8B7I3LjEn0YJq65B1a
vvBi8pmzKlan0g==
-----END CERTIFICATE-----
Generated at Thu Mar 12 18:19:52 2026 by rpki-client