Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.mft
File: sJDUC_zVpKMIdRYOzG-f5TwFpuY.mft (raw, json)
Hash identifier: wIU/TWd/10I0rq0+j5obIlTiEvE/zHTI1/IPPErCFpk=
Subject key identifier: A0:A8:64:04:DC:BA:C2:52:B6:CA:BF:FA:06:42:98:82:65:4C:DA:BE
Authority key identifier: B0:90:D4:0B:FC:D5:A4:A3:08:75:16:0E:CC:6F:9F:E5:3C:05:A6:E6
Certificate issuer: /CN=b090d40bfcd5a4a30875160ecc6f9fe53c05a6e6
Certificate serial: 019D39413921BA3503C09655A375E197A9AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sJDUC_zVpKMIdRYOzG-f5TwFpuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.mft
Manifest number: 1822
Signing time: Sun 29 Mar 2026 11:01:08 +0000
Manifest this update: Sun 29 Mar 2026 11:01:08 +0000
Manifest next update: Mon 30 Mar 2026 11:01:08 +0000
Files and hashes: 1: YGVi9IufxaUy4qxtQ0vR5M4Kjyk.roa (hash: GG+KZY/DsNiZCRN1+BVms1rbvVxcFkZrjnSVRWlHuMg=)
2: sJDUC_zVpKMIdRYOzG-f5TwFpuY.crl (hash: g0TDVxypDOR585mAWn2iofoKKKBmctPG0b7q6F1cWUQ=)
3: v9qEJJrE4bIoJLkvQpDIDEFgGF4.roa (hash: kl+PP56wx1175s4ViXBlwNJra6/Xw7Fsdl6qvV23Cuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sJDUC_zVpKMIdRYOzG-f5TwFpuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:39:21:ba:35:03:c0:96:55:a3:75:e1:97:a9:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b090d40bfcd5a4a30875160ecc6f9fe53c05a6e6
Validity
Not Before: Mar 29 11:01:08 2026 GMT
Not After : Mar 30 11:01:08 2026 GMT
Subject: CN=a0a86404dcbac252b6cabffa06429882654cdabe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:67:e6:b8:e1:a7:7a:03:60:52:28:e4:aa:af:
a4:0f:5f:f7:e5:d3:40:4e:f0:c9:1a:ce:f1:87:34:
25:3a:f0:30:7a:48:a0:9a:6e:db:7c:46:4a:e5:52:
48:55:ed:51:69:1a:28:d4:ab:ba:c6:2b:4f:27:42:
04:b6:35:ff:5a:94:70:7b:7c:e9:78:bf:4d:fb:4b:
59:ac:d2:5e:52:c4:36:bc:fe:88:73:40:17:66:20:
e2:6a:81:d0:5f:68:52:dc:3a:16:31:5c:9e:d2:1c:
38:bd:ab:f6:87:cb:63:d9:e5:21:d0:f7:29:d1:14:
2b:1c:a8:f1:f6:59:aa:a8:27:b1:46:a0:f4:93:a7:
7e:2a:d2:23:61:80:cc:70:2e:e5:da:ca:67:03:97:
73:56:57:0e:2c:ab:b4:97:e7:44:ce:bb:9e:e8:47:
bd:6a:68:e8:f8:19:a2:ff:eb:2d:28:f2:5b:b6:0a:
c6:24:34:e7:ba:8d:aa:1f:03:1a:ce:21:b8:ba:81:
17:ca:ea:71:d7:28:c5:19:a9:87:4c:03:4e:70:e0:
e0:95:ef:c1:6a:46:d9:c1:48:98:69:2e:da:d3:6d:
44:9b:26:12:b5:26:d6:a4:7b:58:8b:82:2d:6d:05:
85:b2:45:a2:ff:0c:fb:c5:36:a3:80:cc:0b:18:5c:
1b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:A8:64:04:DC:BA:C2:52:B6:CA:BF:FA:06:42:98:82:65:4C:DA:BE
X509v3 Authority Key Identifier:
keyid:B0:90:D4:0B:FC:D5:A4:A3:08:75:16:0E:CC:6F:9F:E5:3C:05:A6:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJDUC_zVpKMIdRYOzG-f5TwFpuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:f5:29:e6:e7:4c:b0:b3:7f:13:d0:6c:f1:19:79:66:b9:86:
49:7a:b4:56:a5:2c:39:c2:7b:90:9f:12:be:9f:ba:11:e4:8f:
05:43:5c:b9:2e:32:bc:c3:6b:16:92:0c:12:98:23:a0:d0:7d:
d1:f8:94:d6:26:ef:fb:35:26:60:79:06:f6:b1:5d:04:15:aa:
ad:78:89:80:da:73:cb:97:6b:1e:bc:6c:c2:db:2b:5a:98:5a:
a7:c0:4f:d8:d0:5e:94:3f:71:c1:5a:5b:01:4d:40:9c:01:00:
3a:6d:3e:49:0a:e9:9d:a9:b8:94:72:69:0e:33:02:c3:35:8c:
85:22:52:10:75:be:69:09:17:23:b0:59:e6:32:14:0c:e6:ff:
73:d6:86:2e:50:e1:99:3a:5b:7d:fa:ff:59:47:f8:b2:c6:35:
c3:f2:40:30:5e:30:b9:86:ed:a3:ad:bb:4a:03:50:1c:8e:c0:
a7:38:ce:65:24:12:1a:ec:cd:46:24:ed:2c:6a:62:96:88:61:
47:14:5f:d0:77:99:8c:b3:50:89:15:f7:cb:11:50:c8:bb:00:
f1:2e:b8:c9:b9:73:f9:8e:4d:76:64:16:d1:67:7d:96:c9:69:
c6:94:15:30:fb:ef:ab:09:8c:63:61:1d:40:8d:52:c5:7c:9f:
17:98:8b:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QTkhujUDwJZVo3Xhl6mtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwOTBkNDBiZmNkNWE0YTMwODc1MTYwZWNjNmY5ZmU1M2Mw
NWE2ZTYwHhcNMjYwMzI5MTEwMTA4WhcNMjYwMzMwMTEwMTA4WjAzMTEwLwYDVQQD
EyhhMGE4NjQwNGRjYmFjMjUyYjZjYWJmZmEwNjQyOTg4MjY1NGNkYWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGfmuOGnegNgUijkqq+kD1/35dNA
TvDJGs7xhzQlOvAwekigmm7bfEZK5VJIVe1RaRoo1Ku6xitPJ0IEtjX/WpRwe3zp
eL9N+0tZrNJeUsQ2vP6Ic0AXZiDiaoHQX2hS3DoWMVye0hw4vav2h8tj2eUh0Pcp
0RQrHKjx9lmqqCexRqD0k6d+KtIjYYDMcC7l2spnA5dzVlcOLKu0l+dEzrue6Ee9
amjo+Bmi/+stKPJbtgrGJDTnuo2qHwMaziG4uoEXyupx1yjFGamHTANOcODgle/B
akbZwUiYaS7a021EmyYStSbWpHtYi4ItbQWFskWi/wz7xTajgMwLGFwb2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKCoZATcusJStsq/+gZCmIJlTNq+MB8GA1UdIwQY
MBaAFLCQ1Av81aSjCHUWDsxvn+U8BabmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0pEVUNfelZwS01JZFJZT3pHLWY1VHdGcHVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni83MWE0MDAtNGVkZS00NWYxLWI1NWIt
ODEwOWQ0MDg5ODI4LzEvc0pEVUNfelZwS01JZFJZT3pHLWY1VHdGcHVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni83MWE0MDAtNGVkZS00NWYxLWI1NWItODEwOWQ0MDg5ODI4
LzEvc0pEVUNfelZwS01JZFJZT3pHLWY1VHdGcHVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAffUp5udM
sLN/E9Bs8Rl5ZrmGSXq0VqUsOcJ7kJ8Svp+6EeSPBUNcuS4yvMNrFpIMEpgjoNB9
0fiU1ibv+zUmYHkG9rFdBBWqrXiJgNpzy5drHrxswtsrWphap8BP2NBelD9xwVpb
AU1AnAEAOm0+SQrpnam4lHJpDjMCwzWMhSJSEHW+aQkXI7BZ5jIUDOb/c9aGLlDh
mTpbffr/WUf4ssY1w/JAMF4wuYbto627SgNQHI7ApzjOZSQSGuzNRiTtLGpilohh
RxRf0HeZjLNQiRX3yxFQyLsA8S64yblz+Y5NdmQW0Wd9lslpxpQVMPvvqwmMY2Ed
QI1SxXyfF5iLEw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:13 2026 by rpki-client