Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/52a1e5-86f1-49f7-a773-cb3e29b6ad32/1/sh47KsUJcPsSbL3xnX-zFdzBxF0.mft
File: sh47KsUJcPsSbL3xnX-zFdzBxF0.mft (raw, json)
Hash identifier: CTNW0S5wRoljsBbdhiucS2j6YO4wOwyiwP0m2YpWruk=
Subject key identifier: 3A:EC:06:B4:51:E4:40:97:02:E2:17:BB:94:8A:80:32:BC:6D:4B:96
Authority key identifier: B2:1E:3B:2A:C5:09:70:FB:12:6C:BD:F1:9D:7F:B3:15:DC:C1:C4:5D
Certificate issuer: /CN=b21e3b2ac50970fb126cbdf19d7fb315dcc1c45d
Certificate serial: 019D386551DFBF91E5C6450595ABD9837A52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sh47KsUJcPsSbL3xnX-zFdzBxF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/52a1e5-86f1-49f7-a773-cb3e29b6ad32/1/sh47KsUJcPsSbL3xnX-zFdzBxF0.mft
Manifest number: 031D
Signing time: Sun 29 Mar 2026 07:00:57 +0000
Manifest this update: Sun 29 Mar 2026 07:00:57 +0000
Manifest next update: Mon 30 Mar 2026 07:00:57 +0000
Files and hashes: 1: ExsHE4JND829crxsW7zedd1gI4E.roa (hash: PwF0kYYWy9VG4ZuDcqRgCgPtqUp4IvaWx84Jor85iVQ=)
2: sh47KsUJcPsSbL3xnX-zFdzBxF0.crl (hash: wyZoQ0myzgu/m/TWt4Jo76/Hym/jrCGx/e0vj9b219Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/52a1e5-86f1-49f7-a773-cb3e29b6ad32/1/sh47KsUJcPsSbL3xnX-zFdzBxF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/52a1e5-86f1-49f7-a773-cb3e29b6ad32/1/sh47KsUJcPsSbL3xnX-zFdzBxF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sh47KsUJcPsSbL3xnX-zFdzBxF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:51:df:bf:91:e5:c6:45:05:95:ab:d9:83:7a:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b21e3b2ac50970fb126cbdf19d7fb315dcc1c45d
Validity
Not Before: Mar 29 07:00:57 2026 GMT
Not After : Mar 30 07:00:57 2026 GMT
Subject: CN=3aec06b451e4409702e217bb948a8032bc6d4b96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:89:ed:a6:62:fc:03:a8:83:c7:4a:26:61:a9:
e0:2a:22:8d:d3:3b:35:43:24:de:f8:73:4d:fa:92:
c3:f4:7c:12:a3:0d:b5:0f:06:19:4a:12:d4:1a:1b:
b4:47:33:b9:83:08:e2:3b:79:44:41:24:7e:b9:e2:
0b:f6:50:e0:4c:3a:98:49:e8:ee:8d:0f:f6:f7:71:
50:1f:06:03:6e:d9:9e:5d:d0:38:32:87:a0:1e:43:
a5:b3:e4:a1:4c:28:84:62:37:2d:46:4d:f8:68:46:
7b:80:4e:06:a2:bf:59:df:ab:e9:71:eb:d1:8e:30:
11:fc:25:11:15:a1:66:ee:45:0c:c5:d3:27:56:e4:
e7:05:c0:45:f0:60:9f:ab:87:76:db:9d:09:87:1d:
ac:14:bc:6c:e2:97:e4:ce:81:58:bb:46:da:60:4d:
bf:ce:98:4d:e6:52:21:d2:76:8e:01:77:4b:9e:f4:
e2:e5:db:97:65:bc:8a:f5:c0:48:33:7d:3a:4d:35:
78:1c:89:32:8f:42:62:dd:ba:58:bb:1a:1f:fd:b7:
ea:ae:e3:05:67:43:30:e8:7e:db:fe:03:6f:27:96:
90:b9:48:e2:62:1d:7c:e3:5c:3c:69:28:24:0d:6d:
21:73:38:c1:46:0e:a1:79:b7:81:b0:83:7e:e1:7e:
d4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:EC:06:B4:51:E4:40:97:02:E2:17:BB:94:8A:80:32:BC:6D:4B:96
X509v3 Authority Key Identifier:
keyid:B2:1E:3B:2A:C5:09:70:FB:12:6C:BD:F1:9D:7F:B3:15:DC:C1:C4:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sh47KsUJcPsSbL3xnX-zFdzBxF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/52a1e5-86f1-49f7-a773-cb3e29b6ad32/1/sh47KsUJcPsSbL3xnX-zFdzBxF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/52a1e5-86f1-49f7-a773-cb3e29b6ad32/1/sh47KsUJcPsSbL3xnX-zFdzBxF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:a6:18:d9:08:b1:b0:f4:4e:b9:20:19:33:6d:ac:20:9e:62:
18:98:6c:5e:17:b4:92:44:99:ce:24:19:93:4e:4e:f7:9f:d0:
4b:61:d4:22:eb:25:df:92:6d:da:72:65:94:70:ad:5c:f8:b2:
93:82:52:56:e9:48:11:44:3e:a5:14:af:61:50:7e:5b:a4:2d:
97:63:e4:f3:9c:63:c6:79:98:0f:0d:b2:dd:20:79:5f:da:80:
95:95:52:76:6b:e9:c3:55:15:39:db:06:8d:e1:5d:97:c6:7e:
2d:0e:de:a8:6d:70:0c:3f:3d:b7:eb:25:f1:73:85:20:71:59:
01:37:38:40:8b:0a:63:60:2e:2e:d0:66:b1:51:17:c9:de:aa:
77:fa:51:5b:a9:d9:a2:9a:03:af:ed:6c:bb:b4:4f:6b:c5:34:
fd:dd:78:02:54:1b:f3:b3:9c:26:bb:65:2c:ba:4a:be:20:03:
39:76:5c:fb:21:07:93:5a:94:db:3c:20:7e:0d:ca:5f:99:fb:
8a:1a:43:7f:42:72:0e:bc:dc:4e:1f:e8:3a:08:3d:02:0b:4c:
48:b0:f2:b0:aa:0a:72:15:8f:3d:70:6a:20:e0:cd:6c:51:18:
dd:fd:23:4c:73:8e:8e:30:cc:34:f5:8e:4e:13:e7:af:b1:96:
e4:48:20:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZVHfv5HlxkUFlavZg3pSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyMWUzYjJhYzUwOTcwZmIxMjZjYmRmMTlkN2ZiMzE1ZGNj
MWM0NWQwHhcNMjYwMzI5MDcwMDU3WhcNMjYwMzMwMDcwMDU3WjAzMTEwLwYDVQQD
EygzYWVjMDZiNDUxZTQ0MDk3MDJlMjE3YmI5NDhhODAzMmJjNmQ0Yjk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ontpmL8A6iDx0omYangKiKN0zs1
QyTe+HNN+pLD9HwSow21DwYZShLUGhu0RzO5gwjiO3lEQSR+ueIL9lDgTDqYSeju
jQ/293FQHwYDbtmeXdA4MoegHkOls+ShTCiEYjctRk34aEZ7gE4Gor9Z36vpcevR
jjAR/CURFaFm7kUMxdMnVuTnBcBF8GCfq4d2250Jhx2sFLxs4pfkzoFYu0baYE2/
zphN5lIh0naOAXdLnvTi5duXZbyK9cBIM306TTV4HIkyj0Ji3bpYuxof/bfqruMF
Z0Mw6H7b/gNvJ5aQuUjiYh1841w8aSgkDW0hczjBRg6hebeBsIN+4X7UKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDrsBrRR5ECXAuIXu5SKgDK8bUuWMB8GA1UdIwQY
MBaAFLIeOyrFCXD7Emy98Z1/sxXcwcRdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2g0N0tzVUpjUHNTYkwzeG5YLXpGZHpCeEYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy81MmExZTUtODZmMS00OWY3LWE3NzMt
Y2IzZTI5YjZhZDMyLzEvc2g0N0tzVUpjUHNTYkwzeG5YLXpGZHpCeEYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy81MmExZTUtODZmMS00OWY3LWE3NzMtY2IzZTI5YjZhZDMy
LzEvc2g0N0tzVUpjUHNTYkwzeG5YLXpGZHpCeEYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiKYY2Qix
sPROuSAZM22sIJ5iGJhsXhe0kkSZziQZk05O95/QS2HUIusl35Jt2nJllHCtXPiy
k4JSVulIEUQ+pRSvYVB+W6Qtl2Pk85xjxnmYDw2y3SB5X9qAlZVSdmvpw1UVOdsG
jeFdl8Z+LQ7eqG1wDD89t+sl8XOFIHFZATc4QIsKY2AuLtBmsVEXyd6qd/pRW6nZ
opoDr+1su7RPa8U0/d14AlQb87OcJrtlLLpKviADOXZc+yEHk1qU2zwgfg3KX5n7
ihpDf0JyDrzcTh/oOgg9AgtMSLDysKoKchWPPXBqIODNbFEY3f0jTHOOjjDMNPWO
ThPnr7GW5Eggdg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:49 2026 by rpki-client