Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft
File: aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft (raw, json)
Hash identifier: vbBud7ewxVo8Pcz9gSnjRTnc9jmGOv0ixbY9ge5tTmA=
Subject key identifier: 5C:32:FC:24:BF:E8:9A:8C:C2:10:FD:A0:08:04:D2:6A:88:D4:7B:13
Authority key identifier: 69:2C:F8:57:23:44:C0:A6:74:A6:7D:0F:4B:51:F1:86:E8:A7:1C:4B
Certificate issuer: /CN=692cf8572344c0a674a67d0f4b51f186e8a71c4b
Certificate serial: 019D389C425F1BFF9E3CC8FFB96DA7F6B7FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aSz4VyNEwKZ0pn0PS1HxhuinHEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft
Manifest number: 037C
Signing time: Sun 29 Mar 2026 08:00:57 +0000
Manifest this update: Sun 29 Mar 2026 08:00:57 +0000
Manifest next update: Mon 30 Mar 2026 08:00:57 +0000
Files and hashes: 1: 9JzTDncsepWBIyeXDgZbgzh-hNA.roa (hash: EEJ8BD1UQFBZFgZQFrtwhkvF1euS2AFglnhzeTI1Kl4=)
2: CBsDO18mnRAZhs0rFe-oIGwGZeQ.roa (hash: v+64R9Yuvs5nMKSViq5julUttSHyjyUAvPmFlDm28JY=)
3: Q-ZhLXGU3V7WMJf_F4jA-hfVPCo.roa (hash: Ad4i58VjKhwdfxFqTtK2L0c60TXelJ6/sX2iLUaz7Lc=)
4: aSz4VyNEwKZ0pn0PS1HxhuinHEs.crl (hash: yr2Z6T/Da7hZ0okcTxz0exPPCbaB+qWC+K3Xpsj9apY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aSz4VyNEwKZ0pn0PS1HxhuinHEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:42:5f:1b:ff:9e:3c:c8:ff:b9:6d:a7:f6:b7:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=692cf8572344c0a674a67d0f4b51f186e8a71c4b
Validity
Not Before: Mar 29 08:00:57 2026 GMT
Not After : Mar 30 08:00:57 2026 GMT
Subject: CN=5c32fc24bfe89a8cc210fda00804d26a88d47b13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a9:08:6f:8b:2c:a7:45:8b:30:c3:a6:ac:59:
65:b6:ba:00:ed:9c:01:dc:c8:dc:a2:f5:5f:b5:e0:
56:3b:30:b4:f8:94:54:06:a4:a6:21:0b:ed:af:72:
8f:bb:f2:5c:4c:64:46:67:bf:e7:73:e8:59:87:f3:
d8:93:66:7c:71:2e:c3:da:8f:17:dc:b5:bc:b1:52:
fd:1e:eb:f1:da:72:02:6b:5d:3b:27:54:84:04:a7:
74:ae:db:9a:d1:44:90:2b:03:7b:1b:ed:5d:b2:1e:
3e:de:e6:e3:ac:d2:57:21:c7:bd:6e:0a:d2:76:91:
0f:5c:2d:aa:48:80:81:71:73:60:26:dd:a6:fe:6f:
e5:7d:e5:51:d3:28:23:34:35:4e:72:b5:63:2c:ef:
7d:cc:4e:f8:27:40:05:0e:4b:bb:b9:d8:dc:47:09:
73:75:63:0b:f0:ff:c2:db:28:c8:97:01:bb:7e:3e:
29:cd:df:12:1f:56:96:49:f4:1a:d2:ea:b7:f5:8d:
5f:2a:24:69:cf:8e:9b:be:d9:02:f1:a1:e7:b7:70:
d2:ca:81:0e:88:54:7d:12:2d:ce:f0:e0:cb:bd:e4:
ac:29:e2:00:fb:6c:92:16:9f:39:dd:93:42:6f:1c:
c6:d0:71:65:92:f8:fe:a9:61:82:f8:4a:ba:a7:76:
59:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:32:FC:24:BF:E8:9A:8C:C2:10:FD:A0:08:04:D2:6A:88:D4:7B:13
X509v3 Authority Key Identifier:
keyid:69:2C:F8:57:23:44:C0:A6:74:A6:7D:0F:4B:51:F1:86:E8:A7:1C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aSz4VyNEwKZ0pn0PS1HxhuinHEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:2d:c9:24:e7:68:f4:24:7f:45:5a:12:b2:65:a8:3a:a4:b6:
94:59:a9:9d:f6:16:5c:74:79:0e:08:18:56:e3:fe:7a:fe:c8:
84:97:59:61:0d:cf:fc:cb:d6:c4:a5:fd:74:83:7e:76:16:1b:
55:3f:97:53:89:61:aa:37:0b:20:8b:63:ab:9b:2a:22:87:bf:
ca:83:5c:65:53:71:36:28:3c:07:95:cf:f0:36:df:1c:4a:25:
b2:34:cd:7a:62:7e:60:dc:03:93:45:b7:05:5c:cc:1a:31:cf:
bb:c0:71:20:f7:38:53:31:1e:f1:9c:e6:73:61:51:78:9e:3b:
90:73:9b:60:93:52:90:1a:35:85:39:49:3e:56:db:15:bb:ad:
e0:69:5a:c7:8b:c6:61:41:24:e5:38:16:74:f4:4e:47:38:82:
25:72:65:f6:cd:a7:af:22:2b:01:7b:21:0f:c3:fc:8b:0d:76:
ea:c8:45:58:08:a2:a8:1c:d9:9c:60:e4:a3:8b:91:05:57:e5:
71:8a:8d:a0:22:37:9f:48:70:0e:51:d3:8f:42:2c:dc:2e:c8:
e7:c7:c1:cc:a3:3a:e9:ad:35:16:a7:28:59:59:eb:dd:16:1d:
7c:35:2f:c6:8b:cf:27:00:29:38:4e:17:ac:bf:85:a8:4f:69:
8a:30:b1:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nEJfG/+ePMj/uW2n9rf7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5MmNmODU3MjM0NGMwYTY3NGE2N2QwZjRiNTFmMTg2ZThh
NzFjNGIwHhcNMjYwMzI5MDgwMDU3WhcNMjYwMzMwMDgwMDU3WjAzMTEwLwYDVQQD
Eyg1YzMyZmMyNGJmZTg5YThjYzIxMGZkYTAwODA0ZDI2YTg4ZDQ3YjEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqkIb4ssp0WLMMOmrFlltroA7ZwB
3MjcovVfteBWOzC0+JRUBqSmIQvtr3KPu/JcTGRGZ7/nc+hZh/PYk2Z8cS7D2o8X
3LW8sVL9Huvx2nICa107J1SEBKd0rtua0USQKwN7G+1dsh4+3ubjrNJXIce9bgrS
dpEPXC2qSICBcXNgJt2m/m/lfeVR0ygjNDVOcrVjLO99zE74J0AFDku7udjcRwlz
dWML8P/C2yjIlwG7fj4pzd8SH1aWSfQa0uq39Y1fKiRpz46bvtkC8aHnt3DSyoEO
iFR9Ei3O8ODLveSsKeIA+2ySFp853ZNCbxzG0HFlkvj+qWGC+Eq6p3ZZywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFwy/CS/6JqMwhD9oAgE0mqI1HsTMB8GA1UdIwQY
MBaAFGks+FcjRMCmdKZ9D0tR8YbopxxLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVN6NFZ5TkV3S1owcG4wUFMxSHhodWluSEVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8wNTRiNTAtYTdiMS00NmYzLTlkMTgt
YWYzOWJiMDMwOTdmLzEvYVN6NFZ5TkV3S1owcG4wUFMxSHhodWluSEVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8wNTRiNTAtYTdiMS00NmYzLTlkMTgtYWYzOWJiMDMwOTdm
LzEvYVN6NFZ5TkV3S1owcG4wUFMxSHhodWluSEVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATC3JJOdo
9CR/RVoSsmWoOqS2lFmpnfYWXHR5DggYVuP+ev7IhJdZYQ3P/MvWxKX9dIN+dhYb
VT+XU4lhqjcLIItjq5sqIoe/yoNcZVNxNig8B5XP8DbfHEolsjTNemJ+YNwDk0W3
BVzMGjHPu8BxIPc4UzEe8Zzmc2FReJ47kHObYJNSkBo1hTlJPlbbFbut4Glax4vG
YUEk5TgWdPRORziCJXJl9s2nryIrAXshD8P8iw126shFWAiiqBzZnGDko4uRBVfl
cYqNoCI3n0hwDlHTj0Is3C7I58fBzKM66a01FqcoWVnr3RYdfDUvxovPJwApOE4X
rL+FqE9pijCx6A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:29 2026 by rpki-client