Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.mft
File: s6RxSmlcY88unErephcYJ9hm4pg.mft (raw, json)
Hash identifier: G+UW5LNzqQGOZOCla0X8thDJXWKvrNyuLLCSDh9RuLk=
Subject key identifier: 47:D2:05:E2:56:4F:6A:F2:FD:E2:63:90:AA:05:2B:5D:EF:02:FF:FC
Authority key identifier: B3:A4:71:4A:69:5C:63:CF:2E:9C:4A:DE:A6:17:18:27:D8:66:E2:98
Certificate issuer: /CN=b3a4714a695c63cf2e9c4adea6171827d866e298
Certificate serial: 019D37C127C3420CE566254F8A61422705CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6RxSmlcY88unErephcYJ9hm4pg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.mft
Manifest number: 15FB
Signing time: Sun 29 Mar 2026 04:01:38 +0000
Manifest this update: Sun 29 Mar 2026 04:01:38 +0000
Manifest next update: Mon 30 Mar 2026 04:01:38 +0000
Files and hashes: 1: IdBqw0A4TK6uyYCMeFPtnqsmeRc.roa (hash: 5nFwsjED/xvOkZjCNJO1OpoEyT7doRuSAQWm9AMMmaE=)
2: hxTWlwt6XxySSXQcOC1UwXbMwbk.roa (hash: aX7p2s147zlrrkvvAok2NDrpVfnLraj+bgXnwC8UznU=)
3: s6RxSmlcY88unErephcYJ9hm4pg.crl (hash: P1ke/a3COzVtpeMymrBnM0BZfmj44WCOWQaUcTwOlk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.mft
rsync://rpki.ripe.net/repository/DEFAULT/s6RxSmlcY88unErephcYJ9hm4pg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:27:c3:42:0c:e5:66:25:4f:8a:61:42:27:05:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3a4714a695c63cf2e9c4adea6171827d866e298
Validity
Not Before: Mar 29 04:01:38 2026 GMT
Not After : Mar 30 04:01:38 2026 GMT
Subject: CN=47d205e2564f6af2fde26390aa052b5def02fffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e7:b5:b9:b7:e4:7b:54:c6:33:81:79:d3:fa:
5a:a0:b7:06:45:9d:e7:90:9b:74:06:7d:d2:2f:cd:
a6:d8:41:3e:a4:eb:74:c5:19:4a:f4:4e:5e:7f:1b:
53:92:50:5d:4d:cc:c9:52:da:84:8d:08:76:15:c1:
f7:73:ef:1a:c1:a6:01:10:d2:90:3f:62:07:ba:da:
e2:c5:4d:53:77:e4:cf:90:11:85:35:c0:cd:89:ad:
5c:50:4d:98:86:d8:26:d4:17:63:29:6d:12:7a:fe:
ae:24:7f:60:62:e6:e3:27:84:e8:bf:33:61:9e:00:
cf:8d:f1:e8:c6:6c:c8:da:ca:3f:3e:bf:91:1a:35:
ec:24:5d:bc:06:d6:90:ba:36:b9:7a:dd:d6:c5:11:
a3:57:e6:07:ee:08:a4:e5:b6:b5:67:a7:9d:0c:00:
00:30:01:66:00:80:3d:d7:ed:ed:f0:35:f5:e9:cf:
0d:89:b3:ae:33:10:cd:c0:bf:c1:89:3e:50:91:59:
d8:77:15:01:81:65:f9:88:e2:b9:ad:6d:2a:ab:ea:
d0:05:18:2c:79:13:3c:6b:65:c6:fc:7d:b8:88:66:
3b:00:6f:98:23:7e:e0:ae:ac:59:d5:5e:a4:2a:c0:
30:a1:f6:4f:e1:ad:8e:c2:1b:79:c3:e5:7f:0c:12:
a8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:D2:05:E2:56:4F:6A:F2:FD:E2:63:90:AA:05:2B:5D:EF:02:FF:FC
X509v3 Authority Key Identifier:
keyid:B3:A4:71:4A:69:5C:63:CF:2E:9C:4A:DE:A6:17:18:27:D8:66:E2:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6RxSmlcY88unErephcYJ9hm4pg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9a72e0-fb9c-4e72-af34-dc48cecd1545/1/s6RxSmlcY88unErephcYJ9hm4pg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:fa:6c:b0:73:54:8b:89:9b:ef:c9:70:a1:f5:67:66:f5:ee:
ae:31:d1:e1:18:12:52:63:3b:11:88:40:79:c4:58:94:8a:bc:
20:41:d9:08:69:e5:1b:5d:03:af:8f:77:92:1c:67:dd:61:6a:
c8:91:66:96:f1:d3:ff:de:c2:d6:85:8c:7d:18:a7:86:ef:74:
2d:ea:a4:d2:36:6d:a8:82:58:25:bc:c3:22:4f:e4:ee:45:b4:
ad:0a:d6:3a:f8:1f:c7:c4:ea:51:1a:0e:cb:5a:7c:41:32:47:
33:9d:75:68:a0:43:40:c2:02:70:e2:e6:e2:56:c4:fa:e9:4e:
fe:77:52:e7:df:51:7a:6d:4d:08:d7:5f:55:f5:e1:c3:9d:64:
eb:7b:84:44:8c:91:59:02:cd:40:70:e1:15:ff:dc:80:88:ba:
a4:f4:bf:fb:c0:49:18:d3:c0:a6:31:7f:b8:18:49:20:98:b6:
dd:83:5e:31:21:e9:6f:a6:33:f9:dc:ad:ca:52:69:04:ec:0e:
ae:4b:6e:a2:e5:85:7b:5d:e3:ca:3a:c2:2f:d3:17:b3:64:6c:
23:35:be:42:5f:b0:65:7f:6f:f5:af:ad:66:c3:3b:68:2f:a0:
8b:c4:22:58:8a:dd:68:8f:05:2f:85:5b:9f:d9:96:7f:75:5c:
19:46:41:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wSfDQgzlZiVPimFCJwXPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzYTQ3MTRhNjk1YzYzY2YyZTljNGFkZWE2MTcxODI3ZDg2
NmUyOTgwHhcNMjYwMzI5MDQwMTM4WhcNMjYwMzMwMDQwMTM4WjAzMTEwLwYDVQQD
Eyg0N2QyMDVlMjU2NGY2YWYyZmRlMjYzOTBhYTA1MmI1ZGVmMDJmZmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ue1ubfke1TGM4F50/paoLcGRZ3n
kJt0Bn3SL82m2EE+pOt0xRlK9E5efxtTklBdTczJUtqEjQh2FcH3c+8awaYBENKQ
P2IHutrixU1Td+TPkBGFNcDNia1cUE2Yhtgm1BdjKW0Sev6uJH9gYubjJ4TovzNh
ngDPjfHoxmzI2so/Pr+RGjXsJF28BtaQuja5et3WxRGjV+YH7gik5ba1Z6edDAAA
MAFmAIA91+3t8DX16c8NibOuMxDNwL/BiT5QkVnYdxUBgWX5iOK5rW0qq+rQBRgs
eRM8a2XG/H24iGY7AG+YI37grqxZ1V6kKsAwofZP4a2Owht5w+V/DBKowQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEfSBeJWT2ry/eJjkKoFK13vAv/8MB8GA1UdIwQY
MBaAFLOkcUppXGPPLpxK3qYXGCfYZuKYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczZSeFNtbGNZODh1bkVyZXBoY1lKOWhtNHBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy85YTcyZTAtZmI5Yy00ZTcyLWFmMzQt
ZGM0OGNlY2QxNTQ1LzEvczZSeFNtbGNZODh1bkVyZXBoY1lKOWhtNHBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy85YTcyZTAtZmI5Yy00ZTcyLWFmMzQtZGM0OGNlY2QxNTQ1
LzEvczZSeFNtbGNZODh1bkVyZXBoY1lKOWhtNHBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIPpssHNU
i4mb78lwofVnZvXurjHR4RgSUmM7EYhAecRYlIq8IEHZCGnlG10Dr493khxn3WFq
yJFmlvHT/97C1oWMfRinhu90Leqk0jZtqIJYJbzDIk/k7kW0rQrWOvgfx8TqURoO
y1p8QTJHM511aKBDQMICcOLm4lbE+ulO/ndS599Rem1NCNdfVfXhw51k63uERIyR
WQLNQHDhFf/cgIi6pPS/+8BJGNPApjF/uBhJIJi23YNeMSHpb6Yz+dytylJpBOwO
rktuouWFe13jyjrCL9MXs2RsIzW+Ql+wZX9v9a+tZsM7aC+gi8QiWIrdaI8FL4Vb
n9mWf3VcGUZBFg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:30 2026 by rpki-client