Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.mft
File: sP8nOo_iEgkLoct4xjMfgOeMMCU.mft (raw, json)
Hash identifier: MScLI/7HwyEzzZ6sqq4W33m1siVnpUfmi10TEkpJN1Y=
Subject key identifier: 43:7E:CB:A8:C2:14:36:76:93:88:11:10:97:03:D1:45:B1:63:E0:30
Authority key identifier: B0:FF:27:3A:8F:E2:12:09:0B:A1:CB:78:C6:33:1F:80:E7:8C:30:25
Certificate issuer: /CN=b0ff273a8fe212090ba1cb78c6331f80e78c3025
Certificate serial: 019DCE2B7B4654C73630C15023A017004313
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sP8nOo_iEgkLoct4xjMfgOeMMCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.mft
Manifest number: 02AE
Signing time: Mon 27 Apr 2026 09:00:49 +0000
Manifest this update: Mon 27 Apr 2026 09:00:49 +0000
Manifest next update: Tue 28 Apr 2026 09:00:49 +0000
Files and hashes: 1: Zv79TTxsf83wSa-br66v_0Kz3P0.roa (hash: PshdlsPP60SM0Q8DKrvKNK5rgHz5shKnndSXnKZ2nf8=)
2: sP8nOo_iEgkLoct4xjMfgOeMMCU.crl (hash: IDyTGs2Tqhi6QpjfAZbv+vdP/MXghqsAjpHEgW6CBRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sP8nOo_iEgkLoct4xjMfgOeMMCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:2b:7b:46:54:c7:36:30:c1:50:23:a0:17:00:43:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0ff273a8fe212090ba1cb78c6331f80e78c3025
Validity
Not Before: Apr 27 09:00:49 2026 GMT
Not After : Apr 28 09:00:49 2026 GMT
Subject: CN=437ecba8c2143676938811109703d145b163e030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c8:e3:e4:42:60:e0:f5:27:93:fc:46:42:45:
94:e3:d3:72:e1:ec:44:8d:db:4b:01:a2:a5:b1:97:
9a:67:ea:06:97:6f:62:b9:77:af:b1:9d:11:8a:4f:
4c:17:65:e8:17:35:a6:a8:0f:cc:9c:3f:97:b6:f7:
36:66:ec:e6:52:f4:71:49:50:c1:c6:e5:88:06:ca:
df:d3:af:83:29:ed:b1:f7:f0:1c:6c:85:2e:a4:67:
01:c6:a5:8f:1e:06:2a:87:f0:65:1a:bf:c4:61:0d:
d0:69:09:a2:2b:1f:8a:6f:10:f5:42:63:fc:cc:ad:
ad:85:18:b5:06:2e:44:ef:59:78:85:2c:fc:90:87:
01:6a:d5:e7:f1:f4:1b:6e:33:8a:e5:6b:3f:89:cd:
71:a3:da:3b:03:b1:d2:1a:f5:49:bc:d1:92:6d:39:
96:aa:96:f9:af:3a:f1:1d:93:8e:6e:7d:cf:06:20:
33:70:62:41:1d:24:5f:93:07:b9:6a:f9:4f:b6:2e:
1d:1e:23:40:95:d3:ac:ce:92:63:c9:f5:41:fd:c6:
f5:05:7b:93:a4:c5:f1:00:b8:f2:78:1e:7e:9d:f9:
ba:9c:a1:a0:ac:65:22:bf:47:cf:48:21:1a:d3:cb:
7e:bf:da:4d:1d:64:1b:53:09:0b:96:68:ff:c9:e4:
84:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:7E:CB:A8:C2:14:36:76:93:88:11:10:97:03:D1:45:B1:63:E0:30
X509v3 Authority Key Identifier:
keyid:B0:FF:27:3A:8F:E2:12:09:0B:A1:CB:78:C6:33:1F:80:E7:8C:30:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sP8nOo_iEgkLoct4xjMfgOeMMCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:51:1f:92:cb:74:d3:d6:0b:97:81:36:0e:bc:1e:9c:f5:c8:
0d:ef:75:69:6d:3f:97:5f:31:4e:83:c4:b5:cb:5c:63:7a:ef:
fe:2d:d2:9e:11:18:16:95:11:94:a5:f8:64:49:b6:33:a4:ac:
4e:d0:f2:a3:87:6a:7f:e2:a1:75:4a:ba:98:81:d3:f5:90:c1:
65:10:68:1e:2f:c1:c3:f7:70:d0:dc:e0:99:ff:69:c3:cd:6a:
c9:56:79:45:8b:58:eb:2a:26:39:9b:c9:84:bb:0f:62:39:f7:
dc:51:39:76:b7:ee:0d:9e:d6:46:40:fe:f3:b8:cd:5e:bb:18:
1f:ee:96:53:4c:f3:08:7b:7a:a3:c9:58:09:a7:fa:67:72:e5:
9e:60:01:75:3a:b8:2d:4a:db:9a:a1:4c:45:c1:fb:b9:bb:d4:
76:6a:7b:cb:a0:40:f7:81:17:f7:81:54:23:1a:7d:cf:8d:6c:
2c:3a:f2:74:d3:92:2d:ab:5d:ac:ae:d0:74:93:6b:ef:66:8e:
90:f5:14:e2:fe:f0:65:fd:bf:d7:0f:1d:17:ca:8d:c6:83:23:
14:a7:ef:28:c7:3c:d2:7c:5a:77:bb:3a:58:0f:a6:69:cf:45:
32:ff:c0:85:f9:b8:b1:66:eb:0c:c2:25:e4:86:36:f6:ad:f3:
fc:07:3b:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3OK3tGVMc2MMFQI6AXAEMTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwZmYyNzNhOGZlMjEyMDkwYmExY2I3OGM2MzMxZjgwZTc4
YzMwMjUwHhcNMjYwNDI3MDkwMDQ5WhcNMjYwNDI4MDkwMDQ5WjAzMTEwLwYDVQQD
Eyg0MzdlY2JhOGMyMTQzNjc2OTM4ODExMTA5NzAzZDE0NWIxNjNlMDMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Mjj5EJg4PUnk/xGQkWU49Ny4exE
jdtLAaKlsZeaZ+oGl29iuXevsZ0Rik9MF2XoFzWmqA/MnD+Xtvc2ZuzmUvRxSVDB
xuWIBsrf06+DKe2x9/AcbIUupGcBxqWPHgYqh/BlGr/EYQ3QaQmiKx+KbxD1QmP8
zK2thRi1Bi5E71l4hSz8kIcBatXn8fQbbjOK5Ws/ic1xo9o7A7HSGvVJvNGSbTmW
qpb5rzrxHZOObn3PBiAzcGJBHSRfkwe5avlPti4dHiNAldOszpJjyfVB/cb1BXuT
pMXxALjyeB5+nfm6nKGgrGUiv0fPSCEa08t+v9pNHWQbUwkLlmj/yeSEKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEN+y6jCFDZ2k4gREJcD0UWxY+AwMB8GA1UdIwQY
MBaAFLD/JzqP4hIJC6HLeMYzH4DnjDAlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1A4bk9vX2lFZ2tMb2N0NHhqTWZnT2VNTUNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS83ZjEyNTUtZDNhZC00Y2IyLWFiZmQt
ODhkM2NhOTAwNmQ1LzEvc1A4bk9vX2lFZ2tMb2N0NHhqTWZnT2VNTUNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS83ZjEyNTUtZDNhZC00Y2IyLWFiZmQtODhkM2NhOTAwNmQ1
LzEvc1A4bk9vX2lFZ2tMb2N0NHhqTWZnT2VNTUNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhVEfkst0
09YLl4E2DrwenPXIDe91aW0/l18xToPEtctcY3rv/i3SnhEYFpURlKX4ZEm2M6Ss
TtDyo4dqf+KhdUq6mIHT9ZDBZRBoHi/Bw/dw0Nzgmf9pw81qyVZ5RYtY6yomOZvJ
hLsPYjn33FE5drfuDZ7WRkD+87jNXrsYH+6WU0zzCHt6o8lYCaf6Z3LlnmABdTq4
LUrbmqFMRcH7ubvUdmp7y6BA94EX94FUIxp9z41sLDrydNOSLatdrK7QdJNr72aO
kPUU4v7wZf2/1w8dF8qNxoMjFKfvKMc80nxad7s6WA+mac9FMv/Ahfm4sWbrDMIl
5IY29q3z/Ac7dw==
-----END CERTIFICATE-----
Generated at Mon Apr 27 17:20:42 2026 by rpki-client