Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft
File: sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft (raw, json)
Hash identifier: L9JE1IVMpiSTCyosxfU0AdRaIe6SbrcUY6ajgKk1NRQ=
Subject key identifier: DD:C1:03:86:79:BA:1D:0C:DE:92:6D:DE:25:90:F9:5F:E8:D5:63:1A
Authority key identifier: B0:D6:2D:16:66:C5:C4:D1:92:18:35:31:58:4A:FD:72:BE:D0:84:85
Certificate issuer: /CN=b0d62d1666c5c4d192183531584afd72bed08485
Certificate serial: 019D38D3413A218162128195E734EAA43DC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sNYtFmbFxNGSGDUxWEr9cr7QhIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 09:01:02 +0000
Manifest this update: Sun 29 Mar 2026 09:01:02 +0000
Manifest next update: Mon 30 Mar 2026 09:01:02 +0000
Files and hashes: 1: 6Ie5sPRwouKDZ63tHw4hyjJqq10.roa (hash: XieQfcrAZvNQQrTrpSeqvq6G/q8IwApTZ6vvc3HLXb0=)
2: sNYtFmbFxNGSGDUxWEr9cr7QhIU.crl (hash: 7fKhJQRnt/MdU+tIe47X75kI7rNXDPgep6y342sSf9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sNYtFmbFxNGSGDUxWEr9cr7QhIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:41:3a:21:81:62:12:81:95:e7:34:ea:a4:3d:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0d62d1666c5c4d192183531584afd72bed08485
Validity
Not Before: Mar 29 09:01:02 2026 GMT
Not After : Mar 30 09:01:02 2026 GMT
Subject: CN=ddc1038679ba1d0cde926dde2590f95fe8d5631a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ac:10:3c:13:e9:6a:26:cd:ae:6b:69:79:53:
d2:11:e2:0a:23:d0:3c:1f:86:e4:3a:e0:59:ac:6e:
b9:d8:89:bd:2f:cf:7f:5a:5e:68:23:d9:cd:4c:b7:
69:ab:3e:bd:fe:24:f8:b2:20:67:73:bd:ef:56:c9:
8c:42:05:39:56:a6:f9:3d:7e:8b:ac:9a:d9:d7:aa:
c9:08:54:ca:14:f6:ec:d7:df:37:5e:50:25:e8:cd:
47:90:ac:0e:02:11:b7:75:76:66:2d:12:cc:f4:25:
db:a8:6d:a4:70:82:6d:2e:6c:c1:c1:50:e6:5d:c5:
3b:df:d0:36:93:c6:bc:d2:da:21:2f:97:25:97:64:
fd:76:09:69:14:2c:b9:ee:9f:01:70:c9:57:88:7e:
e5:fe:e4:7c:f1:c7:2f:a4:77:fb:bc:aa:d9:5c:85:
1a:21:be:09:a9:30:51:0e:5b:18:f7:b8:86:3f:42:
d5:9f:8d:a2:b5:64:e3:de:1e:46:36:10:50:1c:61:
c4:6e:5c:7a:d1:76:56:f7:b2:e5:be:e4:ed:e6:9e:
91:b4:01:a8:fb:a6:a9:39:5c:3f:dc:52:a0:4e:17:
05:b9:96:3a:1a:ae:49:56:42:1d:ef:79:5e:aa:bb:
ee:af:dd:38:a9:a7:10:c7:58:60:cb:bc:d9:46:e9:
bc:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C1:03:86:79:BA:1D:0C:DE:92:6D:DE:25:90:F9:5F:E8:D5:63:1A
X509v3 Authority Key Identifier:
keyid:B0:D6:2D:16:66:C5:C4:D1:92:18:35:31:58:4A:FD:72:BE:D0:84:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sNYtFmbFxNGSGDUxWEr9cr7QhIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:21:66:f5:98:34:99:fc:7a:f0:45:fa:08:f2:ed:6f:74:8e:
e0:d8:7c:56:3a:fa:9d:fe:ba:29:b0:a2:03:3a:60:58:cb:71:
33:c1:27:79:db:b6:e6:0e:18:8e:ad:7e:1c:d2:3a:34:d0:0d:
59:a1:4b:2e:d0:67:34:80:16:92:5b:5e:bd:c8:76:f6:bb:cf:
0e:2c:4b:70:1a:2e:63:07:83:a7:6e:95:77:2e:f0:14:62:de:
1c:83:2e:3a:3f:05:be:33:08:d0:52:0a:b8:a2:e3:0c:5c:ac:
6f:d3:c0:e7:fb:7d:1e:e8:e0:44:d0:d0:f9:e4:08:96:03:80:
06:04:d0:d4:a2:b5:5b:5c:12:95:ce:79:0a:aa:10:f7:ed:76:
d8:c0:0e:35:e2:9d:6e:59:47:95:58:21:c5:8d:9c:0c:f1:27:
32:0f:9e:55:5e:d3:a2:8d:41:cc:41:97:1a:0a:e2:3c:c1:4c:
f5:c8:04:9f:02:05:7d:76:84:3d:2b:5f:3d:3b:18:60:d4:6d:
b5:5c:0a:1d:5f:cf:0a:55:3f:ff:78:7a:8c:16:f6:bc:8d:81:
ee:ee:13:20:e1:db:66:f6:b1:28:5f:a6:41:22:48:48:0f:57:
23:92:c7:58:3b:59:a0:36:53:04:78:25:0f:2b:fa:7f:39:45:
f5:2b:1d:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0400E6IYFiEoGV5zTqpD3EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwZDYyZDE2NjZjNWM0ZDE5MjE4MzUzMTU4NGFmZDcyYmVk
MDg0ODUwHhcNMjYwMzI5MDkwMTAyWhcNMjYwMzMwMDkwMTAyWjAzMTEwLwYDVQQD
EyhkZGMxMDM4Njc5YmExZDBjZGU5MjZkZGUyNTkwZjk1ZmU4ZDU2MzFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqwQPBPpaibNrmtpeVPSEeIKI9A8
H4bkOuBZrG652Im9L89/Wl5oI9nNTLdpqz69/iT4siBnc73vVsmMQgU5Vqb5PX6L
rJrZ16rJCFTKFPbs1983XlAl6M1HkKwOAhG3dXZmLRLM9CXbqG2kcIJtLmzBwVDm
XcU739A2k8a80tohL5cll2T9dglpFCy57p8BcMlXiH7l/uR88ccvpHf7vKrZXIUa
Ib4JqTBRDlsY97iGP0LVn42itWTj3h5GNhBQHGHEblx60XZW97LlvuTt5p6RtAGo
+6apOVw/3FKgThcFuZY6Gq5JVkId73leqrvur904qacQx1hgy7zZRum8NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN3BA4Z5uh0M3pJt3iWQ+V/o1WMaMB8GA1UdIwQY
MBaAFLDWLRZmxcTRkhg1MVhK/XK+0ISFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc05ZdEZtYkZ4TkdTR0RVeFdFcjljcjdRaElVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9iNGFhNjMtNDI1OS00NGU2LWFjMjkt
NGZhNTNiZjBlMTU1LzEvc05ZdEZtYkZ4TkdTR0RVeFdFcjljcjdRaElVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9iNGFhNjMtNDI1OS00NGU2LWFjMjktNGZhNTNiZjBlMTU1
LzEvc05ZdEZtYkZ4TkdTR0RVeFdFcjljcjdRaElVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaCFm9Zg0
mfx68EX6CPLtb3SO4Nh8Vjr6nf66KbCiAzpgWMtxM8Enedu25g4Yjq1+HNI6NNAN
WaFLLtBnNIAWkltevch29rvPDixLcBouYweDp26Vdy7wFGLeHIMuOj8FvjMI0FIK
uKLjDFysb9PA5/t9HujgRNDQ+eQIlgOABgTQ1KK1W1wSlc55CqoQ9+122MAONeKd
bllHlVghxY2cDPEnMg+eVV7Too1BzEGXGgriPMFM9cgEnwIFfXaEPStfPTsYYNRt
tVwKHV/PClU//3h6jBb2vI2B7u4TIOHbZvaxKF+mQSJISA9XI5LHWDtZoDZTBHgl
Dyv6fzlF9SsdfA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:08:40 2026 by rpki-client