Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft
File: s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft (raw, json)
Hash identifier: 6HAHoyjGKna2Hv/4VaqxO4yoUKJ4o5FSOUkfTi9O3ws=
Subject key identifier: 93:B4:B4:79:3E:8A:E7:5A:77:F0:74:14:42:72:0D:6F:90:54:22:15
Authority key identifier: B3:79:10:DA:1F:3A:43:F9:6B:58:F2:19:05:EB:58:F6:43:D0:26:7E
Certificate issuer: /CN=b37910da1f3a43f96b58f21905eb58f643d0267e
Certificate serial: 019D38D3C86D9B024262AAB949EB8223523C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s3kQ2h86Q_lrWPIZBetY9kPQJn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 09:01:36 +0000
Manifest this update: Sun 29 Mar 2026 09:01:36 +0000
Manifest next update: Mon 30 Mar 2026 09:01:36 +0000
Files and hashes: 1: L3dsNuCYesjLEdd7H6z3I5lgNfQ.roa (hash: FRWxg7BGWCOKTf1SDbrBIvnqHEUQOUcCZw9myXVs5sQ=)
2: s3kQ2h86Q_lrWPIZBetY9kPQJn4.crl (hash: wXWAsLfambrumiDbX8++DRfq40IHot3sFDkV8W4nyFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/s3kQ2h86Q_lrWPIZBetY9kPQJn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:c8:6d:9b:02:42:62:aa:b9:49:eb:82:23:52:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37910da1f3a43f96b58f21905eb58f643d0267e
Validity
Not Before: Mar 29 09:01:36 2026 GMT
Not After : Mar 30 09:01:36 2026 GMT
Subject: CN=93b4b4793e8ae75a77f0741442720d6f90542215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5a:cc:da:55:66:e1:90:f6:36:a3:b0:e9:ec:
33:74:72:1c:72:3f:70:f8:35:80:b8:09:0f:48:7f:
b0:ee:57:b0:73:d9:f8:44:17:61:5a:2d:44:cf:fe:
62:4b:48:26:64:b7:ab:1e:3d:09:8f:b6:ea:8c:8a:
bf:9b:11:d5:79:4a:66:7c:ee:b9:fa:f8:b1:22:26:
44:3e:a3:95:3b:70:e0:25:09:84:03:79:33:00:fa:
57:52:9a:95:8d:c8:6f:b9:41:3a:b2:96:ea:7f:a6:
ca:1d:ee:73:e1:0f:65:3f:e5:1a:47:b3:2b:f6:e2:
0d:21:d1:5b:a0:dd:18:ff:97:b0:4f:f8:0a:ba:d3:
8a:6b:a8:f6:77:62:63:f1:17:58:b2:f0:ae:b0:d8:
35:43:6d:3b:b9:a6:16:96:91:23:70:f3:3f:2e:a4:
7b:ce:57:cb:ca:9b:e6:b5:3a:1f:a9:67:03:c3:53:
12:94:09:75:59:0e:a1:fd:95:78:4e:ce:3f:c8:35:
48:3c:54:5e:0d:21:ad:de:b5:a5:45:39:1f:f3:87:
c0:bd:9c:14:65:ff:ae:3d:00:fa:a3:97:63:8d:71:
79:e4:71:2c:91:c0:ef:26:c6:93:f4:92:f1:47:7d:
e3:c8:25:cf:7e:7b:f4:df:e6:ac:2a:7b:19:d3:e0:
d8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B4:B4:79:3E:8A:E7:5A:77:F0:74:14:42:72:0D:6F:90:54:22:15
X509v3 Authority Key Identifier:
keyid:B3:79:10:DA:1F:3A:43:F9:6B:58:F2:19:05:EB:58:F6:43:D0:26:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s3kQ2h86Q_lrWPIZBetY9kPQJn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:15:1d:d7:cc:b1:1e:7e:6c:40:64:33:21:73:36:1c:b6:c5:
cb:a7:f3:ec:fb:34:7d:d6:38:a2:0a:d1:51:e5:05:30:c4:73:
82:6e:e9:55:56:8a:1b:ee:bd:fa:a0:c9:d9:47:22:28:23:f5:
69:15:bf:f4:0d:b0:a8:0b:b8:4c:80:7b:12:26:ef:18:4d:fd:
3a:da:af:eb:67:b5:41:90:c4:e0:b7:50:5c:35:a7:80:ee:1d:
9e:bc:a5:d8:3c:30:8b:6c:ae:92:cb:a6:95:6a:f0:4b:ce:6b:
54:1e:af:06:64:0e:7b:11:2d:e5:79:33:0b:47:0b:ec:e2:78:
3d:7d:23:2c:45:9b:3a:48:db:9b:1a:4c:19:c0:07:67:73:eb:
42:e4:b6:2c:bc:6e:a2:70:e8:9a:8a:6b:af:8c:c2:47:58:36:
ec:ef:e6:32:ca:73:9c:1c:5a:b1:08:f5:9c:55:3b:91:d2:d5:
70:b1:02:bc:c7:a8:f3:f8:95:9c:2a:fe:f9:c6:7f:c5:c3:c4:
62:fe:64:de:94:42:58:c6:9d:01:35:13:90:5a:f2:31:e9:05:
95:cd:88:f0:41:d7:37:43:f6:91:b1:ab:44:0a:24:d3:54:5b:
e1:93:54:c8:9b:d3:ec:56:75:82:e1:03:ce:87:7d:8e:ec:04:
e8:2e:e1:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0408htmwJCYqq5SeuCI1I8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzNzkxMGRhMWYzYTQzZjk2YjU4ZjIxOTA1ZWI1OGY2NDNk
MDI2N2UwHhcNMjYwMzI5MDkwMTM2WhcNMjYwMzMwMDkwMTM2WjAzMTEwLwYDVQQD
Eyg5M2I0YjQ3OTNlOGFlNzVhNzdmMDc0MTQ0MjcyMGQ2ZjkwNTQyMjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1rM2lVm4ZD2NqOw6ewzdHIccj9w
+DWAuAkPSH+w7lewc9n4RBdhWi1Ez/5iS0gmZLerHj0Jj7bqjIq/mxHVeUpmfO65
+vixIiZEPqOVO3DgJQmEA3kzAPpXUpqVjchvuUE6spbqf6bKHe5z4Q9lP+UaR7Mr
9uINIdFboN0Y/5ewT/gKutOKa6j2d2Jj8RdYsvCusNg1Q207uaYWlpEjcPM/LqR7
zlfLypvmtTofqWcDw1MSlAl1WQ6h/ZV4Ts4/yDVIPFReDSGt3rWlRTkf84fAvZwU
Zf+uPQD6o5djjXF55HEskcDvJsaT9JLxR33jyCXPfnv03+asKnsZ0+DYZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJO0tHk+iudad/B0FEJyDW+QVCIVMB8GA1UdIwQY
MBaAFLN5ENofOkP5a1jyGQXrWPZD0CZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczNrUTJoODZRX2xyV1BJWkJldFk5a1BRSm40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi81ZmM4MGUtYTA5NS00YzIwLTkwZTQt
MmMwZjk4YTc0OTY2LzEvczNrUTJoODZRX2xyV1BJWkJldFk5a1BRSm40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi81ZmM4MGUtYTA5NS00YzIwLTkwZTQtMmMwZjk4YTc0OTY2
LzEvczNrUTJoODZRX2xyV1BJWkJldFk5a1BRSm40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANBUd18yx
Hn5sQGQzIXM2HLbFy6fz7Ps0fdY4ogrRUeUFMMRzgm7pVVaKG+69+qDJ2UciKCP1
aRW/9A2wqAu4TIB7EibvGE39Otqv62e1QZDE4LdQXDWngO4dnryl2Dwwi2yuksum
lWrwS85rVB6vBmQOexEt5XkzC0cL7OJ4PX0jLEWbOkjbmxpMGcAHZ3PrQuS2LLxu
onDomoprr4zCR1g27O/mMspznBxasQj1nFU7kdLVcLECvMeo8/iVnCr++cZ/xcPE
Yv5k3pRCWMadATUTkFryMekFlc2I8EHXN0P2kbGrRAok01Rb4ZNUyJvT7FZ1guED
zod9juwE6C7hoQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:55 2026 by rpki-client