Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.mft
File: S_xaKUEPH_z03ipacFj1FiCzC3k.mft (raw, json)
Hash identifier: 9Gaicgbbi7r2cYw3fUpRViFv927ltvpt2gvOaILJRPI=
Subject key identifier: BA:EE:2E:17:A9:39:31:A3:6D:27:5D:8C:D3:80:C9:47:3B:B4:8E:70
Authority key identifier: 4B:FC:5A:29:41:0F:1F:FC:F4:DE:2A:5A:70:58:F5:16:20:B3:0B:79
Certificate issuer: /CN=4bfc5a29410f1ffcf4de2a5a7058f51620b30b79
Certificate serial: 019D38D33FCE4C94DAF3395E857012E378D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_xaKUEPH_z03ipacFj1FiCzC3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.mft
Manifest number: 1042
Signing time: Sun 29 Mar 2026 09:01:01 +0000
Manifest this update: Sun 29 Mar 2026 09:01:01 +0000
Manifest next update: Mon 30 Mar 2026 09:01:01 +0000
Files and hashes: 1: S_xaKUEPH_z03ipacFj1FiCzC3k.crl (hash: nbm3bD3HXpP91Lcci0qM9b+GklfXdou6eD0+9oRQazY=)
2: fcl-EttwXxzdVTjzavFgoRNlwJI.roa (hash: aFrd+hEOx0zldgqlIlCbagrbwCzJhdbfMgtfzgPtR+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/S_xaKUEPH_z03ipacFj1FiCzC3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:3f:ce:4c:94:da:f3:39:5e:85:70:12:e3:78:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bfc5a29410f1ffcf4de2a5a7058f51620b30b79
Validity
Not Before: Mar 29 09:01:01 2026 GMT
Not After : Mar 30 09:01:01 2026 GMT
Subject: CN=baee2e17a93931a36d275d8cd380c9473bb48e70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fb:f7:bc:a5:5b:b7:d3:74:6c:27:9d:27:2e:
0e:7a:4c:92:5a:56:00:df:f3:32:2f:69:a5:65:fc:
fa:df:1c:32:3d:30:7d:15:98:2e:f9:b5:22:45:e6:
82:d8:64:25:25:c5:6f:01:c9:44:2a:4f:46:78:1f:
01:47:40:22:c0:f5:08:37:c7:9a:e1:f4:8c:3a:a3:
15:8e:8e:0c:85:ab:c9:ff:bd:c8:46:f1:56:87:15:
4f:62:91:d5:aa:6f:43:4f:6b:38:5d:ea:a5:74:3c:
1f:4f:c3:a8:47:86:bd:ce:9c:4b:9f:17:da:20:cf:
cf:47:c4:d1:71:cb:d9:5c:a4:1f:36:ce:21:48:1d:
20:f2:16:f7:ff:d7:be:5c:c5:de:38:36:4e:9c:80:
c0:22:1a:49:cc:91:07:6c:7e:9a:0c:64:6f:b9:47:
6f:73:f6:08:f8:02:4a:0f:26:2d:ec:9c:ec:50:29:
a1:80:42:08:f5:ed:c1:af:e0:44:0b:4b:34:53:29:
e7:d5:d0:3d:68:b0:1b:b6:34:4c:c1:38:4a:c0:c8:
95:dc:21:fc:71:ff:64:c1:d7:96:da:b8:4c:2e:d6:
72:59:63:65:1b:ce:e0:a8:77:9a:cb:d5:34:55:c3:
1e:d6:70:ce:66:2c:92:d6:0e:c3:77:fb:b8:e9:e0:
be:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:EE:2E:17:A9:39:31:A3:6D:27:5D:8C:D3:80:C9:47:3B:B4:8E:70
X509v3 Authority Key Identifier:
keyid:4B:FC:5A:29:41:0F:1F:FC:F4:DE:2A:5A:70:58:F5:16:20:B3:0B:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_xaKUEPH_z03ipacFj1FiCzC3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:f9:a8:93:c4:05:01:64:2c:0a:35:f3:3f:d5:12:14:d1:5b:
ca:21:5d:96:57:ab:86:8e:30:b3:69:91:43:72:22:5c:48:83:
7b:c7:29:6f:2a:51:a5:f9:d4:9f:e0:6d:65:51:1a:61:4c:17:
0b:15:0a:14:66:3f:18:c6:9f:40:9e:5a:d8:2e:c1:19:9b:ff:
b3:5d:c6:6c:40:ec:9c:f1:98:e1:ea:02:24:31:7f:01:93:69:
7b:9a:00:ee:e8:a2:1d:d5:79:6f:4a:e6:57:7f:a3:dd:c6:8e:
ab:6a:7e:28:b9:8d:cc:af:4e:c6:f1:bf:d8:dd:73:48:77:f1:
f4:fe:03:49:7b:4f:ef:35:bf:01:c8:6f:08:2a:44:da:b5:9f:
26:cb:e5:a3:2a:c9:52:d4:9d:5d:e8:37:6e:07:4a:40:23:6e:
f2:b9:d9:8a:75:4d:62:4e:7e:fb:a1:be:5f:19:75:0c:41:06:
7c:c2:ab:9c:14:b2:df:9a:dd:7c:66:55:a1:bf:a9:d2:ad:74:
f0:2d:07:67:a0:15:b0:80:56:27:eb:b8:53:ef:c4:04:b5:69:
80:91:ca:af:a0:35:81:70:5c:59:6c:6a:7f:ea:e8:f6:88:6a:
99:87:7e:72:8e:d1:56:02:25:c2:33:f0:78:fb:d7:f5:43:39:
92:6b:aa:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040z/OTJTa8zlehXAS43jRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZmM1YTI5NDEwZjFmZmNmNGRlMmE1YTcwNThmNTE2MjBi
MzBiNzkwHhcNMjYwMzI5MDkwMTAxWhcNMjYwMzMwMDkwMTAxWjAzMTEwLwYDVQQD
EyhiYWVlMmUxN2E5MzkzMWEzNmQyNzVkOGNkMzgwYzk0NzNiYjQ4ZTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/v3vKVbt9N0bCedJy4OekySWlYA
3/MyL2mlZfz63xwyPTB9FZgu+bUiReaC2GQlJcVvAclEKk9GeB8BR0AiwPUIN8ea
4fSMOqMVjo4MhavJ/73IRvFWhxVPYpHVqm9DT2s4XeqldDwfT8OoR4a9zpxLnxfa
IM/PR8TRccvZXKQfNs4hSB0g8hb3/9e+XMXeODZOnIDAIhpJzJEHbH6aDGRvuUdv
c/YI+AJKDyYt7JzsUCmhgEII9e3Br+BEC0s0Uynn1dA9aLAbtjRMwThKwMiV3CH8
cf9kwdeW2rhMLtZyWWNlG87gqHeay9U0VcMe1nDOZiyS1g7Dd/u46eC+PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLruLhepOTGjbSddjNOAyUc7tI5wMB8GA1UdIwQY
MBaAFEv8WilBDx/89N4qWnBY9RYgswt5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU194YUtVRVBIX3owM2lwYWNGajFGaUN6QzNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8zYjJiZmQtNjBlYi00Y2JmLTlmN2Yt
MTM2MjU3ZTMwNzZlLzEvU194YUtVRVBIX3owM2lwYWNGajFGaUN6QzNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8zYjJiZmQtNjBlYi00Y2JmLTlmN2YtMTM2MjU3ZTMwNzZl
LzEvU194YUtVRVBIX3owM2lwYWNGajFGaUN6QzNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH/mok8QF
AWQsCjXzP9USFNFbyiFdllerho4ws2mRQ3IiXEiDe8cpbypRpfnUn+BtZVEaYUwX
CxUKFGY/GMafQJ5a2C7BGZv/s13GbEDsnPGY4eoCJDF/AZNpe5oA7uiiHdV5b0rm
V3+j3caOq2p+KLmNzK9OxvG/2N1zSHfx9P4DSXtP7zW/AchvCCpE2rWfJsvloyrJ
UtSdXeg3bgdKQCNu8rnZinVNYk5++6G+Xxl1DEEGfMKrnBSy35rdfGZVob+p0q10
8C0HZ6AVsIBWJ+u4U+/EBLVpgJHKr6A1gXBcWWxqf+ro9ohqmYd+co7RVgIlwjPw
ePvX9UM5kmuqTA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:59:05 2026 by rpki-client