Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft
File: rSzfJ9neZesk5c_J0xDkyKAwFGA.mft (raw, json)
Hash identifier: X2jLXUw6omtlofUikQFMjn/dBP/wZ0ilAZaHYoci7go=
Subject key identifier: 39:FC:C8:3B:AA:95:FC:AB:B4:27:B6:9A:E2:6A:EE:F2:16:14:40:EA
Authority key identifier: AD:2C:DF:27:D9:DE:65:EB:24:E5:CF:C9:D3:10:E4:C8:A0:30:14:60
Certificate issuer: /CN=ad2cdf27d9de65eb24e5cfc9d310e4c8a0301460
Certificate serial: 019D39782A499F7BB21E5F8D0237904333F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSzfJ9neZesk5c_J0xDkyKAwFGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft
Manifest number: 0E99
Signing time: Sun 29 Mar 2026 12:01:09 +0000
Manifest this update: Sun 29 Mar 2026 12:01:09 +0000
Manifest next update: Mon 30 Mar 2026 12:01:09 +0000
Files and hashes: 1: ecknfRAIvluVmZ7la5oiT_2luz4.roa (hash: HiuC3Vr01IHEO7h5/vdTPtdaVoDtm8DnoIetX64bo4k=)
2: rSzfJ9neZesk5c_J0xDkyKAwFGA.crl (hash: hvzdUe6cTvtThQlSkKauTNiTCmIfkB/gasBTYOphGhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSzfJ9neZesk5c_J0xDkyKAwFGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:78:2a:49:9f:7b:b2:1e:5f:8d:02:37:90:43:33:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2cdf27d9de65eb24e5cfc9d310e4c8a0301460
Validity
Not Before: Mar 29 12:01:09 2026 GMT
Not After : Mar 30 12:01:09 2026 GMT
Subject: CN=39fcc83baa95fcabb427b69ae26aeef2161440ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:45:8b:fc:ce:ce:db:a5:4e:e2:aa:b8:aa:98:
48:10:70:72:44:7d:35:25:dc:90:6a:31:6f:e6:2c:
bd:e8:b6:35:7a:0e:da:96:89:67:26:c9:6c:cd:1f:
6c:7f:43:bf:48:51:a7:bc:57:c2:92:6d:58:4d:19:
56:1b:06:11:80:03:0e:a3:cd:90:dd:bb:e6:69:e7:
70:e4:04:8c:ac:c8:d1:96:6d:4d:0d:39:a2:4a:46:
2e:a9:26:5c:9c:54:0b:fc:dc:af:38:dc:13:18:ae:
4d:99:46:87:e1:7e:af:e9:9d:1e:0a:44:4d:ec:23:
aa:28:a6:7a:f2:84:06:2b:7c:79:db:d4:0b:e5:55:
84:5c:1b:bb:e9:db:d5:49:92:6a:4f:f1:1d:c3:30:
be:b6:97:60:81:f1:40:69:f9:85:59:6e:71:36:e1:
76:51:22:ff:75:e9:a2:a5:07:10:7c:2b:c4:ba:9b:
21:a3:b9:da:23:94:30:3a:bd:1c:0a:11:18:3a:6d:
ae:ab:40:c3:58:29:8c:28:38:ad:e8:94:15:92:7b:
32:bd:c6:c3:e2:7d:b5:88:d9:83:33:54:84:b3:14:
e8:8b:24:3d:12:d6:29:b1:08:fd:f5:4f:93:48:52:
93:c3:e5:2f:7f:f0:88:d0:d7:b2:ea:7f:87:79:a8:
43:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:FC:C8:3B:AA:95:FC:AB:B4:27:B6:9A:E2:6A:EE:F2:16:14:40:EA
X509v3 Authority Key Identifier:
keyid:AD:2C:DF:27:D9:DE:65:EB:24:E5:CF:C9:D3:10:E4:C8:A0:30:14:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSzfJ9neZesk5c_J0xDkyKAwFGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:22:ae:26:be:15:5c:fb:f4:80:d1:10:af:ca:27:f5:9f:8a:
28:dc:c9:43:24:8d:42:d2:a0:b0:0e:0b:ac:1d:fe:00:9e:68:
40:e4:67:9c:55:91:35:3c:56:76:67:a0:ca:a9:28:94:8f:e2:
b3:17:81:2b:c0:29:1e:5a:58:78:67:21:0e:16:7d:12:c8:21:
c3:e7:0c:c1:d8:ab:5c:9e:6d:19:b5:7c:0e:6a:50:ba:4b:80:
90:43:a3:9e:be:82:19:a4:1c:ac:de:59:d1:59:fd:02:51:8b:
be:a0:5e:0b:0d:9c:29:8f:8c:01:8c:ef:a9:b5:5c:26:e8:be:
37:af:79:61:c4:be:a4:b5:45:38:b0:1a:dc:b1:74:8b:bd:8d:
66:93:fd:a2:51:61:12:8c:67:2c:64:f9:47:16:22:ed:bf:59:
11:15:56:8d:fd:22:81:71:bc:f9:e1:c8:fb:77:a2:4c:15:3e:
d7:2b:22:2f:9d:66:82:72:9e:e6:f7:3a:af:73:d5:b2:15:39:
dc:a3:8d:fc:e5:93:b7:22:b0:aa:77:63:32:6c:d5:06:24:1e:
f3:82:38:b3:d1:a2:94:63:8f:66:3a:90:15:ae:06:be:20:ed:
4a:34:5c:95:43:d7:55:c3:59:93:8f:66:79:0b:3b:85:8c:69:
a2:75:37:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05eCpJn3uyHl+NAjeQQzP5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMmNkZjI3ZDlkZTY1ZWIyNGU1Y2ZjOWQzMTBlNGM4YTAz
MDE0NjAwHhcNMjYwMzI5MTIwMTA5WhcNMjYwMzMwMTIwMTA5WjAzMTEwLwYDVQQD
EygzOWZjYzgzYmFhOTVmY2FiYjQyN2I2OWFlMjZhZWVmMjE2MTQ0MGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7EWL/M7O26VO4qq4qphIEHByRH01
JdyQajFv5iy96LY1eg7alolnJslszR9sf0O/SFGnvFfCkm1YTRlWGwYRgAMOo82Q
3bvmaedw5ASMrMjRlm1NDTmiSkYuqSZcnFQL/NyvONwTGK5NmUaH4X6v6Z0eCkRN
7COqKKZ68oQGK3x529QL5VWEXBu76dvVSZJqT/EdwzC+tpdggfFAafmFWW5xNuF2
USL/demipQcQfCvEupsho7naI5QwOr0cChEYOm2uq0DDWCmMKDit6JQVknsyvcbD
4n21iNmDM1SEsxToiyQ9EtYpsQj99U+TSFKTw+Uvf/CI0Ney6n+HeahDPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDn8yDuqlfyrtCe2muJq7vIWFEDqMB8GA1UdIwQY
MBaAFK0s3yfZ3mXrJOXPydMQ5MigMBRgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclN6Zko5bmVaZXNrNWNfSjB4RGt5S0F3RkdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9lZDYzNGItMzlmNy00YjljLTg2ZTQt
MWU5MjM4Y2YwMjhjLzEvclN6Zko5bmVaZXNrNWNfSjB4RGt5S0F3RkdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9lZDYzNGItMzlmNy00YjljLTg2ZTQtMWU5MjM4Y2YwMjhj
LzEvclN6Zko5bmVaZXNrNWNfSjB4RGt5S0F3RkdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFCKuJr4V
XPv0gNEQr8on9Z+KKNzJQySNQtKgsA4LrB3+AJ5oQORnnFWRNTxWdmegyqkolI/i
sxeBK8ApHlpYeGchDhZ9Esghw+cMwdirXJ5tGbV8DmpQukuAkEOjnr6CGaQcrN5Z
0Vn9AlGLvqBeCw2cKY+MAYzvqbVcJui+N695YcS+pLVFOLAa3LF0i72NZpP9olFh
EoxnLGT5RxYi7b9ZERVWjf0igXG8+eHI+3eiTBU+1ysiL51mgnKe5vc6r3PVshU5
3KON/OWTtyKwqndjMmzVBiQe84I4s9GilGOPZjqQFa4GviDtSjRclUPXVcNZk49m
eQs7hYxponU3QQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:02:17 2026 by rpki-client