Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft
File: pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft (raw, json)
Hash identifier: Fx8/iuCbzQjaXi1MHEUtjgAFqxrcayeD8dx61RpYU6I=
Subject key identifier: CA:EE:F2:2C:26:AA:69:E9:2E:69:F1:EA:9D:FF:D5:AC:FE:1F:AA:08
Authority key identifier: A5:2F:65:24:08:5F:A1:0E:8C:09:8A:C2:B5:82:8A:1F:88:C6:91:3C
Certificate issuer: /CN=a52f6524085fa10e8c098ac2b5828a1f88c6913c
Certificate serial: 019D378901B16DFFA0106511FC389E9E1E67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 03:00:18 +0000
Manifest this update: Sun 29 Mar 2026 03:00:18 +0000
Manifest next update: Mon 30 Mar 2026 03:00:18 +0000
Files and hashes: 1: 5Gr2q7ZQUry_6juJo6TbPmIZ_GI.roa (hash: CLid1uYJD/tWmQGqtEiBJvjm9/bPdenK+e3VYv871Vk=)
2: pS9lJAhfoQ6MCYrCtYKKH4jGkTw.crl (hash: 4IeK72oBAbnCRpbCtACXkAnJlqnbLWGMzF2aQEvcPlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:01:b1:6d:ff:a0:10:65:11:fc:38:9e:9e:1e:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a52f6524085fa10e8c098ac2b5828a1f88c6913c
Validity
Not Before: Mar 29 03:00:18 2026 GMT
Not After : Mar 30 03:00:18 2026 GMT
Subject: CN=caeef22c26aa69e92e69f1ea9dffd5acfe1faa08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e3:88:8f:ab:a4:b9:a1:60:bd:20:58:9c:e6:
fc:ed:a1:07:88:cc:2d:c3:59:74:65:19:78:f1:e0:
1f:62:a2:6b:3b:7a:c4:9c:ba:bc:14:8a:00:d9:f4:
eb:6d:86:33:f3:c2:3c:72:d3:4a:3f:fb:1e:8b:00:
ba:66:d3:35:80:f7:f1:73:fe:b2:4b:9f:96:ac:56:
c1:69:c6:cb:e6:a2:10:d2:ea:af:16:df:14:bd:f3:
60:68:37:92:51:3e:38:8d:75:31:85:61:5c:82:30:
50:75:ab:40:2d:d5:9f:5b:de:36:23:e0:64:37:f3:
b0:3e:fc:10:de:68:00:1d:bb:63:9e:29:28:1b:36:
aa:3f:94:e5:e4:02:a0:49:6e:7c:a6:bb:16:32:72:
e7:0c:f1:3a:d0:02:b2:13:c9:84:64:2c:ef:3d:48:
04:0f:99:bd:1a:53:f0:a3:ca:e6:52:96:bc:bf:3f:
30:04:b4:c4:66:a9:61:78:0a:05:92:16:dd:5c:b7:
c1:ff:f7:23:99:6e:20:e2:64:46:c6:5d:1d:ea:ae:
cb:4e:6c:ec:e8:0d:12:85:cd:7c:11:18:1b:12:49:
66:3a:c9:16:05:bd:96:1e:4a:45:8a:d1:d2:2f:fa:
53:49:c8:19:e3:73:43:fe:3d:57:bf:13:01:4e:b5:
50:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:EE:F2:2C:26:AA:69:E9:2E:69:F1:EA:9D:FF:D5:AC:FE:1F:AA:08
X509v3 Authority Key Identifier:
keyid:A5:2F:65:24:08:5F:A1:0E:8C:09:8A:C2:B5:82:8A:1F:88:C6:91:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:41:15:5f:40:65:c1:f8:71:76:d4:2d:41:9b:b7:16:b3:02:
60:89:db:b5:43:fb:ed:b1:1b:b6:51:9a:7a:c7:5c:82:04:2e:
8c:11:69:4e:cf:58:29:1e:15:02:0d:4d:54:a2:36:c0:d7:21:
26:3c:51:06:46:a2:e4:4f:ef:1d:a6:0e:2f:8e:72:c1:5b:bf:
17:22:d9:65:15:59:dc:f8:d2:aa:e8:07:49:9b:14:08:c8:ed:
26:f1:95:f8:b6:42:c5:50:e2:48:ef:58:98:8f:93:51:2f:0b:
60:29:eb:2a:d1:db:ec:53:9a:7c:8c:46:d1:b9:d1:7b:86:06:
03:ed:01:10:7d:ac:e8:3e:99:14:35:35:19:07:b3:0c:22:10:
e7:fe:1d:39:51:c1:9a:ee:e4:af:4b:dd:41:af:d3:cc:1d:1c:
a4:23:59:33:2e:6e:96:b3:c4:f2:22:88:ae:60:a7:b6:89:4e:
4d:fe:00:0c:3a:c4:1e:f1:d3:d2:0e:fa:bd:88:5b:60:8f:13:
16:07:f2:29:48:30:cc:b8:b3:ff:9c:6a:9c:f5:73:17:38:32:
7a:6b:9d:b9:04:e7:b8:82:5c:49:30:86:d5:6c:00:01:c6:c7:
38:8f:a4:f7:a3:ee:88:b7:0d:48:4b:b4:57:f4:3e:9d:8f:f6:
04:6c:7b:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iQGxbf+gEGUR/Dienh5nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1MmY2NTI0MDg1ZmExMGU4YzA5OGFjMmI1ODI4YTFmODhj
NjkxM2MwHhcNMjYwMzI5MDMwMDE4WhcNMjYwMzMwMDMwMDE4WjAzMTEwLwYDVQQD
EyhjYWVlZjIyYzI2YWE2OWU5MmU2OWYxZWE5ZGZmZDVhY2ZlMWZhYTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOOIj6ukuaFgvSBYnOb87aEHiMwt
w1l0ZRl48eAfYqJrO3rEnLq8FIoA2fTrbYYz88I8ctNKP/seiwC6ZtM1gPfxc/6y
S5+WrFbBacbL5qIQ0uqvFt8UvfNgaDeSUT44jXUxhWFcgjBQdatALdWfW942I+Bk
N/OwPvwQ3mgAHbtjnikoGzaqP5Tl5AKgSW58prsWMnLnDPE60AKyE8mEZCzvPUgE
D5m9GlPwo8rmUpa8vz8wBLTEZqlheAoFkhbdXLfB//cjmW4g4mRGxl0d6q7LTmzs
6A0Shc18ERgbEklmOskWBb2WHkpFitHSL/pTScgZ43ND/j1XvxMBTrVQ1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMru8iwmqmnpLmnx6p3/1az+H6oIMB8GA1UdIwQY
MBaAFKUvZSQIX6EOjAmKwrWCih+IxpE8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFM5bEpBaGZvUTZNQ1lyQ3RZS0tINGpHa1R3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8wZTQ1MDYtMTc0Zi00NDBhLWEzMWMt
YmZmZjUxNDIwNTNmLzEvcFM5bEpBaGZvUTZNQ1lyQ3RZS0tINGpHa1R3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC8wZTQ1MDYtMTc0Zi00NDBhLWEzMWMtYmZmZjUxNDIwNTNm
LzEvcFM5bEpBaGZvUTZNQ1lyQ3RZS0tINGpHa1R3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASkEVX0Bl
wfhxdtQtQZu3FrMCYInbtUP77bEbtlGaesdcggQujBFpTs9YKR4VAg1NVKI2wNch
JjxRBkai5E/vHaYOL45ywVu/FyLZZRVZ3PjSqugHSZsUCMjtJvGV+LZCxVDiSO9Y
mI+TUS8LYCnrKtHb7FOafIxG0bnRe4YGA+0BEH2s6D6ZFDU1GQezDCIQ5/4dOVHB
mu7kr0vdQa/TzB0cpCNZMy5ulrPE8iKIrmCntolOTf4ADDrEHvHT0g76vYhbYI8T
FgfyKUgwzLiz/5xqnPVzFzgyemuduQTnuIJcSTCG1WwAAcbHOI+k96PuiLcNSEu0
V/Q+nY/2BGx75A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:53 2026 by rpki-client