Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft
File: sA4l9V67rLBp8QOssIZnA4Nc_M0.mft (raw, json)
Hash identifier: xLd06cnmHvKwhkx0JGk4EaDUNlEDE13ifUha8/Bk4H0=
Subject key identifier: 6E:D7:77:8D:6E:FE:F1:9F:29:01:23:80:41:B2:2A:AE:25:8C:08:7D
Authority key identifier: B0:0E:25:F5:5E:BB:AC:B0:69:F1:03:AC:B0:86:67:03:83:5C:FC:CD
Certificate issuer: /CN=b00e25f55ebbacb069f103acb0866703835cfccd
Certificate serial: 019D38D3113BC5A2B0C25B0F9E4530BB7326
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sA4l9V67rLBp8QOssIZnA4Nc_M0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft
Manifest number: 149C
Signing time: Sun 29 Mar 2026 09:00:49 +0000
Manifest this update: Sun 29 Mar 2026 09:00:49 +0000
Manifest next update: Mon 30 Mar 2026 09:00:49 +0000
Files and hashes: 1: IxO99c5pFhRvUksjCk8RGNZdHys.roa (hash: axX2zCX5EaVP+cgNK0AwafDUwd4UVfumU6doP/6YeJg=)
2: sA4l9V67rLBp8QOssIZnA4Nc_M0.crl (hash: OFgu202OrATAJGzhtoJHYgisPHFJOWW3lU75FqdF4w4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sA4l9V67rLBp8QOssIZnA4Nc_M0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:11:3b:c5:a2:b0:c2:5b:0f:9e:45:30:bb:73:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b00e25f55ebbacb069f103acb0866703835cfccd
Validity
Not Before: Mar 29 09:00:49 2026 GMT
Not After : Mar 30 09:00:49 2026 GMT
Subject: CN=6ed7778d6efef19f2901238041b22aae258c087d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:59:8d:09:2e:6d:ab:bd:92:cb:e2:89:1f:a9:
16:33:e3:61:5d:64:7d:f8:10:2f:d7:62:8a:9d:14:
98:22:af:12:88:c5:d4:78:14:65:0d:c1:10:33:41:
61:5f:d9:da:f9:08:45:80:b6:38:50:e0:88:65:49:
f0:a8:2e:2a:94:df:ff:29:fc:66:dc:ba:93:8f:21:
fd:56:65:0a:fc:24:28:bc:8d:e2:e1:5f:6a:32:91:
75:1c:d0:2a:91:12:af:7e:8d:dc:a1:e3:f5:e5:17:
0c:b7:3f:06:df:84:78:5d:34:4b:91:67:3c:68:ce:
de:e0:c3:c2:4c:6e:0a:8d:2f:54:f5:81:bb:d1:49:
79:d6:dd:48:1c:49:0c:80:7a:3e:b3:f2:ed:bb:f3:
45:a0:ee:3c:a7:09:f3:37:1a:99:74:04:79:55:a5:
2c:30:2c:46:ac:40:80:47:90:82:d5:49:ec:d6:23:
07:74:25:a8:3f:49:0d:66:17:55:84:ec:66:04:13:
90:ec:95:16:2e:c0:fe:a1:bd:76:55:19:01:e3:b1:
84:63:d6:f0:72:69:4d:5a:a7:9a:99:54:93:53:56:
00:16:c7:de:ab:57:6f:5e:7a:80:e6:77:77:c1:1a:
09:bc:a9:85:48:01:9a:da:aa:e7:12:29:22:ed:ce:
13:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:D7:77:8D:6E:FE:F1:9F:29:01:23:80:41:B2:2A:AE:25:8C:08:7D
X509v3 Authority Key Identifier:
keyid:B0:0E:25:F5:5E:BB:AC:B0:69:F1:03:AC:B0:86:67:03:83:5C:FC:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sA4l9V67rLBp8QOssIZnA4Nc_M0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:8f:71:fd:3c:d3:2c:2d:3d:f3:2e:f9:00:8d:00:bd:c3:70:
cf:d7:32:24:8e:9b:62:29:01:c3:39:81:67:bc:ef:df:aa:8a:
f1:54:27:c3:32:cc:79:cf:9e:0d:03:58:5a:d9:0f:2d:5d:b5:
26:9c:c5:fc:f4:80:9e:28:8f:84:46:a2:e9:6e:db:8d:78:5f:
ad:ac:4e:5e:06:45:b1:ac:c0:67:82:92:d1:f3:ce:52:c6:95:
0b:74:56:b1:54:f8:5d:77:de:ed:ec:ca:b8:0c:7f:61:77:bd:
a9:5f:b0:2b:44:92:a5:fd:fa:6b:70:ca:36:1e:60:db:b0:0a:
c6:95:64:16:d5:23:eb:55:5e:d7:e6:74:5e:17:aa:5f:8a:dc:
b3:3e:e5:71:4a:9f:01:63:1d:e8:f1:a0:26:6c:2b:70:cf:69:
ce:cb:bb:46:4c:72:4b:f6:af:86:7d:c2:2e:3c:b0:f9:98:3f:
c1:37:04:d9:fa:26:d6:4e:51:1b:b3:e8:ed:7d:1c:64:b8:9e:
18:d8:05:e7:99:b4:3d:04:90:97:16:7c:1b:c8:04:10:61:23:
05:bc:b3:8a:ef:74:89:89:84:68:60:31:1d:12:41:7b:cd:9a:
b8:d0:c5:db:31:de:7d:83:36:59:fe:d0:25:81:b0:60:a1:f1:
92:a9:c6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:32 2026 by rpki-client