Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.mft
File: s4slrXyWWJ5KjKpfpIksxN_Me1M.mft (raw, json)
Hash identifier: qr5n8evTwXgTMefY/TNvi4vPZ4XuGN9jeao43PnbCDM=
Subject key identifier: 94:53:E9:2A:1D:61:5B:20:FA:F2:AD:C1:A9:C0:ED:64:DC:6C:D1:80
Authority key identifier: B3:8B:25:AD:7C:96:58:9E:4A:8C:AA:5F:A4:89:2C:C4:DF:CC:7B:53
Certificate issuer: /CN=b38b25ad7c96589e4a8caa5fa4892cc4dfcc7b53
Certificate serial: 019D37524401F899D43A3F4E2559411C8738
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s4slrXyWWJ5KjKpfpIksxN_Me1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 02:00:31 +0000
Manifest this update: Sun 29 Mar 2026 02:00:31 +0000
Manifest next update: Mon 30 Mar 2026 02:00:31 +0000
Files and hashes: 1: VjDmi08eDkQNqosAIn5lUGAfZIA.roa (hash: jWrWoSFJKct0v+ZoZpemlOK9O+tbs5TMpb0HP64364w=)
2: s4slrXyWWJ5KjKpfpIksxN_Me1M.crl (hash: cPAdjyZxGuluOSQ+4GmyOQPkGayhlobReXZIpc5nlec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/s4slrXyWWJ5KjKpfpIksxN_Me1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:44:01:f8:99:d4:3a:3f:4e:25:59:41:1c:87:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b38b25ad7c96589e4a8caa5fa4892cc4dfcc7b53
Validity
Not Before: Mar 29 02:00:31 2026 GMT
Not After : Mar 30 02:00:31 2026 GMT
Subject: CN=9453e92a1d615b20faf2adc1a9c0ed64dc6cd180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6a:6f:36:1d:89:0d:66:07:0c:85:91:cf:b8:
ff:1c:51:65:cc:d9:c8:3b:f4:0d:97:37:ff:ee:c0:
2d:60:e3:7e:c5:6e:e0:2a:c8:0e:6f:4a:31:7f:2a:
a3:44:e5:e8:dd:49:5c:b8:0f:f4:9a:8a:04:4d:a1:
28:6c:28:08:4a:65:c2:04:d9:68:00:ae:48:77:00:
07:f0:df:88:d2:d7:f4:15:cf:a1:18:42:2a:d8:6a:
ae:ae:1b:87:c3:4e:3a:a3:9c:90:73:03:e1:80:e8:
7b:72:34:ea:c1:8a:c6:48:4f:46:20:71:ae:de:52:
9a:b7:4e:ec:20:c4:ce:77:e2:ff:f5:b4:54:94:3d:
73:01:4a:53:9c:aa:4d:c2:58:6f:bb:49:ff:0c:5d:
e9:5e:f1:cb:47:5d:5d:13:1b:c6:4b:7a:e9:b8:99:
5e:ec:d6:57:c7:cb:ed:e9:19:9a:b2:2a:5b:90:b8:
6a:25:6e:46:35:95:9b:aa:51:16:4c:e5:c6:dd:25:
83:89:4a:44:b1:c9:16:22:12:d7:e2:58:0c:f0:33:
d5:e0:10:78:be:28:3c:ae:42:e4:3a:fc:bd:f8:85:
af:05:18:04:74:bf:b4:80:13:ce:e5:d4:a4:1d:59:
a6:bc:60:08:ff:e0:e0:30:c5:5d:c1:75:3c:2f:46:
c6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:53:E9:2A:1D:61:5B:20:FA:F2:AD:C1:A9:C0:ED:64:DC:6C:D1:80
X509v3 Authority Key Identifier:
keyid:B3:8B:25:AD:7C:96:58:9E:4A:8C:AA:5F:A4:89:2C:C4:DF:CC:7B:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s4slrXyWWJ5KjKpfpIksxN_Me1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:fa:88:d4:73:af:32:57:dd:f8:42:70:84:ea:78:2c:b4:9e:
3f:0c:d7:dd:c5:6f:91:e6:c6:4d:e5:6a:45:10:43:c1:c0:0e:
33:c8:7b:97:be:27:07:e1:c0:61:a3:39:38:63:1c:60:aa:c3:
64:3e:df:cc:a9:0c:76:7e:80:87:7c:9e:dc:fe:9d:8c:25:06:
e2:85:d6:0c:f0:bd:b8:d5:8e:70:30:89:a8:65:07:1f:c9:64:
91:d0:eb:73:b4:b8:62:ec:1e:9c:51:f4:cb:18:67:f6:ff:2c:
d5:0e:d1:38:fa:88:85:c2:1d:37:54:92:7a:d9:59:8b:dd:31:
71:66:87:ce:88:5e:2b:d9:cd:d9:3c:b7:11:73:7d:b5:40:65:
b1:d8:13:4d:26:d8:62:6c:43:0f:69:8f:cd:10:c7:d4:50:5a:
a0:96:5d:75:62:05:fd:8d:6f:d7:25:70:99:7d:37:99:db:8b:
3c:cf:d1:d9:d3:d0:2a:e5:51:58:b7:97:b3:72:a0:d1:7c:80:
75:0c:73:0d:e0:97:87:68:35:fd:11:80:98:5d:c6:c8:e3:51:
f4:e5:46:f4:2b:7e:d5:f0:63:4a:4c:2c:dd:d1:8b:c2:d2:99:
48:c1:42:52:64:d7:66:62:f2:65:1d:7c:a7:32:fc:ec:db:64:
2b:5a:20:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03UkQB+JnUOj9OJVlBHIc4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzOGIyNWFkN2M5NjU4OWU0YThjYWE1ZmE0ODkyY2M0ZGZj
YzdiNTMwHhcNMjYwMzI5MDIwMDMxWhcNMjYwMzMwMDIwMDMxWjAzMTEwLwYDVQQD
Eyg5NDUzZTkyYTFkNjE1YjIwZmFmMmFkYzFhOWMwZWQ2NGRjNmNkMTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumpvNh2JDWYHDIWRz7j/HFFlzNnI
O/QNlzf/7sAtYON+xW7gKsgOb0oxfyqjROXo3UlcuA/0mooETaEobCgISmXCBNlo
AK5IdwAH8N+I0tf0Fc+hGEIq2GqurhuHw046o5yQcwPhgOh7cjTqwYrGSE9GIHGu
3lKat07sIMTOd+L/9bRUlD1zAUpTnKpNwlhvu0n/DF3pXvHLR11dExvGS3rpuJle
7NZXx8vt6RmasipbkLhqJW5GNZWbqlEWTOXG3SWDiUpEsckWIhLX4lgM8DPV4BB4
vig8rkLkOvy9+IWvBRgEdL+0gBPO5dSkHVmmvGAI/+DgMMVdwXU8L0bGEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJRT6SodYVsg+vKtwanA7WTcbNGAMB8GA1UdIwQY
MBaAFLOLJa18llieSoyqX6SJLMTfzHtTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczRzbHJYeVdXSjVLaktwZnBJa3N4Tl9NZTFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy80MjkxYTItMDNhOS00MTk1LWIxYTct
M2Y0MDU0N2U1MmQxLzEvczRzbHJYeVdXSjVLaktwZnBJa3N4Tl9NZTFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy80MjkxYTItMDNhOS00MTk1LWIxYTctM2Y0MDU0N2U1MmQx
LzEvczRzbHJYeVdXSjVLaktwZnBJa3N4Tl9NZTFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl/qI1HOv
Mlfd+EJwhOp4LLSePwzX3cVvkebGTeVqRRBDwcAOM8h7l74nB+HAYaM5OGMcYKrD
ZD7fzKkMdn6Ah3ye3P6djCUG4oXWDPC9uNWOcDCJqGUHH8lkkdDrc7S4YuwenFH0
yxhn9v8s1Q7ROPqIhcIdN1SSetlZi90xcWaHzoheK9nN2Ty3EXN9tUBlsdgTTSbY
YmxDD2mPzRDH1FBaoJZddWIF/Y1v1yVwmX03mduLPM/R2dPQKuVRWLeXs3Kg0XyA
dQxzDeCXh2g1/RGAmF3GyONR9OVG9Ct+1fBjSkws3dGLwtKZSMFCUmTXZmLyZR18
pzL87NtkK1ogxQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:26 2026 by rpki-client