Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
File: sPoMerwQeWkV4zW6GXgORz4CeWk.mft (raw, json)
Hash identifier: 19QptlJKPBYJz2xxnXo42sWZY7nY8btAiwpYSpVKOno=
Subject key identifier: B1:7E:C4:6A:EF:E0:59:30:7A:82:55:2B:60:12:28:04:93:A1:79:AD
Authority key identifier: B0:FA:0C:7A:BC:10:79:69:15:E3:35:BA:19:78:0E:47:3E:02:79:69
Certificate issuer: /CN=b0fa0c7abc10796915e335ba19780e473e027969
Certificate serial: 019CF384A42563EF39539E17A372325F869A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
Manifest number: 135E
Signing time: Sun 15 Mar 2026 22:01:22 +0000
Manifest this update: Sun 15 Mar 2026 22:01:22 +0000
Manifest next update: Mon 16 Mar 2026 22:01:22 +0000
Files and hashes: 1: LefKdaCkJCuLWYomPbn7aYaCwt8.roa (hash: dTxOv7XhsigiPPaBEnDTEGV1JBMdxI+S2HXrs+TPL+s=)
2: sPoMerwQeWkV4zW6GXgORz4CeWk.crl (hash: oyc7Js1MtgO2lbecdlo9ViGBN0Ohf+jDmT3dY8rBEK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Mar 2026 22:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f3:84:a4:25:63:ef:39:53:9e:17:a3:72:32:5f:86:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0fa0c7abc10796915e335ba19780e473e027969
Validity
Not Before: Mar 15 22:01:22 2026 GMT
Not After : Mar 16 22:01:22 2026 GMT
Subject: CN=b17ec46aefe059307a82552b6012280493a179ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:02:43:01:62:4f:23:96:6b:6e:4a:9d:25:83:
98:c5:f7:ff:77:0b:54:dd:b4:63:4b:8e:8a:73:a0:
58:ed:25:77:09:eb:d2:0d:79:d4:7f:ea:50:97:cc:
c2:69:ed:01:cf:bf:06:da:99:24:61:a8:3d:c4:3a:
75:b5:0c:bf:3a:0a:de:7d:9a:01:ac:ed:11:8a:7a:
4f:9a:c7:ba:32:9a:c7:fa:d2:1e:af:21:0f:f3:bf:
0a:d8:16:ec:cc:ff:81:10:75:a4:f8:4f:cf:b2:91:
1f:52:01:99:e6:86:b7:e0:72:3c:20:87:6d:c8:0b:
50:ee:f3:e6:c7:fd:e6:9f:ae:49:1c:7f:b7:36:69:
4b:0d:30:5e:6b:d9:ef:62:78:97:84:51:b3:04:03:
fb:8f:55:93:fd:5b:77:23:c5:c4:e2:54:8e:30:65:
b2:d7:6f:d4:26:97:ab:59:ec:f2:37:0d:a1:7d:a4:
76:8b:93:f5:ab:91:13:cd:ec:29:18:a2:70:bf:bb:
8a:da:4f:ed:dc:21:4e:ec:4e:f3:c9:bd:ba:38:d4:
84:94:bb:0b:68:6b:22:be:e9:74:61:2e:ec:fe:7f:
52:de:99:f2:04:74:8d:b6:18:c0:0a:46:c9:14:a9:
a1:01:b9:db:2d:26:fb:2a:a8:d5:a0:40:37:33:1a:
3e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:7E:C4:6A:EF:E0:59:30:7A:82:55:2B:60:12:28:04:93:A1:79:AD
X509v3 Authority Key Identifier:
keyid:B0:FA:0C:7A:BC:10:79:69:15:E3:35:BA:19:78:0E:47:3E:02:79:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:4b:5b:3a:17:36:c5:e6:c5:0f:8f:cd:e6:a1:f9:76:d5:b6:
f1:17:e0:db:52:68:4e:2d:6c:af:a8:ec:e6:ff:1b:c9:07:d5:
23:2f:99:66:97:a9:cf:b5:90:34:42:40:48:fb:0e:91:49:88:
89:20:9c:7d:33:db:61:c8:fe:d2:20:e5:21:81:ff:08:e4:ca:
7b:8e:72:92:2a:ec:03:1d:30:a9:97:d7:bc:ba:1a:b5:1b:c4:
28:21:c7:9f:e7:78:18:36:80:9f:bf:44:7d:ef:d8:b9:d2:99:
34:07:74:ba:a8:05:39:74:e8:b9:a8:a6:19:d5:61:c3:0c:7e:
32:91:f8:14:5b:7f:00:c8:b2:73:af:d4:cf:d3:9c:01:cf:3d:
8f:78:05:71:26:39:8b:a9:46:7e:87:6f:8c:12:a3:a7:7c:65:
43:22:49:30:51:3f:3f:3d:20:5e:dd:fb:ad:6e:22:8f:1d:ec:
85:53:48:40:0d:4f:4d:12:01:45:99:20:49:4d:e9:82:be:49:
32:c7:99:fe:01:52:8c:33:54:d4:a9:d0:f7:6d:e5:35:93:bb:
7d:f8:8c:30:e8:b0:4a:b6:71:3e:be:98:97:1c:df:53:a6:5a:
5c:38:51:ea:29:79:ee:98:6b:18:cc:21:6a:0f:07:4e:37:99:
1c:de:36:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzzhKQlY+85U54Xo3IyX4aaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwZmEwYzdhYmMxMDc5NjkxNWUzMzViYTE5NzgwZTQ3M2Uw
Mjc5NjkwHhcNMjYwMzE1MjIwMTIyWhcNMjYwMzE2MjIwMTIyWjAzMTEwLwYDVQQD
EyhiMTdlYzQ2YWVmZTA1OTMwN2E4MjU1MmI2MDEyMjgwNDkzYTE3OWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQJDAWJPI5ZrbkqdJYOYxff/dwtU
3bRjS46Kc6BY7SV3CevSDXnUf+pQl8zCae0Bz78G2pkkYag9xDp1tQy/OgrefZoB
rO0RinpPmse6MprH+tIeryEP878K2BbszP+BEHWk+E/PspEfUgGZ5oa34HI8IIdt
yAtQ7vPmx/3mn65JHH+3NmlLDTBea9nvYniXhFGzBAP7j1WT/Vt3I8XE4lSOMGWy
12/UJperWezyNw2hfaR2i5P1q5ETzewpGKJwv7uK2k/t3CFO7E7zyb26ONSElLsL
aGsivul0YS7s/n9S3pnyBHSNthjACkbJFKmhAbnbLSb7KqjVoEA3Mxo+PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLF+xGrv4FkweoJVK2ASKASToXmtMB8GA1UdIwQY
MBaAFLD6DHq8EHlpFeM1uhl4Dkc+AnlpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1BvTWVyd1FlV2tWNHpXNkdYZ09SejRDZVdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC85NzQ3NDktNGQ3ZS00NDUwLTk3OTMt
ZGY4NTRmNDdiYWY0LzEvc1BvTWVyd1FlV2tWNHpXNkdYZ09SejRDZVdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC85NzQ3NDktNGQ3ZS00NDUwLTk3OTMtZGY4NTRmNDdiYWY0
LzEvc1BvTWVyd1FlV2tWNHpXNkdYZ09SejRDZVdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADEtbOhc2
xebFD4/N5qH5dtW28Rfg21JoTi1sr6js5v8byQfVIy+ZZpepz7WQNEJASPsOkUmI
iSCcfTPbYcj+0iDlIYH/COTKe45ykirsAx0wqZfXvLoatRvEKCHHn+d4GDaAn79E
fe/YudKZNAd0uqgFOXTouaimGdVhwwx+MpH4FFt/AMiyc6/Uz9OcAc89j3gFcSY5
i6lGfodvjBKjp3xlQyJJMFE/Pz0gXt37rW4ijx3shVNIQA1PTRIBRZkgSU3pgr5J
MseZ/gFSjDNU1KnQ923lNZO7ffiMMOiwSrZxPr6YlxzfU6ZaXDhR6il57phrGMwh
ag8HTjeZHN42Sw==
-----END CERTIFICATE-----
Generated at Mon Mar 16 07:29:38 2026 by rpki-client