Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft
File: rSzwPkTaKLcxnqe3tbEQubjLenA.mft (raw, json)
Hash identifier: Ku2jur3OiUebqLpe471ZvzJgGQWCWd3o4BDjliiM010=
Subject key identifier: 3D:8A:BA:0A:64:09:DA:B8:E3:B0:77:29:1A:1C:46:56:67:6D:4A:DC
Authority key identifier: AD:2C:F0:3E:44:DA:28:B7:31:9E:A7:B7:B5:B1:10:B9:B8:CB:7A:70
Certificate issuer: /CN=ad2cf03e44da28b7319ea7b7b5b110b9b8cb7a70
Certificate serial: 019CE55AD51ACCF52F553FF93BFF7EBFB334
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSzwPkTaKLcxnqe3tbEQubjLenA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft
Manifest number: 1869
Signing time: Fri 13 Mar 2026 04:01:00 +0000
Manifest this update: Fri 13 Mar 2026 04:01:00 +0000
Manifest next update: Sat 14 Mar 2026 04:01:00 +0000
Files and hashes: 1: X50-n9cVU2Zq24SDbQ05Dv_q5v0.roa (hash: S7zmoSUIsI4P7LLg9xapiyTzbeO1NkyzmEJQWzWpHOE=)
2: rSzwPkTaKLcxnqe3tbEQubjLenA.crl (hash: wkoEwlzahFo+97cSm03SfoqJpTxIWMte3dNfexXN8l8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSzwPkTaKLcxnqe3tbEQubjLenA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:5a:d5:1a:cc:f5:2f:55:3f:f9:3b:ff:7e:bf:b3:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2cf03e44da28b7319ea7b7b5b110b9b8cb7a70
Validity
Not Before: Mar 13 04:01:00 2026 GMT
Not After : Mar 14 04:01:00 2026 GMT
Subject: CN=3d8aba0a6409dab8e3b077291a1c4656676d4adc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:42:b7:4e:07:ef:e2:07:02:71:cb:48:ea:13:
7b:c9:1d:05:25:1b:0d:53:40:4c:87:4b:15:20:ca:
27:32:4e:23:43:2d:3d:1e:0b:6e:c3:0c:6d:5b:bc:
00:59:c6:9d:b8:d3:57:95:50:08:e3:d4:41:dc:3c:
55:48:91:69:36:05:bb:7a:76:6c:99:f0:7a:d3:80:
11:be:ac:e8:de:f2:3a:21:43:c3:1a:0a:9a:0c:d2:
ce:5b:27:da:e6:2e:0d:1d:e1:a3:38:b7:3f:d6:13:
aa:6d:7c:05:30:8d:02:66:a9:78:f7:82:a1:16:38:
ec:ca:e8:ad:c7:c1:2a:89:cb:6b:19:82:fe:f9:60:
16:7b:18:b9:56:81:dd:88:28:ad:5a:6a:82:34:65:
79:24:34:c8:a2:0b:87:d8:82:03:67:df:47:b6:6e:
b2:00:93:a7:4f:9e:b4:71:fe:af:2e:07:2c:61:4b:
08:dc:23:2b:e5:cf:0f:b4:25:5c:a2:af:74:88:2a:
3b:7e:62:01:67:16:ac:1f:46:ad:e8:6b:5b:5f:e5:
42:d4:6c:5a:70:e7:c9:e5:01:10:5f:39:9b:80:3d:
1f:c7:9f:21:fa:56:6c:28:c0:84:6a:cd:98:18:47:
69:3b:c5:be:98:b0:d2:d8:5d:f7:ac:97:f2:52:b7:
79:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:8A:BA:0A:64:09:DA:B8:E3:B0:77:29:1A:1C:46:56:67:6D:4A:DC
X509v3 Authority Key Identifier:
keyid:AD:2C:F0:3E:44:DA:28:B7:31:9E:A7:B7:B5:B1:10:B9:B8:CB:7A:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSzwPkTaKLcxnqe3tbEQubjLenA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:c4:de:a4:63:7a:2c:5b:56:ba:47:59:3c:7a:0e:21:4d:35:
ca:0e:63:03:a6:bd:7f:d5:a5:55:c1:ba:ae:37:cb:a6:e9:83:
59:89:5d:f3:06:a2:7f:cd:61:08:a8:cc:ad:5e:d4:28:6c:ee:
15:c8:28:36:f1:f7:dc:3a:5e:95:fe:cd:31:22:c3:47:29:7b:
3d:4e:8e:a4:eb:50:a1:a4:c4:63:43:ac:18:37:2d:95:3e:40:
ea:6e:e6:8d:39:6e:9a:9a:ed:82:67:fc:46:6d:11:8e:fa:e2:
db:73:39:b2:1a:e7:bc:2f:8b:00:65:68:25:c0:05:50:00:46:
de:a9:d3:2a:eb:cc:88:e7:3b:7e:37:87:85:42:b4:c4:46:a5:
3c:97:a1:0e:3a:58:d3:f4:b9:1c:cd:85:ab:03:a5:13:91:58:
c1:fb:14:e0:4b:a0:58:86:9e:01:da:88:91:ab:ec:4d:a8:28:
9c:29:59:4b:18:be:ce:a5:e9:1d:e1:e4:b8:18:93:ca:33:30:
34:ad:88:1e:ed:bb:6b:00:86:bb:9e:10:48:69:22:3f:b5:33:
87:e4:54:e0:dc:95:3c:6f:3e:4c:14:18:60:95:a8:ca:d6:b0:
f0:2e:fb:aa:5a:5a:51:58:a4:e5:4c:4c:07:3c:4a:c4:bd:ad:
66:86:90:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzlWtUazPUvVT/5O/9+v7M0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMmNmMDNlNDRkYTI4YjczMTllYTdiN2I1YjExMGI5Yjhj
YjdhNzAwHhcNMjYwMzEzMDQwMTAwWhcNMjYwMzE0MDQwMTAwWjAzMTEwLwYDVQQD
EygzZDhhYmEwYTY0MDlkYWI4ZTNiMDc3MjkxYTFjNDY1NjY3NmQ0YWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0K3Tgfv4gcCcctI6hN7yR0FJRsN
U0BMh0sVIMonMk4jQy09HgtuwwxtW7wAWcaduNNXlVAI49RB3DxVSJFpNgW7enZs
mfB604ARvqzo3vI6IUPDGgqaDNLOWyfa5i4NHeGjOLc/1hOqbXwFMI0CZql494Kh
Fjjsyuitx8EqictrGYL++WAWexi5VoHdiCitWmqCNGV5JDTIoguH2IIDZ99Htm6y
AJOnT560cf6vLgcsYUsI3CMr5c8PtCVcoq90iCo7fmIBZxasH0at6GtbX+VC1Gxa
cOfJ5QEQXzmbgD0fx58h+lZsKMCEas2YGEdpO8W+mLDS2F33rJfyUrd5ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD2KugpkCdq447B3KRocRlZnbUrcMB8GA1UdIwQY
MBaAFK0s8D5E2ii3MZ6nt7WxELm4y3pwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclN6d1BrVGFLTGN4bnFlM3RiRVF1YmpMZW5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9jYWUzMTktNTU3MS00NmY5LWI1N2Qt
YmUwNjVlMWFjMDY3LzEvclN6d1BrVGFLTGN4bnFlM3RiRVF1YmpMZW5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9jYWUzMTktNTU3MS00NmY5LWI1N2QtYmUwNjVlMWFjMDY3
LzEvclN6d1BrVGFLTGN4bnFlM3RiRVF1YmpMZW5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAecTepGN6
LFtWukdZPHoOIU01yg5jA6a9f9WlVcG6rjfLpumDWYld8waif81hCKjMrV7UKGzu
FcgoNvH33Dpelf7NMSLDRyl7PU6OpOtQoaTEY0OsGDctlT5A6m7mjTlumprtgmf8
Rm0Rjvri23M5shrnvC+LAGVoJcAFUABG3qnTKuvMiOc7fjeHhUK0xEalPJehDjpY
0/S5HM2FqwOlE5FYwfsU4EugWIaeAdqIkavsTagonClZSxi+zqXpHeHkuBiTyjMw
NK2IHu27awCGu54QSGkiP7Uzh+RU4NyVPG8+TBQYYJWoytaw8C77qlpaUVik5UxM
BzxKxL2tZoaQIg==
-----END CERTIFICATE-----
Generated at Fri Mar 13 07:25:04 2026 by rpki-client