Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
File: sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft (raw, json)
Hash identifier: Z3YdNJmcRJ1145VQObAAozQ1pU/wHW1hvnA0hNPvUAQ=
Subject key identifier: 65:93:32:A7:06:E9:93:08:CB:97:E9:44:57:5E:02:97:E9:B8:01:B6
Authority key identifier: B1:9F:07:66:9E:58:EC:32:B9:D9:13:2E:2C:A6:D1:9C:2E:94:93:60
Certificate issuer: /CN=b19f07669e58ec32b9d9132e2ca6d19c2e949360
Certificate serial: 019D37F71810FC93E44EBF85B9EC7EC5F219
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 05:00:33 +0000
Manifest this update: Sun 29 Mar 2026 05:00:33 +0000
Manifest next update: Mon 30 Mar 2026 05:00:33 +0000
Files and hashes: 1: 60O0SRzjGsORJ1LBFnHv2U1PHTk.roa (hash: 3tf/Ui4ibWz+Ljka1guaW3+IweRIpdh9pYNIaOP6ChU=)
2: F09300GwdMIta1lj7Ul3pmpo6e8.roa (hash: ajcgZbaCsRlZup9MjYbC/n7SyiZtpZ4+r47ylzeWUgk=)
3: R4SqufV61FjY_qt6XBJL1xKD3Yk.roa (hash: oxpnmOAxuGivN4BOARVKb2erg4+PNj4PUrM7BceH1yo=)
4: i8jFdg5Mow9Dh-pthFrBPnRY_7E.roa (hash: cPsXapsQYVV5sthITpOROGImuL+pHXuvlOflhuTnK7c=)
5: jJ8Ja4wQj77UXskU4dYzizx-fO8.roa (hash: D/f3chU7o9XZeTFLsqkW7hmyKTnJCw4DJq8f3FXAw8c=)
6: sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl (hash: 4i1dROxOTVjpYhJLG9/u1qU4zELclzgM+ZFXZW2D97I=)
7: umCBjEn3NnVHg79eLHC3xk9rgS0.roa (hash: /fSksQdekqYTESP/mXyQvaIFQ1BWx6zsTRDj8qcB0V4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:18:10:fc:93:e4:4e:bf:85:b9:ec:7e:c5:f2:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b19f07669e58ec32b9d9132e2ca6d19c2e949360
Validity
Not Before: Mar 29 05:00:33 2026 GMT
Not After : Mar 30 05:00:33 2026 GMT
Subject: CN=659332a706e99308cb97e944575e0297e9b801b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:75:29:c3:fa:7e:8c:40:8c:a5:a4:d3:45:7c:
18:dc:5d:83:50:3c:9c:c6:d6:7c:cb:b0:af:a3:9b:
23:a0:91:11:87:c6:d7:6d:e9:5c:0f:6e:a9:21:a8:
91:3f:96:6e:75:c0:fd:d2:4b:aa:cc:97:97:81:93:
5e:22:c9:64:6b:ef:dd:a5:59:5c:91:3f:65:d5:34:
0a:3e:0e:15:e4:e4:53:41:95:2f:ed:64:cb:38:ff:
0f:c9:2a:b1:a3:72:2f:5d:e5:d1:e3:32:a9:28:59:
11:ba:4b:d1:a4:5a:87:c3:a6:60:49:fa:97:68:6b:
e1:f4:b4:bd:2c:5c:a0:56:ac:52:24:64:1b:21:56:
e8:9f:42:01:26:38:fc:1f:24:55:6b:ba:47:d2:72:
48:37:38:75:82:ae:6d:f4:4b:aa:19:af:39:0d:c0:
81:ab:bf:e3:cc:22:ce:97:41:83:76:9b:91:ea:cb:
a9:a8:34:15:b1:c1:6f:8c:67:e3:34:cb:4b:1e:bf:
fa:9f:d0:e1:1e:d4:2f:99:10:40:0c:61:24:ee:e2:
66:a0:58:e4:8f:83:ae:57:f6:f6:54:d4:06:80:0f:
14:3d:05:55:ac:5e:ca:67:93:d8:08:fc:01:39:47:
49:1d:67:cf:4a:1d:5e:48:df:98:c8:98:a1:25:fe:
f5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:93:32:A7:06:E9:93:08:CB:97:E9:44:57:5E:02:97:E9:B8:01:B6
X509v3 Authority Key Identifier:
keyid:B1:9F:07:66:9E:58:EC:32:B9:D9:13:2E:2C:A6:D1:9C:2E:94:93:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:a8:3a:67:03:1e:44:b0:56:aa:ce:bd:32:41:76:17:3e:18:
75:6e:a1:5e:4c:2d:e6:3e:01:2a:d0:dd:48:bb:1e:2c:40:8b:
a7:72:24:ce:c0:01:ae:9f:53:ad:1d:d4:c0:0c:bb:5e:d8:d0:
68:11:84:05:ce:ff:d6:8f:ff:fd:3f:24:03:5c:a3:5c:e4:21:
c7:0b:5c:c9:bf:ec:05:7e:ef:52:c2:58:ab:e7:67:db:58:a0:
f8:bb:60:59:bd:ee:db:35:d7:4e:f4:dd:01:40:92:6d:ab:06:
b5:3e:35:e1:57:bb:56:e4:8e:79:51:59:66:7a:25:da:53:d6:
14:ba:4f:fe:98:ee:27:f1:26:a6:6e:de:e2:4d:28:55:9c:97:
6a:95:91:de:7c:a3:03:aa:5a:58:b2:fd:0e:2b:7c:5a:5f:c0:
a9:c3:1a:dd:92:30:55:29:e9:7d:92:94:20:49:a0:0a:4d:ac:
c7:0d:84:f6:2d:dd:bb:ba:2c:cd:67:4a:d7:85:06:b1:24:95:
ad:09:0f:20:40:ba:5f:82:81:b3:be:48:a2:33:51:d8:9f:05:
47:bb:ae:b9:36:23:10:5a:6f:a6:1f:07:9b:98:fe:f6:c7:ad:
59:ae:b4:6d:ba:c7:b1:ab:cd:b9:d8:c2:2f:58:a1:c1:3d:5c:
5a:cf:ef:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ039xgQ/JPkTr+Fuex+xfIZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxOWYwNzY2OWU1OGVjMzJiOWQ5MTMyZTJjYTZkMTljMmU5
NDkzNjAwHhcNMjYwMzI5MDUwMDMzWhcNMjYwMzMwMDUwMDMzWjAzMTEwLwYDVQQD
Eyg2NTkzMzJhNzA2ZTk5MzA4Y2I5N2U5NDQ1NzVlMDI5N2U5YjgwMWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHUpw/p+jECMpaTTRXwY3F2DUDyc
xtZ8y7Cvo5sjoJERh8bXbelcD26pIaiRP5ZudcD90kuqzJeXgZNeIslka+/dpVlc
kT9l1TQKPg4V5ORTQZUv7WTLOP8PySqxo3IvXeXR4zKpKFkRukvRpFqHw6ZgSfqX
aGvh9LS9LFygVqxSJGQbIVbon0IBJjj8HyRVa7pH0nJINzh1gq5t9EuqGa85DcCB
q7/jzCLOl0GDdpuR6supqDQVscFvjGfjNMtLHr/6n9DhHtQvmRBADGEk7uJmoFjk
j4OuV/b2VNQGgA8UPQVVrF7KZ5PYCPwBOUdJHWfPSh1eSN+YyJihJf71GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGWTMqcG6ZMIy5fpRFdeApfpuAG2MB8GA1UdIwQY
MBaAFLGfB2aeWOwyudkTLiym0ZwulJNgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1o4SFpwNVk3REs1MlJNdUxLYlJuQzZVazJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy82MjZlZWYtMTJkMC00N2ZhLWI2MzMt
NjQxZGQ0Mjg4YzQwLzEvc1o4SFpwNVk3REs1MlJNdUxLYlJuQzZVazJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy82MjZlZWYtMTJkMC00N2ZhLWI2MzMtNjQxZGQ0Mjg4YzQw
LzEvc1o4SFpwNVk3REs1MlJNdUxLYlJuQzZVazJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmqg6ZwMe
RLBWqs69MkF2Fz4YdW6hXkwt5j4BKtDdSLseLECLp3IkzsABrp9TrR3UwAy7XtjQ
aBGEBc7/1o///T8kA1yjXOQhxwtcyb/sBX7vUsJYq+dn21ig+LtgWb3u2zXXTvTd
AUCSbasGtT414Ve7VuSOeVFZZnol2lPWFLpP/pjuJ/Empm7e4k0oVZyXapWR3nyj
A6paWLL9Dit8Wl/AqcMa3ZIwVSnpfZKUIEmgCk2sxw2E9i3du7oszWdK14UGsSSV
rQkPIEC6X4KBs75IojNR2J8FR7uuuTYjEFpvph8Hm5j+9setWa60bbrHsavNudjC
L1ihwT1cWs/vwg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:24 2026 by rpki-client