Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft
File: sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft (raw, json)
Hash identifier: uAp5S3FGe9Psoq5/SFIlLHBQjKLhZ9V5hlysTf4gJSI=
Subject key identifier: 18:89:B0:24:4D:A3:F4:5E:2C:32:33:A7:7B:19:B8:75:C7:CF:15:60
Authority key identifier: B1:CD:C2:6D:44:EA:F8:56:54:48:1E:95:81:04:3E:14:88:77:65:B4
Certificate issuer: /CN=b1cdc26d44eaf85654481e9581043e14887765b4
Certificate serial: 019CAAFD064524BCE8E8E93DC2820E6F3D8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft
Manifest number: 13A1
Signing time: Sun 01 Mar 2026 20:00:34 +0000
Manifest this update: Sun 01 Mar 2026 20:00:34 +0000
Manifest next update: Mon 02 Mar 2026 20:00:34 +0000
Files and hashes: 1: X1WuKlWJ7N-82KTPxady2cIXznU.roa (hash: CxlgvTkL1NuAZ+neb0ZSrZggj/ih2/o/ym4OjDYej4w=)
2: Zopjwe1rzd92yl72g_6NHQcrS2g.roa (hash: nDvQP9lRFjKHJxmHIMp23P7uE0RhUeA887SfeMIm2EU=)
3: jYp53rCL9Z5-pTbrDxeWvfKMlNU.roa (hash: FExYJd4IW0AFEGSSJ7W+rnnUSnn7gKOoCc+pFC2Nly4=)
4: sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.crl (hash: sr3WAlTZNo48772udMMwRlEctgnqMSG4WdElzn2eg2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:06:45:24:bc:e8:e8:e9:3d:c2:82:0e:6f:3d:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1cdc26d44eaf85654481e9581043e14887765b4
Validity
Not Before: Mar 1 20:00:34 2026 GMT
Not After : Mar 2 20:00:34 2026 GMT
Subject: CN=1889b0244da3f45e2c3233a77b19b875c7cf1560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b1:aa:8f:b0:7e:23:d9:b7:48:f9:e1:68:05:
03:e2:f0:ec:34:53:10:e2:62:a2:4a:41:a6:25:da:
0d:c0:05:2c:4a:67:69:63:f2:9b:de:5c:22:e1:db:
f9:7f:1b:3c:29:3c:91:32:f3:37:b6:f1:e7:a1:aa:
17:66:68:55:33:2d:fc:0d:a8:c7:46:15:53:12:0a:
e5:10:e7:8f:83:6f:9b:a3:76:e6:1d:b9:67:55:32:
f0:af:82:b8:e6:1a:da:49:5d:56:e5:6d:62:58:74:
6b:f2:56:2b:3e:ff:35:b0:b0:13:98:ae:9f:c6:98:
03:be:2a:15:6e:3f:01:b8:6c:a1:59:d7:eb:9d:c5:
0d:68:03:27:82:5e:f5:b9:af:90:bd:fa:e6:85:25:
05:83:04:8c:48:b9:f5:5b:85:46:5f:a6:d7:d5:c1:
8e:44:c7:87:6e:fd:6c:7f:58:47:f8:69:12:e6:84:
16:31:dd:0f:61:2d:41:f1:85:e1:37:38:88:af:fa:
8c:d2:8e:d0:02:52:1e:fc:41:0d:a1:de:95:a5:bf:
46:82:67:dd:4e:c2:e5:05:4c:89:b6:c5:20:37:80:
27:eb:f7:37:96:f6:71:b8:a9:14:0d:72:82:ba:a0:
a9:3d:58:53:88:90:8d:b3:bc:96:27:64:ba:40:c2:
b0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:89:B0:24:4D:A3:F4:5E:2C:32:33:A7:7B:19:B8:75:C7:CF:15:60
X509v3 Authority Key Identifier:
keyid:B1:CD:C2:6D:44:EA:F8:56:54:48:1E:95:81:04:3E:14:88:77:65:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:1d:9f:61:5d:12:2b:b4:d2:c4:f7:4b:49:94:83:3b:6d:cc:
da:f2:08:97:20:50:d8:29:70:79:6b:7d:58:65:67:0e:04:86:
b3:b8:d2:a2:92:75:9a:83:09:4e:84:68:cc:31:05:9f:d2:e6:
fa:7e:67:3c:ee:92:8d:28:91:9d:84:ad:28:8e:08:a4:a5:73:
04:3f:ce:d5:dc:61:0a:78:06:cb:af:30:23:8b:c3:d5:8d:2f:
da:06:da:50:c5:4d:cf:de:bd:d2:11:33:94:c8:9f:88:52:53:
0a:3f:9c:a0:d2:28:38:0d:9b:cd:ea:f0:e5:23:25:c6:fc:a7:
78:dc:08:c7:0d:51:81:27:70:a9:6f:70:8b:6a:a0:33:e2:3e:
1b:8a:1f:4f:b7:e4:a0:4b:ae:8d:01:04:33:19:9f:50:fe:58:
5a:60:30:f9:bb:b9:0a:4e:77:9b:58:3e:7a:c6:29:b4:9a:d9:
39:cd:4b:8c:7c:ad:6b:24:eb:de:66:48:b0:c7:48:e9:e3:8c:
10:90:7e:fb:db:eb:b5:c8:59:f5:49:11:a9:e1:7e:3b:b5:57:
b9:4f:7c:30:55:68:89:2e:1e:e9:2a:42:33:39:c7:9c:21:34:
59:0f:63:e1:e0:6b:a1:b2:cb:db:71:3d:fd:e3:31:87:50:a0:
45:71:61:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/QZFJLzo6Ok9woIObz2MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxY2RjMjZkNDRlYWY4NTY1NDQ4MWU5NTgxMDQzZTE0ODg3
NzY1YjQwHhcNMjYwMzAxMjAwMDM0WhcNMjYwMzAyMjAwMDM0WjAzMTEwLwYDVQQD
EygxODg5YjAyNDRkYTNmNDVlMmMzMjMzYTc3YjE5Yjg3NWM3Y2YxNTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLGqj7B+I9m3SPnhaAUD4vDsNFMQ
4mKiSkGmJdoNwAUsSmdpY/Kb3lwi4dv5fxs8KTyRMvM3tvHnoaoXZmhVMy38DajH
RhVTEgrlEOePg2+bo3bmHblnVTLwr4K45hraSV1W5W1iWHRr8lYrPv81sLATmK6f
xpgDvioVbj8BuGyhWdfrncUNaAMngl71ua+QvfrmhSUFgwSMSLn1W4VGX6bX1cGO
RMeHbv1sf1hH+GkS5oQWMd0PYS1B8YXhNziIr/qM0o7QAlIe/EENod6Vpb9Ggmfd
TsLlBUyJtsUgN4An6/c3lvZxuKkUDXKCuqCpPVhTiJCNs7yWJ2S6QMKwkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBiJsCRNo/ReLDIzp3sZuHXHzxVgMB8GA1UdIwQY
MBaAFLHNwm1E6vhWVEgelYEEPhSId2W0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2MzQ2JVVHEtRlpVU0I2VmdRUS1GSWgzWmJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9hYWFkYWMtNDgwOS00OTU1LWFjNjIt
OGY5Y2EwZWJjY2FiLzEvc2MzQ2JVVHEtRlpVU0I2VmdRUS1GSWgzWmJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9hYWFkYWMtNDgwOS00OTU1LWFjNjItOGY5Y2EwZWJjY2Fi
LzEvc2MzQ2JVVHEtRlpVU0I2VmdRUS1GSWgzWmJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADx2fYV0S
K7TSxPdLSZSDO23M2vIIlyBQ2ClweWt9WGVnDgSGs7jSopJ1moMJToRozDEFn9Lm
+n5nPO6SjSiRnYStKI4IpKVzBD/O1dxhCngGy68wI4vD1Y0v2gbaUMVNz9690hEz
lMifiFJTCj+coNIoOA2bzerw5SMlxvyneNwIxw1RgSdwqW9wi2qgM+I+G4ofT7fk
oEuujQEEMxmfUP5YWmAw+bu5Ck53m1g+esYptJrZOc1LjHytayTr3mZIsMdI6eOM
EJB++9vrtchZ9UkRqeF+O7VXuU98MFVoiS4e6SpCMznHnCE0WQ9j4eBrobLL23E9
/eMxh1CgRXFh3Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:57 2026 by rpki-client