Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft
File: s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft (raw, json)
Hash identifier: tmPO00FC4Ks1maUyGgJOe+h6gjNr2qBrrw5ErkD1+lY=
Subject key identifier: 60:E7:00:08:6F:78:F5:29:EA:85:53:BF:E5:B4:2F:EF:55:31:9D:06
Authority key identifier: B3:43:51:46:30:DC:17:F3:FE:9B:51:DD:43:41:84:D0:B6:2B:03:C0
Certificate issuer: /CN=b343514630dc17f3fe9b51dd434184d0b62b03c0
Certificate serial: 019CA8A0D430115012247ADB3A883B4C925B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft
Manifest number: 1540
Signing time: Sun 01 Mar 2026 09:00:38 +0000
Manifest this update: Sun 01 Mar 2026 09:00:38 +0000
Manifest next update: Mon 02 Mar 2026 09:00:38 +0000
Files and hashes: 1: 3tG3zwbaaFuFl6cpIqxTe91Iu4g.roa (hash: JJoTnqlPPDa1SmZHbLUdf1Go4yaIrlgXIH2dNpLzAn8=)
2: 53l_D5g_N2hEJkJMJ3_8BjIEv2Y.roa (hash: XGQ+zMpVhvmcmw4I8+8i5OdAGzf1VzpgvnNvlvgbkC0=)
3: ChfnxGz0VKQRsVnjHyIAinMMsIk.roa (hash: eW5OJ9VGVnnfrTZ+gpRAKAP747DliU0KHrN7X11TVIw=)
4: Ep5Ojkz3GkSwJsrA11qdsEM5pQk.roa (hash: w1Q8xSxbmL/6LZW2i41+YiB+eNvVEBq+XNQ8qrTEQhU=)
5: OZvI4MXWtnolgxghoQ6_cphW1W4.roa (hash: Oi9ZbYQx2WEELwMB6HBFHb18B/3Zxcuia5/qRlgnoFw=)
6: aDzvIFmPuasW-wZl4h5nCLEftQ0.roa (hash: V99/4bZyDIbs4HJhhHYscdVnYmUcdsRDsQGQFwRiELE=)
7: gqMBDEDRSu4xKONst1tdj1bPNsI.asa (hash: x0HezPZk/P/a+aIvTJaAXkz2eR1qdgdIUhB+jiHUu9k=)
8: lXLif39D5KxldHNZbTu-0rsSDYY.roa (hash: mVxFtPQntFOFsnZXkQ8/rUjDQRMlvViyOfc1fE3bjpY=)
9: s0NRRjDcF_P-m1HdQ0GE0LYrA8A.crl (hash: HYXSOE0NK121GgkU+GqZ7nqCNkPKZJLtjYxm9PsN/9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:a0:d4:30:11:50:12:24:7a:db:3a:88:3b:4c:92:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b343514630dc17f3fe9b51dd434184d0b62b03c0
Validity
Not Before: Mar 1 09:00:38 2026 GMT
Not After : Mar 2 09:00:38 2026 GMT
Subject: CN=60e700086f78f529ea8553bfe5b42fef55319d06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8a:a3:ff:c4:88:16:6c:e8:20:58:2e:0a:92:
ce:1c:40:01:b5:c8:95:a6:3b:26:a3:29:92:cf:fa:
f5:a6:0b:d6:6e:a3:8b:f6:a2:7d:7e:71:82:6e:e5:
97:6c:1c:8f:cd:13:5b:a6:9c:ac:80:dc:47:b9:44:
ae:4b:59:ab:93:82:b4:ba:9a:6e:5d:90:97:a4:c2:
f1:9e:ff:0e:0a:88:8f:ed:5d:72:60:ca:7f:5b:a7:
b2:71:38:54:5f:de:9c:ed:e1:84:64:28:d2:03:26:
70:d1:e8:68:35:5b:bf:df:28:81:88:86:b3:94:9c:
e4:eb:bd:56:ea:c3:1d:91:21:6c:80:05:fc:a6:fb:
0e:93:6c:0e:dc:a5:6f:b2:28:ec:32:a7:f6:6e:9b:
88:0e:b4:d4:8f:07:86:15:8f:64:96:08:23:46:b9:
5d:43:d5:93:10:5b:4f:4b:0a:6b:56:22:75:d9:9c:
03:47:37:a8:92:2e:40:6c:00:30:82:b2:94:07:4b:
4e:96:21:8c:3f:1c:70:66:d3:d4:9a:34:e0:b8:9e:
1c:8c:57:6d:49:29:d8:8f:4d:02:a0:b7:69:f5:ac:
75:88:e7:33:3f:08:32:bb:6d:46:71:be:1f:bf:c2:
34:18:fb:fb:a6:2c:13:d9:10:03:b1:e7:2b:50:46:
48:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E7:00:08:6F:78:F5:29:EA:85:53:BF:E5:B4:2F:EF:55:31:9D:06
X509v3 Authority Key Identifier:
keyid:B3:43:51:46:30:DC:17:F3:FE:9B:51:DD:43:41:84:D0:B6:2B:03:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:10:b0:36:07:a9:00:75:82:ac:4b:b3:20:46:79:7a:07:c5:
34:63:9d:d6:71:c8:5e:6b:e7:5e:c5:27:d8:b8:41:07:10:7a:
c9:cc:c2:57:39:c3:e0:52:4e:11:20:f9:bb:ac:e4:c1:6d:f9:
e1:21:36:e6:e4:e4:33:5c:3d:aa:f8:3d:0e:dd:88:06:81:41:
ca:63:5a:8f:56:33:25:39:e0:6e:99:da:21:09:97:80:a1:62:
e2:ba:e7:fa:90:e9:a9:e1:38:f4:5d:78:ac:11:b6:ee:6d:49:
49:b2:fb:54:76:ad:1b:5e:a4:03:b2:69:b6:d9:ec:7a:44:11:
f6:41:97:3b:49:21:68:11:a8:43:36:10:02:10:5f:47:f9:86:
fb:43:4f:3f:38:5c:d4:cc:28:27:25:eb:02:12:c1:16:2b:1e:
ca:f9:cd:ad:0b:06:89:ca:55:1e:8c:01:89:06:8c:ea:34:3c:
e9:b6:3c:85:89:db:81:82:e9:98:bb:eb:bd:cf:5b:39:6a:45:
e0:be:12:ba:69:c2:99:bc:bb:9b:94:11:f7:66:c1:06:25:1e:
d1:1a:eb:83:4a:70:e1:54:d6:ad:32:be:98:3e:99:22:01:f2:
1a:38:2f:50:74:4e:a6:58:71:6b:8d:d3:b3:05:11:39:3f:4e:
3f:c6:e7:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:27:48 2026 by rpki-client