Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft
File: s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft (raw, json)
Hash identifier: zuPHCwI/ztDme6Wlo9uOF7WFN+EQZlzynXFV4FXfDpI=
Subject key identifier: BA:97:D4:70:9F:9B:3B:84:56:BC:56:AB:89:D0:04:B9:33:80:B8:59
Authority key identifier: B3:43:51:46:30:DC:17:F3:FE:9B:51:DD:43:41:84:D0:B6:2B:03:C0
Certificate issuer: /CN=b343514630dc17f3fe9b51dd434184d0b62b03c0
Certificate serial: 019DA3AE9415AD2333EFBEDB41800F80E8D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft
Manifest number: 15C2
Signing time: Sun 19 Apr 2026 03:00:20 +0000
Manifest this update: Sun 19 Apr 2026 03:00:20 +0000
Manifest next update: Mon 20 Apr 2026 03:00:20 +0000
Files and hashes: 1: 3tG3zwbaaFuFl6cpIqxTe91Iu4g.roa (hash: JJoTnqlPPDa1SmZHbLUdf1Go4yaIrlgXIH2dNpLzAn8=)
2: 53l_D5g_N2hEJkJMJ3_8BjIEv2Y.roa (hash: XGQ+zMpVhvmcmw4I8+8i5OdAGzf1VzpgvnNvlvgbkC0=)
3: ChfnxGz0VKQRsVnjHyIAinMMsIk.roa (hash: eW5OJ9VGVnnfrTZ+gpRAKAP747DliU0KHrN7X11TVIw=)
4: Ep5Ojkz3GkSwJsrA11qdsEM5pQk.roa (hash: w1Q8xSxbmL/6LZW2i41+YiB+eNvVEBq+XNQ8qrTEQhU=)
5: OZvI4MXWtnolgxghoQ6_cphW1W4.roa (hash: Oi9ZbYQx2WEELwMB6HBFHb18B/3Zxcuia5/qRlgnoFw=)
6: aDzvIFmPuasW-wZl4h5nCLEftQ0.roa (hash: V99/4bZyDIbs4HJhhHYscdVnYmUcdsRDsQGQFwRiELE=)
7: gqMBDEDRSu4xKONst1tdj1bPNsI.asa (hash: x0HezPZk/P/a+aIvTJaAXkz2eR1qdgdIUhB+jiHUu9k=)
8: lXLif39D5KxldHNZbTu-0rsSDYY.roa (hash: mVxFtPQntFOFsnZXkQ8/rUjDQRMlvViyOfc1fE3bjpY=)
9: s0NRRjDcF_P-m1HdQ0GE0LYrA8A.crl (hash: 4szryP+Bwhn0weKmyvYxZ3srSdmfatuIHx6Xb1mNG+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:ae:94:15:ad:23:33:ef:be:db:41:80:0f:80:e8:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b343514630dc17f3fe9b51dd434184d0b62b03c0
Validity
Not Before: Apr 19 03:00:20 2026 GMT
Not After : Apr 20 03:00:20 2026 GMT
Subject: CN=ba97d4709f9b3b8456bc56ab89d004b93380b859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:0b:2f:cf:91:8e:33:4c:fb:57:f5:2b:94:65:
9c:98:93:a1:b8:9f:08:ca:f2:bc:9e:ff:ad:39:c5:
87:60:fa:bc:a1:56:3b:de:34:bf:4a:da:f2:5f:3d:
a5:51:13:67:5e:e5:1f:19:0f:e5:d9:7f:32:35:4c:
77:f7:f3:5e:ae:94:11:54:13:37:a1:00:49:a1:f0:
4a:9c:00:c5:eb:e4:7f:95:82:d4:bb:f4:71:05:09:
7a:fa:41:e7:a3:6c:cd:2d:50:ee:43:29:25:a5:30:
69:64:61:2a:a2:40:ee:7b:ce:fb:dd:5c:7a:fe:60:
69:a0:d9:18:69:d8:92:42:6a:26:5c:2e:67:6d:fa:
2b:35:c3:7a:37:f2:60:8c:1d:86:7b:1d:77:73:e1:
ec:b8:cb:c0:6e:6b:af:f8:d9:42:0f:a1:bc:41:dc:
06:2b:1b:b0:f4:57:0e:5d:a1:4a:e2:85:47:09:84:
0d:fc:dd:6b:df:04:0e:89:cf:13:65:88:90:38:18:
17:74:2d:0e:ea:c6:cc:3e:ca:a2:5e:12:f6:83:78:
3a:70:ae:41:c0:44:d8:5c:c2:fc:9d:db:f8:81:f7:
cf:50:29:f0:2a:a6:88:f9:b7:5c:39:02:37:14:8e:
9c:ba:bd:f4:60:77:31:b9:59:55:79:d4:2e:fa:67:
a1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:97:D4:70:9F:9B:3B:84:56:BC:56:AB:89:D0:04:B9:33:80:B8:59
X509v3 Authority Key Identifier:
keyid:B3:43:51:46:30:DC:17:F3:FE:9B:51:DD:43:41:84:D0:B6:2B:03:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:ff:4d:67:f0:4c:ec:f2:27:90:2a:0d:cb:00:92:24:cd:b0:
74:47:74:6f:89:8c:20:ef:46:5a:2b:04:6d:7c:5f:7f:d8:46:
58:05:d2:2b:aa:18:15:43:a5:52:e9:43:8a:6a:f0:5f:df:a0:
26:a3:9a:b4:53:ba:b5:fe:ad:44:40:cc:8e:07:0f:69:b0:79:
09:dc:6f:56:ea:92:55:16:d2:04:9e:98:a9:d1:a2:fb:a5:1d:
21:b4:8b:22:1b:6e:a7:33:33:23:19:09:35:3b:29:32:7a:95:
50:dd:50:06:5f:30:bc:d5:02:52:7a:70:99:5b:30:5c:eb:b2:
44:c9:38:30:84:2b:87:9d:c7:73:12:db:18:41:98:e5:5e:1e:
7b:0c:fe:af:ba:4a:3c:7f:c7:26:45:43:5d:ae:73:58:8a:b0:
bd:85:2d:f7:2a:12:4d:b1:6d:f4:4d:77:eb:60:ae:4f:1c:b7:
86:0c:89:6c:ad:d7:0f:77:f2:90:ea:c8:b0:40:24:f3:e9:04:
fb:c6:8e:de:30:5f:17:3e:aa:e8:95:f4:47:4d:00:f9:c1:f8:
bb:b1:1e:97:1a:97:97:f2:c7:71:7a:75:88:fa:58:2b:ae:8b:
e0:37:60:7d:2b:af:7e:04:c0:ac:2e:b6:77:bd:9e:4e:3b:f2:
bf:2f:b6:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:36:41 2026 by rpki-client