Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.mft
File: S_asD7A5JnNFTDlH9DV-RZTtJm0.mft (raw, json)
Hash identifier: 1w9PIf8e9va4ICJ9x72lflcoaKvd/jA3xlbxOWmWwuE=
Subject key identifier: F2:56:8D:0D:43:E1:86:F6:3B:84:17:8F:AC:6A:0C:F6:B2:A1:83:CD
Authority key identifier: 4B:F6:AC:0F:B0:39:26:73:45:4C:39:47:F4:35:7E:45:94:ED:26:6D
Certificate issuer: /CN=4bf6ac0fb0392673454c3947f4357e4594ed266d
Certificate serial: 019CAAC6F3F453025D96864B6586A242F474
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_asD7A5JnNFTDlH9DV-RZTtJm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 19:01:31 +0000
Manifest this update: Sun 01 Mar 2026 19:01:31 +0000
Manifest next update: Mon 02 Mar 2026 19:01:31 +0000
Files and hashes: 1: NW-rkeD4Q3i4CBn4OpnLQGqqn1o.roa (hash: h8M7ms2bpqiMtf9k+v+XnZ9DC8UMB3Fa8eDf6MLIXMk=)
2: S_asD7A5JnNFTDlH9DV-RZTtJm0.crl (hash: YYK1d/ny/T3th2Zb/H++H5PIbChM4iaMR6pRQHd2DdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/S_asD7A5JnNFTDlH9DV-RZTtJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:f3:f4:53:02:5d:96:86:4b:65:86:a2:42:f4:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bf6ac0fb0392673454c3947f4357e4594ed266d
Validity
Not Before: Mar 1 19:01:31 2026 GMT
Not After : Mar 2 19:01:31 2026 GMT
Subject: CN=f2568d0d43e186f63b84178fac6a0cf6b2a183cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:96:69:08:f4:73:50:bd:b5:56:bb:f8:05:fe:
3d:15:32:b1:2c:81:48:b7:80:06:37:8a:3e:5f:d8:
d3:14:61:fe:71:a1:38:c1:2f:09:b8:2c:6b:9d:70:
7e:fd:28:75:f1:01:1c:97:36:d1:09:76:f4:2e:1a:
c4:e6:e6:f6:d1:3a:15:75:61:5c:85:07:14:db:c1:
95:db:71:44:6c:05:af:25:f1:5a:7d:bb:f9:6c:08:
a5:3e:f1:fa:ef:38:42:e1:74:be:3b:c0:83:9e:dd:
b5:39:ec:27:1e:7b:63:15:2b:d6:19:de:cd:98:52:
a3:6d:54:a1:8c:9c:3c:60:6d:c9:86:71:7c:f5:66:
30:38:dc:e6:87:b4:41:fa:a5:11:8e:20:d7:7f:1b:
99:f5:0f:73:3f:30:ca:19:67:56:8f:2f:30:28:c6:
0c:2d:48:e6:f8:c2:44:55:0e:70:fb:50:bd:2e:f9:
93:9e:42:c6:7b:f0:92:f9:7d:8b:3a:15:a4:ff:cb:
5b:67:10:a0:6a:58:96:c0:92:c1:b6:88:c7:37:2d:
54:f0:68:8f:b3:0b:6c:4d:2e:75:c7:f8:a5:ab:7c:
24:29:3e:52:22:7e:ac:cd:c1:ef:40:c2:4d:7e:e1:
97:99:e2:1c:d6:48:f4:87:52:46:bf:ff:ea:5f:51:
35:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:56:8D:0D:43:E1:86:F6:3B:84:17:8F:AC:6A:0C:F6:B2:A1:83:CD
X509v3 Authority Key Identifier:
keyid:4B:F6:AC:0F:B0:39:26:73:45:4C:39:47:F4:35:7E:45:94:ED:26:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_asD7A5JnNFTDlH9DV-RZTtJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:da:30:60:64:5c:5f:d0:03:28:99:db:35:69:14:6b:f9:39:
3c:a9:44:8e:de:a9:ca:f3:50:42:d9:2f:50:38:42:d5:ff:a0:
1d:05:4c:98:4e:64:3a:d1:59:38:6d:18:e7:2d:67:a6:84:bf:
ac:9b:8b:46:12:98:b3:d8:fd:3b:44:38:6e:95:c8:da:06:8c:
9c:0c:d9:50:f0:7c:d5:4a:65:2a:eb:a3:0e:08:4d:fb:3b:fb:
71:a6:9c:4b:85:df:86:85:3e:61:83:29:20:ef:49:5c:d4:ec:
ee:71:6c:93:d0:24:3a:cd:72:dc:39:59:b3:ce:f5:16:c6:35:
eb:06:13:c8:9c:04:93:ce:14:6b:f6:b9:99:4b:a0:df:88:dc:
e1:41:b9:d5:7d:3d:5a:8f:22:92:c3:ce:eb:ff:ae:42:df:ec:
25:94:60:09:9f:45:02:b3:ea:47:91:8d:b7:4a:8c:d7:e0:b4:
75:85:46:7b:d3:35:00:08:82:eb:1e:04:d4:84:92:74:c4:46:
64:4c:7a:96:d3:11:4a:92:dd:ed:a4:fc:58:d3:a0:f4:8c:26:
d5:d9:98:33:e3:97:d9:53:72:7e:50:f8:b0:34:c2:6b:0d:f3:
8e:59:3f:df:65:e4:0e:33:a1:65:27:03:f0:99:c1:c0:a8:2a:
68:84:f2:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxvP0UwJdloZLZYaiQvR0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZjZhYzBmYjAzOTI2NzM0NTRjMzk0N2Y0MzU3ZTQ1OTRl
ZDI2NmQwHhcNMjYwMzAxMTkwMTMxWhcNMjYwMzAyMTkwMTMxWjAzMTEwLwYDVQQD
EyhmMjU2OGQwZDQzZTE4NmY2M2I4NDE3OGZhYzZhMGNmNmIyYTE4M2NkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJZpCPRzUL21Vrv4Bf49FTKxLIFI
t4AGN4o+X9jTFGH+caE4wS8JuCxrnXB+/Sh18QEclzbRCXb0LhrE5ub20ToVdWFc
hQcU28GV23FEbAWvJfFafbv5bAilPvH67zhC4XS+O8CDnt21OewnHntjFSvWGd7N
mFKjbVShjJw8YG3JhnF89WYwONzmh7RB+qURjiDXfxuZ9Q9zPzDKGWdWjy8wKMYM
LUjm+MJEVQ5w+1C9LvmTnkLGe/CS+X2LOhWk/8tbZxCgaliWwJLBtojHNy1U8GiP
swtsTS51x/ilq3wkKT5SIn6szcHvQMJNfuGXmeIc1kj0h1JGv//qX1E1WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPJWjQ1D4Yb2O4QXj6xqDPayoYPNMB8GA1UdIwQY
MBaAFEv2rA+wOSZzRUw5R/Q1fkWU7SZtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU19hc0Q3QTVKbk5GVERsSDlEVi1SWlR0Sm0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yZDYyMGUtNWFhNC00NzU5LWIwODgt
YmFjMjAwMjkzMmQ5LzEvU19hc0Q3QTVKbk5GVERsSDlEVi1SWlR0Sm0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8yZDYyMGUtNWFhNC00NzU5LWIwODgtYmFjMjAwMjkzMmQ5
LzEvU19hc0Q3QTVKbk5GVERsSDlEVi1SWlR0Sm0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOdowYGRc
X9ADKJnbNWkUa/k5PKlEjt6pyvNQQtkvUDhC1f+gHQVMmE5kOtFZOG0Y5y1npoS/
rJuLRhKYs9j9O0Q4bpXI2gaMnAzZUPB81UplKuujDghN+zv7caacS4XfhoU+YYMp
IO9JXNTs7nFsk9AkOs1y3DlZs871FsY16wYTyJwEk84Ua/a5mUug34jc4UG51X09
Wo8iksPO6/+uQt/sJZRgCZ9FArPqR5GNt0qM1+C0dYVGe9M1AAiC6x4E1ISSdMRG
ZEx6ltMRSpLd7aT8WNOg9Iwm1dmYM+OX2VNyflD4sDTCaw3zjlk/32XkDjOhZScD
8JnBwKgqaITypw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:30:00 2026 by rpki-client