Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
File: S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft (raw, json)
Hash identifier: es99P6QXywrZ0p6G8J9JQrxD52D4q1KTh+XZhSs+Ln0=
Subject key identifier: DB:4E:89:87:E7:10:1E:AA:F3:1B:CC:FC:64:02:D4:78:87:7D:0F:95
Authority key identifier: 4B:48:CF:14:6B:4C:73:D2:74:09:6D:70:57:08:D2:4B:72:93:29:F8
Certificate issuer: /CN=4b48cf146b4c73d274096d705708d24b729329f8
Certificate serial: 019CAC478B92CC761C4CA0DE0EB44D85E053
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
Manifest number: 1862
Signing time: Mon 02 Mar 2026 02:01:35 +0000
Manifest this update: Mon 02 Mar 2026 02:01:35 +0000
Manifest next update: Tue 03 Mar 2026 02:01:35 +0000
Files and hashes: 1: 2km5CePTq7_BnWDbbdzBAnFRzXw.roa (hash: odLHriDBowdLruRMyp7oP30CTWfC4IMigBLHf3TCMXY=)
2: P3pMTXaPEJ3pF-gEwjCXB342FMw.roa (hash: ctsyJFlW0Oa24uSpietN5XHoRYpf4UiDm+Wb7QP+anM=)
3: S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl (hash: RbuDhZLhkKkQuOISL1sEdAjw2mQhKvBU3yMq8jJmIG4=)
4: sncS8S2NsUSvaykCM37LNBlWYeU.roa (hash: qh0is7RUGO8WSotkmc+90Ufb2ZAu2P4HHEPVCF4ovi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:8b:92:cc:76:1c:4c:a0:de:0e:b4:4d:85:e0:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b48cf146b4c73d274096d705708d24b729329f8
Validity
Not Before: Mar 2 02:01:35 2026 GMT
Not After : Mar 3 02:01:35 2026 GMT
Subject: CN=db4e8987e7101eaaf31bccfc6402d478877d0f95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:04:5a:ce:80:80:b5:5b:c7:92:15:59:72:37:
e6:e2:d1:3c:84:51:e0:89:d2:f8:68:d5:eb:df:b3:
3c:05:54:b4:ea:b3:f1:5a:c0:1a:a7:01:73:ce:49:
f9:c7:d4:f7:83:c3:a1:c0:f0:c6:46:87:9c:24:a3:
df:a9:e8:55:ac:af:e8:4b:eb:65:45:ca:21:5f:b1:
82:fd:00:7c:ce:2e:05:31:1b:b8:2f:ca:24:67:4d:
7c:82:57:51:93:55:db:a3:34:00:ef:8e:8d:ca:4c:
58:4e:cf:a2:8a:ba:6d:70:4b:76:1d:96:2c:0a:a7:
38:2a:db:54:2d:a2:ac:b0:20:6d:a0:e5:2b:63:dc:
ee:93:38:26:5e:4a:b2:55:ef:de:e5:ba:a5:c6:66:
88:a0:43:e1:f5:42:27:18:fa:51:df:33:e7:3b:a4:
87:40:76:01:e5:ed:ab:35:53:25:41:95:3e:b9:f7:
85:2f:4f:fe:c2:b2:25:bc:66:ad:14:b5:16:5a:b9:
54:f1:8d:f7:1e:88:7c:da:a6:bb:72:55:2e:3c:62:
b3:31:26:cd:65:ef:2c:2a:ee:b5:b2:72:fc:ea:33:
b5:06:3a:fb:e6:29:95:23:80:3c:3f:ad:a2:05:e7:
ff:0f:ae:ea:ff:97:c2:82:b8:65:7f:ba:43:c4:95:
35:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:4E:89:87:E7:10:1E:AA:F3:1B:CC:FC:64:02:D4:78:87:7D:0F:95
X509v3 Authority Key Identifier:
keyid:4B:48:CF:14:6B:4C:73:D2:74:09:6D:70:57:08:D2:4B:72:93:29:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:a6:19:81:5d:43:0b:1e:07:e3:44:c8:29:03:cc:15:00:0d:
d4:66:a4:96:e9:74:19:e1:22:2b:85:07:e0:cf:42:2b:2d:73:
d5:e0:5a:61:88:40:f7:3d:51:7c:d4:e6:85:39:18:0b:74:88:
f9:d0:a9:70:4d:e0:22:41:fe:36:b4:e2:59:12:47:6b:4d:8d:
15:34:c0:12:96:c7:9c:de:ba:a4:32:0f:f3:6a:60:93:35:86:
1a:db:27:49:ab:84:f6:34:bc:81:3b:74:03:19:23:5a:2e:4f:
bc:35:51:c7:6a:fc:c6:97:0e:76:17:2d:5c:5b:d3:97:ec:bd:
01:07:1d:91:7b:b4:94:e1:3a:cf:b1:d7:1f:05:9f:2a:fa:6b:
bb:a1:5e:ae:ef:68:b1:92:60:7d:d2:c1:11:1c:2f:f4:a3:92:
c1:0e:6d:77:0e:31:5e:93:fc:bd:04:a6:4b:d1:e3:d5:72:f4:
67:ce:be:1a:6a:4a:75:d9:ef:d9:bc:cb:a2:0b:a3:19:7e:66:
f0:45:f3:46:3f:2b:a2:8f:0b:31:2c:4f:45:d9:d8:e9:94:24:
a6:62:92:6f:fd:f5:de:28:38:d3:70:8d:7e:b1:92:be:af:c0:
f6:56:0f:89:dc:ce:1f:b9:18:64:9d:6d:6b:23:bb:c1:d3:eb:
d1:ad:33:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysR4uSzHYcTKDeDrRNheBTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiNDhjZjE0NmI0YzczZDI3NDA5NmQ3MDU3MDhkMjRiNzI5
MzI5ZjgwHhcNMjYwMzAyMDIwMTM1WhcNMjYwMzAzMDIwMTM1WjAzMTEwLwYDVQQD
EyhkYjRlODk4N2U3MTAxZWFhZjMxYmNjZmM2NDAyZDQ3ODg3N2QwZjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7wRazoCAtVvHkhVZcjfm4tE8hFHg
idL4aNXr37M8BVS06rPxWsAapwFzzkn5x9T3g8OhwPDGRoecJKPfqehVrK/oS+tl
RcohX7GC/QB8zi4FMRu4L8okZ018gldRk1XbozQA746NykxYTs+iirptcEt2HZYs
Cqc4KttULaKssCBtoOUrY9zukzgmXkqyVe/e5bqlxmaIoEPh9UInGPpR3zPnO6SH
QHYB5e2rNVMlQZU+ufeFL0/+wrIlvGatFLUWWrlU8Y33Hoh82qa7clUuPGKzMSbN
Ze8sKu61snL86jO1Bjr75imVI4A8P62iBef/D67q/5fCgrhlf7pDxJU1bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNtOiYfnEB6q8xvM/GQC1HiHfQ+VMB8GA1UdIwQY
MBaAFEtIzxRrTHPSdAltcFcI0ktykyn4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzBqUEZHdE1jOUowQ1cxd1Z3alNTM0tUS2ZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8zYmJiNTItMzkzZS00NzYyLWE3MGMt
NjRhNmEwNWI5OTA1LzEvUzBqUEZHdE1jOUowQ1cxd1Z3alNTM0tUS2ZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8zYmJiNTItMzkzZS00NzYyLWE3MGMtNjRhNmEwNWI5OTA1
LzEvUzBqUEZHdE1jOUowQ1cxd1Z3alNTM0tUS2ZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiqYZgV1D
Cx4H40TIKQPMFQAN1Gaklul0GeEiK4UH4M9CKy1z1eBaYYhA9z1RfNTmhTkYC3SI
+dCpcE3gIkH+NrTiWRJHa02NFTTAEpbHnN66pDIP82pgkzWGGtsnSauE9jS8gTt0
AxkjWi5PvDVRx2r8xpcOdhctXFvTl+y9AQcdkXu0lOE6z7HXHwWfKvpru6Feru9o
sZJgfdLBERwv9KOSwQ5tdw4xXpP8vQSmS9Hj1XL0Z86+GmpKddnv2bzLogujGX5m
8EXzRj8roo8LMSxPRdnY6ZQkpmKSb/313ig403CNfrGSvq/A9lYPidzOH7kYZJ1t
ayO7wdPr0a0zxA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:33:26 2026 by rpki-client