Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft
File: s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft (raw, json)
Hash identifier: M/pzoTct6QCLFTyAFkQfvTZgqWOxZxH2wGpoh2rmeCI=
Subject key identifier: B9:94:F1:7B:69:82:BA:C0:BD:0B:E8:B6:8C:2D:35:5B:03:92:D8:F1
Authority key identifier: B3:5A:20:A8:69:39:C8:DE:8A:ED:C3:05:24:3B:0F:D4:AD:86:54:D0
Certificate issuer: /CN=b35a20a86939c8de8aedc305243b0fd4ad8654d0
Certificate serial: 019D9AE39DE9328E9BAF9B21F87F93217CD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft
Manifest number: 1035
Signing time: Fri 17 Apr 2026 10:01:41 +0000
Manifest this update: Fri 17 Apr 2026 10:01:41 +0000
Manifest next update: Sat 18 Apr 2026 10:01:41 +0000
Files and hashes: 1: ROos3zBuxQkxrmV-6L_KMGEOsaQ.roa (hash: yeIMYP8pUIaSbhg8Y2l0OyY+AdGzsCSyQTyWjAoPCS8=)
2: f9tlvRsRIPOuG0I4J9FyfmZyNWE.roa (hash: gD8lBkeNmMP/yM8L2z9Jlxh7FwEKNnW8Lx9hYy3Jdus=)
3: s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl (hash: +vF8fHmJ/BMJf3+/xbho/C5Tc8XCmlAMdPDU1z8vYv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:9d:e9:32:8e:9b:af:9b:21:f8:7f:93:21:7c:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b35a20a86939c8de8aedc305243b0fd4ad8654d0
Validity
Not Before: Apr 17 10:01:41 2026 GMT
Not After : Apr 18 10:01:41 2026 GMT
Subject: CN=b994f17b6982bac0bd0be8b68c2d355b0392d8f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f4:82:58:d9:08:08:d0:59:7a:ca:74:71:db:
c0:b9:4a:41:4e:46:26:c3:a5:f1:67:fc:77:ac:58:
59:8e:50:94:c1:95:ce:4b:dd:6a:79:76:7e:1b:b1:
0a:c2:c5:62:33:94:74:17:b2:15:d7:34:d0:03:89:
41:3a:ba:a0:bb:8e:6f:aa:81:6d:1e:b7:00:2f:e3:
ec:87:c4:f2:f9:01:1e:e7:68:9a:cc:9b:eb:53:44:
1e:1a:8f:1a:7a:a3:fd:b6:f5:e0:d1:da:ef:a3:99:
bc:f2:c3:63:f6:c1:f2:f5:f2:92:6c:2b:9e:59:7c:
05:c6:47:06:a1:95:ac:3e:f8:8d:0f:03:93:e8:c2:
83:7d:08:25:2e:de:c3:8f:de:1b:10:ae:f7:fb:b6:
86:9d:62:63:73:b4:5e:b0:ea:cb:26:82:cc:83:50:
22:e9:78:45:65:d3:4c:d8:21:34:3d:e8:8b:74:50:
d5:4b:b1:fe:ac:e9:b1:e6:48:52:1e:e3:38:a9:48:
66:d8:70:aa:ac:2d:d0:77:7f:14:f9:71:29:25:40:
d5:78:6e:89:39:e5:0f:5e:42:4e:98:37:31:d3:32:
da:4a:c8:dd:b8:4c:67:bf:59:fe:f9:84:c0:68:1a:
d2:c2:e3:4d:4e:b5:30:3f:06:53:14:7c:df:49:a6:
0c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:94:F1:7B:69:82:BA:C0:BD:0B:E8:B6:8C:2D:35:5B:03:92:D8:F1
X509v3 Authority Key Identifier:
keyid:B3:5A:20:A8:69:39:C8:DE:8A:ED:C3:05:24:3B:0F:D4:AD:86:54:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:93:9d:5d:6b:f5:cc:55:50:01:36:ab:cf:d2:2f:ad:b4:3f:
20:e5:5f:ac:37:4e:97:9d:1c:9a:c1:ab:38:35:2d:3f:36:d6:
3d:5e:cd:dc:06:13:5c:83:78:da:1d:47:99:ff:81:0c:4d:4e:
1c:9a:84:8a:9f:19:9f:e9:5e:b8:16:e1:80:63:5e:58:60:f4:
e6:c4:6b:51:f1:28:a4:e5:f7:09:b9:c8:93:11:1e:75:a7:eb:
85:7e:75:5e:3c:17:48:a2:5e:f2:d9:2a:6e:00:ee:56:9a:38:
28:bf:18:31:f7:56:e9:3a:d4:e1:2f:c6:00:4a:68:25:51:4a:
c0:c2:5f:5d:8f:09:3e:5f:44:a0:c9:65:43:e6:9f:e6:28:69:
3b:cc:70:c6:97:39:7e:45:84:5c:ad:92:d8:04:a6:cc:69:9e:
97:1b:1b:34:18:f3:cb:bd:fa:63:e4:35:34:dc:c9:62:a7:e1:
00:10:e8:11:84:f6:36:13:ef:63:0a:76:8e:85:78:b1:cf:49:
ac:89:71:59:62:11:65:95:6b:cb:0a:a1:b0:4b:c2:c5:32:26:
63:80:20:94:d9:e9:63:12:09:d0:f0:04:7d:04:4c:bf:70:bc:
db:d7:e4:df:a7:3e:f2:99:dc:bc:e9:d7:2a:12:8f:39:bf:07:
b2:30:84:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a453pMo6br5sh+H+TIXzUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzNWEyMGE4NjkzOWM4ZGU4YWVkYzMwNTI0M2IwZmQ0YWQ4
NjU0ZDAwHhcNMjYwNDE3MTAwMTQxWhcNMjYwNDE4MTAwMTQxWjAzMTEwLwYDVQQD
EyhiOTk0ZjE3YjY5ODJiYWMwYmQwYmU4YjY4YzJkMzU1YjAzOTJkOGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPSCWNkICNBZesp0cdvAuUpBTkYm
w6XxZ/x3rFhZjlCUwZXOS91qeXZ+G7EKwsViM5R0F7IV1zTQA4lBOrqgu45vqoFt
HrcAL+Psh8Ty+QEe52iazJvrU0QeGo8aeqP9tvXg0drvo5m88sNj9sHy9fKSbCue
WXwFxkcGoZWsPviNDwOT6MKDfQglLt7Dj94bEK73+7aGnWJjc7ResOrLJoLMg1Ai
6XhFZdNM2CE0PeiLdFDVS7H+rOmx5khSHuM4qUhm2HCqrC3Qd38U+XEpJUDVeG6J
OeUPXkJOmDcx0zLaSsjduExnv1n++YTAaBrSwuNNTrUwPwZTFHzfSaYMhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLmU8XtpgrrAvQvotowtNVsDktjxMB8GA1UdIwQY
MBaAFLNaIKhpOcjeiu3DBSQ7D9SthlTQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczFvZ3FHazV5TjZLN2NNRkpEc1AxSzJHVk5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8xNjIxODYtNTBkMS00NzYxLWFhZjAt
YTU0MjU4OTc5OWJjLzEvczFvZ3FHazV5TjZLN2NNRkpEc1AxSzJHVk5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC8xNjIxODYtNTBkMS00NzYxLWFhZjAtYTU0MjU4OTc5OWJj
LzEvczFvZ3FHazV5TjZLN2NNRkpEc1AxSzJHVk5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmZOdXWv1
zFVQATarz9IvrbQ/IOVfrDdOl50cmsGrODUtPzbWPV7N3AYTXIN42h1Hmf+BDE1O
HJqEip8Zn+leuBbhgGNeWGD05sRrUfEopOX3CbnIkxEedafrhX51XjwXSKJe8tkq
bgDuVpo4KL8YMfdW6TrU4S/GAEpoJVFKwMJfXY8JPl9EoMllQ+af5ihpO8xwxpc5
fkWEXK2S2ASmzGmelxsbNBjzy736Y+Q1NNzJYqfhABDoEYT2NhPvYwp2joV4sc9J
rIlxWWIRZZVrywqhsEvCxTImY4AglNnpYxIJ0PAEfQRMv3C829fk36c+8pncvOnX
KhKPOb8HsjCEAQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:19:32 2026 by rpki-client