Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.mft
File: SrfcA3ifWGIbJejdDZJdyRtKWqI.mft (raw, json)
Hash identifier: HXEhP9eB0RZk3JoTpideAD0+sDByuA/eNLrqvu+/PT0=
Subject key identifier: B2:38:7D:14:99:04:F3:73:A3:D7:43:62:81:FF:25:3C:2F:CF:64:CA
Authority key identifier: 4A:B7:DC:03:78:9F:58:62:1B:25:E8:DD:0D:92:5D:C9:1B:4A:5A:A2
Certificate issuer: /CN=4ab7dc03789f58621b25e8dd0d925dc91b4a5aa2
Certificate serial: 019CAA589E34BE71E40083EC5F62DE3416B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SrfcA3ifWGIbJejdDZJdyRtKWqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.mft
Manifest number: 0CEB
Signing time: Sun 01 Mar 2026 17:01:00 +0000
Manifest this update: Sun 01 Mar 2026 17:01:00 +0000
Manifest next update: Mon 02 Mar 2026 17:01:00 +0000
Files and hashes: 1: PsulLIoJ2K5yIXwpqDT_vBbetoI.roa (hash: g6k+9r2f7VE361y/QPPTNZq47JKvyoKEVsQ41jGm2AM=)
2: SrfcA3ifWGIbJejdDZJdyRtKWqI.crl (hash: QX3EDyt0foDl0GTqy/SQUJsvc7h8RPdQIoNx0yVqK1I=)
3: xPJTQ1B0b58IM-swEMoKUaok-jY.roa (hash: 8WLFOKN87EOL1HNV9YM46I3DeHkcz7BwooQlJCjXH2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SrfcA3ifWGIbJejdDZJdyRtKWqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:9e:34:be:71:e4:00:83:ec:5f:62:de:34:16:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ab7dc03789f58621b25e8dd0d925dc91b4a5aa2
Validity
Not Before: Mar 1 17:01:00 2026 GMT
Not After : Mar 2 17:01:00 2026 GMT
Subject: CN=b2387d149904f373a3d7436281ff253c2fcf64ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fb:58:98:25:f2:03:e6:7c:a9:83:d0:39:4d:
90:ec:95:0f:d1:ae:7d:09:37:20:6b:8c:74:d6:5d:
fe:13:3f:3d:e5:a6:9f:01:95:b4:d2:6f:1a:d9:f2:
a7:75:35:75:39:51:04:77:13:a7:f3:57:27:4f:9f:
8d:c6:65:b3:4f:ff:3e:06:d2:43:db:3b:04:1f:fd:
99:96:c9:81:5d:ed:e1:3d:9b:52:43:ed:0f:96:0d:
11:ed:61:79:e3:c4:6f:e6:20:bc:e8:b3:a1:b7:26:
06:b7:a7:88:ef:aa:88:41:ac:ff:8c:50:ce:70:54:
6b:3e:bf:95:50:6f:04:d5:a3:65:4e:7c:f8:0b:31:
22:c6:47:6b:0d:c0:45:39:0f:aa:a9:8c:92:74:d8:
d1:94:62:be:bd:f5:44:6d:f0:bd:c0:49:1d:ba:0e:
99:19:21:68:1f:b6:6e:9e:6b:85:66:6e:b9:6d:05:
38:f3:3c:de:bc:24:c8:77:9f:3c:85:61:30:90:d9:
6a:ea:f0:a0:1e:97:7f:8f:ee:29:7a:06:bd:e2:6e:
63:0e:b9:86:96:70:5c:a8:04:10:d9:0a:38:60:8e:
74:79:8f:7d:75:d0:01:ee:55:94:4f:1b:7b:21:6b:
5a:a9:a3:4c:d8:2f:96:6f:93:13:57:06:7d:62:09:
dc:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:38:7D:14:99:04:F3:73:A3:D7:43:62:81:FF:25:3C:2F:CF:64:CA
X509v3 Authority Key Identifier:
keyid:4A:B7:DC:03:78:9F:58:62:1B:25:E8:DD:0D:92:5D:C9:1B:4A:5A:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SrfcA3ifWGIbJejdDZJdyRtKWqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:0e:71:89:53:7a:8f:0b:93:33:05:e4:83:9f:52:d8:3a:f0:
22:53:a0:38:67:3c:32:da:f1:5e:a8:62:48:24:0d:11:34:a5:
ec:3a:a9:06:44:70:9b:69:f3:a3:5e:00:f1:e6:5f:9d:6d:11:
a9:6e:02:79:c2:7e:1c:dc:46:46:96:61:0a:3b:b0:12:b7:3b:
2b:67:ba:e1:ff:25:12:16:90:bf:b5:67:70:53:b9:98:78:96:
c3:c4:2a:b2:1a:65:13:dc:c5:14:e3:32:f6:f2:78:71:d0:92:
a8:42:2c:4e:4a:b9:ab:16:ab:54:bc:8e:f7:dd:d6:27:da:f4:
d3:37:c1:8f:d1:19:b2:88:ab:91:8f:ce:d6:21:ec:e4:d7:56:
7d:a7:3a:72:e2:12:7c:94:91:89:1d:89:42:3e:ac:f8:c4:cf:
1d:3c:2f:62:ab:21:7c:b0:a9:4c:64:d0:7e:50:80:15:6f:64:
09:5f:64:72:e6:a6:ea:44:22:f9:21:6c:b1:db:63:dc:f4:d0:
f1:7a:ef:b7:85:36:dd:c1:58:13:f0:74:91:a9:ff:b3:2c:ed:
6a:97:ab:18:b2:d0:89:c3:71:d4:e4:f5:8e:2a:42:3e:1b:50:
9f:4b:c1:c3:10:35:16:45:df:6a:9b:44:b6:04:0c:b2:43:40:
99:0b:d9:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWJ40vnHkAIPsX2LeNBa4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhYjdkYzAzNzg5ZjU4NjIxYjI1ZThkZDBkOTI1ZGM5MWI0
YTVhYTIwHhcNMjYwMzAxMTcwMTAwWhcNMjYwMzAyMTcwMTAwWjAzMTEwLwYDVQQD
EyhiMjM4N2QxNDk5MDRmMzczYTNkNzQzNjI4MWZmMjUzYzJmY2Y2NGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArftYmCXyA+Z8qYPQOU2Q7JUP0a59
CTcga4x01l3+Ez895aafAZW00m8a2fKndTV1OVEEdxOn81cnT5+NxmWzT/8+BtJD
2zsEH/2ZlsmBXe3hPZtSQ+0Plg0R7WF548Rv5iC86LOhtyYGt6eI76qIQaz/jFDO
cFRrPr+VUG8E1aNlTnz4CzEixkdrDcBFOQ+qqYySdNjRlGK+vfVEbfC9wEkdug6Z
GSFoH7ZunmuFZm65bQU48zzevCTId588hWEwkNlq6vCgHpd/j+4pega94m5jDrmG
lnBcqAQQ2Qo4YI50eY99ddAB7lWUTxt7IWtaqaNM2C+Wb5MTVwZ9YgncIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLI4fRSZBPNzo9dDYoH/JTwvz2TKMB8GA1UdIwQY
MBaAFEq33AN4n1hiGyXo3Q2SXckbSlqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3JmY0EzaWZXR0liSmVqZERaSmR5UnRLV3FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC84YTU5ZGItNWFkOC00ZjNmLTk3YzIt
ZjM4YmNiZDkzMzkwLzEvU3JmY0EzaWZXR0liSmVqZERaSmR5UnRLV3FJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC84YTU5ZGItNWFkOC00ZjNmLTk3YzItZjM4YmNiZDkzMzkw
LzEvU3JmY0EzaWZXR0liSmVqZERaSmR5UnRLV3FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiA5xiVN6
jwuTMwXkg59S2DrwIlOgOGc8MtrxXqhiSCQNETSl7DqpBkRwm2nzo14A8eZfnW0R
qW4CecJ+HNxGRpZhCjuwErc7K2e64f8lEhaQv7VncFO5mHiWw8QqshplE9zFFOMy
9vJ4cdCSqEIsTkq5qxarVLyO993WJ9r00zfBj9EZsoirkY/O1iHs5NdWfac6cuIS
fJSRiR2JQj6s+MTPHTwvYqshfLCpTGTQflCAFW9kCV9kcuam6kQi+SFssdtj3PTQ
8Xrvt4U23cFYE/B0kan/syztaperGLLQicNx1OT1jipCPhtQn0vBwxA1FkXfaptE
tgQMskNAmQvZNg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:13:33 2026 by rpki-client