Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
File: s901zP9sK4ah-tjxA7wgBw0J5Q0.mft (raw, json)
Hash identifier: mRV7I1or3P8SrGqMnegT/65IrGRPKhkCJxYLkPiTPYk=
Subject key identifier: 24:11:8F:83:DA:31:86:5F:D3:18:C0:22:3D:30:15:30:E5:70:39:4C
Authority key identifier: B3:DD:35:CC:FF:6C:2B:86:A1:FA:D8:F1:03:BC:20:07:0D:09:E5:0D
Certificate issuer: /CN=b3dd35ccff6c2b86a1fad8f103bc20070d09e50d
Certificate serial: 019CAF483C4FCA3728F11A9A3A27FD7747E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
Manifest number: 185C
Signing time: Mon 02 Mar 2026 16:01:12 +0000
Manifest this update: Mon 02 Mar 2026 16:01:12 +0000
Manifest next update: Tue 03 Mar 2026 16:01:12 +0000
Files and hashes: 1: _Hegz1VVkQxT8dMR4TPbzXidnGo.roa (hash: wCUCX/ENynsQM4yWKSMGJBVSMGdPMxR8qubJ5kFNMNc=)
2: rBaBGD3me64LECmMKa6dKRV8Yy0.roa (hash: K+BptzFvZJeOeMKzMOMTcV3487VC0j+Wsdpi6o13OCY=)
3: s901zP9sK4ah-tjxA7wgBw0J5Q0.crl (hash: XGT4iBKSj13rJNKOLEInjbzvG+oLMHqQeJ0f2olLLl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:48:3c:4f:ca:37:28:f1:1a:9a:3a:27:fd:77:47:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3dd35ccff6c2b86a1fad8f103bc20070d09e50d
Validity
Not Before: Mar 2 16:01:12 2026 GMT
Not After : Mar 3 16:01:12 2026 GMT
Subject: CN=24118f83da31865fd318c0223d301530e570394c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c5:00:f4:86:ac:4a:a3:9c:1a:a0:74:21:bb:
5f:7a:11:1b:07:5a:0c:f5:f2:70:67:bd:bd:c2:16:
3f:55:49:29:4f:1d:ec:c3:4a:65:1e:d6:6a:05:cf:
22:d2:50:38:7f:93:2e:07:5b:e9:06:88:2b:4e:87:
6d:70:3b:35:02:c1:ac:88:f2:1c:df:8a:6b:8e:bb:
1d:49:1f:ab:3e:8a:74:ac:47:71:3e:81:25:65:a6:
8d:5c:c8:68:4d:97:0e:ee:56:f3:26:3a:db:0b:f6:
94:e3:a7:6f:7e:93:33:d8:73:d3:ce:68:45:96:5b:
78:9f:8e:0a:03:7e:4f:ef:cd:61:98:ca:b9:54:e3:
e5:f0:ed:3f:e2:05:38:f5:26:87:21:53:e5:b8:21:
4d:cf:31:ea:2d:a7:96:3b:93:7d:44:77:af:33:01:
91:82:9c:bc:a1:0d:18:d0:66:5c:f9:17:48:05:f3:
6c:02:b0:87:de:3c:c6:34:b9:5b:90:1b:9c:67:3f:
ab:38:ad:51:12:dd:88:56:3e:9e:4c:84:99:60:9a:
59:4f:3c:ca:7c:67:f7:ab:91:14:da:3d:06:de:75:
f2:39:07:75:77:31:5c:22:f8:49:25:40:65:68:3f:
b4:a7:0f:d8:a7:42:1c:37:5d:28:c7:a4:a4:44:27:
5e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:11:8F:83:DA:31:86:5F:D3:18:C0:22:3D:30:15:30:E5:70:39:4C
X509v3 Authority Key Identifier:
keyid:B3:DD:35:CC:FF:6C:2B:86:A1:FA:D8:F1:03:BC:20:07:0D:09:E5:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:43:09:28:1d:f7:ba:58:bb:fd:b9:8f:79:c9:98:65:85:73:
5b:6f:18:5f:02:58:2e:55:06:cd:17:ed:70:c5:54:97:03:a1:
f2:b9:00:98:2a:06:01:0f:79:51:45:74:ae:da:e4:af:82:af:
b5:63:4b:a4:3d:a3:8d:6f:ea:60:cd:ed:35:71:bb:89:3d:e3:
d6:bd:7f:2c:a7:3e:8f:8a:a7:a4:48:f5:de:a7:b4:13:3d:58:
1c:99:bd:19:69:05:26:fe:15:c5:03:46:37:0e:fa:73:73:41:
64:00:29:90:8b:7a:34:ed:ea:a5:bc:95:b7:4b:d2:83:1e:97:
19:94:6e:a4:9c:8a:cb:ee:9e:e6:82:00:4f:a8:18:c9:5a:27:
00:29:3e:3f:fc:5b:35:f0:11:0f:37:01:ef:0f:28:0b:1a:d3:
d3:8d:4b:c9:5b:0c:9a:56:77:9e:c3:bd:cf:1c:b3:b8:12:4f:
ba:52:dd:e8:b8:c1:7c:9e:73:4b:60:a5:19:8d:25:72:98:86:
b0:32:d0:fa:9a:b2:32:4f:8d:fe:14:a8:68:4f:7b:16:8a:a6:
aa:23:00:43:81:05:e2:d3:99:d5:9d:5c:27:50:ae:e8:33:b9:
b5:3b:29:af:d0:5e:60:a1:3b:db:dd:52:c8:8f:90:29:48:a6:
0d:5c:2c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:17:45 2026 by rpki-client