Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft
File: t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft (raw, json)
Hash identifier: 6O/8nrVOf6+75QrsLD+s1c3bFzuimRQrKDyUQoTJ7HQ=
Subject key identifier: 45:50:59:43:77:E4:08:F8:91:0B:D2:41:49:10:1D:FA:F0:A7:3B:F1
Authority key identifier: B7:54:B2:2C:55:40:50:8D:96:29:A3:11:EF:1E:83:54:36:57:C4:EE
Certificate issuer: /CN=b754b22c5540508d9629a311ef1e83543657c4ee
Certificate serial: 019CAFEC65BDFC87BAE7EFA91BBFFB63C931
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1SyLFVAUI2WKaMR7x6DVDZXxO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft
Manifest number: 0359
Signing time: Mon 02 Mar 2026 19:00:30 +0000
Manifest this update: Mon 02 Mar 2026 19:00:30 +0000
Manifest next update: Tue 03 Mar 2026 19:00:30 +0000
Files and hashes: 1: 1LsBmA-SbOfGa2eleJLL4F-PoS0.roa (hash: fOsQjw7Bt8zL6Bscj5Hp28N4r7Zpof4N2iXErdaa6yA=)
2: t1SyLFVAUI2WKaMR7x6DVDZXxO4.crl (hash: I00WR4uX85UVbtD1HpUy6S39f1xMMEObhKzTX8wEDo8=)
3: yUSfqsPPl1YTQhIE73fMTmMnfkE.roa (hash: yAZHs4HcwBg1li8wEtRge9Bo9Q1pztQUu5urOyY+7Fc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1SyLFVAUI2WKaMR7x6DVDZXxO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:ec:65:bd:fc:87:ba:e7:ef:a9:1b:bf:fb:63:c9:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b754b22c5540508d9629a311ef1e83543657c4ee
Validity
Not Before: Mar 2 19:00:30 2026 GMT
Not After : Mar 3 19:00:30 2026 GMT
Subject: CN=4550594377e408f8910bd24149101dfaf0a73bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9a:e6:db:e8:a2:b4:33:8f:df:f7:40:09:f7:
b8:71:81:72:f1:85:ca:5e:a7:96:51:a9:e1:11:96:
de:b2:69:26:12:7c:88:7e:f7:9d:f1:5c:84:32:2f:
9a:41:36:c7:45:bd:1a:5f:7f:13:6a:87:5b:aa:df:
df:f9:ec:d8:06:43:e7:ed:1c:6c:b3:9b:5b:9e:eb:
fd:2a:70:01:fd:89:ff:b4:8c:dd:cc:d5:15:7c:ff:
54:ca:ad:75:6a:a7:91:e2:eb:d0:29:3b:7c:04:d7:
ca:34:5b:ad:97:ea:36:5b:0f:bc:0d:45:d3:39:3e:
b4:15:26:e5:fa:01:ec:51:23:81:c7:c0:ae:41:03:
8b:16:85:a1:da:72:5e:fc:c7:88:b4:4e:72:47:94:
70:3f:04:95:93:6b:38:5b:ba:f9:7f:e0:ac:2c:79:
3b:9f:53:8a:27:42:0c:de:9b:69:9a:26:4c:f2:81:
be:b8:e2:dd:59:10:7c:3b:8a:54:a2:38:15:47:cb:
4b:c3:3f:39:a4:30:22:ee:70:35:ce:6d:6c:f7:52:
a4:01:1b:64:fb:1f:50:a7:8a:e7:a2:07:b8:10:6d:
2b:0e:00:db:ea:6d:e6:84:cf:93:08:cb:fb:39:46:
6e:09:ea:67:21:5b:dd:7f:0d:7f:a1:ca:a9:ec:af:
49:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:50:59:43:77:E4:08:F8:91:0B:D2:41:49:10:1D:FA:F0:A7:3B:F1
X509v3 Authority Key Identifier:
keyid:B7:54:B2:2C:55:40:50:8D:96:29:A3:11:EF:1E:83:54:36:57:C4:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1SyLFVAUI2WKaMR7x6DVDZXxO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:25:0e:7c:13:1b:a4:04:3a:7a:aa:57:99:2a:5f:db:76:50:
05:a6:f3:3e:36:70:31:a8:27:38:64:03:e9:be:f1:d4:98:61:
69:b0:57:fa:d6:c0:97:3b:6b:5f:44:38:5d:6e:00:08:23:ec:
6d:e3:28:6c:11:90:d9:66:49:55:ec:f3:45:72:99:6c:34:26:
81:6c:e2:a5:0b:d8:bf:c4:5b:fa:28:8d:18:4d:76:de:3c:db:
eb:f9:60:14:42:f5:f9:5d:18:dd:9c:28:d1:78:6c:24:16:80:
af:d6:f5:ea:ef:2a:1b:55:10:d5:0d:5c:5c:87:bf:16:64:51:
17:a3:cf:0f:84:9e:4f:2d:bc:70:a9:f9:25:87:98:96:df:15:
06:0c:d9:5a:fc:4a:25:f0:aa:3f:70:5e:48:4c:e3:60:72:61:
bc:e2:83:1a:66:96:58:41:53:6c:5d:fc:55:6b:e2:7c:e1:93:
80:9d:a2:14:15:45:2e:6a:16:2a:87:17:ef:5e:28:15:b8:4f:
cb:8b:9c:76:de:f6:b8:97:5b:8f:3d:53:55:82:19:18:ee:98:
e9:28:1c:d5:d9:51:aa:30:40:ec:fc:88:0e:a8:23:0b:31:c3:
82:4a:a4:08:55:e3:26:61:93:f8:06:2d:f2:3b:6d:2a:6c:50:
2b:39:2f:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyv7GW9/Ie65++pG7/7Y8kxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NTRiMjJjNTU0MDUwOGQ5NjI5YTMxMWVmMWU4MzU0MzY1
N2M0ZWUwHhcNMjYwMzAyMTkwMDMwWhcNMjYwMzAzMTkwMDMwWjAzMTEwLwYDVQQD
Eyg0NTUwNTk0Mzc3ZTQwOGY4OTEwYmQyNDE0OTEwMWRmYWYwYTczYmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35rm2+iitDOP3/dACfe4cYFy8YXK
XqeWUanhEZbesmkmEnyIfved8VyEMi+aQTbHRb0aX38Taodbqt/f+ezYBkPn7Rxs
s5tbnuv9KnAB/Yn/tIzdzNUVfP9Uyq11aqeR4uvQKTt8BNfKNFutl+o2Ww+8DUXT
OT60FSbl+gHsUSOBx8CuQQOLFoWh2nJe/MeItE5yR5RwPwSVk2s4W7r5f+CsLHk7
n1OKJ0IM3ptpmiZM8oG+uOLdWRB8O4pUojgVR8tLwz85pDAi7nA1zm1s91KkARtk
+x9Qp4rnoge4EG0rDgDb6m3mhM+TCMv7OUZuCepnIVvdfw1/ocqp7K9JuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEVQWUN35Aj4kQvSQUkQHfrwpzvxMB8GA1UdIwQY
MBaAFLdUsixVQFCNlimjEe8eg1Q2V8TuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDFTeUxGVkFVSTJXS2FNUjd4NkRWRFpYeE80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9iNTUxM2EtYmE2OS00OGM0LTk1ZWUt
NTZlYzEzMjY5YTFjLzEvdDFTeUxGVkFVSTJXS2FNUjd4NkRWRFpYeE80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9iNTUxM2EtYmE2OS00OGM0LTk1ZWUtNTZlYzEzMjY5YTFj
LzEvdDFTeUxGVkFVSTJXS2FNUjd4NkRWRFpYeE80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADCUOfBMb
pAQ6eqpXmSpf23ZQBabzPjZwMagnOGQD6b7x1JhhabBX+tbAlztrX0Q4XW4ACCPs
beMobBGQ2WZJVezzRXKZbDQmgWzipQvYv8Rb+iiNGE123jzb6/lgFEL1+V0Y3Zwo
0XhsJBaAr9b16u8qG1UQ1Q1cXIe/FmRRF6PPD4SeTy28cKn5JYeYlt8VBgzZWvxK
JfCqP3BeSEzjYHJhvOKDGmaWWEFTbF38VWvifOGTgJ2iFBVFLmoWKocX714oFbhP
y4ucdt72uJdbjz1TVYIZGO6Y6Sgc1dlRqjBA7PyIDqgjCzHDgkqkCFXjJmGT+AYt
8jttKmxQKzkvDQ==
-----END CERTIFICATE-----
Generated at Tue Mar 3 00:41:10 2026 by rpki-client