Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.mft
File: SfA190v2NQvDef8uJTiC0kaO9Yg.mft (raw, json)
Hash identifier: LZyn9ClvMSseKiQ8pk7WtnTC00hzI+45xuM/apD7eY4=
Subject key identifier: A3:D0:E2:28:36:C0:AC:86:CA:AB:9E:79:47:36:53:2C:33:0A:4D:06
Authority key identifier: 49:F0:35:F7:4B:F6:35:0B:C3:79:FF:2E:25:38:82:D2:46:8E:F5:88
Certificate issuer: /CN=49f035f74bf6350bc379ff2e253882d2468ef588
Certificate serial: 019D97E1DAE7BE10CC0EBF3BD10FB832311C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfA190v2NQvDef8uJTiC0kaO9Yg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.mft
Manifest number: 05D6
Signing time: Thu 16 Apr 2026 20:00:54 +0000
Manifest this update: Thu 16 Apr 2026 20:00:54 +0000
Manifest next update: Fri 17 Apr 2026 20:00:54 +0000
Files and hashes: 1: SfA190v2NQvDef8uJTiC0kaO9Yg.crl (hash: 2STBGwt6A3+Q/4ml4punf+ppmjulaCjZiFgEwcd26Zg=)
2: r7-SCz1aeewC1b28_7aTBEERbc8.roa (hash: GlvMAyQ8rtSS7ofDdsa5bNcv30a7phC116f+dSElfio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SfA190v2NQvDef8uJTiC0kaO9Yg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:da:e7:be:10:cc:0e:bf:3b:d1:0f:b8:32:31:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f035f74bf6350bc379ff2e253882d2468ef588
Validity
Not Before: Apr 16 20:00:54 2026 GMT
Not After : Apr 17 20:00:54 2026 GMT
Subject: CN=a3d0e22836c0ac86caab9e794736532c330a4d06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8e:11:19:b5:4b:74:04:9e:11:ae:a0:c9:6b:
99:36:d0:27:29:d4:8e:95:df:c4:0c:a1:10:1a:20:
1a:f2:72:04:83:62:f9:a8:fa:eb:48:69:28:57:7d:
ee:68:83:82:02:f1:94:d8:61:e5:9a:29:4f:eb:84:
34:fa:dc:8e:e6:ac:b2:dc:41:0b:37:a2:f1:cb:9d:
d9:35:8c:5d:18:55:75:94:55:4a:97:89:14:25:99:
16:f7:f9:7f:dd:a8:02:12:45:bd:9a:10:8f:64:eb:
90:af:4e:e7:06:78:ae:f5:cd:a6:81:0d:32:ba:24:
e7:7f:92:9f:b9:09:1b:ba:93:a6:34:15:81:a2:69:
d9:62:60:85:ec:87:e1:4f:69:f4:3b:af:8f:ff:ba:
fa:c1:c8:84:1d:97:7e:84:29:1b:17:dc:5c:38:b9:
d8:9e:f9:d4:cb:9e:ca:9d:6e:61:c2:17:f4:13:5c:
2f:b7:36:8f:29:e9:6c:67:9e:91:ff:da:4c:81:89:
f7:83:cf:bb:b2:e5:85:fd:49:ba:b6:2a:ba:66:5d:
f3:88:2f:0f:16:02:13:f4:68:b3:92:a1:6e:ac:2c:
dc:de:a2:d7:b7:44:cc:30:4e:29:aa:34:0c:33:f7:
6a:2e:8b:4a:8f:df:05:01:53:55:25:98:38:48:b4:
65:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D0:E2:28:36:C0:AC:86:CA:AB:9E:79:47:36:53:2C:33:0A:4D:06
X509v3 Authority Key Identifier:
keyid:49:F0:35:F7:4B:F6:35:0B:C3:79:FF:2E:25:38:82:D2:46:8E:F5:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfA190v2NQvDef8uJTiC0kaO9Yg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ea:98:1c:97:c6:29:63:4d:82:70:c1:a1:7d:d8:3d:20:32:
c8:34:21:06:be:d4:69:31:da:2d:e8:5c:93:c4:7a:cd:0b:bf:
d2:70:70:29:93:8b:26:96:82:4b:16:57:71:af:8c:45:9c:3e:
a7:78:03:ec:75:8a:f7:ab:46:92:56:7e:a7:96:b5:bf:61:98:
8f:92:29:27:32:77:c3:3e:a7:fb:59:41:1a:9b:ee:86:7a:6c:
5d:79:f6:b5:fc:ab:1c:8f:71:f6:9d:fc:39:d9:1e:a7:07:34:
ba:bd:c1:dc:7f:0b:75:ce:ad:7b:50:e1:a2:25:65:8a:37:69:
e9:78:85:8a:7a:63:cf:c0:f5:b8:a1:e1:23:48:fb:ca:1d:8f:
e0:7a:38:1f:4d:2f:1f:9a:be:ae:dc:b5:b8:3c:4b:40:e5:e6:
9d:69:05:de:f8:26:4c:dc:cb:35:2f:67:7a:c6:cd:f3:a1:fd:
40:ae:c6:26:b8:a3:8f:a6:57:29:79:ec:c6:ba:37:c4:9e:21:
fa:fd:02:b6:e0:89:9f:db:47:94:85:dc:de:82:ae:60:ac:68:
2c:1c:6d:db:b7:d9:6c:d7:66:8a:d2:57:e9:ab:72:1b:91:e8:
b3:f3:3a:92:ed:0b:69:59:0e:3a:6d:36:b8:ed:c6:14:d2:54:
08:2a:ff:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2X4drnvhDMDr870Q+4MjEcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZjAzNWY3NGJmNjM1MGJjMzc5ZmYyZTI1Mzg4MmQyNDY4
ZWY1ODgwHhcNMjYwNDE2MjAwMDU0WhcNMjYwNDE3MjAwMDU0WjAzMTEwLwYDVQQD
EyhhM2QwZTIyODM2YzBhYzg2Y2FhYjllNzk0NzM2NTMyYzMzMGE0ZDA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmI4RGbVLdASeEa6gyWuZNtAnKdSO
ld/EDKEQGiAa8nIEg2L5qPrrSGkoV33uaIOCAvGU2GHlmilP64Q0+tyO5qyy3EEL
N6Lxy53ZNYxdGFV1lFVKl4kUJZkW9/l/3agCEkW9mhCPZOuQr07nBniu9c2mgQ0y
uiTnf5KfuQkbupOmNBWBomnZYmCF7IfhT2n0O6+P/7r6wciEHZd+hCkbF9xcOLnY
nvnUy57KnW5hwhf0E1wvtzaPKelsZ56R/9pMgYn3g8+7suWF/Um6tiq6Zl3ziC8P
FgIT9GizkqFurCzc3qLXt0TMME4pqjQMM/dqLotKj98FAVNVJZg4SLRlpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKPQ4ig2wKyGyqueeUc2UywzCk0GMB8GA1UdIwQY
MBaAFEnwNfdL9jULw3n/LiU4gtJGjvWIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2ZBMTkwdjJOUXZEZWY4dUpUaUMwa2FPOVlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8wMmZkOGUtMmQzOC00YWIxLTg0YjUt
OWVmMTI5ZWFkZTc4LzEvU2ZBMTkwdjJOUXZEZWY4dUpUaUMwa2FPOVlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8wMmZkOGUtMmQzOC00YWIxLTg0YjUtOWVmMTI5ZWFkZTc4
LzEvU2ZBMTkwdjJOUXZEZWY4dUpUaUMwa2FPOVlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAeqYHJfG
KWNNgnDBoX3YPSAyyDQhBr7UaTHaLehck8R6zQu/0nBwKZOLJpaCSxZXca+MRZw+
p3gD7HWK96tGklZ+p5a1v2GYj5IpJzJ3wz6n+1lBGpvuhnpsXXn2tfyrHI9x9p38
Odkepwc0ur3B3H8Ldc6te1DhoiVlijdp6XiFinpjz8D1uKHhI0j7yh2P4Ho4H00v
H5q+rty1uDxLQOXmnWkF3vgmTNzLNS9nesbN86H9QK7GJrijj6ZXKXnsxro3xJ4h
+v0CtuCJn9tHlIXc3oKuYKxoLBxt27fZbNdmitJX6atyG5Hos/M6ku0LaVkOOm02
uO3GFNJUCCr/NA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:35:59 2026 by rpki-client