Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft
File: s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft (raw, json)
Hash identifier: tHu68Udc6CCARvLEB2EPzsqvywpU+xi0zJtJUMHA7PU=
Subject key identifier: 66:A8:C7:E7:0F:2E:93:6D:60:56:FF:E1:37:FE:13:CA:69:35:2F:28
Authority key identifier: B3:8B:B6:2A:47:B1:A2:AE:DB:70:F3:2F:58:C9:79:BA:0C:77:7F:06
Certificate issuer: /CN=b38bb62a47b1a2aedb70f32f58c979ba0c777f06
Certificate serial: 019CABD973BBA47FDE05F8BC436FBC087A72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft
Manifest number: 1850
Signing time: Mon 02 Mar 2026 00:01:20 +0000
Manifest this update: Mon 02 Mar 2026 00:01:20 +0000
Manifest next update: Tue 03 Mar 2026 00:01:20 +0000
Files and hashes: 1: 5QTWLJYfkRoCVVHJVALgYHfqZHU.roa (hash: h+z+r+Bn2TQ0STpjYj8Vblc7ndiAXj7pVd0hatrMRJQ=)
2: KvgeqJVMtBERBgaWeQ7l2q_TyyI.roa (hash: NJUE6bdAubYbnAUIE6s0c5Wi5PY+ros78NmtfNQmGAk=)
3: Of_F0nZx4uUMsyu_MFlv9vqYM6A.roa (hash: V1xfi16Y3WhXqWRGet3YcxqXtnKz/3AWs7HoDzA48YM=)
4: _VVNfxdA5_FHj05YYq547OSKmlQ.roa (hash: 13IEzG/o1pmkzrgbkejU8IZuzD7A6Ft+aR2tUe+BCq8=)
5: ck22982XPjtgcPjy954uVGCKcK0.roa (hash: xSnMILKaL4KrwNXzralU8vyZN836vuMs+IKmeHjf9vw=)
6: s4u2Kkexoq7bcPMvWMl5ugx3fwY.crl (hash: zjUDtFGiphjiafs4k9IbgRX81unseLjZodaFM7fo2Yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:73:bb:a4:7f:de:05:f8:bc:43:6f:bc:08:7a:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b38bb62a47b1a2aedb70f32f58c979ba0c777f06
Validity
Not Before: Mar 2 00:01:20 2026 GMT
Not After : Mar 3 00:01:20 2026 GMT
Subject: CN=66a8c7e70f2e936d6056ffe137fe13ca69352f28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:82:8b:87:60:e3:52:16:ad:a3:09:fe:91:fb:
e5:13:ce:dd:62:99:c7:9c:ab:1a:59:42:7c:0b:dd:
2e:ae:9a:ef:14:14:00:01:1f:84:02:09:ea:8a:06:
00:19:e5:84:05:b8:0c:b1:de:ba:6e:2d:30:b4:1e:
11:df:73:93:87:20:21:6b:5d:0b:af:9c:32:63:9b:
79:20:46:4e:dd:03:47:cd:56:6b:4a:1f:b4:a6:74:
6a:73:4a:5c:ce:00:33:ba:ee:3d:8f:f0:41:5b:8c:
a5:22:81:a8:ad:b6:08:19:97:c0:25:de:ce:2b:43:
1e:f0:24:25:c9:ec:d7:5a:ec:e8:62:71:9a:71:82:
e7:8f:27:a2:92:b7:2e:7d:0c:b4:59:45:08:17:9d:
84:46:5f:51:68:ed:98:bf:27:94:43:86:0b:8d:aa:
90:b3:a5:d8:13:a7:d1:83:bb:bd:39:8a:8c:56:1e:
b2:cc:d4:ba:77:49:53:bf:a5:ae:05:f4:48:cb:4c:
fb:a9:dd:84:60:90:0b:29:41:12:49:7a:cb:0f:49:
20:76:f4:be:65:79:42:ec:da:c5:85:46:6f:84:a4:
b2:36:2d:a5:e6:05:d4:fe:d2:87:10:23:39:b1:e3:
9e:ed:81:b5:e6:58:56:fe:15:4d:af:e5:85:66:27:
93:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:A8:C7:E7:0F:2E:93:6D:60:56:FF:E1:37:FE:13:CA:69:35:2F:28
X509v3 Authority Key Identifier:
keyid:B3:8B:B6:2A:47:B1:A2:AE:DB:70:F3:2F:58:C9:79:BA:0C:77:7F:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:a0:1e:78:8f:94:f8:8b:08:11:54:32:d4:30:63:07:24:f4:
f2:07:2a:5e:dc:0c:68:1e:90:ae:ff:90:76:6a:7d:d3:27:fe:
8d:13:60:0b:f3:47:1e:e3:65:de:51:95:7d:09:b0:65:62:c1:
ab:56:52:66:8a:b0:59:7c:d9:80:84:5b:d8:cb:a3:d0:db:18:
65:18:d0:dd:4d:80:84:97:8a:46:46:02:10:d2:42:7a:33:17:
ee:aa:43:d3:12:94:b3:a5:90:24:64:0a:72:0c:42:a3:4f:60:
6f:4a:78:59:7e:25:16:63:fa:82:24:cf:e2:05:7a:4a:ab:75:
c7:cf:2c:ad:c9:ad:0b:c1:17:2b:6d:69:76:0f:f7:41:5f:0c:
63:e8:6c:13:82:ff:bd:d2:33:42:05:e6:0a:54:6e:5c:32:c8:
60:32:83:85:55:b9:cd:3e:af:bd:6b:0e:c7:46:18:e3:15:ad:
b4:14:0d:08:b2:e0:0f:7f:03:97:0e:6a:b2:70:da:b6:14:4b:
5f:1c:6e:a5:86:f0:29:d3:0d:0f:ec:f1:68:8f:3e:68:99:58:
57:b7:92:ed:51:e9:84:bc:75:1b:d2:51:12:d1:36:f3:39:51:
01:37:2f:7c:01:a1:9b:b4:51:da:ed:33:de:f7:04:d4:d2:bb:
f7:40:19:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2XO7pH/eBfi8Q2+8CHpyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzOGJiNjJhNDdiMWEyYWVkYjcwZjMyZjU4Yzk3OWJhMGM3
NzdmMDYwHhcNMjYwMzAyMDAwMTIwWhcNMjYwMzAzMDAwMTIwWjAzMTEwLwYDVQQD
Eyg2NmE4YzdlNzBmMmU5MzZkNjA1NmZmZTEzN2ZlMTNjYTY5MzUyZjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA34KLh2DjUhatown+kfvlE87dYpnH
nKsaWUJ8C90urprvFBQAAR+EAgnqigYAGeWEBbgMsd66bi0wtB4R33OThyAha10L
r5wyY5t5IEZO3QNHzVZrSh+0pnRqc0pczgAzuu49j/BBW4ylIoGorbYIGZfAJd7O
K0Me8CQlyezXWuzoYnGacYLnjyeikrcufQy0WUUIF52ERl9RaO2YvyeUQ4YLjaqQ
s6XYE6fRg7u9OYqMVh6yzNS6d0lTv6WuBfRIy0z7qd2EYJALKUESSXrLD0kgdvS+
ZXlC7NrFhUZvhKSyNi2l5gXU/tKHECM5seOe7YG15lhW/hVNr+WFZieTNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGaox+cPLpNtYFb/4Tf+E8ppNS8oMB8GA1UdIwQY
MBaAFLOLtipHsaKu23DzL1jJeboMd38GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczR1MktrZXhvcTdiY1BNdldNbDV1Z3gzZndZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85ZjY4MmMtMWM1Ny00Y2U1LWJiOTgt
MDYwNWMwODlmYzM4LzEvczR1MktrZXhvcTdiY1BNdldNbDV1Z3gzZndZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi85ZjY4MmMtMWM1Ny00Y2U1LWJiOTgtMDYwNWMwODlmYzM4
LzEvczR1MktrZXhvcTdiY1BNdldNbDV1Z3gzZndZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkaAeeI+U
+IsIEVQy1DBjByT08gcqXtwMaB6Qrv+Qdmp90yf+jRNgC/NHHuNl3lGVfQmwZWLB
q1ZSZoqwWXzZgIRb2Muj0NsYZRjQ3U2AhJeKRkYCENJCejMX7qpD0xKUs6WQJGQK
cgxCo09gb0p4WX4lFmP6giTP4gV6Sqt1x88srcmtC8EXK21pdg/3QV8MY+hsE4L/
vdIzQgXmClRuXDLIYDKDhVW5zT6vvWsOx0YY4xWttBQNCLLgD38Dlw5qsnDathRL
XxxupYbwKdMND+zxaI8+aJlYV7eS7VHphLx1G9JREtE28zlRATcvfAGhm7RR2u0z
3vcE1NK790AZSg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:59:14 2026 by rpki-client