Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.mft
File: sP8nOo_iEgkLoct4xjMfgOeMMCU.mft (raw, json)
Hash identifier: 1lvkJl2sLZaxfZb5fHLJtfSYDAcHJdA1S84jSyHANT0=
Subject key identifier: CC:A3:28:D5:9C:20:C0:78:24:1F:36:63:98:87:1B:5F:98:16:C1:DA
Authority key identifier: B0:FF:27:3A:8F:E2:12:09:0B:A1:CB:78:C6:33:1F:80:E7:8C:30:25
Certificate issuer: /CN=b0ff273a8fe212090ba1cb78c6331f80e78c3025
Certificate serial: 019CB249477F4260E36353B163EE31D4FA77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sP8nOo_iEgkLoct4xjMfgOeMMCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.mft
Manifest number: 021B
Signing time: Tue 03 Mar 2026 06:01:12 +0000
Manifest this update: Tue 03 Mar 2026 06:01:12 +0000
Manifest next update: Wed 04 Mar 2026 06:01:12 +0000
Files and hashes: 1: Zv79TTxsf83wSa-br66v_0Kz3P0.roa (hash: PshdlsPP60SM0Q8DKrvKNK5rgHz5shKnndSXnKZ2nf8=)
2: sP8nOo_iEgkLoct4xjMfgOeMMCU.crl (hash: rDE2RUn+xaNO7z6PG4FsImXGmmDDlHZWqxcWuX7ex3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sP8nOo_iEgkLoct4xjMfgOeMMCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b2:49:47:7f:42:60:e3:63:53:b1:63:ee:31:d4:fa:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0ff273a8fe212090ba1cb78c6331f80e78c3025
Validity
Not Before: Mar 3 06:01:12 2026 GMT
Not After : Mar 4 06:01:12 2026 GMT
Subject: CN=cca328d59c20c078241f366398871b5f9816c1da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:61:43:bb:78:38:05:77:7f:76:81:52:43:8e:
33:a8:77:bb:d7:4f:2c:ff:ae:dc:f2:63:7a:35:e4:
7d:db:0c:dd:cf:db:23:95:43:2a:8f:26:21:f0:6f:
b9:3e:0e:d7:b6:5a:d8:54:47:0d:8d:09:6e:fd:b2:
64:d1:09:a5:ca:24:09:4e:91:26:fa:53:26:6e:3f:
53:6e:1d:fb:b8:d1:7c:43:3f:84:00:2c:d2:4d:85:
85:21:e1:36:b9:42:c2:e9:17:63:e2:80:58:2a:bb:
e7:d2:b0:dc:45:6b:34:a7:6c:34:68:35:bf:38:05:
35:f7:67:74:df:cb:82:90:11:b2:be:80:da:f1:c7:
40:86:e8:ad:09:6f:25:96:36:7c:aa:ae:96:e5:f1:
59:6a:8f:6a:29:27:b0:7c:9a:09:c3:d0:42:97:a6:
81:33:e7:eb:9e:37:a4:1f:06:15:bc:ff:f6:0b:9d:
0e:ad:b6:eb:45:b5:e8:12:43:3d:c3:88:2d:ad:16:
0d:8a:d9:37:0f:0e:3b:a3:63:68:bd:85:79:7c:4c:
db:5b:99:54:14:95:b0:1a:69:a3:cc:93:98:a2:e1:
0b:27:31:9c:e1:02:ae:2d:e1:db:c9:40:af:2f:a1:
06:23:fa:6f:d0:ff:5f:a8:45:47:ec:f1:3b:70:11:
1f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:A3:28:D5:9C:20:C0:78:24:1F:36:63:98:87:1B:5F:98:16:C1:DA
X509v3 Authority Key Identifier:
keyid:B0:FF:27:3A:8F:E2:12:09:0B:A1:CB:78:C6:33:1F:80:E7:8C:30:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sP8nOo_iEgkLoct4xjMfgOeMMCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:1c:b2:68:b9:ce:fc:a5:76:c5:36:c4:8a:3e:96:54:51:bc:
ed:e8:17:fb:76:12:b3:11:e8:51:94:9e:f0:ed:00:d7:68:cd:
f8:e8:30:7b:c7:96:72:40:82:21:9b:a5:01:51:c8:f5:1f:a6:
af:65:63:68:80:24:60:54:ea:23:ad:a1:51:ae:90:0f:b7:14:
a5:5e:09:93:90:4e:79:29:ad:9e:6d:5b:3f:01:6f:ca:15:c1:
cb:02:e2:d8:65:55:0d:1c:81:f2:22:e4:d5:7b:b3:f1:91:ed:
49:0a:01:3a:3c:db:17:92:39:f9:f1:7f:df:f0:cc:36:1f:27:
69:02:15:88:3f:e1:7b:1c:3d:e9:c4:5a:a2:db:d2:68:66:8f:
a9:87:a5:e1:ed:04:68:99:48:0c:44:c8:a9:c1:5b:ce:49:32:
0b:74:dd:85:46:11:9d:19:ec:55:9c:2e:22:a5:10:d4:52:8f:
99:11:1c:3e:f6:4c:21:d5:8f:1c:9e:fc:6e:d2:7e:9f:72:63:
9f:9a:7e:7a:71:20:04:54:f6:ef:8a:52:1c:34:a9:fb:c4:a9:
6f:ff:ae:78:da:98:b2:bd:1a:1b:c9:c1:53:f0:08:ee:44:9c:
63:60:78:f6:24:30:35:3e:55:21:80:ce:6f:45:1f:22:09:3d:
23:bd:7a:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyySUd/QmDjY1OxY+4x1Pp3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwZmYyNzNhOGZlMjEyMDkwYmExY2I3OGM2MzMxZjgwZTc4
YzMwMjUwHhcNMjYwMzAzMDYwMTEyWhcNMjYwMzA0MDYwMTEyWjAzMTEwLwYDVQQD
EyhjY2EzMjhkNTljMjBjMDc4MjQxZjM2NjM5ODg3MWI1Zjk4MTZjMWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WFDu3g4BXd/doFSQ44zqHe7108s
/67c8mN6NeR92wzdz9sjlUMqjyYh8G+5Pg7XtlrYVEcNjQlu/bJk0QmlyiQJTpEm
+lMmbj9Tbh37uNF8Qz+EACzSTYWFIeE2uULC6Rdj4oBYKrvn0rDcRWs0p2w0aDW/
OAU192d038uCkBGyvoDa8cdAhuitCW8lljZ8qq6W5fFZao9qKSewfJoJw9BCl6aB
M+frnjekHwYVvP/2C50OrbbrRbXoEkM9w4gtrRYNitk3Dw47o2NovYV5fEzbW5lU
FJWwGmmjzJOYouELJzGc4QKuLeHbyUCvL6EGI/pv0P9fqEVH7PE7cBEftwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMyjKNWcIMB4JB82Y5iHG1+YFsHaMB8GA1UdIwQY
MBaAFLD/JzqP4hIJC6HLeMYzH4DnjDAlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1A4bk9vX2lFZ2tMb2N0NHhqTWZnT2VNTUNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS83ZjEyNTUtZDNhZC00Y2IyLWFiZmQt
ODhkM2NhOTAwNmQ1LzEvc1A4bk9vX2lFZ2tMb2N0NHhqTWZnT2VNTUNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS83ZjEyNTUtZDNhZC00Y2IyLWFiZmQtODhkM2NhOTAwNmQ1
LzEvc1A4bk9vX2lFZ2tMb2N0NHhqTWZnT2VNTUNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZByyaLnO
/KV2xTbEij6WVFG87egX+3YSsxHoUZSe8O0A12jN+Ogwe8eWckCCIZulAVHI9R+m
r2VjaIAkYFTqI62hUa6QD7cUpV4Jk5BOeSmtnm1bPwFvyhXBywLi2GVVDRyB8iLk
1Xuz8ZHtSQoBOjzbF5I5+fF/3/DMNh8naQIViD/hexw96cRaotvSaGaPqYel4e0E
aJlIDETIqcFbzkkyC3TdhUYRnRnsVZwuIqUQ1FKPmREcPvZMIdWPHJ78btJ+n3Jj
n5p+enEgBFT274pSHDSp+8Spb/+ueNqYsr0aG8nBU/AI7kScY2B49iQwNT5VIYDO
b0UfIgk9I716xA==
-----END CERTIFICATE-----
Generated at Tue Mar 3 09:05:40 2026 by rpki-client