Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.mft
File: SbJERkTEM0jXxQ9OUOdDVumJbb8.mft (raw, json)
Hash identifier: Cur1tpVYKlQHuMn7RyKCcbgArBqrqfBXKujei7uWZdo=
Subject key identifier: EA:69:A6:2F:72:C3:21:30:8B:56:01:8E:87:9E:68:81:AE:16:5C:99
Authority key identifier: 49:B2:44:46:44:C4:33:48:D7:C5:0F:4E:50:E7:43:56:E9:89:6D:BF
Certificate issuer: /CN=49b2444644c43348d7c50f4e50e74356e9896dbf
Certificate serial: 019CAA59304BCC6C04A77C93BA4352CFAE14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SbJERkTEM0jXxQ9OUOdDVumJbb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.mft
Manifest number: 159C
Signing time: Sun 01 Mar 2026 17:01:37 +0000
Manifest this update: Sun 01 Mar 2026 17:01:37 +0000
Manifest next update: Mon 02 Mar 2026 17:01:37 +0000
Files and hashes: 1: 1y38PR10Vv3q34i9joY2RmqK9ws.roa (hash: WeX7D0CbRCituwqc2ZHAm4HR95Ee3JW1/xIonHquU3w=)
2: Py-y3i4hM_niS2FAlbK-g-CG53U.roa (hash: XmwAKXCN1UVsid2Ow64xLKVGJOuuu5RfqZ+9WMGZctw=)
3: SbJERkTEM0jXxQ9OUOdDVumJbb8.crl (hash: v6a8a7ztpZP9/UlXgmSzEMmnxyVHnYwUyo60kJejIgA=)
4: yXa8XbTaH683GFEjkOW8VCRIjpE.roa (hash: l5nJIcq0a2VDJfhrhqSb9wFUsKAsvOaRuHeId15ZhA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SbJERkTEM0jXxQ9OUOdDVumJbb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:30:4b:cc:6c:04:a7:7c:93:ba:43:52:cf:ae:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49b2444644c43348d7c50f4e50e74356e9896dbf
Validity
Not Before: Mar 1 17:01:37 2026 GMT
Not After : Mar 2 17:01:37 2026 GMT
Subject: CN=ea69a62f72c321308b56018e879e6881ae165c99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e6:fc:d1:e3:86:8b:af:5b:70:a2:70:96:fa:
1f:4f:37:4e:b8:45:ff:67:40:a2:e6:ec:5e:76:5e:
d1:95:a1:ad:01:42:40:42:66:52:12:00:09:51:54:
f8:3b:fa:f6:3b:87:3d:37:d1:e6:f6:9a:26:8c:32:
a1:e9:cf:66:fe:5b:d7:12:00:2a:61:72:12:b5:55:
de:04:4e:9e:13:20:6a:bd:fa:e5:bf:03:07:93:c8:
e6:72:4f:55:e2:b4:bf:ef:d2:cb:7c:3f:b3:75:7c:
4e:a7:2a:3c:ab:b0:d0:64:46:73:9d:d5:16:dc:30:
ff:c3:36:e7:80:7c:50:30:19:76:0f:47:8f:b1:e7:
1f:c5:5f:a1:6b:a0:6f:a5:12:1a:ec:d5:f1:76:41:
e2:27:bd:1c:d3:ce:6c:ef:42:6b:e8:1a:a8:0f:68:
1d:e0:5e:90:d4:23:85:f6:0a:92:e7:c3:b8:55:7b:
17:41:ab:87:8d:1a:02:4a:c1:c7:33:fb:03:8a:59:
bd:c0:ac:d3:6c:3b:42:15:e8:f2:b5:f0:8d:05:97:
17:32:66:ca:45:37:f1:4e:ab:73:33:28:bc:34:19:
0f:36:74:b4:87:7a:72:32:ff:82:01:4c:16:fd:8a:
e2:23:58:3c:2d:3e:cf:9a:12:ae:81:64:c0:99:4b:
c3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:69:A6:2F:72:C3:21:30:8B:56:01:8E:87:9E:68:81:AE:16:5C:99
X509v3 Authority Key Identifier:
keyid:49:B2:44:46:44:C4:33:48:D7:C5:0F:4E:50:E7:43:56:E9:89:6D:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SbJERkTEM0jXxQ9OUOdDVumJbb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:af:2b:0d:15:7d:6a:5e:09:f0:74:04:d9:d8:92:cc:fa:fc:
0b:fb:c5:e7:e7:b0:ea:fd:55:53:1a:f1:a6:8e:8f:ba:da:a9:
42:b9:6a:79:67:c9:5e:0e:b7:a9:0e:96:22:87:fc:86:a8:b8:
f1:b3:01:f4:a2:16:87:b3:c5:2c:4f:78:a9:20:14:17:c3:03:
a0:8d:ff:48:0b:0a:48:29:5a:f7:87:10:f9:bd:5d:bc:0d:79:
e2:e8:f7:57:95:b3:9d:72:22:4f:66:d9:fd:77:72:5e:85:8a:
68:04:bf:4c:b9:e0:f1:4e:eb:bc:cd:85:9d:d4:c9:40:b9:45:
47:42:a2:11:f4:60:2c:61:a9:e7:63:20:88:d1:19:51:46:02:
67:e0:2e:7d:02:94:3c:01:cc:95:ff:f8:06:2c:39:37:05:78:
30:88:2b:7d:7e:c9:5d:2b:c2:59:6b:78:72:20:49:6d:10:7f:
8f:bf:76:59:ab:d9:66:14:bf:8b:e3:e9:44:c7:9e:81:e6:99:
31:63:87:56:9f:54:64:8c:9b:89:fa:55:a1:d4:59:6a:ab:17:
9a:d8:44:72:03:64:f2:31:c2:ff:fd:d2:68:4c:89:2d:7b:70:
f7:a1:a4:fa:c8:7e:41:95:aa:c5:0a:8a:2c:2d:4a:b2:8a:66:
89:09:40:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWTBLzGwEp3yTukNSz64UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5YjI0NDQ2NDRjNDMzNDhkN2M1MGY0ZTUwZTc0MzU2ZTk4
OTZkYmYwHhcNMjYwMzAxMTcwMTM3WhcNMjYwMzAyMTcwMTM3WjAzMTEwLwYDVQQD
EyhlYTY5YTYyZjcyYzMyMTMwOGI1NjAxOGU4NzllNjg4MWFlMTY1Yzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueb80eOGi69bcKJwlvofTzdOuEX/
Z0Ci5uxedl7RlaGtAUJAQmZSEgAJUVT4O/r2O4c9N9Hm9pomjDKh6c9m/lvXEgAq
YXIStVXeBE6eEyBqvfrlvwMHk8jmck9V4rS/79LLfD+zdXxOpyo8q7DQZEZzndUW
3DD/wzbngHxQMBl2D0ePsecfxV+ha6BvpRIa7NXxdkHiJ70c085s70Jr6BqoD2gd
4F6Q1COF9gqS58O4VXsXQauHjRoCSsHHM/sDilm9wKzTbDtCFejytfCNBZcXMmbK
RTfxTqtzMyi8NBkPNnS0h3pyMv+CAUwW/YriI1g8LT7PmhKugWTAmUvDSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOpppi9ywyEwi1YBjoeeaIGuFlyZMB8GA1UdIwQY
MBaAFEmyREZExDNI18UPTlDnQ1bpiW2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2JKRVJrVEVNMGpYeFE5T1VPZERWdW1KYmI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi82NGNkYmQtYzg1MS00YjM1LWJiNzkt
NzUzZDk2OWEwNzAyLzEvU2JKRVJrVEVNMGpYeFE5T1VPZERWdW1KYmI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi82NGNkYmQtYzg1MS00YjM1LWJiNzktNzUzZDk2OWEwNzAy
LzEvU2JKRVJrVEVNMGpYeFE5T1VPZERWdW1KYmI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfa8rDRV9
al4J8HQE2diSzPr8C/vF5+ew6v1VUxrxpo6PutqpQrlqeWfJXg63qQ6WIof8hqi4
8bMB9KIWh7PFLE94qSAUF8MDoI3/SAsKSCla94cQ+b1dvA154uj3V5WznXIiT2bZ
/XdyXoWKaAS/TLng8U7rvM2FndTJQLlFR0KiEfRgLGGp52MgiNEZUUYCZ+AufQKU
PAHMlf/4Biw5NwV4MIgrfX7JXSvCWWt4ciBJbRB/j792WavZZhS/i+PpRMeegeaZ
MWOHVp9UZIybifpVodRZaqsXmthEcgNk8jHC//3SaEyJLXtw96Gk+sh+QZWqxQqK
LC1KsopmiQlAng==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:32 2026 by rpki-client