Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.mft
File: sZQPAAmW6_0tq3HEacxR7ogbP14.mft (raw, json)
Hash identifier: I9ovfA0Vj1oMK7jLYacKM8L5QBvH578nj4wKiH7H/kY=
Subject key identifier: 94:3F:57:DD:27:AE:4B:CD:F1:B1:87:A3:EF:67:FE:9B:6F:88:5D:F4
Authority key identifier: B1:94:0F:00:09:96:EB:FD:2D:AB:71:C4:69:CC:51:EE:88:1B:3F:5E
Certificate issuer: /CN=b1940f000996ebfd2dab71c469cc51ee881b3f5e
Certificate serial: 019CABA1ECE170932C0366E218DC9A8FCEC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZQPAAmW6_0tq3HEacxR7ogbP14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 23:00:41 +0000
Manifest this update: Sun 01 Mar 2026 23:00:41 +0000
Manifest next update: Mon 02 Mar 2026 23:00:41 +0000
Files and hashes: 1: _innNg-W71__tEWxWqoYCVwYPLc.roa (hash: UBsc5lS9QgRC7N6kPNc37ofHV3RHdTM0d9hSw9Z1W3o=)
2: aprsdgtKeFBW6dMDyLpO37V7sYU.roa (hash: 04ZHgWeGk6onOBVuETq5g7lFyguxKvrGp3YmU7j5C7o=)
3: sZQPAAmW6_0tq3HEacxR7ogbP14.crl (hash: 1y6laGm6EFsFc+mTK7B1QigA0jRakXtM6hxc+i3EHG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.mft
rsync://rpki.ripe.net/repository/DEFAULT/sZQPAAmW6_0tq3HEacxR7ogbP14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:ec:e1:70:93:2c:03:66:e2:18:dc:9a:8f:ce:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1940f000996ebfd2dab71c469cc51ee881b3f5e
Validity
Not Before: Mar 1 23:00:41 2026 GMT
Not After : Mar 2 23:00:41 2026 GMT
Subject: CN=943f57dd27ae4bcdf1b187a3ef67fe9b6f885df4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:61:24:f9:ad:cc:26:c6:5a:84:43:5f:5d:a0:
5b:89:4f:2a:36:02:5b:ba:aa:12:6d:e1:a3:a0:45:
87:ea:3f:66:83:4f:a4:d6:4d:30:4d:84:c8:3f:89:
ba:d4:9d:51:b5:d7:b7:51:d1:5b:30:34:c4:62:c1:
85:ae:12:68:b5:f9:e5:ca:0d:12:bd:40:58:46:1a:
6c:4e:0f:7d:b1:d9:07:e1:8a:40:60:89:26:e1:eb:
93:af:70:4f:ab:e9:f1:73:c4:58:06:8c:e4:81:aa:
23:03:90:43:7b:0c:80:08:07:28:73:9d:cb:52:36:
f4:4e:c8:e6:ad:93:7f:15:c8:59:10:ef:72:d2:98:
60:10:00:85:87:5c:0d:d1:c4:fb:42:4e:ea:c9:19:
f3:6e:8f:54:f3:77:63:40:46:48:d1:3e:ec:e5:15:
0b:7e:5c:da:d0:80:12:53:ed:ea:d6:95:57:4d:82:
71:59:93:82:82:d9:37:70:67:d9:15:26:f4:d0:1b:
5e:18:1b:09:d9:40:07:6f:07:04:c8:93:21:46:37:
67:9c:cd:8f:f7:c4:a7:66:e4:7c:c8:b4:47:40:4d:
37:7c:b0:f8:89:dc:1e:4a:91:4f:e4:a0:bd:71:9c:
dd:fc:ac:0b:a3:cb:af:95:66:bd:96:4a:92:ad:72:
3e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:3F:57:DD:27:AE:4B:CD:F1:B1:87:A3:EF:67:FE:9B:6F:88:5D:F4
X509v3 Authority Key Identifier:
keyid:B1:94:0F:00:09:96:EB:FD:2D:AB:71:C4:69:CC:51:EE:88:1B:3F:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZQPAAmW6_0tq3HEacxR7ogbP14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:e1:d2:b5:a3:94:ab:17:e5:55:2f:db:dc:07:78:85:07:33:
48:d4:1a:7f:0d:82:9a:f4:17:a8:90:8d:7d:fd:51:15:e7:7f:
8a:3a:4a:2b:2a:06:ff:c7:64:40:2e:c1:84:12:9e:e9:8f:69:
87:a1:bb:58:a4:81:35:5d:69:ce:14:11:06:03:ae:85:fd:ea:
f9:e8:8f:17:a9:55:90:78:56:ab:e4:62:2b:1a:b9:48:31:a6:
ed:53:e8:7a:fd:b8:07:9f:46:d3:00:d7:da:1c:3e:9d:0c:d0:
6d:36:68:4c:bf:a0:d1:40:9c:d7:3a:08:a9:c3:34:06:2d:7c:
45:92:1d:b9:19:54:4c:cb:49:1d:c4:f8:57:5f:d2:fb:6f:d2:
29:81:1c:54:a8:ed:11:4f:0f:39:06:8e:0e:4f:c5:94:81:b0:
99:08:1b:98:c6:67:c8:cb:c0:3d:f4:10:3d:c1:c3:38:91:6e:
55:cd:c6:7e:47:de:a8:3f:75:52:a9:5e:2f:37:6d:30:76:1d:
19:9f:95:84:34:92:8f:38:8b:c2:5b:23:1f:a0:ab:6e:53:60:
5f:50:a7:00:91:fe:ca:2e:2a:fe:66:5d:d3:81:57:32:59:14:
c5:08:e9:1f:15:05:d0:2b:43:97:a8:90:43:b4:23:35:2d:8d:
a9:65:80:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyroezhcJMsA2biGNyaj87FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxOTQwZjAwMDk5NmViZmQyZGFiNzFjNDY5Y2M1MWVlODgx
YjNmNWUwHhcNMjYwMzAxMjMwMDQxWhcNMjYwMzAyMjMwMDQxWjAzMTEwLwYDVQQD
Eyg5NDNmNTdkZDI3YWU0YmNkZjFiMTg3YTNlZjY3ZmU5YjZmODg1ZGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22Ek+a3MJsZahENfXaBbiU8qNgJb
uqoSbeGjoEWH6j9mg0+k1k0wTYTIP4m61J1Rtde3UdFbMDTEYsGFrhJotfnlyg0S
vUBYRhpsTg99sdkH4YpAYIkm4euTr3BPq+nxc8RYBozkgaojA5BDewyACAcoc53L
Ujb0TsjmrZN/FchZEO9y0phgEACFh1wN0cT7Qk7qyRnzbo9U83djQEZI0T7s5RUL
flza0IASU+3q1pVXTYJxWZOCgtk3cGfZFSb00BteGBsJ2UAHbwcEyJMhRjdnnM2P
98SnZuR8yLRHQE03fLD4idweSpFP5KC9cZzd/KwLo8uvlWa9lkqSrXI+FwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJQ/V90nrkvN8bGHo+9n/ptviF30MB8GA1UdIwQY
MBaAFLGUDwAJluv9LatxxGnMUe6IGz9eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1pRUEFBbVc2XzB0cTNIRWFjeFI3b2diUDE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8xYzEzZDktODFkNS00Y2RiLWEyZTEt
YTVhYmIyMGQyNDYyLzEvc1pRUEFBbVc2XzB0cTNIRWFjeFI3b2diUDE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8xYzEzZDktODFkNS00Y2RiLWEyZTEtYTVhYmIyMGQyNDYy
LzEvc1pRUEFBbVc2XzB0cTNIRWFjeFI3b2diUDE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHeHStaOU
qxflVS/b3Ad4hQczSNQafw2CmvQXqJCNff1RFed/ijpKKyoG/8dkQC7BhBKe6Y9p
h6G7WKSBNV1pzhQRBgOuhf3q+eiPF6lVkHhWq+RiKxq5SDGm7VPoev24B59G0wDX
2hw+nQzQbTZoTL+g0UCc1zoIqcM0Bi18RZIduRlUTMtJHcT4V1/S+2/SKYEcVKjt
EU8POQaODk/FlIGwmQgbmMZnyMvAPfQQPcHDOJFuVc3GfkfeqD91UqleLzdtMHYd
GZ+VhDSSjziLwlsjH6CrblNgX1CnAJH+yi4q/mZd04FXMlkUxQjpHxUF0CtDl6iQ
Q7QjNS2NqWWAUA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:07:54 2026 by rpki-client