Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
File: szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft (raw, json)
Hash identifier: f1Bwnz/mopC9w+AGxJ6aofMlTxgKhf84YMqiVuUttlc=
Subject key identifier: 9B:CD:12:7F:52:38:96:45:62:7E:DD:1F:C3:EA:2C:20:63:BC:EF:84
Authority key identifier: B3:34:FC:2B:5B:82:27:B6:DF:3F:21:D1:AD:3A:74:B1:4E:C0:68:5A
Certificate issuer: /CN=b334fc2b5b8227b6df3f21d1ad3a74b14ec0685a
Certificate serial: 019CAAC6F0AFD2BE30DF051B43FEA829CCBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 19:01:30 +0000
Manifest this update: Sun 01 Mar 2026 19:01:30 +0000
Manifest next update: Mon 02 Mar 2026 19:01:30 +0000
Files and hashes: 1: 8hD_hPQ-d2C-I237LdYPsmemGMc.roa (hash: Kq3FtrbxrcCDHnEp/P2g4aC/Ve47a+GB/z1ePLIcWF0=)
2: K4N3orsfXe-l_cCSMBw3n5JPDVI.roa (hash: 6KwKSqMS7ufj2P5HpkvKEEDqwAMVfIJTQOp6xcQ5Pms=)
3: szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl (hash: PkGWZm5fMmb50wXTiTg2nZL3prUTkyNVZ1oHWtXDbS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:f0:af:d2:be:30:df:05:1b:43:fe:a8:29:cc:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b334fc2b5b8227b6df3f21d1ad3a74b14ec0685a
Validity
Not Before: Mar 1 19:01:30 2026 GMT
Not After : Mar 2 19:01:30 2026 GMT
Subject: CN=9bcd127f52389645627edd1fc3ea2c2063bcef84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cf:1b:d7:3f:b6:5d:cc:4e:b4:11:3e:db:9d:
9f:b6:ce:94:e9:ba:3c:7c:75:4f:de:de:fe:a9:24:
8b:05:14:14:3d:ac:b3:04:37:10:01:b4:02:91:1e:
32:73:35:87:fd:b1:c8:9e:e6:68:30:db:ab:8f:96:
c4:0a:1a:fd:4f:6a:3b:fd:34:21:b4:d4:81:70:b8:
fe:24:1a:fa:d1:d1:ba:74:45:45:70:f5:2a:6a:eb:
43:de:2d:b5:9d:4c:44:ba:a2:11:16:09:e6:85:87:
c0:13:76:1d:68:36:87:65:d5:48:de:6d:c8:7a:3e:
9f:09:77:42:4f:a3:69:e6:d1:1e:64:0c:a9:09:58:
d1:5a:e4:be:24:c9:93:43:13:72:23:dd:21:ec:81:
2c:7a:c1:ed:98:ec:96:a5:50:84:73:ce:d2:08:f7:
63:1a:9a:ca:48:d1:5d:de:87:19:24:b2:d4:84:96:
39:53:95:65:a8:dd:67:08:ea:ca:95:23:ce:5e:40:
2e:c3:e5:0f:e0:8b:d2:a0:b8:27:09:a3:e9:9e:b2:
e5:26:2b:77:8d:75:a7:aa:61:6d:cc:ec:21:43:7c:
aa:96:04:29:99:44:9b:8a:01:37:2b:a3:09:8a:76:
79:64:c5:13:a2:73:dc:38:2e:76:1c:07:96:40:3c:
c9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:CD:12:7F:52:38:96:45:62:7E:DD:1F:C3:EA:2C:20:63:BC:EF:84
X509v3 Authority Key Identifier:
keyid:B3:34:FC:2B:5B:82:27:B6:DF:3F:21:D1:AD:3A:74:B1:4E:C0:68:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:e7:43:12:cb:b6:1f:eb:da:a6:b9:95:a9:42:94:34:76:d6:
f9:b4:0e:bc:4f:aa:16:75:40:33:2b:93:60:13:4d:11:91:87:
38:a8:74:c9:7e:d3:1b:fc:6f:9a:6a:a5:97:e5:de:b6:bf:97:
fe:b0:89:65:bc:25:5d:f9:fa:ea:f5:6e:4e:c3:96:91:9e:0b:
3d:43:c8:56:e0:6a:2d:70:fc:a4:f2:16:18:74:ca:e7:f6:02:
4d:92:bf:f0:72:83:90:e4:bc:f3:61:66:8a:6b:29:ec:2b:d3:
b2:09:e4:03:30:1a:f6:f8:84:7e:02:02:df:38:16:3c:5f:e7:
24:93:31:f0:67:e2:9b:93:ac:c2:53:fb:72:4b:74:de:b5:3a:
78:6f:5c:d9:7d:03:5a:3b:5a:a9:db:6d:18:b8:f1:a6:d4:2a:
ab:42:92:e6:92:e1:37:a2:3c:be:2b:45:34:d5:b4:e2:80:3d:
95:76:09:86:56:ae:a7:c1:18:09:01:a7:8f:1c:40:0e:89:16:
79:19:69:a0:96:1a:a9:5e:35:68:f2:95:ee:dc:0e:bd:4e:4d:
26:87:25:82:8d:e0:1d:09:7d:8b:48:aa:88:12:c1:27:a3:65:
33:52:89:b6:23:14:e9:1c:32:ef:ca:7c:dd:fa:38:dc:36:aa:
1a:ad:17:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxvCv0r4w3wUbQ/6oKcy8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMzRmYzJiNWI4MjI3YjZkZjNmMjFkMWFkM2E3NGIxNGVj
MDY4NWEwHhcNMjYwMzAxMTkwMTMwWhcNMjYwMzAyMTkwMTMwWjAzMTEwLwYDVQQD
Eyg5YmNkMTI3ZjUyMzg5NjQ1NjI3ZWRkMWZjM2VhMmMyMDYzYmNlZjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyc8b1z+2XcxOtBE+252fts6U6bo8
fHVP3t7+qSSLBRQUPayzBDcQAbQCkR4yczWH/bHInuZoMNurj5bEChr9T2o7/TQh
tNSBcLj+JBr60dG6dEVFcPUqautD3i21nUxEuqIRFgnmhYfAE3YdaDaHZdVI3m3I
ej6fCXdCT6Np5tEeZAypCVjRWuS+JMmTQxNyI90h7IEsesHtmOyWpVCEc87SCPdj
GprKSNFd3ocZJLLUhJY5U5VlqN1nCOrKlSPOXkAuw+UP4IvSoLgnCaPpnrLlJit3
jXWnqmFtzOwhQ3yqlgQpmUSbigE3K6MJinZ5ZMUTonPcOC52HAeWQDzJXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJvNEn9SOJZFYn7dH8PqLCBjvO+EMB8GA1UdIwQY
MBaAFLM0/Ctbgie23z8h0a06dLFOwGhaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3pUOEsxdUNKN2JmUHlIUnJUcDBzVTdBYUZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC82ODJlY2UtZWJlMi00YTIzLThhYjUt
MzZlNjRhYzY0NTQyLzEvc3pUOEsxdUNKN2JmUHlIUnJUcDBzVTdBYUZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC82ODJlY2UtZWJlMi00YTIzLThhYjUtMzZlNjRhYzY0NTQy
LzEvc3pUOEsxdUNKN2JmUHlIUnJUcDBzVTdBYUZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEOdDEsu2
H+vaprmVqUKUNHbW+bQOvE+qFnVAMyuTYBNNEZGHOKh0yX7TG/xvmmqll+Xetr+X
/rCJZbwlXfn66vVuTsOWkZ4LPUPIVuBqLXD8pPIWGHTK5/YCTZK/8HKDkOS882Fm
imsp7CvTsgnkAzAa9viEfgIC3zgWPF/nJJMx8Gfim5OswlP7ckt03rU6eG9c2X0D
WjtaqdttGLjxptQqq0KS5pLhN6I8vitFNNW04oA9lXYJhlaup8EYCQGnjxxADokW
eRlpoJYaqV41aPKV7twOvU5NJoclgo3gHQl9i0iqiBLBJ6NlM1KJtiMU6Rwy78p8
3fo43DaqGq0XBw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:47:15 2026 by rpki-client