Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
File: SXIqDKi7yU1IpctIzMku_vhFp-M.mft (raw, json)
Hash identifier: 8qA4Gj5RnAmsu+7IWqhU7IpvpGvtY/8Mo2/1V//Wh+s=
Subject key identifier: E8:68:D1:F0:DD:F1:ED:21:D0:FE:3A:A9:27:E0:B3:40:C7:63:58:CA
Authority key identifier: 49:72:2A:0C:A8:BB:C9:4D:48:A5:CB:48:CC:C9:2E:FE:F8:45:A7:E3
Certificate issuer: /CN=49722a0ca8bbc94d48a5cb48ccc92efef845a7e3
Certificate serial: 019CA9EB796A5539665D5882D7751874AB9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
Manifest number: 1801
Signing time: Sun 01 Mar 2026 15:01:47 +0000
Manifest this update: Sun 01 Mar 2026 15:01:47 +0000
Manifest next update: Mon 02 Mar 2026 15:01:47 +0000
Files and hashes: 1: 1-usL6AhsVQgwEOwqtzcx1h6pdYk.roa (hash: m452RcDS2XKhnRlqiqlaVh44Ww74b5nqeYQy1A7OC7I=)
2: SXIqDKi7yU1IpctIzMku_vhFp-M.crl (hash: 9rVfBccYysNsjUlwcNvMU8vo7oT2ygZ1mmx7shZu3RY=)
3: Y7BflHpDTlEOWh8-FjDosgwANDI.roa (hash: BNh1IcHDcawtVTnT8ZLo5aKLUrVIe97SR3mZxwBAYlo=)
4: boGX-Lm30GkI9QUngxbSV2vTHmE.roa (hash: 1TGckGRRsW7vYkWReEMx8JTWtzITaj+EKpmTBDFaV7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:79:6a:55:39:66:5d:58:82:d7:75:18:74:ab:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49722a0ca8bbc94d48a5cb48ccc92efef845a7e3
Validity
Not Before: Mar 1 15:01:47 2026 GMT
Not After : Mar 2 15:01:47 2026 GMT
Subject: CN=e868d1f0ddf1ed21d0fe3aa927e0b340c76358ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:67:8d:5b:b0:33:5c:83:88:e1:5b:9e:3a:de:
f3:81:57:11:fe:c8:55:29:72:31:aa:6f:7a:be:7e:
d9:82:bd:df:e8:fc:74:ae:c8:73:6d:a7:e0:c7:33:
ee:e2:7f:ac:c1:41:10:4e:61:0e:fa:be:f0:4e:92:
a8:ad:b8:20:41:55:ad:ed:70:62:92:81:df:1e:5d:
59:65:42:a0:5d:dc:4d:73:8c:25:ba:ab:9d:d9:bd:
16:b8:ed:20:f0:d4:ee:01:73:49:69:e4:68:9a:4e:
41:74:20:dc:8b:8c:2a:58:75:65:89:32:31:5f:a0:
de:f0:8f:eb:2a:d8:a9:23:b9:07:55:e0:14:db:c1:
8c:69:e6:51:1f:9d:07:51:ea:34:02:61:25:ac:97:
04:52:ba:30:fe:ba:2b:ff:69:4b:e8:be:6e:d7:b8:
12:09:bf:28:8d:40:98:1a:1a:6d:5a:d0:db:af:38:
82:70:b2:c5:b2:99:4a:a6:07:ef:8e:74:01:5a:e5:
6b:71:9b:bd:05:b5:cc:e3:b6:17:39:c9:bb:c8:91:
46:31:5a:ca:76:30:85:35:d7:4b:9e:91:18:5d:76:
80:67:b2:75:06:0a:1e:ba:26:08:fb:86:11:3a:57:
e6:e9:81:b8:64:41:38:4a:0a:ca:88:f6:77:7c:83:
2e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:68:D1:F0:DD:F1:ED:21:D0:FE:3A:A9:27:E0:B3:40:C7:63:58:CA
X509v3 Authority Key Identifier:
keyid:49:72:2A:0C:A8:BB:C9:4D:48:A5:CB:48:CC:C9:2E:FE:F8:45:A7:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e4:32:c1:83:0d:84:80:47:cb:c1:25:9d:7d:2b:91:03:ee:91:
fd:e3:b0:89:40:0f:83:2a:ee:f9:3c:07:62:43:95:f5:0c:bf:
3f:c8:8c:99:7c:0a:82:ae:c7:15:42:e7:ef:25:89:08:8d:1d:
c2:41:cc:8f:a7:67:2a:0d:a7:11:85:54:11:44:73:87:23:10:
d6:15:d9:ba:6b:0d:38:00:0a:4d:23:62:25:6d:bd:ac:32:f2:
8f:32:5f:87:f7:8b:81:30:1f:64:d9:3a:5f:3f:ba:46:39:53:
d2:d3:cb:41:8a:89:54:5f:a3:9f:95:61:0b:b8:83:2c:c1:59:
b1:2a:96:68:8a:d0:f9:87:56:db:83:67:a0:5c:dd:a4:7a:46:
8d:fd:c4:81:d7:a3:18:86:aa:db:65:96:1d:08:66:0a:21:8a:
2d:19:e7:fb:ad:33:84:58:40:4e:3e:1f:50:ed:03:08:9c:58:
c2:ef:99:3f:12:18:15:21:fc:09:4e:9a:a2:c6:bc:d2:09:b7:
75:1e:ee:55:3c:24:ab:88:85:2e:49:9e:e7:cf:e3:41:54:dd:
7a:fa:e3:40:2b:16:84:ce:81:64:a0:e4:f6:16:6f:69:2a:81:
f4:de:a2:b1:fb:a1:1a:85:b0:c5:17:3c:8a:af:68:f2:b6:cf:
82:ee:49:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyp63lqVTlmXViC13UYdKucMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5NzIyYTBjYThiYmM5NGQ0OGE1Y2I0OGNjYzkyZWZlZjg0
NWE3ZTMwHhcNMjYwMzAxMTUwMTQ3WhcNMjYwMzAyMTUwMTQ3WjAzMTEwLwYDVQQD
EyhlODY4ZDFmMGRkZjFlZDIxZDBmZTNhYTkyN2UwYjM0MGM3NjM1OGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWeNW7AzXIOI4VueOt7zgVcR/shV
KXIxqm96vn7Zgr3f6Px0rshzbafgxzPu4n+swUEQTmEO+r7wTpKorbggQVWt7XBi
koHfHl1ZZUKgXdxNc4wluqud2b0WuO0g8NTuAXNJaeRomk5BdCDci4wqWHVliTIx
X6De8I/rKtipI7kHVeAU28GMaeZRH50HUeo0AmElrJcEUrow/ror/2lL6L5u17gS
Cb8ojUCYGhptWtDbrziCcLLFsplKpgfvjnQBWuVrcZu9BbXM47YXOcm7yJFGMVrK
djCFNddLnpEYXXaAZ7J1BgoeuiYI+4YROlfm6YG4ZEE4SgrKiPZ3fIMuNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOho0fDd8e0h0P46qSfgs0DHY1jKMB8GA1UdIwQY
MBaAFElyKgyou8lNSKXLSMzJLv74RafjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1hJcURLaTd5VTFJcGN0SXpNa3VfdmhGcC1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9lYzUyMDgtZjY5NS00YmRiLTliYjIt
ZTE4ZmE2NTgwNTVhLzEvU1hJcURLaTd5VTFJcGN0SXpNa3VfdmhGcC1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9lYzUyMDgtZjY5NS00YmRiLTliYjItZTE4ZmE2NTgwNTVh
LzEvU1hJcURLaTd5VTFJcGN0SXpNa3VfdmhGcC1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5DLBgw2E
gEfLwSWdfSuRA+6R/eOwiUAPgyru+TwHYkOV9Qy/P8iMmXwKgq7HFULn7yWJCI0d
wkHMj6dnKg2nEYVUEURzhyMQ1hXZumsNOAAKTSNiJW29rDLyjzJfh/eLgTAfZNk6
Xz+6RjlT0tPLQYqJVF+jn5VhC7iDLMFZsSqWaIrQ+YdW24NnoFzdpHpGjf3Egdej
GIaq22WWHQhmCiGKLRnn+60zhFhATj4fUO0DCJxYwu+ZPxIYFSH8CU6aosa80gm3
dR7uVTwkq4iFLkme58/jQVTdevrjQCsWhM6BZKDk9hZvaSqB9N6isfuhGoWwxRc8
iq9o8rbPgu5JcQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:46:21 2026 by rpki-client