Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft
File: sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft (raw, json)
Hash identifier: H2z/MhVhEyyPDp5r4RCvC1gA9xMIaRqm5BretLen7zc=
Subject key identifier: 02:85:B7:C9:EF:93:BE:30:61:62:A2:87:E4:7E:1A:F4:BF:A7:71:C9
Authority key identifier: B1:81:4A:28:A8:C1:EB:E0:AD:C3:3A:15:19:B9:88:3E:30:84:BB:59
Certificate issuer: /CN=b1814a28a8c1ebe0adc33a1519b9883e3084bb59
Certificate serial: 019CA9EB509BA6BE480AF44EF4C215F5D96F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sYFKKKjB6-CtwzoVGbmIPjCEu1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft
Manifest number: 1150
Signing time: Sun 01 Mar 2026 15:01:36 +0000
Manifest this update: Sun 01 Mar 2026 15:01:36 +0000
Manifest next update: Mon 02 Mar 2026 15:01:36 +0000
Files and hashes: 1: 1ZD-5sWPvLvF_F5r7aK4sjXeBa8.roa (hash: 9g3E8L94O35utFKdVj/OF7X+jv2TAGMuo7bfCk2FBWk=)
2: Jgh8TRgca-Yzk4zbDo1y-y8oAjA.roa (hash: 1YiIe3dsEVG85vOw2eS5VT5pNrhUblvJwxJsfNgGFh8=)
3: kpO4RG28fYYVmBuJSIXGaHvSxU0.roa (hash: i8inyU2Y1UbsH+wXnBk66d0sVuBHQPuFEaJpwKKuPzA=)
4: sYFKKKjB6-CtwzoVGbmIPjCEu1k.crl (hash: uec/eE/CMOOrFH4mL8RVMHzbSm2NWUgX6UYfVeVtVEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/sYFKKKjB6-CtwzoVGbmIPjCEu1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:50:9b:a6:be:48:0a:f4:4e:f4:c2:15:f5:d9:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1814a28a8c1ebe0adc33a1519b9883e3084bb59
Validity
Not Before: Mar 1 15:01:36 2026 GMT
Not After : Mar 2 15:01:36 2026 GMT
Subject: CN=0285b7c9ef93be306162a287e47e1af4bfa771c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:98:58:4d:f9:a1:1b:78:32:ef:e0:5d:83:bd:
6b:ff:2f:43:67:82:50:ef:57:f2:fa:bd:fd:59:af:
ac:60:b0:d4:49:03:a2:b4:c2:74:95:04:ef:ab:8f:
2e:e5:bf:96:b5:1f:d7:53:54:dd:60:96:fd:40:7b:
95:8c:66:3d:6c:27:cb:ab:52:be:89:32:18:73:68:
16:06:93:72:8a:9c:a8:63:a0:59:93:c4:b0:35:d8:
0b:a0:8b:e7:9a:92:fd:54:21:3c:6d:c9:69:e4:3b:
a6:05:cb:58:9a:19:6e:3f:02:74:3b:2c:ee:f4:43:
8f:63:43:c1:17:19:92:c4:c0:99:08:22:5b:78:61:
4e:ba:eb:7a:99:20:0c:8b:13:12:3d:5b:7e:ea:80:
3a:c2:71:78:6f:f2:b0:20:8c:b7:71:ba:83:84:de:
9c:75:f3:cf:66:b4:5f:d8:3f:67:4c:6c:c0:bf:2b:
7c:f3:a7:59:c5:0b:5e:58:50:6c:0b:65:2d:e3:fe:
73:a9:ae:27:30:63:c8:8e:62:34:9e:04:40:9c:17:
a4:69:e4:7b:24:05:8e:ba:fc:2c:d7:ca:b4:5b:d1:
da:09:a6:cd:3c:7c:f7:9b:d3:88:0f:7f:a0:cf:a3:
66:d0:45:ab:2f:4c:df:4e:55:fe:f8:ca:43:4b:e0:
e7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:85:B7:C9:EF:93:BE:30:61:62:A2:87:E4:7E:1A:F4:BF:A7:71:C9
X509v3 Authority Key Identifier:
keyid:B1:81:4A:28:A8:C1:EB:E0:AD:C3:3A:15:19:B9:88:3E:30:84:BB:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYFKKKjB6-CtwzoVGbmIPjCEu1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:ca:92:8e:f3:89:04:0d:78:27:02:3e:43:e6:1b:5f:57:2e:
c4:2e:79:ea:22:c0:bf:ce:52:35:57:32:cb:e4:92:e4:f1:b0:
24:be:1f:19:13:b6:0c:3f:2f:ec:dc:75:78:33:6f:9b:f7:37:
42:1d:9c:e7:31:a5:4b:cd:4b:d9:e5:10:39:c1:b2:70:24:e8:
26:a4:67:6e:57:34:61:b5:d6:dc:ed:a0:32:fd:55:55:cc:fb:
15:34:af:44:1e:ab:98:05:e1:a4:b0:76:77:90:77:00:2f:9c:
38:44:39:04:73:fd:79:5d:63:4e:4c:21:da:97:e4:31:7f:52:
b3:a0:3f:f8:d0:01:61:0f:c6:53:ed:7e:86:4b:8c:f0:de:f8:
17:01:31:9c:6a:35:b2:5c:04:5b:7b:b1:50:ca:ce:44:20:73:
bd:5b:97:fa:50:89:e7:54:1b:a7:e0:7f:78:02:91:a0:b3:15:
d8:f4:7e:30:1d:68:e8:60:89:d0:03:6a:10:23:88:54:5b:e5:
9a:fd:60:75:0a:52:a0:7a:92:3c:e5:58:b3:12:15:6f:ea:b5:
4f:b5:cc:02:3e:af:a4:c4:07:ab:17:14:b4:a3:a1:3c:36:e8:
6a:b6:6b:d3:cf:3a:c4:51:b0:86:0d:59:d6:d5:14:40:69:1f:
43:43:73:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyp61Cbpr5ICvRO9MIV9dlvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxODE0YTI4YThjMWViZTBhZGMzM2ExNTE5Yjk4ODNlMzA4
NGJiNTkwHhcNMjYwMzAxMTUwMTM2WhcNMjYwMzAyMTUwMTM2WjAzMTEwLwYDVQQD
EygwMjg1YjdjOWVmOTNiZTMwNjE2MmEyODdlNDdlMWFmNGJmYTc3MWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ZhYTfmhG3gy7+Bdg71r/y9DZ4JQ
71fy+r39Wa+sYLDUSQOitMJ0lQTvq48u5b+WtR/XU1TdYJb9QHuVjGY9bCfLq1K+
iTIYc2gWBpNyipyoY6BZk8SwNdgLoIvnmpL9VCE8bclp5DumBctYmhluPwJ0Oyzu
9EOPY0PBFxmSxMCZCCJbeGFOuut6mSAMixMSPVt+6oA6wnF4b/KwIIy3cbqDhN6c
dfPPZrRf2D9nTGzAvyt886dZxQteWFBsC2Ut4/5zqa4nMGPIjmI0ngRAnBekaeR7
JAWOuvws18q0W9HaCabNPHz3m9OID3+gz6Nm0EWrL0zfTlX++MpDS+DnwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAKFt8nvk74wYWKih+R+GvS/p3HJMB8GA1UdIwQY
MBaAFLGBSiiowevgrcM6FRm5iD4whLtZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1lGS0tLakI2LUN0d3pvVkdibUlQakNFdTFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8zZmJmZjYtNzNlZS00ODEyLThlNGIt
ODFkYWJjODFjMDVjLzEvc1lGS0tLakI2LUN0d3pvVkdibUlQakNFdTFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8zZmJmZjYtNzNlZS00ODEyLThlNGItODFkYWJjODFjMDVj
LzEvc1lGS0tLakI2LUN0d3pvVkdibUlQakNFdTFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAssqSjvOJ
BA14JwI+Q+YbX1cuxC556iLAv85SNVcyy+SS5PGwJL4fGRO2DD8v7Nx1eDNvm/c3
Qh2c5zGlS81L2eUQOcGycCToJqRnblc0YbXW3O2gMv1VVcz7FTSvRB6rmAXhpLB2
d5B3AC+cOEQ5BHP9eV1jTkwh2pfkMX9Ss6A/+NABYQ/GU+1+hkuM8N74FwExnGo1
slwEW3uxUMrORCBzvVuX+lCJ51Qbp+B/eAKRoLMV2PR+MB1o6GCJ0ANqECOIVFvl
mv1gdQpSoHqSPOVYsxIVb+q1T7XMAj6vpMQHqxcUtKOhPDboarZr0886xFGwhg1Z
1tUUQGkfQ0NzqA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:14:23 2026 by rpki-client