Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.mft
File: s4slrXyWWJ5KjKpfpIksxN_Me1M.mft (raw, json)
Hash identifier: zFv4mW3Aq4glwfaoG3PsAswJdhVpv6IiMAZU6vgMOVg=
Subject key identifier: A4:C7:1F:CB:A5:0D:FA:F9:37:54:86:67:34:81:4D:19:8A:5C:8C:18
Authority key identifier: B3:8B:25:AD:7C:96:58:9E:4A:8C:AA:5F:A4:89:2C:C4:DF:CC:7B:53
Certificate issuer: /CN=b38b25ad7c96589e4a8caa5fa4892cc4dfcc7b53
Certificate serial: 019CAA583F7C6ABF12CE93689AFE360CABCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s4slrXyWWJ5KjKpfpIksxN_Me1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 17:00:35 +0000
Manifest this update: Sun 01 Mar 2026 17:00:35 +0000
Manifest next update: Mon 02 Mar 2026 17:00:35 +0000
Files and hashes: 1: VjDmi08eDkQNqosAIn5lUGAfZIA.roa (hash: jWrWoSFJKct0v+ZoZpemlOK9O+tbs5TMpb0HP64364w=)
2: s4slrXyWWJ5KjKpfpIksxN_Me1M.crl (hash: lcW1UBOZJWyyvijQ0r4wd6B6/C2ZcdqsouXIg064BUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/s4slrXyWWJ5KjKpfpIksxN_Me1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:3f:7c:6a:bf:12:ce:93:68:9a:fe:36:0c:ab:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b38b25ad7c96589e4a8caa5fa4892cc4dfcc7b53
Validity
Not Before: Mar 1 17:00:35 2026 GMT
Not After : Mar 2 17:00:35 2026 GMT
Subject: CN=a4c71fcba50dfaf93754866734814d198a5c8c18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5f:c5:de:14:c8:9e:96:4e:cf:1e:41:a9:41:
42:2b:fe:3d:98:ec:d7:d9:da:a8:ca:a1:53:39:51:
4f:58:34:37:fb:7e:2f:e2:06:9a:a9:83:96:cd:9b:
22:21:fd:94:82:69:3a:dc:6f:87:d5:04:ca:6d:4a:
75:e5:75:fd:00:b7:fb:25:f7:0d:7c:5b:3f:8f:2c:
0b:46:b0:9e:c7:74:00:48:2b:a1:7f:43:f4:0e:71:
f2:73:c0:4c:25:0b:90:f4:5c:84:a8:92:da:dc:f6:
f7:86:2c:b2:e9:b6:9e:fe:55:92:3b:f7:0c:2f:1e:
aa:23:0f:ce:af:06:94:3f:d7:77:ca:9a:11:08:db:
b0:dc:40:8f:5f:1a:1f:5d:36:8c:d1:72:03:58:3f:
b9:ed:b6:df:a8:43:b1:ed:30:c2:e7:5b:1c:2a:a7:
9b:7a:be:d6:f6:6e:32:a5:8d:3b:57:9b:9b:78:d1:
d4:38:a1:85:a7:00:69:50:74:a2:bf:7f:8c:de:9e:
23:9d:db:ad:8b:41:6f:17:02:0e:a3:a5:5d:b1:2a:
50:42:de:0f:7c:0b:21:5c:93:67:92:00:aa:d2:80:
3d:21:91:6c:6d:63:cc:30:d2:3d:3e:ab:96:02:b1:
79:be:60:31:10:e7:5f:5e:2b:a2:b2:32:7b:50:ac:
f9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C7:1F:CB:A5:0D:FA:F9:37:54:86:67:34:81:4D:19:8A:5C:8C:18
X509v3 Authority Key Identifier:
keyid:B3:8B:25:AD:7C:96:58:9E:4A:8C:AA:5F:A4:89:2C:C4:DF:CC:7B:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s4slrXyWWJ5KjKpfpIksxN_Me1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:d3:59:f6:25:26:c2:c9:9c:b1:0e:19:26:f6:89:f2:8a:8c:
ca:da:62:a3:18:a7:38:94:f1:25:bc:4d:99:8e:4c:8c:da:10:
e5:0c:32:a8:ce:a1:f9:65:f9:bc:f5:85:23:97:4e:21:46:61:
64:1e:9d:8f:84:30:9d:bb:f4:c6:11:ab:67:c7:93:40:ec:30:
20:67:f8:a1:8d:bf:44:2f:a1:28:73:b5:59:fd:d2:ed:bf:7c:
a3:50:18:ad:9d:ff:4f:fa:44:d7:a5:da:cf:4c:1b:18:80:b9:
2c:ae:8b:05:12:1a:c7:24:4b:4e:10:9f:bb:6a:5b:d5:d4:d4:
a5:18:aa:37:81:df:2e:28:63:a2:11:2c:05:76:58:b2:56:a3:
2d:aa:a2:ae:64:7c:8a:dd:54:9b:f8:c5:59:f2:27:65:84:28:
34:48:11:b9:69:04:94:e6:63:8d:4b:63:b1:34:35:f2:80:0e:
ab:d6:c9:71:1c:13:bd:d7:2a:7c:aa:26:68:ca:a7:c8:4e:18:
fd:cb:71:ce:dd:8e:3d:e2:74:7d:06:97:1f:ba:9a:67:87:c5:
7a:55:43:8a:6e:7f:45:9d:8c:a4:4f:15:f4:9d:8b:61:ef:7b:
b1:83:25:f0:64:ba:40:28:7c:0e:25:5c:1b:75:6f:08:2a:50:
6f:7d:2b:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWD98ar8SzpNomv42DKvOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzOGIyNWFkN2M5NjU4OWU0YThjYWE1ZmE0ODkyY2M0ZGZj
YzdiNTMwHhcNMjYwMzAxMTcwMDM1WhcNMjYwMzAyMTcwMDM1WjAzMTEwLwYDVQQD
EyhhNGM3MWZjYmE1MGRmYWY5Mzc1NDg2NjczNDgxNGQxOThhNWM4YzE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyl/F3hTInpZOzx5BqUFCK/49mOzX
2dqoyqFTOVFPWDQ3+34v4gaaqYOWzZsiIf2Ugmk63G+H1QTKbUp15XX9ALf7JfcN
fFs/jywLRrCex3QASCuhf0P0DnHyc8BMJQuQ9FyEqJLa3Pb3hiyy6bae/lWSO/cM
Lx6qIw/OrwaUP9d3ypoRCNuw3ECPXxofXTaM0XIDWD+57bbfqEOx7TDC51scKqeb
er7W9m4ypY07V5ubeNHUOKGFpwBpUHSiv3+M3p4jnduti0FvFwIOo6VdsSpQQt4P
fAshXJNnkgCq0oA9IZFsbWPMMNI9PquWArF5vmAxEOdfXiuisjJ7UKz5BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKTHH8ulDfr5N1SGZzSBTRmKXIwYMB8GA1UdIwQY
MBaAFLOLJa18llieSoyqX6SJLMTfzHtTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczRzbHJYeVdXSjVLaktwZnBJa3N4Tl9NZTFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy80MjkxYTItMDNhOS00MTk1LWIxYTct
M2Y0MDU0N2U1MmQxLzEvczRzbHJYeVdXSjVLaktwZnBJa3N4Tl9NZTFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy80MjkxYTItMDNhOS00MTk1LWIxYTctM2Y0MDU0N2U1MmQx
LzEvczRzbHJYeVdXSjVLaktwZnBJa3N4Tl9NZTFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUNNZ9iUm
wsmcsQ4ZJvaJ8oqMytpioxinOJTxJbxNmY5MjNoQ5QwyqM6h+WX5vPWFI5dOIUZh
ZB6dj4Qwnbv0xhGrZ8eTQOwwIGf4oY2/RC+hKHO1Wf3S7b98o1AYrZ3/T/pE16Xa
z0wbGIC5LK6LBRIaxyRLThCfu2pb1dTUpRiqN4HfLihjohEsBXZYslajLaqirmR8
it1Um/jFWfInZYQoNEgRuWkElOZjjUtjsTQ18oAOq9bJcRwTvdcqfKomaMqnyE4Y
/ctxzt2OPeJ0fQaXH7qaZ4fFelVDim5/RZ2MpE8V9J2LYe97sYMl8GS6QCh8DiVc
G3VvCCpQb30rbQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:59:39 2026 by rpki-client