Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft
File: rSzwPkTaKLcxnqe3tbEQubjLenA.mft (raw, json)
Hash identifier: HLjCeeecfaUGJqTrMOIOjZGVzX7B0WWNeniW/snCwgQ=
Subject key identifier: 23:38:1F:0E:93:27:90:F0:F0:37:6A:96:C2:D1:BA:99:6C:E9:87:E8
Authority key identifier: AD:2C:F0:3E:44:DA:28:B7:31:9E:A7:B7:B5:B1:10:B9:B8:CB:7A:70
Certificate issuer: /CN=ad2cf03e44da28b7319ea7b7b5b110b9b8cb7a70
Certificate serial: 019CAD5A170939119EFF926575A9F5959931
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSzwPkTaKLcxnqe3tbEQubjLenA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft
Manifest number: 184C
Signing time: Mon 02 Mar 2026 07:01:28 +0000
Manifest this update: Mon 02 Mar 2026 07:01:28 +0000
Manifest next update: Tue 03 Mar 2026 07:01:28 +0000
Files and hashes: 1: X50-n9cVU2Zq24SDbQ05Dv_q5v0.roa (hash: S7zmoSUIsI4P7LLg9xapiyTzbeO1NkyzmEJQWzWpHOE=)
2: rSzwPkTaKLcxnqe3tbEQubjLenA.crl (hash: IaYr5xeLtKqY0KYya9qyKjogs8poayZpbbYUZWGhL70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSzwPkTaKLcxnqe3tbEQubjLenA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:17:09:39:11:9e:ff:92:65:75:a9:f5:95:99:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2cf03e44da28b7319ea7b7b5b110b9b8cb7a70
Validity
Not Before: Mar 2 07:01:28 2026 GMT
Not After : Mar 3 07:01:28 2026 GMT
Subject: CN=23381f0e932790f0f0376a96c2d1ba996ce987e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b0:18:e8:e6:c9:55:94:ef:2e:ac:3d:48:68:
63:41:33:97:45:ed:89:d4:65:ce:a9:ee:44:54:aa:
94:b4:8e:0b:62:55:11:b4:5d:82:a9:18:88:1c:fa:
e1:70:23:5f:33:72:eb:a1:87:8a:82:85:cb:e2:4e:
5e:84:bc:63:eb:7c:9b:e4:2e:04:28:f1:00:c5:2c:
a1:6c:d1:59:47:0d:fe:6b:ab:0a:d8:1e:b2:8d:cb:
f7:c1:07:0d:4c:e5:68:e9:20:f7:34:f7:70:09:2a:
1b:8b:9c:16:63:18:f8:d5:a6:7b:e3:af:82:6c:b4:
4f:33:74:a2:31:f3:e0:2a:0c:a5:19:36:e0:b4:14:
24:06:66:51:84:0f:53:82:85:85:d8:4a:05:2a:a6:
2e:98:ed:7c:3c:6c:9c:83:e4:03:f6:06:b5:d1:6a:
32:6b:54:d6:77:9f:ea:d7:ff:ac:29:c5:68:c4:6f:
9f:fd:10:64:c9:45:28:78:f3:ba:d7:e9:01:2a:89:
c7:1c:d2:e5:45:fc:09:87:e5:a2:7e:35:22:f7:8b:
13:9f:0c:04:16:23:5e:96:a7:9e:1d:ef:92:db:04:
59:a1:41:04:2c:02:f4:44:8a:9c:f3:a0:c2:8a:20:
19:42:87:a4:06:8a:c1:f4:9e:c9:d8:67:ed:30:24:
b0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:38:1F:0E:93:27:90:F0:F0:37:6A:96:C2:D1:BA:99:6C:E9:87:E8
X509v3 Authority Key Identifier:
keyid:AD:2C:F0:3E:44:DA:28:B7:31:9E:A7:B7:B5:B1:10:B9:B8:CB:7A:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSzwPkTaKLcxnqe3tbEQubjLenA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:12:f6:ac:f5:01:e4:0c:77:79:83:9b:4b:13:fd:e3:98:53:
d3:b4:bf:e2:5e:5b:da:f4:97:02:32:72:c4:ba:bd:39:0f:2e:
e7:9b:18:ea:8f:70:da:f6:bd:c2:09:6c:85:39:be:e2:19:45:
e4:4b:95:3a:e9:97:27:2f:d6:af:33:35:94:b6:3b:5c:45:e0:
ae:29:0b:35:9f:6b:8b:c4:48:01:da:18:39:3a:1f:b5:8c:e2:
73:21:7f:2f:46:b8:99:8c:fd:4f:2d:78:56:8e:c5:91:55:df:
c2:30:5d:c4:1d:8c:0c:bf:fe:0b:27:d9:7e:e5:a2:21:56:cb:
f6:d8:cb:2d:00:48:02:16:e5:fc:3f:2b:b4:67:9c:51:c0:dd:
f3:0c:5c:8b:fb:d7:0d:43:eb:56:05:30:e3:58:fa:5f:fc:fc:
1c:eb:df:55:29:d3:08:67:34:5a:db:8d:ab:53:e2:05:d7:ca:
7e:ae:d7:a2:fe:d4:58:b4:d4:7f:d1:b1:fb:31:3d:d2:f1:7b:
79:e4:0b:7d:0d:14:e3:00:1d:7e:d4:ba:41:8b:f7:9c:80:87:
c2:77:42:39:cb:48:2a:f7:6f:f9:90:08:1a:1d:83:11:86:74:
5e:6f:bd:3d:27:95:35:bb:fb:de:7e:0d:c7:70:be:3a:26:3c:
35:ea:04:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWhcJORGe/5Jldan1lZkxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMmNmMDNlNDRkYTI4YjczMTllYTdiN2I1YjExMGI5Yjhj
YjdhNzAwHhcNMjYwMzAyMDcwMTI4WhcNMjYwMzAzMDcwMTI4WjAzMTEwLwYDVQQD
EygyMzM4MWYwZTkzMjc5MGYwZjAzNzZhOTZjMmQxYmE5OTZjZTk4N2U4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rAY6ObJVZTvLqw9SGhjQTOXRe2J
1GXOqe5EVKqUtI4LYlURtF2CqRiIHPrhcCNfM3LroYeKgoXL4k5ehLxj63yb5C4E
KPEAxSyhbNFZRw3+a6sK2B6yjcv3wQcNTOVo6SD3NPdwCSobi5wWYxj41aZ746+C
bLRPM3SiMfPgKgylGTbgtBQkBmZRhA9TgoWF2EoFKqYumO18PGycg+QD9ga10Woy
a1TWd5/q1/+sKcVoxG+f/RBkyUUoePO61+kBKonHHNLlRfwJh+WifjUi94sTnwwE
FiNelqeeHe+S2wRZoUEELAL0RIqc86DCiiAZQoekBorB9J7J2GftMCSwWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCM4Hw6TJ5Dw8DdqlsLRupls6YfoMB8GA1UdIwQY
MBaAFK0s8D5E2ii3MZ6nt7WxELm4y3pwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclN6d1BrVGFLTGN4bnFlM3RiRVF1YmpMZW5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9jYWUzMTktNTU3MS00NmY5LWI1N2Qt
YmUwNjVlMWFjMDY3LzEvclN6d1BrVGFLTGN4bnFlM3RiRVF1YmpMZW5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9jYWUzMTktNTU3MS00NmY5LWI1N2QtYmUwNjVlMWFjMDY3
LzEvclN6d1BrVGFLTGN4bnFlM3RiRVF1YmpMZW5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEhL2rPUB
5Ax3eYObSxP945hT07S/4l5b2vSXAjJyxLq9OQ8u55sY6o9w2va9wglshTm+4hlF
5EuVOumXJy/WrzM1lLY7XEXgrikLNZ9ri8RIAdoYOToftYzicyF/L0a4mYz9Ty14
Vo7FkVXfwjBdxB2MDL/+CyfZfuWiIVbL9tjLLQBIAhbl/D8rtGecUcDd8wxci/vX
DUPrVgUw41j6X/z8HOvfVSnTCGc0WtuNq1PiBdfKfq7Xov7UWLTUf9Gx+zE90vF7
eeQLfQ0U4wAdftS6QYv3nICHwndCOctIKvdv+ZAIGh2DEYZ0Xm+9PSeVNbv73n4N
x3C+OiY8NeoEOg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:41:19 2026 by rpki-client