Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft
File: sQw889xTylScA-T19G2RzpC44HA.mft (raw, json)
Hash identifier: BkvUhkuaF1LRAhci53d+jDsgkUJyE4POGkRQRZPFBNY=
Subject key identifier: 98:EE:40:06:68:14:45:A1:33:4C:8F:B5:5B:E5:A9:10:2F:D8:84:DC
Authority key identifier: B1:0C:3C:F3:DC:53:CA:54:9C:03:E4:F5:F4:6D:91:CE:90:B8:E0:70
Certificate issuer: /CN=b10c3cf3dc53ca549c03e4f5f46d91ce90b8e070
Certificate serial: 019CABA20B91FEFBA1986A0F4232BDF7DA78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft
Manifest number: 185C
Signing time: Sun 01 Mar 2026 23:00:49 +0000
Manifest this update: Sun 01 Mar 2026 23:00:49 +0000
Manifest next update: Mon 02 Mar 2026 23:00:49 +0000
Files and hashes: 1: o40VleOLDva4l-Hlse3BxkX262M.roa (hash: vt1iL3MNmGtBJoVTbi5X0cqEnKhYSdktMc3RDciLR8w=)
2: sQw889xTylScA-T19G2RzpC44HA.crl (hash: Unz3nVClRU0eT4iL2QytGFmtoyW9yXtpbLXd4N3Qrjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:0b:91:fe:fb:a1:98:6a:0f:42:32:bd:f7:da:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b10c3cf3dc53ca549c03e4f5f46d91ce90b8e070
Validity
Not Before: Mar 1 23:00:49 2026 GMT
Not After : Mar 2 23:00:49 2026 GMT
Subject: CN=98ee4006681445a1334c8fb55be5a9102fd884dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0e:41:fd:4d:1c:bb:38:71:a1:84:53:37:5c:
6f:b7:9d:54:ed:b0:fc:ad:f7:03:04:dd:17:d2:c4:
1d:78:93:ea:c1:8d:25:04:06:16:a3:f0:d3:97:5a:
1a:9b:c9:e7:f5:ed:f8:f7:0a:e1:c4:9d:be:1b:f2:
a1:af:f1:1c:82:cb:c0:a7:1c:53:d7:b3:c9:81:85:
73:59:56:5d:0e:ef:b7:be:b8:67:d6:4e:43:50:84:
a1:a8:94:96:1b:e7:85:b7:88:4e:96:da:a4:c3:c4:
8a:48:4b:52:62:80:ca:a2:75:c9:2b:71:41:2d:e4:
17:36:0a:36:7a:2b:c6:c4:cd:20:87:56:3b:80:88:
40:86:28:57:9b:37:a1:61:4b:f5:95:1d:dc:d1:3b:
06:33:49:dc:2e:f5:24:51:bb:cb:e2:ee:60:5a:b0:
17:50:37:42:37:86:46:b8:87:6f:11:e7:66:7c:02:
22:cc:b3:0b:30:ab:cb:5c:16:64:75:46:4e:ec:2d:
11:e8:7c:74:0b:bb:71:70:3b:f4:c5:0e:fb:6d:7d:
21:ec:0c:4d:f9:ad:ce:d2:3b:75:89:4d:10:2e:dc:
15:d8:cb:70:dc:88:ff:43:bb:36:c0:56:aa:52:59:
00:0c:41:57:4c:a4:1e:44:4b:ca:cf:c2:29:9a:e1:
99:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:EE:40:06:68:14:45:A1:33:4C:8F:B5:5B:E5:A9:10:2F:D8:84:DC
X509v3 Authority Key Identifier:
keyid:B1:0C:3C:F3:DC:53:CA:54:9C:03:E4:F5:F4:6D:91:CE:90:B8:E0:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:04:34:ac:4d:66:ad:a6:52:00:35:57:60:4b:07:54:30:ac:
f0:15:94:2c:f2:c1:f9:cd:4f:69:0b:fb:eb:7b:e1:c9:9c:a1:
45:e1:34:43:24:04:eb:f5:d0:de:b2:01:93:24:20:5e:38:8e:
6c:69:45:dd:56:62:1e:b4:1c:ec:41:80:9b:50:d5:f7:fe:ed:
0a:23:11:2d:ef:11:70:68:e6:27:b1:45:6e:56:d3:26:2a:7b:
05:0c:5c:c2:16:a2:61:c3:8f:3c:e6:c7:ca:53:0f:25:4c:ab:
d8:5c:4f:9f:7b:81:c5:64:c8:d5:10:fc:38:2b:d1:10:a2:e7:
2e:70:24:03:b3:52:84:67:e6:9a:5f:db:de:3e:7b:ab:3f:f3:
39:eb:6f:bd:fa:2c:9c:d8:93:f9:5a:52:b5:19:d9:5d:64:6c:
d1:5b:12:2b:63:2c:77:e0:d4:80:bc:5f:57:e4:30:d9:2d:11:
11:62:23:df:76:d1:45:be:a7:f2:e7:cd:5c:47:c2:37:13:65:
3f:d9:30:32:33:cd:99:e2:85:38:2c:ab:35:b4:5a:8c:e1:a5:
4a:b6:03:0f:b1:fa:1d:df:9d:9d:52:ed:b8:fe:2a:63:95:55:
9b:67:aa:a3:e8:11:55:92:94:11:a5:17:25:22:d2:79:4d:33:
e1:05:17:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyroguR/vuhmGoPQjK999p4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxMGMzY2YzZGM1M2NhNTQ5YzAzZTRmNWY0NmQ5MWNlOTBi
OGUwNzAwHhcNMjYwMzAxMjMwMDQ5WhcNMjYwMzAyMjMwMDQ5WjAzMTEwLwYDVQQD
Eyg5OGVlNDAwNjY4MTQ0NWExMzM0YzhmYjU1YmU1YTkxMDJmZDg4NGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwg5B/U0cuzhxoYRTN1xvt51U7bD8
rfcDBN0X0sQdeJPqwY0lBAYWo/DTl1oam8nn9e349wrhxJ2+G/Khr/EcgsvApxxT
17PJgYVzWVZdDu+3vrhn1k5DUIShqJSWG+eFt4hOltqkw8SKSEtSYoDKonXJK3FB
LeQXNgo2eivGxM0gh1Y7gIhAhihXmzehYUv1lR3c0TsGM0ncLvUkUbvL4u5gWrAX
UDdCN4ZGuIdvEedmfAIizLMLMKvLXBZkdUZO7C0R6Hx0C7txcDv0xQ77bX0h7AxN
+a3O0jt1iU0QLtwV2Mtw3Ij/Q7s2wFaqUlkADEFXTKQeREvKz8IpmuGZywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJjuQAZoFEWhM0yPtVvlqRAv2ITcMB8GA1UdIwQY
MBaAFLEMPPPcU8pUnAPk9fRtkc6QuOBwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1F3ODg5eFR5bFNjQS1UMTlHMlJ6cEM0NEhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8yNWNkYjQtZTUwOC00YjM3LTgxYmMt
MzZmODJiZDM3OWJkLzEvc1F3ODg5eFR5bFNjQS1UMTlHMlJ6cEM0NEhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8yNWNkYjQtZTUwOC00YjM3LTgxYmMtMzZmODJiZDM3OWJk
LzEvc1F3ODg5eFR5bFNjQS1UMTlHMlJ6cEM0NEhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkQQ0rE1m
raZSADVXYEsHVDCs8BWULPLB+c1PaQv763vhyZyhReE0QyQE6/XQ3rIBkyQgXjiO
bGlF3VZiHrQc7EGAm1DV9/7tCiMRLe8RcGjmJ7FFblbTJip7BQxcwhaiYcOPPObH
ylMPJUyr2FxPn3uBxWTI1RD8OCvREKLnLnAkA7NShGfmml/b3j57qz/zOetvvfos
nNiT+VpStRnZXWRs0VsSK2Msd+DUgLxfV+Qw2S0REWIj33bRRb6n8ufNXEfCNxNl
P9kwMjPNmeKFOCyrNbRajOGlSrYDD7H6Hd+dnVLtuP4qY5VVm2eqo+gRVZKUEaUX
JSLSeU0z4QUXxA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:27:46 2026 by rpki-client