Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/727267-421a-404b-9523-7285814344f3/1/SACbRi9GjH0BDdZBirzzFxK-Qyc.mft
File: SACbRi9GjH0BDdZBirzzFxK-Qyc.mft (raw, json)
Hash identifier: EKXeeQiZFoGOh43RtwX/yLzQfG+V9TRVywl0tm9eHJA=
Subject key identifier: 3B:D2:D0:0F:13:00:C1:92:3B:21:89:A6:BD:B2:8F:7C:47:4C:35:6D
Authority key identifier: 48:00:9B:46:2F:46:8C:7D:01:0D:D6:41:8A:BC:F3:17:12:BE:43:27
Certificate issuer: /CN=48009b462f468c7d010dd6418abcf31712be4327
Certificate serial: 01A113051A903DA5DBBDA6A77E2A1F34BEF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SACbRi9GjH0BDdZBirzzFxK-Qyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/727267-421a-404b-9523-7285814344f3/1/SACbRi9GjH0BDdZBirzzFxK-Qyc.mft
Manifest number: CE
Signing time: Tue 06 Oct 2026 21:01:03 +0000
Manifest this update: Tue 06 Oct 2026 21:01:03 +0000
Manifest next update: Wed 07 Oct 2026 21:01:03 +0000
Files and hashes: 1: RZ3tel9syTFm_FDnewv1LtVhGaE.asa (hash: ZEPAWlh3qs8XE61M2XfXTiI9UFnTCQ0FVnCjRwgvbfQ=)
2: SACbRi9GjH0BDdZBirzzFxK-Qyc.crl (hash: 1T2o0vdGwltZmFz+/PrsQKDnoJfB5bYCdAeWaSfzPEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/727267-421a-404b-9523-7285814344f3/1/SACbRi9GjH0BDdZBirzzFxK-Qyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/727267-421a-404b-9523-7285814344f3/1/SACbRi9GjH0BDdZBirzzFxK-Qyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SACbRi9GjH0BDdZBirzzFxK-Qyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 21:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:13:05:1a:90:3d:a5:db:bd:a6:a7:7e:2a:1f:34:be:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48009b462f468c7d010dd6418abcf31712be4327
Validity
Not Before: Oct 6 21:01:03 2026 GMT
Not After : Oct 7 21:01:03 2026 GMT
Subject: CN=3bd2d00f1300c1923b2189a6bdb28f7c474c356d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:da:c5:80:31:f3:f5:39:15:34:8f:f9:ae:07:
99:98:36:12:cb:01:05:73:fc:92:bc:0c:81:48:b5:
33:29:f9:22:47:b4:88:bd:03:6a:00:b5:37:68:e2:
cc:b8:b5:0b:8a:92:d5:dd:ed:ab:e5:1e:28:1f:ec:
f6:6e:76:14:25:a5:0f:dc:b8:92:be:4c:d2:92:cf:
54:e3:50:97:ea:6e:45:e5:d4:95:89:50:43:c6:42:
05:63:74:7f:d7:55:ad:62:1c:ae:2e:f0:b5:e1:85:
3f:ac:c9:83:06:a6:4a:13:a8:6d:55:b3:35:90:07:
e4:8a:0d:2c:5c:5c:c5:00:17:33:4f:3f:2f:f9:f8:
b9:f4:7c:4b:26:19:48:bd:35:6d:89:8b:30:89:7c:
57:02:41:2f:8a:87:0c:96:ef:6a:b0:3a:b5:2d:08:
32:0e:38:c8:0c:f3:ce:d2:d8:97:76:03:58:ee:6e:
91:65:3b:3c:0c:13:cc:5c:53:86:3f:57:af:47:90:
2f:a3:4a:a1:9b:e3:ee:1a:7c:99:da:46:a2:1f:bb:
05:da:d7:ef:9a:77:08:ab:e7:76:50:8a:5d:1d:ec:
3c:58:84:b7:70:41:6b:f4:bb:3e:ec:fc:95:1c:be:
5d:d8:d9:ce:fb:33:98:95:a8:05:24:bb:18:72:b4:
bc:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D2:D0:0F:13:00:C1:92:3B:21:89:A6:BD:B2:8F:7C:47:4C:35:6D
X509v3 Authority Key Identifier:
keyid:48:00:9B:46:2F:46:8C:7D:01:0D:D6:41:8A:BC:F3:17:12:BE:43:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SACbRi9GjH0BDdZBirzzFxK-Qyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/727267-421a-404b-9523-7285814344f3/1/SACbRi9GjH0BDdZBirzzFxK-Qyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/727267-421a-404b-9523-7285814344f3/1/SACbRi9GjH0BDdZBirzzFxK-Qyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:a4:a9:17:53:b5:50:22:f8:c4:73:4a:b7:db:b2:1b:9e:eb:
2c:7f:7e:35:35:dc:33:4c:5d:92:61:76:3b:43:e3:fc:b4:60:
36:2b:cf:7c:c0:97:14:a4:35:2e:a5:3e:58:b5:51:2b:98:85:
4e:54:5b:34:53:63:4d:ef:3a:49:04:43:44:1b:09:89:2b:0e:
72:47:7b:87:00:66:69:6b:af:80:21:c9:8e:cd:87:ae:84:de:
33:3e:c2:3d:a1:b6:d1:15:12:2c:9c:d9:f9:fd:ee:88:cb:e6:
a1:cd:b7:c9:b3:47:18:10:c8:83:d0:33:9a:e4:c7:65:b3:bb:
65:61:a5:cc:33:f2:7f:e7:fa:33:de:b6:bb:d3:be:25:e3:ce:
f8:c3:86:43:6d:8a:0e:de:3d:9a:89:e0:96:6f:2c:ae:a1:42:
21:d7:47:8f:3f:8b:ce:79:5c:e0:0e:c4:fc:d8:08:36:9e:e3:
58:b8:df:10:7c:5e:29:fc:70:ed:ef:ef:9b:35:25:5b:d1:96:
22:04:e4:a2:18:b8:c2:7b:62:81:b3:e8:e1:90:02:c6:a8:48:
d3:3e:9b:ea:3d:17:8b:3f:48:18:36:47:c4:bb:6c:15:47:b9:
43:0e:62:74:a5:c8:37:ce:a9:a5:70:e5:26:f5:66:4d:78:2f:
8a:fb:d5:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaETBRqQPaXbvaanfiofNL7xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MDA5YjQ2MmY0NjhjN2QwMTBkZDY0MThhYmNmMzE3MTJi
ZTQzMjcwHhcNMjYxMDA2MjEwMTAzWhcNMjYxMDA3MjEwMTAzWjAzMTEwLwYDVQQD
EygzYmQyZDAwZjEzMDBjMTkyM2IyMTg5YTZiZGIyOGY3YzQ3NGMzNTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNrFgDHz9TkVNI/5rgeZmDYSywEF
c/ySvAyBSLUzKfkiR7SIvQNqALU3aOLMuLULipLV3e2r5R4oH+z2bnYUJaUP3LiS
vkzSks9U41CX6m5F5dSViVBDxkIFY3R/11WtYhyuLvC14YU/rMmDBqZKE6htVbM1
kAfkig0sXFzFABczTz8v+fi59HxLJhlIvTVtiYswiXxXAkEviocMlu9qsDq1LQgy
DjjIDPPO0tiXdgNY7m6RZTs8DBPMXFOGP1evR5Avo0qhm+PuGnyZ2kaiH7sF2tfv
mncIq+d2UIpdHew8WIS3cEFr9Ls+7PyVHL5d2NnO+zOYlagFJLsYcrS8eQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDvS0A8TAMGSOyGJpr2yj3xHTDVtMB8GA1UdIwQY
MBaAFEgAm0YvRox9AQ3WQYq88xcSvkMnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0FDYlJpOUdqSDBCRGRaQmlyenpGeEstUXljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi83MjcyNjctNDIxYS00MDRiLTk1MjMt
NzI4NTgxNDM0NGYzLzEvU0FDYlJpOUdqSDBCRGRaQmlyenpGeEstUXljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi83MjcyNjctNDIxYS00MDRiLTk1MjMtNzI4NTgxNDM0NGYz
LzEvU0FDYlJpOUdqSDBCRGRaQmlyenpGeEstUXljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWKSpF1O1
UCL4xHNKt9uyG57rLH9+NTXcM0xdkmF2O0Pj/LRgNivPfMCXFKQ1LqU+WLVRK5iF
TlRbNFNjTe86SQRDRBsJiSsOckd7hwBmaWuvgCHJjs2HroTeMz7CPaG20RUSLJzZ
+f3uiMvmoc23ybNHGBDIg9AzmuTHZbO7ZWGlzDPyf+f6M962u9O+JePO+MOGQ22K
Dt49monglm8srqFCIddHjz+Lznlc4A7E/NgINp7jWLjfEHxeKfxw7e/vmzUlW9GW
IgTkohi4wntigbPo4ZACxqhI0z6b6j0Xiz9IGDZHxLtsFUe5Qw5idKXIN86ppXDl
JvVmTXgvivvVrA==
-----END CERTIFICATE-----
Generated at Wed Oct 7 07:43:06 2026 by rpki-client