Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.mft
File: SF92J0yAXSWxFaOtuh0uoVTe6tc.mft (raw, json)
Hash identifier: OQPP/LB+FQXwkz/NOA5ZH1a6E+H1IxCsVAwg+CnG7k4=
Subject key identifier: 51:CB:59:2A:5C:80:D9:45:56:09:6C:DF:3A:0B:3C:95:21:54:C5:58
Authority key identifier: 48:5F:76:27:4C:80:5D:25:B1:15:A3:AD:BA:1D:2E:A1:54:DE:EA:D7
Certificate issuer: /CN=485f76274c805d25b115a3adba1d2ea154deead7
Certificate serial: 019D3A1CF92E5EE2E6D316085A5DE98CA9C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SF92J0yAXSWxFaOtuh0uoVTe6tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.mft
Manifest number: 1289
Signing time: Sun 29 Mar 2026 15:01:10 +0000
Manifest this update: Sun 29 Mar 2026 15:01:10 +0000
Manifest next update: Mon 30 Mar 2026 15:01:10 +0000
Files and hashes: 1: Oya_7CTNloqoLGAwE4lej4v0gVU.roa (hash: pi6Tio3aUQA0JE16nMLeotjfbha9a+YODpOnjWqpmKM=)
2: SF92J0yAXSWxFaOtuh0uoVTe6tc.crl (hash: /F39t/RnNIHth+7330cC7AfDk5xIxzHQetB1KKD5K7c=)
3: VMZQ9NDd56nkh5RyTCLwouklkcA.roa (hash: uqsQckCvVpROGzhWbi/+xNcAtRw003GCNfZZ7Nd36Js=)
4: bOCkd18Ayb5bcI8G6YVBq7PIUcw.roa (hash: uKcVytuQYuouml3wIVfkbst8oBdAm0iOGlIFW2AnouI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SF92J0yAXSWxFaOtuh0uoVTe6tc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:f9:2e:5e:e2:e6:d3:16:08:5a:5d:e9:8c:a9:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485f76274c805d25b115a3adba1d2ea154deead7
Validity
Not Before: Mar 29 15:01:10 2026 GMT
Not After : Mar 30 15:01:10 2026 GMT
Subject: CN=51cb592a5c80d94556096cdf3a0b3c952154c558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7d:29:0d:bd:73:43:f2:a6:8b:4f:05:ca:ac:
3b:c3:c5:fa:44:28:7d:f2:81:c3:93:5f:9c:00:ae:
23:8e:da:bb:5b:21:a7:c5:a2:de:60:0d:2c:36:0f:
b7:3b:94:48:b8:ce:eb:20:28:69:52:b8:3a:17:e8:
39:16:0c:47:d1:ab:59:40:ec:4f:1d:47:83:e1:67:
c8:5f:57:4f:a7:e5:11:a2:1a:18:f4:6f:2e:bb:ee:
01:de:2b:2c:f6:e1:d6:a5:78:21:00:6a:2a:50:d6:
e0:17:8d:74:5c:98:71:d1:1b:65:0c:d8:81:f6:f7:
04:b5:c2:07:8b:e1:aa:25:77:3c:2d:43:3e:6b:99:
82:48:6b:98:95:a6:3d:60:36:3a:b3:1e:85:e6:9a:
65:15:f3:40:f7:09:4c:ab:c8:f6:37:60:d6:76:97:
6f:8c:90:26:8b:b8:f5:ae:a3:ad:0c:b1:39:ec:b3:
28:dc:99:34:d5:12:b8:77:de:73:93:a7:0a:3d:05:
d3:37:e9:75:8d:d8:f6:15:bd:2b:95:c0:5f:08:48:
ef:51:a2:e9:9b:b6:8b:cc:be:e5:6f:23:fd:db:97:
fd:8a:80:4e:93:a7:79:50:e4:98:12:2d:27:b5:d2:
ea:27:05:56:c2:ca:41:20:10:88:8f:d0:cc:f6:cd:
25:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:CB:59:2A:5C:80:D9:45:56:09:6C:DF:3A:0B:3C:95:21:54:C5:58
X509v3 Authority Key Identifier:
keyid:48:5F:76:27:4C:80:5D:25:B1:15:A3:AD:BA:1D:2E:A1:54:DE:EA:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF92J0yAXSWxFaOtuh0uoVTe6tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:46:a0:e1:88:fe:1b:e6:00:70:50:b9:e0:50:de:07:da:51:
2b:c3:7b:df:67:38:8b:54:a9:37:0a:ae:ec:4a:cd:b7:6e:5a:
fd:af:34:fa:cd:d0:fe:7b:ae:0d:9c:00:3b:b9:f4:4a:05:1a:
84:af:fc:3e:40:99:44:12:0c:5b:a4:e3:fc:b0:0c:c8:6a:fd:
57:5e:8c:a2:a5:7c:ec:ef:a9:a9:a1:cb:fd:9f:b0:51:1c:e8:
fe:85:f6:05:33:e9:91:16:99:37:9d:5d:ce:f7:25:e0:cc:7a:
79:7f:79:c1:42:84:3b:15:ce:97:2a:c1:99:c0:79:28:af:7c:
2e:d1:eb:65:07:37:31:99:85:de:4a:9c:9a:6f:d7:e1:02:17:
ef:71:a5:70:0e:d0:19:76:0f:68:1a:03:06:37:47:d6:8f:13:
b9:ba:7e:f8:c8:ec:ae:7d:79:8f:f1:62:9c:37:a3:7f:77:ee:
db:1e:af:9f:32:72:e1:f1:44:1c:61:80:af:80:52:32:5e:cd:
16:27:75:97:2b:71:3f:35:90:77:5e:0a:38:8e:df:ef:0b:3b:
22:7d:61:7f:c5:25:b8:df:ba:7c:77:42:93:f4:16:b1:42:14:
42:d5:73:bc:24:d7:59:d0:96:38:6d:46:05:ba:6b:03:0a:e1:
51:e0:fb:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06HPkuXuLm0xYIWl3pjKnBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4NWY3NjI3NGM4MDVkMjViMTE1YTNhZGJhMWQyZWExNTRk
ZWVhZDcwHhcNMjYwMzI5MTUwMTEwWhcNMjYwMzMwMTUwMTEwWjAzMTEwLwYDVQQD
Eyg1MWNiNTkyYTVjODBkOTQ1NTYwOTZjZGYzYTBiM2M5NTIxNTRjNTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2H0pDb1zQ/Kmi08Fyqw7w8X6RCh9
8oHDk1+cAK4jjtq7WyGnxaLeYA0sNg+3O5RIuM7rIChpUrg6F+g5FgxH0atZQOxP
HUeD4WfIX1dPp+URohoY9G8uu+4B3iss9uHWpXghAGoqUNbgF410XJhx0RtlDNiB
9vcEtcIHi+GqJXc8LUM+a5mCSGuYlaY9YDY6sx6F5pplFfNA9wlMq8j2N2DWdpdv
jJAmi7j1rqOtDLE57LMo3Jk01RK4d95zk6cKPQXTN+l1jdj2Fb0rlcBfCEjvUaLp
m7aLzL7lbyP925f9ioBOk6d5UOSYEi0ntdLqJwVWwspBIBCIj9DM9s0l3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFHLWSpcgNlFVgls3zoLPJUhVMVYMB8GA1UdIwQY
MBaAFEhfdidMgF0lsRWjrbodLqFU3urXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0Y5MkoweUFYU1d4RmFPdHVoMHVvVlRlNnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82ODViNTMtNmYxMS00MWRiLWJlYWQt
NDNlYWY3NTY3Y2FhLzEvU0Y5MkoweUFYU1d4RmFPdHVoMHVvVlRlNnRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC82ODViNTMtNmYxMS00MWRiLWJlYWQtNDNlYWY3NTY3Y2Fh
LzEvU0Y5MkoweUFYU1d4RmFPdHVoMHVvVlRlNnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN0ag4Yj+
G+YAcFC54FDeB9pRK8N732c4i1SpNwqu7ErNt25a/a80+s3Q/nuuDZwAO7n0SgUa
hK/8PkCZRBIMW6Tj/LAMyGr9V16MoqV87O+pqaHL/Z+wURzo/oX2BTPpkRaZN51d
zvcl4Mx6eX95wUKEOxXOlyrBmcB5KK98LtHrZQc3MZmF3kqcmm/X4QIX73GlcA7Q
GXYPaBoDBjdH1o8Tubp++Mjsrn15j/FinDejf3fu2x6vnzJy4fFEHGGAr4BSMl7N
Fid1lytxPzWQd14KOI7f7ws7In1hf8UluN+6fHdCk/QWsUIUQtVzvCTXWdCWOG1G
BbprAwrhUeD7Gw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:17:22 2026 by rpki-client