Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/51b2ce-09aa-438d-9907-101b9e80e359/1/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.mft
File: SX7eN_KfQKcbHLKl_OUm6KPQ5eE.mft (raw, json)
Hash identifier: z1IKAZ6v+lRO+DkMf5CHeqJsSvXtNtQCtfo1uLwEHYw=
Subject key identifier: 99:6D:F4:64:42:45:CE:DF:F6:3C:03:32:CF:06:54:8A:96:58:9C:8F
Authority key identifier: 49:7E:DE:37:F2:9F:40:A7:1B:1C:B2:A5:FC:E5:26:E8:A3:D0:E5:E1
Certificate issuer: /CN=497ede37f29f40a71b1cb2a5fce526e8a3d0e5e1
Certificate serial: 01A0E70A044874595AC1E0D325A3C21AB73F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/51b2ce-09aa-438d-9907-101b9e80e359/1/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.mft
Manifest number: 0241
Signing time: Mon 28 Sep 2026 08:03:08 +0000
Manifest this update: Mon 28 Sep 2026 08:03:08 +0000
Manifest next update: Tue 29 Sep 2026 08:03:08 +0000
Files and hashes: 1: FsZqIeW01RfaEApHUES0cB5ebyI.roa (hash: VCT9mMAi/Cn+09fCPNJ/y3SBfVeioqWO5E+XzvEA3FA=)
2: KfCvlR8vu0qoz40NwG_o9ivr0L0.asa (hash: 28KOqwH8/su8P6T5Q9zLgm8jJkLHgtcR+NYZ8WhN7qk=)
3: SX7eN_KfQKcbHLKl_OUm6KPQ5eE.crl (hash: UwLJisGla+XuviwU6R1teH1O5jiPOWoFsUZOzuC/l/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/51b2ce-09aa-438d-9907-101b9e80e359/1/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/51b2ce-09aa-438d-9907-101b9e80e359/1/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 08:03:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:0a:04:48:74:59:5a:c1:e0:d3:25:a3:c2:1a:b7:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=497ede37f29f40a71b1cb2a5fce526e8a3d0e5e1
Validity
Not Before: Sep 28 08:03:08 2026 GMT
Not After : Sep 29 08:03:08 2026 GMT
Subject: CN=996df4644245cedff63c0332cf06548a96589c8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3a:88:d7:58:b3:bc:5f:fb:72:ab:44:57:a6:
f4:c7:48:43:63:3b:b9:8e:94:9f:29:45:22:85:ec:
1d:7a:cb:e1:7e:eb:8b:d8:44:7e:b4:d4:b4:18:05:
6a:0d:67:00:46:06:da:f4:de:e2:a8:d7:6f:42:8c:
65:4b:5f:93:f9:57:dd:b3:b0:1e:df:7b:36:14:57:
d2:59:68:e7:7e:3e:e2:9c:73:4b:63:52:1c:56:2e:
f9:75:5d:b3:af:02:a5:3d:6d:57:8d:b4:05:1c:9d:
f7:aa:87:0d:98:9a:27:e6:1f:97:0d:29:99:f1:7b:
45:33:31:4d:d6:77:8e:a4:73:fa:3a:0e:fe:3b:6f:
5a:b5:33:81:d7:4f:3e:65:95:7e:29:62:80:ee:cf:
e5:a5:65:ec:93:25:08:72:bb:f9:50:ab:91:86:7d:
b3:a0:91:d7:9b:85:98:74:d4:87:fd:d6:88:45:1d:
d2:79:0b:4b:68:82:dd:21:c5:00:61:67:bb:21:aa:
f2:05:4d:fb:f8:0a:a4:a8:5c:f3:f4:3e:aa:40:c5:
73:44:31:d0:32:e4:7f:39:80:6a:93:d5:5e:c7:ed:
eb:c6:07:c2:6c:b4:b5:c8:25:05:de:75:24:32:0c:
6e:7b:1e:35:27:4b:88:e0:5e:60:2d:aa:3e:2a:86:
31:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:6D:F4:64:42:45:CE:DF:F6:3C:03:32:CF:06:54:8A:96:58:9C:8F
X509v3 Authority Key Identifier:
keyid:49:7E:DE:37:F2:9F:40:A7:1B:1C:B2:A5:FC:E5:26:E8:A3:D0:E5:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/51b2ce-09aa-438d-9907-101b9e80e359/1/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/51b2ce-09aa-438d-9907-101b9e80e359/1/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:81:f0:a0:bb:01:95:a9:c8:f8:ab:52:7a:d8:ba:66:56:e1:
b5:e1:2a:cc:8a:d6:68:f5:d9:5b:b5:92:bc:a2:37:06:ea:30:
6b:67:0d:25:94:31:8f:8f:66:16:7a:a4:70:d6:06:8e:de:51:
7f:c5:ab:01:59:ae:c7:75:98:7a:8d:32:3f:82:54:73:eb:7f:
07:04:da:e4:80:cb:a5:3a:58:93:c8:f8:cd:df:d6:5c:6b:72:
a1:e8:12:62:2c:e8:eb:8d:f8:e6:80:a7:8d:4a:01:18:6d:fa:
57:da:12:86:5e:05:eb:1b:6e:83:dc:b9:e0:de:b0:53:73:aa:
af:67:0c:7e:22:8a:10:69:05:47:bf:ba:23:d5:e7:76:4b:7f:
45:29:37:a0:17:b5:20:00:e5:ce:dc:bc:f1:5d:76:fc:f1:17:
8a:af:e7:45:cf:b4:7c:91:f7:68:40:ad:d4:a5:94:5c:b2:50:
97:ed:4a:ec:e6:03:e7:b3:95:90:34:82:cc:c0:a8:6b:a1:aa:
71:47:79:61:9f:db:58:91:1f:ac:0a:92:b8:8a:52:f8:a8:cc:
11:6a:98:88:3f:1f:76:56:6f:87:b2:05:48:34:b4:d3:3a:e0:
c8:f1:26:f1:45:2f:7d:6c:e5:49:7d:4f:8a:28:a2:a7:6e:96:
4f:3e:c4:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDnCgRIdFlaweDTJaPCGrc/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5N2VkZTM3ZjI5ZjQwYTcxYjFjYjJhNWZjZTUyNmU4YTNk
MGU1ZTEwHhcNMjYwOTI4MDgwMzA4WhcNMjYwOTI5MDgwMzA4WjAzMTEwLwYDVQQD
Eyg5OTZkZjQ2NDQyNDVjZWRmZjYzYzAzMzJjZjA2NTQ4YTk2NTg5YzhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzqI11izvF/7cqtEV6b0x0hDYzu5
jpSfKUUihewdesvhfuuL2ER+tNS0GAVqDWcARgba9N7iqNdvQoxlS1+T+Vfds7Ae
33s2FFfSWWjnfj7inHNLY1IcVi75dV2zrwKlPW1XjbQFHJ33qocNmJon5h+XDSmZ
8XtFMzFN1neOpHP6Og7+O29atTOB108+ZZV+KWKA7s/lpWXskyUIcrv5UKuRhn2z
oJHXm4WYdNSH/daIRR3SeQtLaILdIcUAYWe7IaryBU37+AqkqFzz9D6qQMVzRDHQ
MuR/OYBqk9Vex+3rxgfCbLS1yCUF3nUkMgxuex41J0uI4F5gLao+KoYxhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJlt9GRCRc7f9jwDMs8GVIqWWJyPMB8GA1UdIwQY
MBaAFEl+3jfyn0CnGxyypfzlJuij0OXhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1g3ZU5fS2ZRS2NiSExLbF9PVW02S1BRNWVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC81MWIyY2UtMDlhYS00MzhkLTk5MDct
MTAxYjllODBlMzU5LzEvU1g3ZU5fS2ZRS2NiSExLbF9PVW02S1BRNWVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC81MWIyY2UtMDlhYS00MzhkLTk5MDctMTAxYjllODBlMzU5
LzEvU1g3ZU5fS2ZRS2NiSExLbF9PVW02S1BRNWVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU4HwoLsB
lanI+KtSeti6ZlbhteEqzIrWaPXZW7WSvKI3Buowa2cNJZQxj49mFnqkcNYGjt5R
f8WrAVmux3WYeo0yP4JUc+t/BwTa5IDLpTpYk8j4zd/WXGtyoegSYizo64345oCn
jUoBGG36V9oShl4F6xtug9y54N6wU3Oqr2cMfiKKEGkFR7+6I9Xndkt/RSk3oBe1
IADlzty88V12/PEXiq/nRc+0fJH3aECt1KWUXLJQl+1K7OYD57OVkDSCzMCoa6Gq
cUd5YZ/bWJEfrAqSuIpS+KjMEWqYiD8fdlZvh7IFSDS00zrgyPEm8UUvfWzlSX1P
iiiip26WTz7EfA==
-----END CERTIFICATE-----
Generated at Mon Sep 28 19:32:27 2026 by rpki-client