Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/51b2ce-09aa-438d-9907-101b9e80e359/1/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.mft
File: SX7eN_KfQKcbHLKl_OUm6KPQ5eE.mft (raw, json)
Hash identifier: JvtEOSkTYvE8lxJ7d4SVR11gMXKMp2itiPCbnHc0lxY=
Subject key identifier: 6F:F5:B8:CC:7C:62:77:4A:D8:F9:6D:D2:72:4F:EA:B8:91:26:08:18
Authority key identifier: 49:7E:DE:37:F2:9F:40:A7:1B:1C:B2:A5:FC:E5:26:E8:A3:D0:E5:E1
Certificate issuer: /CN=497ede37f29f40a71b1cb2a5fce526e8a3d0e5e1
Certificate serial: 019EFC83B1D53D8BBC2C323FB4A352CA82E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/51b2ce-09aa-438d-9907-101b9e80e359/1/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.mft
Manifest number: 0143
Signing time: Thu 25 Jun 2026 02:02:29 +0000
Manifest this update: Thu 25 Jun 2026 02:02:29 +0000
Manifest next update: Fri 26 Jun 2026 02:02:29 +0000
Files and hashes: 1: FsZqIeW01RfaEApHUES0cB5ebyI.roa (hash: VCT9mMAi/Cn+09fCPNJ/y3SBfVeioqWO5E+XzvEA3FA=)
2: KfCvlR8vu0qoz40NwG_o9ivr0L0.asa (hash: 28KOqwH8/su8P6T5Q9zLgm8jJkLHgtcR+NYZ8WhN7qk=)
3: SX7eN_KfQKcbHLKl_OUm6KPQ5eE.crl (hash: 93ATiPL1KQgJgvw+4bEKia2tui+/yOBAe/u8CARuIDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/51b2ce-09aa-438d-9907-101b9e80e359/1/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/51b2ce-09aa-438d-9907-101b9e80e359/1/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fc:83:b1:d5:3d:8b:bc:2c:32:3f:b4:a3:52:ca:82:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=497ede37f29f40a71b1cb2a5fce526e8a3d0e5e1
Validity
Not Before: Jun 25 02:02:29 2026 GMT
Not After : Jun 26 02:02:29 2026 GMT
Subject: CN=6ff5b8cc7c62774ad8f96dd2724feab891260818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:31:d9:f3:db:4e:d0:e2:98:8d:9e:16:f1:4b:
0c:9c:f8:d6:9a:5c:76:95:9f:23:23:ce:31:78:d0:
05:ba:19:1c:fb:78:de:ac:cd:23:6f:fa:7f:b8:41:
ef:48:bc:40:53:75:69:aa:b4:a8:da:25:3b:51:59:
9e:48:97:93:e0:db:58:18:4b:4c:8f:ba:5e:5d:31:
e4:9e:ca:83:56:2b:cf:38:9c:2f:88:04:00:6f:95:
93:16:f0:31:19:04:96:be:71:73:f3:73:18:aa:f9:
90:69:9f:0e:52:c2:ed:c8:3f:9d:c4:a8:02:60:ce:
7d:6b:38:62:da:2a:a3:a7:dc:7d:67:e2:5e:d5:aa:
3d:d6:c4:7e:9d:ca:96:58:ef:c9:77:f4:12:2f:70:
67:67:f4:98:37:97:c3:88:ce:24:1b:df:d5:3d:a9:
58:d4:8f:1f:be:15:d5:a0:3c:77:cc:57:78:1d:19:
7f:b2:5b:fa:65:5f:0f:3a:e9:78:27:9c:eb:b4:47:
16:b5:64:d0:6e:c7:f7:76:28:a8:cf:78:e2:ae:48:
04:53:4c:8b:ec:0a:7a:2f:25:52:3a:c9:0e:31:36:
0d:db:0b:6c:17:dc:cc:7d:31:b2:99:26:d3:ec:17:
88:69:cc:3d:19:90:d1:fd:06:d6:cd:a1:7c:da:78:
d5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:F5:B8:CC:7C:62:77:4A:D8:F9:6D:D2:72:4F:EA:B8:91:26:08:18
X509v3 Authority Key Identifier:
keyid:49:7E:DE:37:F2:9F:40:A7:1B:1C:B2:A5:FC:E5:26:E8:A3:D0:E5:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/51b2ce-09aa-438d-9907-101b9e80e359/1/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/51b2ce-09aa-438d-9907-101b9e80e359/1/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:26:88:cb:2b:0d:67:44:2e:6e:05:d3:f9:0d:2d:cf:0c:7e:
1f:cc:4d:76:0e:dd:a2:9d:26:65:59:a3:11:3a:d0:cc:d2:45:
3e:78:89:17:e7:d8:e2:3f:d6:59:9e:98:9a:ef:68:f5:6d:b4:
6f:7e:99:b6:98:d2:f7:95:37:9a:37:90:2f:d5:66:e3:ee:48:
5b:c8:f8:28:12:90:74:51:63:9b:39:4f:30:a9:6a:37:59:84:
14:a5:9b:b2:ae:25:ac:50:fb:4a:bb:b5:a1:7a:84:cc:9a:59:
66:90:20:f1:b0:a9:04:b8:43:d3:d4:5a:d4:43:d8:47:1a:09:
ec:3c:cb:dd:c1:37:97:f3:1e:09:6b:34:12:7f:83:e5:4f:84:
3d:59:44:06:78:6f:66:fe:31:1a:21:2b:51:50:54:21:27:ba:
a7:99:64:9a:a4:c7:54:17:bd:61:59:62:9b:2a:dd:be:ad:4a:
67:db:bb:48:34:93:3f:97:ff:04:ce:0b:11:67:17:2d:ee:91:
35:96:0b:a9:de:ab:f2:53:43:4b:e2:79:f3:6b:f1:e9:f5:72:
ed:36:09:b7:0a:87:2b:1d:6e:7c:2d:e4:3e:12:4b:03:7c:4e:
dc:01:36:96:d4:8b:e4:78:8e:76:2e:69:e5:2f:56:1b:59:ac:
09:0d:cb:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ78g7HVPYu8LDI/tKNSyoLpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5N2VkZTM3ZjI5ZjQwYTcxYjFjYjJhNWZjZTUyNmU4YTNk
MGU1ZTEwHhcNMjYwNjI1MDIwMjI5WhcNMjYwNjI2MDIwMjI5WjAzMTEwLwYDVQQD
Eyg2ZmY1YjhjYzdjNjI3NzRhZDhmOTZkZDI3MjRmZWFiODkxMjYwODE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4DHZ89tO0OKYjZ4W8UsMnPjWmlx2
lZ8jI84xeNAFuhkc+3jerM0jb/p/uEHvSLxAU3VpqrSo2iU7UVmeSJeT4NtYGEtM
j7peXTHknsqDVivPOJwviAQAb5WTFvAxGQSWvnFz83MYqvmQaZ8OUsLtyD+dxKgC
YM59azhi2iqjp9x9Z+Je1ao91sR+ncqWWO/Jd/QSL3BnZ/SYN5fDiM4kG9/VPalY
1I8fvhXVoDx3zFd4HRl/slv6ZV8POul4J5zrtEcWtWTQbsf3diioz3jirkgEU0yL
7Ap6LyVSOskOMTYN2wtsF9zMfTGymSbT7BeIacw9GZDR/QbWzaF82njVGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG/1uMx8YndK2Plt0nJP6riRJggYMB8GA1UdIwQY
MBaAFEl+3jfyn0CnGxyypfzlJuij0OXhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1g3ZU5fS2ZRS2NiSExLbF9PVW02S1BRNWVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC81MWIyY2UtMDlhYS00MzhkLTk5MDct
MTAxYjllODBlMzU5LzEvU1g3ZU5fS2ZRS2NiSExLbF9PVW02S1BRNWVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC81MWIyY2UtMDlhYS00MzhkLTk5MDctMTAxYjllODBlMzU5
LzEvU1g3ZU5fS2ZRS2NiSExLbF9PVW02S1BRNWVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiSaIyysN
Z0QubgXT+Q0tzwx+H8xNdg7dop0mZVmjETrQzNJFPniJF+fY4j/WWZ6Ymu9o9W20
b36ZtpjS95U3mjeQL9Vm4+5IW8j4KBKQdFFjmzlPMKlqN1mEFKWbsq4lrFD7Sru1
oXqEzJpZZpAg8bCpBLhD09Ra1EPYRxoJ7DzL3cE3l/MeCWs0En+D5U+EPVlEBnhv
Zv4xGiErUVBUISe6p5lkmqTHVBe9YVlimyrdvq1KZ9u7SDSTP5f/BM4LEWcXLe6R
NZYLqd6r8lNDS+J582vx6fVy7TYJtwqHKx1ufC3kPhJLA3xO3AE2ltSL5HiOdi5p
5S9WG1msCQ3Luw==
-----END CERTIFICATE-----
Generated at Thu Jun 25 08:28:17 2026 by rpki-client