Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft
File: sN-v02cwOW_jOOdy2tvkw8hc2VI.mft (raw, json)
Hash identifier: 7Nhjc0gXefbPVsCkunmZzCYeUzzvwuIzmMXSTYpsWSo=
Subject key identifier: D3:CC:20:37:71:50:81:07:3C:87:1B:90:8D:D2:77:52:3D:D7:15:88
Authority key identifier: B0:DF:AF:D3:67:30:39:6F:E3:38:E7:72:DA:DB:E4:C3:C8:5C:D9:52
Certificate issuer: /CN=b0dfafd36730396fe338e772dadbe4c3c85cd952
Certificate serial: 01A08AC3D0A70C42AAD99F59AB5DDA93EECD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sN-v02cwOW_jOOdy2tvkw8hc2VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft
Manifest number: 1A4C
Signing time: Thu 10 Sep 2026 10:01:23 +0000
Manifest this update: Thu 10 Sep 2026 10:01:23 +0000
Manifest next update: Fri 11 Sep 2026 10:01:23 +0000
Files and hashes: 1: SQCsFnrjeuZiVY1_BfYgIg4qi-k.roa (hash: 5RBF/vlBHGxON2JarwGOKKIBZfcvo+qjnXq8BAVhPwI=)
2: dPW253uLNkMC6hq3xNGknvYUUCk.roa (hash: lFOPNOmhkr/l52mg27uVNBuUyHirwJeRRAr2NLCO680=)
3: sN-v02cwOW_jOOdy2tvkw8hc2VI.crl (hash: AJaGJJUTGcOQ7v5k7oNUqL3VNBh7gGUQAkV0u/oYzdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sN-v02cwOW_jOOdy2tvkw8hc2VI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 10:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:c3:d0:a7:0c:42:aa:d9:9f:59:ab:5d:da:93:ee:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0dfafd36730396fe338e772dadbe4c3c85cd952
Validity
Not Before: Sep 10 10:01:23 2026 GMT
Not After : Sep 11 10:01:23 2026 GMT
Subject: CN=d3cc2037715081073c871b908dd277523dd71588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c3:65:8d:ef:b7:d9:cd:f9:07:4c:f9:03:0e:
6d:22:18:80:df:f3:82:9e:0b:4c:0d:b6:a5:33:47:
3d:02:12:22:36:48:c9:84:27:1b:8a:98:c8:9a:2a:
62:56:3a:5a:44:dd:30:6c:0c:a3:da:4a:01:d8:c8:
8b:41:b3:96:43:e8:36:cd:53:64:d4:81:a4:9b:d6:
46:f1:40:28:64:5f:97:f2:00:d8:4c:de:8a:f3:ad:
a0:21:e4:bc:43:b1:f8:cc:1b:45:d5:73:37:fc:6e:
d5:41:2d:a2:64:2f:ef:a0:89:67:ac:31:ab:83:01:
bc:f7:23:a0:95:f0:bc:13:49:54:a0:e0:fd:03:e1:
a2:23:0a:8c:af:80:9a:85:bb:f7:c2:7b:86:f3:08:
75:7d:db:4c:a7:eb:47:a2:24:8c:86:94:14:af:22:
12:fa:b9:7c:a7:f0:6f:2a:82:1b:ad:61:3e:eb:bb:
9e:aa:5c:53:8e:e6:4f:7f:64:e3:9c:9e:d3:50:3a:
36:51:69:00:a5:7d:e4:2c:11:13:31:c3:7e:63:b8:
e8:b3:6e:ed:d0:97:b5:34:ee:a3:18:b8:e8:83:73:
ec:fd:a8:7b:d7:16:27:69:db:5f:02:b9:a5:df:c2:
8d:a8:6d:29:e6:c8:d7:b1:bf:c7:7a:cf:20:70:62:
36:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:CC:20:37:71:50:81:07:3C:87:1B:90:8D:D2:77:52:3D:D7:15:88
X509v3 Authority Key Identifier:
keyid:B0:DF:AF:D3:67:30:39:6F:E3:38:E7:72:DA:DB:E4:C3:C8:5C:D9:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sN-v02cwOW_jOOdy2tvkw8hc2VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:29:3e:96:13:63:e5:ca:6e:18:75:7f:7d:4b:43:22:a9:a4:
8a:c4:dc:61:58:ba:ec:54:00:32:1c:71:55:95:26:92:7e:b2:
c7:7d:de:df:1d:16:29:ee:c9:53:23:09:c6:da:3b:92:59:eb:
4a:ef:2e:64:63:e5:48:c9:14:9e:46:05:7f:b2:a5:cb:86:90:
02:f4:80:a6:fe:3e:d9:51:e2:04:16:da:91:48:60:74:50:19:
ed:26:52:e2:5b:e9:36:28:1c:a8:03:61:93:d9:de:1d:aa:ef:
ab:d4:fa:93:a7:2c:ca:51:48:51:b5:a8:c5:1e:7e:20:75:45:
01:c5:54:df:5a:8f:58:3d:6a:a4:03:03:81:40:26:93:73:09:
34:59:f2:0d:98:b3:c8:07:b5:98:66:88:56:d0:cd:b7:30:09:
ed:7e:1b:58:62:08:a9:ea:a5:21:5f:d4:ca:5b:ee:af:cc:28:
09:6b:6d:1c:7f:73:7c:09:25:de:b9:4e:75:a6:f5:d7:19:d4:
f5:a0:91:8a:f1:3e:54:d1:cb:37:92:cc:e4:24:a6:76:21:a8:
2e:4f:a2:49:04:0e:2c:2d:33:86:88:1b:ee:30:84:12:bf:aa:
8a:46:51:3e:50:de:b8:64:c4:d1:7e:a9:6b:09:22:d0:bd:cd:
b3:ba:46:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCKw9CnDEKq2Z9Zq13ak+7NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwZGZhZmQzNjczMDM5NmZlMzM4ZTc3MmRhZGJlNGMzYzg1
Y2Q5NTIwHhcNMjYwOTEwMTAwMTIzWhcNMjYwOTExMTAwMTIzWjAzMTEwLwYDVQQD
EyhkM2NjMjAzNzcxNTA4MTA3M2M4NzFiOTA4ZGQyNzc1MjNkZDcxNTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsNlje+32c35B0z5Aw5tIhiA3/OC
ngtMDbalM0c9AhIiNkjJhCcbipjImipiVjpaRN0wbAyj2koB2MiLQbOWQ+g2zVNk
1IGkm9ZG8UAoZF+X8gDYTN6K862gIeS8Q7H4zBtF1XM3/G7VQS2iZC/voIlnrDGr
gwG89yOglfC8E0lUoOD9A+GiIwqMr4Cahbv3wnuG8wh1fdtMp+tHoiSMhpQUryIS
+rl8p/BvKoIbrWE+67ueqlxTjuZPf2TjnJ7TUDo2UWkApX3kLBETMcN+Y7jos27t
0Je1NO6jGLjog3Ps/ah71xYnadtfArml38KNqG0p5sjXsb/Hes8gcGI2UwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNPMIDdxUIEHPIcbkI3Sd1I91xWIMB8GA1UdIwQY
MBaAFLDfr9NnMDlv4zjnctrb5MPIXNlSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc04tdjAyY3dPV19qT09keTJ0dmt3OGhjMlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mNjk2ZmQtNGQ5ZC00ZTI4LTkyNmUt
MGFhNWI0NmJmOGFhLzEvc04tdjAyY3dPV19qT09keTJ0dmt3OGhjMlZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9mNjk2ZmQtNGQ5ZC00ZTI4LTkyNmUtMGFhNWI0NmJmOGFh
LzEvc04tdjAyY3dPV19qT09keTJ0dmt3OGhjMlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdyk+lhNj
5cpuGHV/fUtDIqmkisTcYVi67FQAMhxxVZUmkn6yx33e3x0WKe7JUyMJxto7klnr
Su8uZGPlSMkUnkYFf7Kly4aQAvSApv4+2VHiBBbakUhgdFAZ7SZS4lvpNigcqANh
k9neHarvq9T6k6csylFIUbWoxR5+IHVFAcVU31qPWD1qpAMDgUAmk3MJNFnyDZiz
yAe1mGaIVtDNtzAJ7X4bWGIIqeqlIV/Uylvur8woCWttHH9zfAkl3rlOdab11xnU
9aCRivE+VNHLN5LM5CSmdiGoLk+iSQQOLC0zhogb7jCEEr+qikZRPlDeuGTE0X6p
awki0L3Ns7pGjw==
-----END CERTIFICATE-----
Generated at Thu Sep 10 16:01:59 2026 by rpki-client