Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.mft
File: SFk-QNpaUvMi21oEwg-0htThVQI.mft (raw, json)
Hash identifier: 6VmuayWZBg35P4gVbESODEYhyvOksB5hox8gBIcjMBo=
Subject key identifier: 5C:CD:63:06:40:6A:4C:91:3F:04:EF:49:44:ED:4F:D3:A2:35:5E:27
Authority key identifier: 48:59:3E:40:DA:5A:52:F3:22:DB:5A:04:C2:0F:B4:86:D4:E1:55:02
Certificate issuer: /CN=48593e40da5a52f322db5a04c20fb486d4e15502
Certificate serial: 01A134EC0CD1130058EC03EA6D590CDB8C39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFk-QNpaUvMi21oEwg-0htThVQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.mft
Manifest number: 175B
Signing time: Tue 13 Oct 2026 11:00:47 +0000
Manifest this update: Tue 13 Oct 2026 11:00:47 +0000
Manifest next update: Wed 14 Oct 2026 11:00:47 +0000
Files and hashes: 1: SFk-QNpaUvMi21oEwg-0htThVQI.crl (hash: XFitnU/FlIPwgoWwOrdgBKtdEZUw+bchWbT69eZWwGM=)
2: VFzP0FGh0SQzSyAC9MEO9bnaqZU.roa (hash: DwjrXgZVVBQjvwjFMKe9t4mZj6kib5GRnctDIksFE5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFk-QNpaUvMi21oEwg-0htThVQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 11:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:ec:0c:d1:13:00:58:ec:03:ea:6d:59:0c:db:8c:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48593e40da5a52f322db5a04c20fb486d4e15502
Validity
Not Before: Oct 13 11:00:47 2026 GMT
Not After : Oct 14 11:00:47 2026 GMT
Subject: CN=5ccd6306406a4c913f04ef4944ed4fd3a2355e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:11:04:b0:fc:43:08:0f:ec:6b:95:62:c8:44:
e9:54:46:59:e5:74:b9:e2:d3:f7:17:bb:70:85:cb:
a5:2d:f7:ff:3c:99:d5:fc:64:4e:27:c5:8b:4d:d2:
1c:95:dd:91:5b:cb:17:4f:6b:1e:69:1c:aa:65:d8:
6a:be:df:64:4f:df:25:7b:9a:db:84:3f:3e:29:a3:
ee:f2:31:1c:4f:8b:8e:f5:b5:88:b9:85:b7:a7:29:
a0:c5:a4:eb:dd:d8:ad:0a:4a:1d:11:cd:a8:7b:1d:
8c:fa:3d:0d:3c:f6:dd:59:1d:75:78:73:8b:14:5f:
b3:af:8e:43:38:86:7f:09:d9:57:b9:76:a7:69:43:
c5:56:06:6d:21:b1:5c:b8:fe:3c:6a:7d:73:0d:0f:
da:39:d0:58:52:2d:d4:5d:12:aa:6a:61:b4:25:02:
c1:5a:2b:08:c7:23:83:eb:2a:38:3b:08:3a:73:c7:
9b:e1:31:e6:d2:ec:d1:79:1e:73:f8:49:b2:74:d2:
5c:97:7b:36:59:bf:b4:a0:2a:76:32:4f:11:4e:aa:
fa:3d:6c:f1:7b:a6:ef:dd:fe:f0:ea:61:d7:3b:33:
7d:0a:d1:60:da:f1:8d:7b:48:0c:b7:ea:6e:fa:04:
50:0d:24:2e:05:c4:43:0b:80:53:9a:94:5d:12:62:
ed:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:CD:63:06:40:6A:4C:91:3F:04:EF:49:44:ED:4F:D3:A2:35:5E:27
X509v3 Authority Key Identifier:
keyid:48:59:3E:40:DA:5A:52:F3:22:DB:5A:04:C2:0F:B4:86:D4:E1:55:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFk-QNpaUvMi21oEwg-0htThVQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:41:56:2e:41:25:48:18:e4:48:b7:9e:4d:46:da:9f:13:ed:
b3:2a:ce:ed:81:dc:f0:26:a4:20:70:d4:6a:80:2e:fe:7a:27:
b7:bf:1b:49:49:7e:52:63:1c:57:86:75:42:b6:9c:34:4f:3a:
4a:99:c9:9a:3f:c2:9d:89:6a:50:9c:3e:aa:ed:e1:44:d0:3f:
9b:a4:78:fe:4e:c0:e6:17:bc:3a:7a:ce:8f:18:fa:cb:93:91:
2a:90:55:a9:0c:e3:a4:6a:40:4f:40:0b:c6:9a:11:d5:ee:ff:
f7:1d:4c:cc:d6:32:aa:72:13:a0:6c:cc:11:05:15:c9:69:9f:
6d:6a:b4:47:df:fd:70:5c:4a:25:31:30:1e:39:2b:d5:b6:96:
74:7a:e1:44:ac:e7:3b:2e:cb:d1:99:e5:e8:68:38:df:2f:7a:
eb:52:2a:34:20:e5:8e:60:4a:77:c2:05:1e:19:99:fb:e3:4c:
a1:3d:24:41:8a:62:95:bf:b0:f2:ca:02:78:84:6f:69:68:0b:
00:1e:2f:5d:ee:ac:1c:c1:c4:bb:91:84:3c:24:f3:4c:5b:47:
8b:85:bc:60:1c:c7:09:90:e2:d0:62:12:1f:73:a4:95:7e:44:
5a:26:21:af:33:4d:ca:9b:bb:69:f6:e0:a3:82:de:82:0a:1f:
1d:0e:57:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE07AzREwBY7APqbVkM24w5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4NTkzZTQwZGE1YTUyZjMyMmRiNWEwNGMyMGZiNDg2ZDRl
MTU1MDIwHhcNMjYxMDEzMTEwMDQ3WhcNMjYxMDE0MTEwMDQ3WjAzMTEwLwYDVQQD
Eyg1Y2NkNjMwNjQwNmE0YzkxM2YwNGVmNDk0NGVkNGZkM2EyMzU1ZTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1REEsPxDCA/sa5ViyETpVEZZ5XS5
4tP3F7twhculLff/PJnV/GROJ8WLTdIcld2RW8sXT2seaRyqZdhqvt9kT98le5rb
hD8+KaPu8jEcT4uO9bWIuYW3pymgxaTr3ditCkodEc2oex2M+j0NPPbdWR11eHOL
FF+zr45DOIZ/CdlXuXanaUPFVgZtIbFcuP48an1zDQ/aOdBYUi3UXRKqamG0JQLB
WisIxyOD6yo4Owg6c8eb4THm0uzReR5z+EmydNJcl3s2Wb+0oCp2Mk8RTqr6PWzx
e6bv3f7w6mHXOzN9CtFg2vGNe0gMt+pu+gRQDSQuBcRDC4BTmpRdEmLtAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFzNYwZAakyRPwTvSUTtT9OiNV4nMB8GA1UdIwQY
MBaAFEhZPkDaWlLzIttaBMIPtIbU4VUCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0ZrLVFOcGFVdk1pMjFvRXdnLTBodFRoVlFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85NzAwYzgtZjlhYi00MmE3LWIxZmEt
ZTY4YTA4ZDllNTRmLzEvU0ZrLVFOcGFVdk1pMjFvRXdnLTBodFRoVlFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi85NzAwYzgtZjlhYi00MmE3LWIxZmEtZTY4YTA4ZDllNTRm
LzEvU0ZrLVFOcGFVdk1pMjFvRXdnLTBodFRoVlFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOkFWLkEl
SBjkSLeeTUbanxPtsyrO7YHc8CakIHDUaoAu/nont78bSUl+UmMcV4Z1QracNE86
SpnJmj/CnYlqUJw+qu3hRNA/m6R4/k7A5he8OnrOjxj6y5ORKpBVqQzjpGpAT0AL
xpoR1e7/9x1MzNYyqnIToGzMEQUVyWmfbWq0R9/9cFxKJTEwHjkr1baWdHrhRKzn
Oy7L0Znl6Gg43y9661IqNCDljmBKd8IFHhmZ++NMoT0kQYpilb+w8soCeIRvaWgL
AB4vXe6sHMHEu5GEPCTzTFtHi4W8YBzHCZDi0GISH3OklX5EWiYhrzNNypu7afbg
o4LeggofHQ5XWA==
-----END CERTIFICATE-----
Generated at Tue Oct 13 19:26:34 2026 by rpki-client