Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.mft
File: sWmklwDgw7jjmnkTDJh6UADM_-I.mft (raw, json)
Hash identifier: ODWSmQ+pbur3Td/3HJ8YbRngxtanLtv0FEwWX9GfHY0=
Subject key identifier: 50:31:5D:58:05:CC:F5:FF:51:45:97:45:06:61:E4:46:8C:5E:F7:38
Authority key identifier: B1:69:A4:97:00:E0:C3:B8:E3:9A:79:13:0C:98:7A:50:00:CC:FF:E2
Certificate issuer: /CN=b169a49700e0c3b8e39a79130c987a5000ccffe2
Certificate serial: 01A17D3C21FF62488D826B2EB046A58C6EF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWmklwDgw7jjmnkTDJh6UADM_-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.mft
Manifest number: 164E
Signing time: Tue 27 Oct 2026 12:00:55 +0000
Manifest this update: Tue 27 Oct 2026 12:00:55 +0000
Manifest next update: Wed 28 Oct 2026 12:00:55 +0000
Files and hashes: 1: Sofdrg0QnOjUtQMqZfgwqYXhb6U.roa (hash: akxM1ULNfux4cSJzKmej1AQZXAU7j1qSHqgRSQx0jHE=)
2: l_UYfd627TWdVQUBGDcYXolbG3M.roa (hash: jE9YZp4SwDWD4mybbL99DqobqhNeL3J/FFGbfANXQkY=)
3: sWmklwDgw7jjmnkTDJh6UADM_-I.crl (hash: zoYF+UnfT3SEJXiUwp5b4ZfYNuS8JlAEIvTlVlIgsWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/sWmklwDgw7jjmnkTDJh6UADM_-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 12:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:3c:21:ff:62:48:8d:82:6b:2e:b0:46:a5:8c:6e:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b169a49700e0c3b8e39a79130c987a5000ccffe2
Validity
Not Before: Oct 27 12:00:55 2026 GMT
Not After : Oct 28 12:00:55 2026 GMT
Subject: CN=50315d5805ccf5ff514597450661e4468c5ef738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7e:fe:3d:87:a0:eb:bf:63:5f:d8:72:8f:47:
9b:fa:ce:ac:89:6d:50:73:94:b7:84:d9:32:17:9c:
4f:60:fa:77:86:03:6b:fa:69:ed:65:9f:a3:c4:12:
11:08:82:71:2b:f1:89:73:ea:17:05:89:af:88:0f:
31:f3:8a:2b:37:35:81:f5:2d:fe:31:b4:75:e2:13:
d9:fa:f5:ad:62:9c:d6:ed:75:66:f9:6b:bd:ab:fd:
23:49:eb:72:04:86:fa:90:32:43:9d:2a:79:de:c1:
ba:ff:ee:8d:42:3e:72:a0:6d:b0:98:14:65:31:fa:
54:7b:a2:46:c5:b6:8e:86:4e:de:0c:96:dd:73:5c:
e5:7d:a5:34:44:c4:a5:c0:0f:24:20:3b:76:61:5e:
58:5c:dd:56:bd:f2:2e:f7:71:dd:3d:32:4e:55:40:
e5:03:bc:0d:82:0f:c0:73:1d:69:9b:1c:79:cf:b1:
36:45:aa:82:12:82:60:93:6f:db:95:f9:ce:5b:f5:
71:2d:15:3a:5e:ce:a9:87:ef:1c:6c:c4:3c:17:66:
20:56:66:f8:e6:f9:d7:62:8a:c6:7d:6a:ba:f1:c3:
bb:13:f8:65:53:8f:b3:b2:26:00:7b:a6:18:16:20:
fe:b6:e5:fc:3e:5b:2a:39:1f:a7:7e:e2:69:1c:a1:
2a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:31:5D:58:05:CC:F5:FF:51:45:97:45:06:61:E4:46:8C:5E:F7:38
X509v3 Authority Key Identifier:
keyid:B1:69:A4:97:00:E0:C3:B8:E3:9A:79:13:0C:98:7A:50:00:CC:FF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWmklwDgw7jjmnkTDJh6UADM_-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/39081f-5003-41ed-b80a-3fae034c489e/1/sWmklwDgw7jjmnkTDJh6UADM_-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:6a:0b:e8:f9:89:f6:50:a9:92:91:3f:0c:eb:c4:32:49:8e:
e0:19:30:51:3f:d5:92:3f:2a:d1:10:e4:b5:af:61:41:d5:d8:
81:81:53:ee:44:db:35:89:d8:a2:30:25:24:eb:7b:0a:a2:fc:
1f:5a:68:5a:56:17:3c:5e:9f:6d:73:f6:77:dc:0d:7e:45:2d:
01:95:6c:a6:b1:da:67:98:1f:9c:13:87:47:9b:cc:5d:33:d3:
4a:55:7e:e2:dc:1b:e6:c6:12:2b:9d:76:1d:08:3e:c4:e5:62:
fa:e0:72:8c:a3:c0:b4:6c:d7:7e:21:92:f4:b2:06:45:c1:41:
7b:28:76:84:00:a4:a8:9e:78:23:3c:d9:5f:85:40:6a:2e:85:
fd:b9:8e:c9:d4:c0:29:76:e2:e8:8f:d0:58:cf:dc:42:13:03:
d5:fa:a4:a1:9b:b9:d7:04:f7:c6:64:41:0f:3b:e7:b9:d2:74:
79:54:20:01:2c:93:7b:30:27:3c:bc:a9:3f:96:89:17:bd:cf:
f4:0a:b4:39:22:62:bf:79:9d:1a:f4:8e:e6:da:40:c9:28:d6:
2f:d2:e8:fa:e4:e4:bf:89:02:8c:9d:c5:63:82:0e:71:2b:d7:
e3:43:4e:e9:22:b1:73:f7:a9:8e:d6:0e:51:5f:b5:38:1b:52:
c3:e9:e6:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF9PCH/YkiNgmsusEaljG7yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNjlhNDk3MDBlMGMzYjhlMzlhNzkxMzBjOTg3YTUwMDBj
Y2ZmZTIwHhcNMjYxMDI3MTIwMDU1WhcNMjYxMDI4MTIwMDU1WjAzMTEwLwYDVQQD
Eyg1MDMxNWQ1ODA1Y2NmNWZmNTE0NTk3NDUwNjYxZTQ0NjhjNWVmNzM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4X7+PYeg679jX9hyj0eb+s6siW1Q
c5S3hNkyF5xPYPp3hgNr+mntZZ+jxBIRCIJxK/GJc+oXBYmviA8x84orNzWB9S3+
MbR14hPZ+vWtYpzW7XVm+Wu9q/0jSetyBIb6kDJDnSp53sG6/+6NQj5yoG2wmBRl
MfpUe6JGxbaOhk7eDJbdc1zlfaU0RMSlwA8kIDt2YV5YXN1WvfIu93HdPTJOVUDl
A7wNgg/Acx1pmxx5z7E2RaqCEoJgk2/blfnOW/VxLRU6Xs6ph+8cbMQ8F2YgVmb4
5vnXYorGfWq68cO7E/hlU4+zsiYAe6YYFiD+tuX8PlsqOR+nfuJpHKEqrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFAxXVgFzPX/UUWXRQZh5EaMXvc4MB8GA1UdIwQY
MBaAFLFppJcA4MO445p5EwyYelAAzP/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1dta2x3RGd3N2pqbW5rVERKaDZVQURNXy1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zOTA4MWYtNTAwMy00MWVkLWI4MGEt
M2ZhZTAzNGM0ODllLzEvc1dta2x3RGd3N2pqbW5rVERKaDZVQURNXy1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8zOTA4MWYtNTAwMy00MWVkLWI4MGEtM2ZhZTAzNGM0ODll
LzEvc1dta2x3RGd3N2pqbW5rVERKaDZVQURNXy1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHmoL6PmJ
9lCpkpE/DOvEMkmO4BkwUT/Vkj8q0RDkta9hQdXYgYFT7kTbNYnYojAlJOt7CqL8
H1poWlYXPF6fbXP2d9wNfkUtAZVsprHaZ5gfnBOHR5vMXTPTSlV+4twb5sYSK512
HQg+xOVi+uByjKPAtGzXfiGS9LIGRcFBeyh2hACkqJ54IzzZX4VAai6F/bmOydTA
KXbi6I/QWM/cQhMD1fqkoZu51wT3xmRBDzvnudJ0eVQgASyTezAnPLypP5aJF73P
9Aq0OSJiv3mdGvSO5tpAySjWL9Lo+uTkv4kCjJ3FY4IOcSvX40NO6SKxc/epjtYO
UV+1OBtSw+nmuQ==
-----END CERTIFICATE-----
Generated at Tue Oct 27 22:50:23 2026 by rpki-client