Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft
File: sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft (raw, json)
Hash identifier: TdVg82iBCJennfD4nLv5e69OEtA5jHpFlzrL8xDq404=
Subject key identifier: 27:7C:18:9A:DB:C8:77:F1:F1:75:61:5E:60:A1:38:FD:E1:EC:E3:F5
Authority key identifier: B0:25:BA:C1:32:E4:79:A2:8D:F3:35:73:DD:10:96:A9:B7:B7:8D:32
Certificate issuer: /CN=b025bac132e479a28df33573dd1096a9b7b78d32
Certificate serial: 01A0889E50F7E5740C6822925F501D2507F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCW6wTLkeaKN8zVz3RCWqbe3jTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft
Manifest number: 1A4B
Signing time: Thu 10 Sep 2026 00:01:11 +0000
Manifest this update: Thu 10 Sep 2026 00:01:11 +0000
Manifest next update: Fri 11 Sep 2026 00:01:11 +0000
Files and hashes: 1: QvWAgIyFSp81QP1TU8EGOihTFps.roa (hash: 0pRqWv7OjhSbMQbgWqXrmBArFyxBxLPUemQb9GCiO7A=)
2: TQm8goqjLVI6iJwXimERg01NkD8.roa (hash: Yb9LvZhPI+JqfVckpy3u12GtucpcmDjrrqhMvFWHU9U=)
3: sCW6wTLkeaKN8zVz3RCWqbe3jTI.crl (hash: xpVDlCRKRc/LDop3ZpaFhLg3pYJx3+F9GU7F67tx7AQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCW6wTLkeaKN8zVz3RCWqbe3jTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 00:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:88:9e:50:f7:e5:74:0c:68:22:92:5f:50:1d:25:07:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b025bac132e479a28df33573dd1096a9b7b78d32
Validity
Not Before: Sep 10 00:01:11 2026 GMT
Not After : Sep 11 00:01:11 2026 GMT
Subject: CN=277c189adbc877f1f175615e60a138fde1ece3f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:93:31:78:c6:2a:8a:8e:43:d3:05:ff:13:85:
09:f8:93:62:fd:7d:dc:d9:c9:94:e1:66:3a:6c:e6:
73:08:18:6f:e7:30:d8:26:82:7c:14:39:4c:90:2f:
63:c0:8f:72:25:c4:c3:3b:52:8b:0c:af:f2:2d:f7:
a7:db:6f:40:dc:c8:ce:6f:3e:29:44:d2:c1:e6:9b:
3e:0a:47:26:6d:9e:68:9b:dd:88:c0:d4:09:bb:5c:
5f:a7:90:55:51:f9:83:de:69:0b:66:29:d2:2b:3a:
cc:c9:4e:a5:7c:eb:31:0b:76:6d:4e:93:0a:57:33:
87:ea:97:8b:64:26:7a:a0:58:49:56:ac:55:e8:e3:
91:70:b6:33:41:37:8f:20:99:52:26:b3:17:e6:ea:
a7:39:37:75:03:31:50:2b:53:ae:5d:4b:42:62:0c:
e2:31:65:70:d8:24:d6:d2:62:9a:76:13:6c:68:70:
97:d3:7f:00:06:58:8d:34:9f:a9:33:36:36:36:3d:
c5:e7:a9:cb:c8:5f:7e:cc:ce:52:be:f9:54:68:5a:
b5:3a:41:4c:14:40:7b:5d:5f:7d:15:77:89:f2:62:
50:d3:39:b5:6d:62:fb:8b:33:a3:7b:f3:06:fa:20:
d4:47:e6:6c:cf:68:55:b0:74:5a:4b:b6:49:99:78:
1e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:7C:18:9A:DB:C8:77:F1:F1:75:61:5E:60:A1:38:FD:E1:EC:E3:F5
X509v3 Authority Key Identifier:
keyid:B0:25:BA:C1:32:E4:79:A2:8D:F3:35:73:DD:10:96:A9:B7:B7:8D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCW6wTLkeaKN8zVz3RCWqbe3jTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:f2:47:12:e1:76:f8:40:64:5f:ce:e3:43:82:53:39:f3:64:
c3:df:07:0e:4a:e3:79:db:ed:00:41:b6:ec:00:3a:d1:7e:a1:
7f:29:d5:01:f4:5a:d2:74:fb:61:4e:81:e9:36:01:d1:0d:32:
43:62:43:a4:97:5e:04:e6:28:c9:df:5e:5f:18:19:dc:36:82:
1f:26:b7:b2:ef:38:21:f9:9b:21:65:bd:e1:5b:b3:61:19:c5:
e6:4b:7c:af:f3:02:c1:af:d3:0a:78:a8:6e:39:9f:b7:55:04:
92:00:35:28:01:ec:40:bb:d6:7b:9a:26:87:3a:3a:30:cb:11:
7c:2d:45:a3:3a:58:e1:43:6c:3f:6b:68:dc:b2:d0:ae:43:12:
4d:da:ef:76:ca:c2:97:64:2b:3c:ff:78:fb:fe:da:95:03:b0:
d2:14:e4:88:05:51:27:7d:6e:b1:e9:93:4f:7c:f4:e4:ca:0c:
c0:6c:dd:6e:46:d7:18:0c:dc:9c:43:43:e0:7b:aa:c2:7d:e7:
98:ad:26:e7:27:cd:a0:3e:1b:77:5c:b0:24:ff:a9:f4:a5:aa:
8b:ea:c6:c3:c2:af:e0:5a:1d:65:94:cf:82:ca:b5:fb:c4:64:
35:8a:c8:f0:73:a2:e2:86:92:cd:63:5e:b7:83:74:9f:ab:d4:
c9:c4:b9:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCInlD35XQMaCKSX1AdJQf2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwMjViYWMxMzJlNDc5YTI4ZGYzMzU3M2RkMTA5NmE5Yjdi
NzhkMzIwHhcNMjYwOTEwMDAwMTExWhcNMjYwOTExMDAwMTExWjAzMTEwLwYDVQQD
EygyNzdjMTg5YWRiYzg3N2YxZjE3NTYxNWU2MGExMzhmZGUxZWNlM2Y1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpMxeMYqio5D0wX/E4UJ+JNi/X3c
2cmU4WY6bOZzCBhv5zDYJoJ8FDlMkC9jwI9yJcTDO1KLDK/yLfen229A3MjObz4p
RNLB5ps+CkcmbZ5om92IwNQJu1xfp5BVUfmD3mkLZinSKzrMyU6lfOsxC3ZtTpMK
VzOH6peLZCZ6oFhJVqxV6OORcLYzQTePIJlSJrMX5uqnOTd1AzFQK1OuXUtCYgzi
MWVw2CTW0mKadhNsaHCX038ABliNNJ+pMzY2Nj3F56nLyF9+zM5SvvlUaFq1OkFM
FEB7XV99FXeJ8mJQ0zm1bWL7izOje/MG+iDUR+Zsz2hVsHRaS7ZJmXge/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCd8GJrbyHfx8XVhXmChOP3h7OP1MB8GA1UdIwQY
MBaAFLAlusEy5HmijfM1c90Qlqm3t40yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0NXNndUTGtlYUtOOHpWejNSQ1dxYmUzalRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9kMmQ5ZjMtOGQ1Ni00ODFjLThiYzQt
N2M4ZjNmZWNkYjJjLzEvc0NXNndUTGtlYUtOOHpWejNSQ1dxYmUzalRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9kMmQ5ZjMtOGQ1Ni00ODFjLThiYzQtN2M4ZjNmZWNkYjJj
LzEvc0NXNndUTGtlYUtOOHpWejNSQ1dxYmUzalRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGPJHEuF2
+EBkX87jQ4JTOfNkw98HDkrjedvtAEG27AA60X6hfynVAfRa0nT7YU6B6TYB0Q0y
Q2JDpJdeBOYoyd9eXxgZ3DaCHya3su84IfmbIWW94VuzYRnF5kt8r/MCwa/TCnio
bjmft1UEkgA1KAHsQLvWe5omhzo6MMsRfC1FozpY4UNsP2to3LLQrkMSTdrvdsrC
l2QrPP94+/7alQOw0hTkiAVRJ31usemTT3z05MoMwGzdbkbXGAzcnEND4Huqwn3n
mK0m5yfNoD4bd1ywJP+p9KWqi+rGw8Kv4FodZZTPgsq1+8RkNYrI8HOi4oaSzWNe
t4N0n6vUycS5xA==
-----END CERTIFICATE-----
Generated at Thu Sep 10 11:07:20 2026 by rpki-client