Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/2a72ee-ec1f-40c6-ad9d-5a4df896fc3e/1/SAtOZTD1jbM45B1DTlwkjri0nrU.mft
File: SAtOZTD1jbM45B1DTlwkjri0nrU.mft (raw, json)
Hash identifier: 3PAX1H2iO+Et/y5vkCHrjCEnr/VNud3lOSUKN7cLf1Y=
Subject key identifier: 95:74:D3:FA:A4:A4:71:7E:B3:E9:E0:A3:60:6B:EF:8A:5D:7E:A8:24
Authority key identifier: 48:0B:4E:65:30:F5:8D:B3:38:E4:1D:43:4E:5C:24:8E:B8:B4:9E:B5
Certificate issuer: /CN=480b4e6530f58db338e41d434e5c248eb8b49eb5
Certificate serial: 019EB7A17B3807EC0951154DCCAB6589BAE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAtOZTD1jbM45B1DTlwkjri0nrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/2a72ee-ec1f-40c6-ad9d-5a4df896fc3e/1/SAtOZTD1jbM45B1DTlwkjri0nrU.mft
Manifest number: 10B5
Signing time: Thu 11 Jun 2026 17:01:13 +0000
Manifest this update: Thu 11 Jun 2026 17:01:13 +0000
Manifest next update: Fri 12 Jun 2026 17:01:13 +0000
Files and hashes: 1: 4U4MbiSV6kmpKfL8B6L6VKqblTY.roa (hash: X9YwPhP7oKQF4wZpCPI7kZ8nWJ6qTuSADd5JFvye0ys=)
2: EyNcY5Z8gMCGSsUlurZ-vzlzRMk.roa (hash: WB7iGBNBwcsdOHeiUNEfNJNFo1bIzRxEZw4wIprpZOA=)
3: SAtOZTD1jbM45B1DTlwkjri0nrU.crl (hash: BFbQv2mvJ+JMG/5Ymwo4SRFk+b9fXVBAc34hdk8bbLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/2a72ee-ec1f-40c6-ad9d-5a4df896fc3e/1/SAtOZTD1jbM45B1DTlwkjri0nrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/2a72ee-ec1f-40c6-ad9d-5a4df896fc3e/1/SAtOZTD1jbM45B1DTlwkjri0nrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAtOZTD1jbM45B1DTlwkjri0nrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 17:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:a1:7b:38:07:ec:09:51:15:4d:cc:ab:65:89:ba:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480b4e6530f58db338e41d434e5c248eb8b49eb5
Validity
Not Before: Jun 11 17:01:13 2026 GMT
Not After : Jun 12 17:01:13 2026 GMT
Subject: CN=9574d3faa4a4717eb3e9e0a3606bef8a5d7ea824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:12:7a:d1:23:4c:aa:9d:4a:c3:33:2f:5c:67:
6f:e3:cc:bc:7a:bb:08:92:ea:82:2a:c1:6c:8b:8e:
25:3e:04:5b:f5:f1:06:0b:60:66:c2:a2:c7:31:fd:
05:2f:af:4a:a4:aa:18:1e:02:a7:3c:fc:45:a6:ec:
cc:70:53:8f:5c:e1:55:91:df:76:32:6a:84:40:d7:
a9:b3:e7:eb:f7:b4:a7:b7:8c:3f:3e:86:d8:79:b7:
6e:3d:b7:9c:12:92:33:d2:81:82:36:63:e0:12:57:
75:cd:ba:ae:5f:2f:1b:f0:ba:ba:56:c9:50:2f:c9:
1c:5c:75:a8:1c:60:81:2f:48:9c:0f:d2:1a:ea:3e:
c1:d8:7e:58:2e:ca:db:61:4e:d3:7c:6c:e2:8c:df:
6f:38:54:dd:f1:51:05:3a:f2:75:5e:d3:f4:6a:3a:
6c:5a:a9:f8:1e:ab:c7:e6:b8:96:62:d1:76:d9:9b:
22:02:ab:9a:0b:45:79:65:be:e1:4b:8b:1e:5b:61:
06:04:0a:8a:72:43:d4:0c:6e:a8:24:0b:a7:35:66:
1b:2c:fc:78:ce:3f:82:e6:73:a3:69:fd:26:79:ba:
82:28:36:73:bc:53:d8:db:2f:dc:01:f4:fe:6c:55:
77:aa:f5:14:44:e4:c2:d6:f0:68:f4:a6:c2:80:e5:
ac:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:74:D3:FA:A4:A4:71:7E:B3:E9:E0:A3:60:6B:EF:8A:5D:7E:A8:24
X509v3 Authority Key Identifier:
keyid:48:0B:4E:65:30:F5:8D:B3:38:E4:1D:43:4E:5C:24:8E:B8:B4:9E:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAtOZTD1jbM45B1DTlwkjri0nrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2a72ee-ec1f-40c6-ad9d-5a4df896fc3e/1/SAtOZTD1jbM45B1DTlwkjri0nrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2a72ee-ec1f-40c6-ad9d-5a4df896fc3e/1/SAtOZTD1jbM45B1DTlwkjri0nrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:b3:91:0c:7c:7a:43:c5:55:12:66:d3:d1:3c:d3:15:5d:75:
7a:af:2d:c3:56:dd:93:41:f5:ad:8c:d6:2d:05:49:cd:d3:2f:
e2:49:d4:45:36:ce:64:16:40:f8:59:6b:d6:fb:43:fd:dc:e6:
59:51:0f:63:fa:eb:f6:68:13:c0:42:38:56:cd:e0:65:e5:bd:
86:4c:d2:f7:c7:0e:49:67:90:26:8b:ce:5e:06:c6:90:b4:27:
0a:d9:84:e7:e2:36:1f:3d:6e:72:94:7f:d4:63:9b:84:a4:08:
88:97:72:b1:47:b4:bb:07:e1:ea:e4:94:3e:a4:21:52:77:77:
be:84:be:90:38:1a:4d:32:ef:09:46:89:09:9e:25:67:e7:b0:
ba:7f:ea:64:02:49:28:08:0d:5a:63:4b:d5:cc:01:73:c5:7a:
51:04:c2:c6:c9:bf:65:9c:2c:af:e9:05:4b:10:50:56:37:43:
00:96:7a:66:c0:c4:6a:c5:a5:11:f2:de:23:dc:9f:4a:c0:91:
7d:b6:c9:86:18:b6:7b:62:db:c2:bc:91:41:47:5b:16:db:37:
ff:ab:ea:c6:2a:05:8f:b1:f5:a3:ce:29:23:42:68:74:5d:8c:
df:03:b9:13:03:14:08:21:e2:39:3d:98:ff:94:e9:71:4d:e8:
a6:ec:42:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:13:20 2026 by rpki-client