Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/2a72ee-ec1f-40c6-ad9d-5a4df896fc3e/1/SAtOZTD1jbM45B1DTlwkjri0nrU.mft
File: SAtOZTD1jbM45B1DTlwkjri0nrU.mft (raw, json)
Hash identifier: ltGvt2gaADN+cenjaDzkVrcHfTw4FO8E7qrqFpiZhWM=
Subject key identifier: EA:8A:C3:8A:16:37:E8:D9:2D:28:8D:85:9C:7B:A4:64:D2:F9:94:27
Authority key identifier: 48:0B:4E:65:30:F5:8D:B3:38:E4:1D:43:4E:5C:24:8E:B8:B4:9E:B5
Certificate issuer: /CN=480b4e6530f58db338e41d434e5c248eb8b49eb5
Certificate serial: 01A17C60441D215B65D95A9D863B984D672A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAtOZTD1jbM45B1DTlwkjri0nrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/2a72ee-ec1f-40c6-ad9d-5a4df896fc3e/1/SAtOZTD1jbM45B1DTlwkjri0nrU.mft
Manifest number: 1224
Signing time: Tue 27 Oct 2026 08:00:45 +0000
Manifest this update: Tue 27 Oct 2026 08:00:45 +0000
Manifest next update: Wed 28 Oct 2026 08:00:45 +0000
Files and hashes: 1: 4U4MbiSV6kmpKfL8B6L6VKqblTY.roa (hash: X9YwPhP7oKQF4wZpCPI7kZ8nWJ6qTuSADd5JFvye0ys=)
2: EyNcY5Z8gMCGSsUlurZ-vzlzRMk.roa (hash: WB7iGBNBwcsdOHeiUNEfNJNFo1bIzRxEZw4wIprpZOA=)
3: SAtOZTD1jbM45B1DTlwkjri0nrU.crl (hash: Q1QqpdAhZ/Mr228exfShHpv8xfdQEiHFusj3TDhl9l0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/2a72ee-ec1f-40c6-ad9d-5a4df896fc3e/1/SAtOZTD1jbM45B1DTlwkjri0nrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/2a72ee-ec1f-40c6-ad9d-5a4df896fc3e/1/SAtOZTD1jbM45B1DTlwkjri0nrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAtOZTD1jbM45B1DTlwkjri0nrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:60:44:1d:21:5b:65:d9:5a:9d:86:3b:98:4d:67:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480b4e6530f58db338e41d434e5c248eb8b49eb5
Validity
Not Before: Oct 27 08:00:45 2026 GMT
Not After : Oct 28 08:00:45 2026 GMT
Subject: CN=ea8ac38a1637e8d92d288d859c7ba464d2f99427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:38:ea:4e:4d:a3:18:3f:5a:09:1a:ee:8e:7c:
a3:49:bd:48:d8:ea:f8:17:de:67:16:ae:8f:df:3b:
8a:63:0d:5d:3e:ed:31:25:3d:c7:38:25:6f:ce:49:
5d:4e:a1:51:5e:fa:4a:4f:77:a5:fd:11:37:f6:f2:
64:c4:78:37:3d:9f:6e:93:34:97:93:4e:2b:3c:b3:
02:38:10:40:44:06:26:fb:d6:0a:17:b9:49:e3:4b:
c5:e9:d8:44:7d:b4:b1:91:55:d1:ae:63:62:6e:01:
d5:8e:b8:64:ef:ad:a6:c4:e6:ec:f9:78:23:6d:5e:
16:85:c0:50:17:ae:ea:c7:fb:c4:20:0a:92:1c:c5:
56:67:ab:40:8c:89:4a:85:13:5d:d3:8b:1c:1a:79:
f3:84:e0:e7:3c:f5:9a:d3:a7:e5:09:58:d1:b2:f2:
05:24:44:0f:08:3b:73:fe:ea:2e:41:51:6f:5e:62:
1e:63:49:23:c5:ce:19:bd:38:a4:a8:32:40:33:c5:
83:75:b9:c0:6f:6a:6b:04:22:67:0d:df:ce:8b:32:
30:50:59:8e:4e:89:b2:7b:8e:3b:50:7b:12:55:62:
07:c1:f7:03:0e:83:98:a2:4c:ff:34:89:b9:38:03:
f5:ea:4c:c0:eb:2e:c1:09:01:f5:e6:f0:fe:df:c6:
0d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:8A:C3:8A:16:37:E8:D9:2D:28:8D:85:9C:7B:A4:64:D2:F9:94:27
X509v3 Authority Key Identifier:
keyid:48:0B:4E:65:30:F5:8D:B3:38:E4:1D:43:4E:5C:24:8E:B8:B4:9E:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAtOZTD1jbM45B1DTlwkjri0nrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2a72ee-ec1f-40c6-ad9d-5a4df896fc3e/1/SAtOZTD1jbM45B1DTlwkjri0nrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2a72ee-ec1f-40c6-ad9d-5a4df896fc3e/1/SAtOZTD1jbM45B1DTlwkjri0nrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:cd:72:17:77:0d:de:da:88:77:ed:80:2f:2d:61:33:d2:cb:
5d:d0:94:8f:ed:4d:cd:a7:ab:03:ff:48:cc:d5:c8:8d:2c:13:
93:b8:46:3f:69:c4:4d:fd:87:83:ae:27:2c:35:34:fa:0f:46:
19:72:7b:bd:e9:f2:b0:5d:20:98:6f:21:65:fb:4c:53:ee:a8:
c8:de:20:2c:df:b6:fe:d0:33:30:99:9d:fc:22:20:ad:d3:27:
72:26:66:bc:93:f2:83:52:2b:77:4b:18:a4:fc:48:30:4b:a6:
78:01:b7:a4:a2:a5:f5:b2:ba:50:df:25:4c:7f:5a:50:12:d5:
b1:75:37:53:4c:40:0b:60:f8:cc:1c:10:7b:67:7f:00:64:f9:
7a:e8:81:b7:b6:a9:61:0f:30:3e:b5:14:b4:3f:cc:6f:a5:5f:
c8:90:9a:52:31:d8:cc:fe:41:b8:c3:f9:04:c6:ab:bb:8c:6f:
5b:c4:cc:48:d6:28:f0:77:7f:d6:1e:1c:af:dc:70:17:71:b6:
78:06:ce:d7:43:e9:a3:46:5f:a2:1c:87:cc:d6:ef:ba:cb:a6:
3c:98:0c:78:04:2f:3f:09:67:d9:14:38:ad:c4:c9:07:b1:78:
4a:a0:2d:f2:4b:53:bc:ff:a6:52:8c:29:e1:15:49:c8:f4:ef:
08:2d:eb:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:30:21 2026 by rpki-client