Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft
File: sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft (raw, json)
Hash identifier: Ox3iPr6u9JlaGQQ6viMJdtkgAVuPVXy3JgEnQjbAU/Q=
Subject key identifier: B4:B7:A0:7B:71:56:1D:A2:26:2D:83:91:2B:93:F4:71:F7:7A:ED:FE
Authority key identifier: B1:F5:BB:AA:05:19:80:BD:48:11:B6:65:5A:0F:95:DB:36:12:78:09
Certificate issuer: /CN=b1f5bbaa051980bd4811b6655a0f95db36127809
Certificate serial: 01A089E75D060E9950DCA13EAA95494C4E6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sfW7qgUZgL1IEbZlWg-V2zYSeAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft
Manifest number: 13D8
Signing time: Thu 10 Sep 2026 06:00:36 +0000
Manifest this update: Thu 10 Sep 2026 06:00:36 +0000
Manifest next update: Fri 11 Sep 2026 06:00:36 +0000
Files and hashes: 1: H1ayDIygYNIOiS92j6cNtqBQm1c.roa (hash: zAMEhxkwZgHjIWB7MVVQZowg1h/HvADUtVLj69PryUA=)
2: sfW7qgUZgL1IEbZlWg-V2zYSeAk.crl (hash: KehUxf6THT/oIeH2QI4B1IWwqo4U1yjXkw2d6mQ7Gq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sfW7qgUZgL1IEbZlWg-V2zYSeAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 06:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:e7:5d:06:0e:99:50:dc:a1:3e:aa:95:49:4c:4e:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1f5bbaa051980bd4811b6655a0f95db36127809
Validity
Not Before: Sep 10 06:00:36 2026 GMT
Not After : Sep 11 06:00:36 2026 GMT
Subject: CN=b4b7a07b71561da2262d83912b93f471f77aedfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0e:df:c9:67:d6:d0:05:2b:73:e1:d3:b7:c5:
4f:31:99:dc:33:e0:9e:51:77:20:01:fc:16:51:3c:
3e:a9:82:a7:44:63:b4:78:da:7c:96:57:3c:33:3a:
52:15:a9:41:1e:a4:50:ef:05:81:9e:99:c6:5b:22:
2b:a2:58:e0:85:78:04:42:40:df:a5:16:56:7e:05:
7a:d9:64:b0:9d:6c:4d:77:61:1a:e9:58:d1:5b:27:
5a:9f:c4:e6:f7:c3:33:1c:4e:d0:fa:7c:fa:0f:39:
e4:3c:ef:6c:75:fb:32:ff:d8:a6:91:c2:d8:97:13:
ca:12:bd:04:ba:1a:79:c5:b3:73:c0:39:77:c7:47:
49:8c:d0:a0:65:ab:d0:de:72:3a:80:5f:e7:dd:cf:
75:66:8c:04:77:37:e8:67:3a:2c:f6:8c:f9:87:7d:
c8:b1:7e:5b:32:48:95:76:22:a9:0b:9e:d2:36:de:
63:0d:12:5c:67:c4:dc:77:78:c6:9b:c4:db:be:28:
5a:f2:c1:d2:5c:4c:44:fc:12:6f:0c:92:bc:52:9c:
f5:08:0f:d4:d1:cb:b0:92:44:c8:f6:9d:86:0f:ae:
ff:fc:c9:4a:3d:60:63:7a:96:d6:55:c8:b8:90:3c:
1a:3e:37:40:df:03:6d:e6:52:2c:2b:ed:e1:94:3d:
24:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B7:A0:7B:71:56:1D:A2:26:2D:83:91:2B:93:F4:71:F7:7A:ED:FE
X509v3 Authority Key Identifier:
keyid:B1:F5:BB:AA:05:19:80:BD:48:11:B6:65:5A:0F:95:DB:36:12:78:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sfW7qgUZgL1IEbZlWg-V2zYSeAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:0a:be:5e:af:ce:f2:a7:3c:9c:8a:3b:22:e2:41:ff:a3:53:
72:e2:1b:47:7d:db:20:d5:1e:7e:fa:12:61:1f:d9:74:6a:87:
aa:ed:53:a9:ea:66:7d:a8:66:30:bf:fe:04:1b:bf:ed:5f:b2:
13:f0:80:0e:9c:1b:3f:d6:34:3a:72:fa:41:56:d6:0e:43:9e:
8d:70:b9:2e:87:98:28:52:14:fb:98:7a:3d:c2:85:be:0e:39:
70:4f:08:46:ae:22:fc:cc:57:bf:c4:42:96:01:e0:af:58:61:
08:75:5b:3c:12:48:d6:2e:a3:ba:bc:cd:d3:85:7b:fd:5b:c0:
a1:4e:f3:29:21:53:da:79:a6:ac:7b:e2:56:28:f3:82:11:5c:
c4:9f:2f:04:95:09:8a:bc:23:e3:da:b8:81:19:4f:14:88:03:
c7:0c:76:05:dd:d1:68:be:0f:2a:48:aa:9e:80:d4:20:c2:35:
fc:07:44:46:92:c6:2b:60:d6:96:56:48:61:c6:67:c8:23:46:
13:d2:04:4b:de:62:75:4f:31:d4:a5:39:35:cc:83:83:26:1f:
83:ed:d8:7f:a8:f2:cf:f5:6b:1d:eb:e2:e1:58:95:18:c7:7a:
2f:f8:74:33:94:9d:20:04:0b:85:23:ed:90:a9:64:ae:f9:39:
59:3d:0f:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCJ510GDplQ3KE+qpVJTE5qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxZjViYmFhMDUxOTgwYmQ0ODExYjY2NTVhMGY5NWRiMzYx
Mjc4MDkwHhcNMjYwOTEwMDYwMDM2WhcNMjYwOTExMDYwMDM2WjAzMTEwLwYDVQQD
EyhiNGI3YTA3YjcxNTYxZGEyMjYyZDgzOTEyYjkzZjQ3MWY3N2FlZGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAug7fyWfW0AUrc+HTt8VPMZncM+Ce
UXcgAfwWUTw+qYKnRGO0eNp8llc8MzpSFalBHqRQ7wWBnpnGWyIroljghXgEQkDf
pRZWfgV62WSwnWxNd2Ea6VjRWydan8Tm98MzHE7Q+nz6DznkPO9sdfsy/9imkcLY
lxPKEr0Euhp5xbNzwDl3x0dJjNCgZavQ3nI6gF/n3c91ZowEdzfoZzos9oz5h33I
sX5bMkiVdiKpC57SNt5jDRJcZ8Tcd3jGm8Tbviha8sHSXExE/BJvDJK8Upz1CA/U
0cuwkkTI9p2GD67//MlKPWBjepbWVci4kDwaPjdA3wNt5lIsK+3hlD0k9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLS3oHtxVh2iJi2DkSuT9HH3eu3+MB8GA1UdIwQY
MBaAFLH1u6oFGYC9SBG2ZVoPlds2EngJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2ZXN3FnVVpnTDFJRWJabFdnLVYyellTZUFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9hMDcxYWEtNTUwYi00ZTE4LTk5ZWQt
MDUwOGEyYmI0N2FjLzEvc2ZXN3FnVVpnTDFJRWJabFdnLVYyellTZUFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9hMDcxYWEtNTUwYi00ZTE4LTk5ZWQtMDUwOGEyYmI0N2Fj
LzEvc2ZXN3FnVVpnTDFJRWJabFdnLVYyellTZUFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYwq+Xq/O
8qc8nIo7IuJB/6NTcuIbR33bINUefvoSYR/ZdGqHqu1TqepmfahmML/+BBu/7V+y
E/CADpwbP9Y0OnL6QVbWDkOejXC5LoeYKFIU+5h6PcKFvg45cE8IRq4i/MxXv8RC
lgHgr1hhCHVbPBJI1i6jurzN04V7/VvAoU7zKSFT2nmmrHviVijzghFcxJ8vBJUJ
irwj49q4gRlPFIgDxwx2Bd3RaL4PKkiqnoDUIMI1/AdERpLGK2DWllZIYcZnyCNG
E9IES95idU8x1KU5NcyDgyYfg+3Yf6jyz/VrHevi4ViVGMd6L/h0M5SdIAQLhSPt
kKlkrvk5WT0PYQ==
-----END CERTIFICATE-----
Generated at Thu Sep 10 17:30:09 2026 by rpki-client