Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/5a6aad-a4c7-43b9-8a9e-8d7b736a695c/1/Sxd8RQ0gNQZ7qiaSC4pL02x7MxQ.mft
File: Sxd8RQ0gNQZ7qiaSC4pL02x7MxQ.mft (raw, json)
Hash identifier: dn7ba4n5ep1SInhr9nJeChCksr4MuSxI9nVqnb3Ublo=
Subject key identifier: 51:70:CB:EC:9F:BA:FF:30:04:AF:E7:D7:90:93:F3:10:92:1B:D0:C5
Authority key identifier: 4B:17:7C:45:0D:20:35:06:7B:AA:26:92:0B:8A:4B:D3:6C:7B:33:14
Certificate issuer: /CN=4b177c450d2035067baa26920b8a4bd36c7b3314
Certificate serial: 01A1833ECF5841C7274798930C371A6DD7A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sxd8RQ0gNQZ7qiaSC4pL02x7MxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/5a6aad-a4c7-43b9-8a9e-8d7b736a695c/1/Sxd8RQ0gNQZ7qiaSC4pL02x7MxQ.mft
Manifest number: 11DA
Signing time: Wed 28 Oct 2026 16:01:33 +0000
Manifest this update: Wed 28 Oct 2026 16:01:33 +0000
Manifest next update: Thu 29 Oct 2026 16:01:33 +0000
Files and hashes: 1: Sxd8RQ0gNQZ7qiaSC4pL02x7MxQ.crl (hash: n/swxNZEKyVug93fLtXm+NY5is+dkWMBdAE3h5TappI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/5a6aad-a4c7-43b9-8a9e-8d7b736a695c/1/Sxd8RQ0gNQZ7qiaSC4pL02x7MxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/5a6aad-a4c7-43b9-8a9e-8d7b736a695c/1/Sxd8RQ0gNQZ7qiaSC4pL02x7MxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sxd8RQ0gNQZ7qiaSC4pL02x7MxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:3e:cf:58:41:c7:27:47:98:93:0c:37:1a:6d:d7:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b177c450d2035067baa26920b8a4bd36c7b3314
Validity
Not Before: Oct 28 16:01:33 2026 GMT
Not After : Oct 29 16:01:33 2026 GMT
Subject: CN=5170cbec9fbaff3004afe7d79093f310921bd0c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:78:03:39:88:35:da:2f:56:08:18:55:ae:a6:
0f:1d:0a:3f:5c:73:d7:4f:80:1f:c7:33:b1:ed:39:
8e:7d:1a:c0:08:95:34:82:3c:00:fa:20:3d:a0:30:
a9:77:a8:c2:d6:9c:aa:4d:f6:14:5f:f3:d8:28:ea:
50:89:2b:2d:cb:24:ef:00:02:fa:b3:fb:05:75:7a:
4a:0e:9c:08:56:8f:cb:55:d8:11:30:47:61:d4:00:
8a:d1:94:03:88:01:57:55:cb:22:b7:78:1b:d4:09:
99:4a:27:d6:b8:81:d6:b2:19:cd:f6:ac:dd:0c:e0:
61:cd:57:72:1b:47:9c:1f:d6:0f:d1:a2:ee:2b:09:
fc:c8:e1:3a:fe:3c:c1:95:1c:a2:60:34:68:63:08:
1e:41:55:96:b0:c9:57:b7:cb:92:58:d4:c4:f7:63:
0d:47:03:e6:7e:e4:35:ff:b5:ea:87:25:e4:5a:2c:
96:05:f7:b0:cb:5d:94:c4:cf:4e:27:b7:65:fa:b8:
94:14:45:92:28:91:31:d3:91:c4:bb:c9:05:27:d8:
45:a0:29:c7:33:14:f5:43:39:59:fe:c7:c5:5f:60:
ad:23:63:51:6a:bf:18:9f:35:79:c4:b5:59:01:fb:
54:f2:a4:66:f8:46:7a:d9:71:93:0f:e6:73:db:12:
b0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:70:CB:EC:9F:BA:FF:30:04:AF:E7:D7:90:93:F3:10:92:1B:D0:C5
X509v3 Authority Key Identifier:
keyid:4B:17:7C:45:0D:20:35:06:7B:AA:26:92:0B:8A:4B:D3:6C:7B:33:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sxd8RQ0gNQZ7qiaSC4pL02x7MxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/5a6aad-a4c7-43b9-8a9e-8d7b736a695c/1/Sxd8RQ0gNQZ7qiaSC4pL02x7MxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/5a6aad-a4c7-43b9-8a9e-8d7b736a695c/1/Sxd8RQ0gNQZ7qiaSC4pL02x7MxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:71:ff:e4:c9:52:e8:b6:f5:0c:86:3c:f8:50:2c:fd:9b:02:
91:c5:56:90:3e:52:27:8d:45:bd:cd:a7:f3:ac:36:53:cc:09:
2f:42:d1:ae:d4:9f:35:89:6e:ae:d5:50:da:60:e7:ec:19:f1:
8f:29:4b:42:f8:81:56:6c:b6:e2:e9:94:fc:f3:c2:f9:c6:61:
fe:fa:8f:2d:ce:f5:5e:f6:db:0d:13:6c:db:a2:6f:ba:f6:56:
58:cf:63:b2:1f:73:3e:35:6c:87:eb:a0:e3:05:a3:a6:e8:c5:
45:f7:86:f0:22:30:56:aa:be:06:d9:e3:84:ae:f0:c2:b5:6a:
50:eb:51:23:ef:e3:f4:51:0f:ba:9b:a4:6c:bc:90:27:31:59:
05:24:db:61:f6:5e:53:76:f8:f6:4d:da:44:3f:27:01:1c:2b:
2d:ef:d3:e4:80:2b:4c:c5:fd:d0:0d:14:fb:30:6c:c0:3d:3c:
ad:2c:3d:f6:10:cf:92:88:06:19:98:6e:54:40:cc:c5:15:d0:
5f:ee:04:3e:7e:1f:77:86:e5:2a:26:c2:f1:cf:f1:9c:59:9a:
6b:06:43:89:cb:07:5c:5c:93:17:a8:04:7a:14:bb:17:a6:cc:
6e:9b:af:bf:74:87:48:c8:b5:65:65:2d:c2:8f:5c:32:df:ea:
34:aa:c8:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGDPs9YQccnR5iTDDcabdepMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiMTc3YzQ1MGQyMDM1MDY3YmFhMjY5MjBiOGE0YmQzNmM3
YjMzMTQwHhcNMjYxMDI4MTYwMTMzWhcNMjYxMDI5MTYwMTMzWjAzMTEwLwYDVQQD
Eyg1MTcwY2JlYzlmYmFmZjMwMDRhZmU3ZDc5MDkzZjMxMDkyMWJkMGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXgDOYg12i9WCBhVrqYPHQo/XHPX
T4AfxzOx7TmOfRrACJU0gjwA+iA9oDCpd6jC1pyqTfYUX/PYKOpQiSstyyTvAAL6
s/sFdXpKDpwIVo/LVdgRMEdh1ACK0ZQDiAFXVcsit3gb1AmZSifWuIHWshnN9qzd
DOBhzVdyG0ecH9YP0aLuKwn8yOE6/jzBlRyiYDRoYwgeQVWWsMlXt8uSWNTE92MN
RwPmfuQ1/7XqhyXkWiyWBfewy12UxM9OJ7dl+riUFEWSKJEx05HEu8kFJ9hFoCnH
MxT1QzlZ/sfFX2CtI2NRar8YnzV5xLVZAftU8qRm+EZ62XGTD+Zz2xKw5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFFwy+yfuv8wBK/n15CT8xCSG9DFMB8GA1UdIwQY
MBaAFEsXfEUNIDUGe6omkguKS9NsezMUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3hkOFJRMGdOUVo3cWlhU0M0cEwwMng3TXhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS81YTZhYWQtYTRjNy00M2I5LThhOWUt
OGQ3YjczNmE2OTVjLzEvU3hkOFJRMGdOUVo3cWlhU0M0cEwwMng3TXhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS81YTZhYWQtYTRjNy00M2I5LThhOWUtOGQ3YjczNmE2OTVj
LzEvU3hkOFJRMGdOUVo3cWlhU0M0cEwwMng3TXhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUHH/5MlS
6Lb1DIY8+FAs/ZsCkcVWkD5SJ41Fvc2n86w2U8wJL0LRrtSfNYlurtVQ2mDn7Bnx
jylLQviBVmy24umU/PPC+cZh/vqPLc71XvbbDRNs26JvuvZWWM9jsh9zPjVsh+ug
4wWjpujFRfeG8CIwVqq+BtnjhK7wwrVqUOtRI+/j9FEPupukbLyQJzFZBSTbYfZe
U3b49k3aRD8nARwrLe/T5IArTMX90A0U+zBswD08rSw99hDPkogGGZhuVEDMxRXQ
X+4EPn4fd4blKibC8c/xnFmaawZDicsHXFyTF6gEehS7F6bMbpuvv3SHSMi1ZWUt
wo9cMt/qNKrI7Q==
-----END CERTIFICATE-----
Generated at Thu Oct 29 00:43:31 2026 by rpki-client