Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft
File: SJwmPoGEhs_YMcJF3frMqR-9gcA.mft (raw, json)
Hash identifier: S0pcpmAPIjaAyMAD7sBJtHaphiUMbrJt0UG+kGKgmRM=
Subject key identifier: 9E:A8:14:5F:C6:8A:81:C2:25:8A:0A:93:CC:47:E4:70:78:03:B0:86
Authority key identifier: 48:9C:26:3E:81:84:86:CF:D8:31:C2:45:DD:FA:CC:A9:1F:BD:81:C0
Certificate issuer: /CN=489c263e818486cfd831c245ddfacca91fbd81c0
Certificate serial: 01A0016FBF536A423E22CBDC1F7567728553
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SJwmPoGEhs_YMcJF3frMqR-9gcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft
Manifest number: 0685
Signing time: Fri 14 Aug 2026 18:01:35 +0000
Manifest this update: Fri 14 Aug 2026 18:01:35 +0000
Manifest next update: Sat 15 Aug 2026 18:01:35 +0000
Files and hashes: 1: 5JcOQzq7WzmjMFbG4IJGxYNeKgo.roa (hash: gSdvGPuX99g6e3AjEkD3xzqC8m6WCx9LmxK0VDXFz5E=)
2: QsLpU8hJ4ATxawddQAfsVH71Yrc.roa (hash: 8LAE+r4LCdI7plc1J5/y/lKsTqyUBWlK/iV7nFAj/Ks=)
3: SJwmPoGEhs_YMcJF3frMqR-9gcA.crl (hash: EWZX9wSNtPv1CY1rheQ68pAmgJFR8xnYI2hKFzul15k=)
4: tjcd2B2MoHez1-FLdOBN_2wuTBg.roa (hash: nHwqBLL+1vMmNTrdugL+2uUX5fBDVoNX8Hv9HhSFUYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/SJwmPoGEhs_YMcJF3frMqR-9gcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:bf:53:6a:42:3e:22:cb:dc:1f:75:67:72:85:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=489c263e818486cfd831c245ddfacca91fbd81c0
Validity
Not Before: Aug 14 18:01:35 2026 GMT
Not After : Aug 15 18:01:35 2026 GMT
Subject: CN=9ea8145fc68a81c2258a0a93cc47e4707803b086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:11:a4:8b:28:65:e5:15:35:8d:5c:07:d7:32:
1b:ac:c6:47:df:f8:6a:cb:17:4b:d4:56:8b:f9:4c:
4f:0a:1d:5a:b8:9b:c0:a8:3e:cf:fc:ae:b8:f8:8a:
7a:60:d7:18:d2:9e:e4:32:0c:73:dc:99:79:0c:20:
05:04:80:18:50:a9:be:dc:9e:95:0b:a2:23:90:90:
ea:84:01:b1:0f:db:c9:0b:6b:39:eb:ef:03:1a:e5:
64:74:eb:7c:89:30:af:86:ca:4b:1d:ea:37:09:99:
eb:d1:79:9f:95:7f:24:07:dd:20:59:b7:d4:79:9f:
d7:d8:1a:0b:14:51:56:2f:f5:86:1f:23:6b:10:87:
91:b3:5d:fc:75:6c:17:57:e8:da:e7:c3:a0:61:20:
6d:49:0d:2f:d7:cc:4b:42:48:80:a3:47:d0:7b:72:
01:78:54:3d:71:5e:1a:cf:87:5e:0c:ef:21:36:00:
7c:88:f3:c6:8a:d6:0d:f7:75:2a:50:19:9d:72:99:
6d:c0:08:c0:9a:41:6e:e5:d7:ed:47:3b:e6:98:4e:
78:c0:b7:e4:42:33:46:b5:f4:a9:d4:0d:22:6a:91:
22:1e:47:dd:42:30:f1:c4:26:3b:c9:92:fa:d1:14:
fd:84:8e:e0:e6:49:c5:24:ae:8e:b5:0c:41:20:a0:
9d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A8:14:5F:C6:8A:81:C2:25:8A:0A:93:CC:47:E4:70:78:03:B0:86
X509v3 Authority Key Identifier:
keyid:48:9C:26:3E:81:84:86:CF:D8:31:C2:45:DD:FA:CC:A9:1F:BD:81:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SJwmPoGEhs_YMcJF3frMqR-9gcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:67:f0:d1:0b:f1:89:e9:36:d9:21:63:64:50:0b:55:3d:0c:
a4:42:62:55:d7:98:6c:10:93:0d:e9:7a:53:fb:22:93:0d:4b:
ed:bf:be:e1:44:13:73:75:0e:ea:9f:8a:5d:8d:7d:64:69:57:
66:0c:d6:8a:a3:f4:e5:1a:c6:b9:eb:5d:df:8e:34:84:88:62:
f3:33:15:58:43:a1:db:8b:25:2f:f0:1f:6a:22:7d:e3:e1:80:
d1:5b:ca:cb:be:8b:00:ba:6c:fe:3b:a3:22:2f:d6:cc:12:39:
92:01:27:78:76:34:98:2b:41:63:a6:05:04:89:91:91:19:18:
68:f6:f3:1f:35:ba:57:2d:6a:a2:00:2d:b0:47:e6:80:ac:ad:
b8:c1:2c:f0:30:8b:45:0c:24:25:a8:02:d7:54:59:d8:b9:df:
d2:8b:27:b3:78:ef:50:da:7e:45:f7:83:82:67:9b:91:85:2e:
80:78:4a:09:64:31:9e:c1:8b:24:a4:ca:9c:80:37:81:e7:d6:
89:d8:6c:49:9c:72:d0:cf:86:ef:11:6c:67:1f:5c:7e:8d:d0:
17:bc:a5:41:3c:ee:9b:5e:a6:a2:01:52:17:50:78:02:d6:13:
36:3c:61:bf:b4:21:bf:85:da:70:c8:57:97:e1:b6:59:51:57:
25:46:95:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABb79TakI+IsvcH3VncoVTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4OWMyNjNlODE4NDg2Y2ZkODMxYzI0NWRkZmFjY2E5MWZi
ZDgxYzAwHhcNMjYwODE0MTgwMTM1WhcNMjYwODE1MTgwMTM1WjAzMTEwLwYDVQQD
Eyg5ZWE4MTQ1ZmM2OGE4MWMyMjU4YTBhOTNjYzQ3ZTQ3MDc4MDNiMDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxGkiyhl5RU1jVwH1zIbrMZH3/hq
yxdL1FaL+UxPCh1auJvAqD7P/K64+Ip6YNcY0p7kMgxz3Jl5DCAFBIAYUKm+3J6V
C6IjkJDqhAGxD9vJC2s56+8DGuVkdOt8iTCvhspLHeo3CZnr0XmflX8kB90gWbfU
eZ/X2BoLFFFWL/WGHyNrEIeRs138dWwXV+ja58OgYSBtSQ0v18xLQkiAo0fQe3IB
eFQ9cV4az4deDO8hNgB8iPPGitYN93UqUBmdcpltwAjAmkFu5dftRzvmmE54wLfk
QjNGtfSp1A0iapEiHkfdQjDxxCY7yZL60RT9hI7g5knFJK6OtQxBIKCdrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ6oFF/GioHCJYoKk8xH5HB4A7CGMB8GA1UdIwQY
MBaAFEicJj6BhIbP2DHCRd36zKkfvYHAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0p3bVBvR0Voc19ZTWNKRjNmck1xUi05Z2NBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8xMTdmYzktN2E2Mi00NjgyLWJmYmMt
MmNhM2FhNzFlYzVmLzEvU0p3bVBvR0Voc19ZTWNKRjNmck1xUi05Z2NBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi8xMTdmYzktN2E2Mi00NjgyLWJmYmMtMmNhM2FhNzFlYzVm
LzEvU0p3bVBvR0Voc19ZTWNKRjNmck1xUi05Z2NBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAImfw0Qvx
iek22SFjZFALVT0MpEJiVdeYbBCTDel6U/sikw1L7b++4UQTc3UO6p+KXY19ZGlX
ZgzWiqP05RrGuetd3440hIhi8zMVWEOh24slL/AfaiJ94+GA0VvKy76LALps/juj
Ii/WzBI5kgEneHY0mCtBY6YFBImRkRkYaPbzHzW6Vy1qogAtsEfmgKytuMEs8DCL
RQwkJagC11RZ2Lnf0osns3jvUNp+RfeDgmebkYUugHhKCWQxnsGLJKTKnIA3gefW
idhsSZxy0M+G7xFsZx9cfo3QF7ylQTzum16mogFSF1B4AtYTNjxhv7Qhv4XacMhX
l+G2WVFXJUaVIA==
-----END CERTIFICATE-----
Generated at Sat Aug 15 03:29:09 2026 by rpki-client