Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft
File: sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft (raw, json)
Hash identifier: MsAx5t2C2t3oJPQCud1k2utgZM1O84U+NaBytmEym8E=
Subject key identifier: 53:72:1A:62:6E:2A:E7:A6:C9:FD:19:6E:51:6E:14:FC:FF:4D:30:06
Authority key identifier: B0:D6:2D:16:66:C5:C4:D1:92:18:35:31:58:4A:FD:72:BE:D0:84:85
Certificate issuer: /CN=b0d62d1666c5c4d192183531584afd72bed08485
Certificate serial: 01A15B1EA1B5EF43523A633AFE154DF91EEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sNYtFmbFxNGSGDUxWEr9cr7QhIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft
Manifest number: 1AB6
Signing time: Tue 20 Oct 2026 21:01:36 +0000
Manifest this update: Tue 20 Oct 2026 21:01:36 +0000
Manifest next update: Wed 21 Oct 2026 21:01:36 +0000
Files and hashes: 1: 6Ie5sPRwouKDZ63tHw4hyjJqq10.roa (hash: XieQfcrAZvNQQrTrpSeqvq6G/q8IwApTZ6vvc3HLXb0=)
2: sNYtFmbFxNGSGDUxWEr9cr7QhIU.crl (hash: HarZLXeMTODe81NT3M+cNgZTXZ/ahk9+Znocm7cXpZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sNYtFmbFxNGSGDUxWEr9cr7QhIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5b:1e:a1:b5:ef:43:52:3a:63:3a:fe:15:4d:f9:1e:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0d62d1666c5c4d192183531584afd72bed08485
Validity
Not Before: Oct 20 21:01:36 2026 GMT
Not After : Oct 21 21:01:36 2026 GMT
Subject: CN=53721a626e2ae7a6c9fd196e516e14fcff4d3006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7c:3a:2c:9d:76:a5:bd:ba:e3:bf:c1:39:0e:
95:3f:20:28:f2:58:a2:df:40:ec:af:88:eb:7c:14:
4e:c6:39:cb:37:2d:79:cb:c9:a1:24:70:9b:18:75:
cf:8e:ba:b9:17:a8:1b:da:66:5b:66:54:be:f9:bd:
e2:b8:20:23:5e:f5:e4:dd:4e:b5:bc:52:89:32:ff:
1c:31:4f:f0:eb:c9:61:e2:08:c8:71:ef:b9:58:96:
5c:fa:d0:a3:17:84:d8:37:e6:f2:5f:0a:c2:89:11:
fe:39:70:f7:fe:62:8e:45:b0:b7:1a:22:2c:ab:60:
e6:9e:5f:13:a1:ad:c4:94:73:2a:c3:78:a8:23:b1:
b1:5f:70:63:85:40:c0:cf:41:d5:60:8d:a0:67:be:
b9:28:22:27:62:1b:93:34:84:32:08:3d:e7:97:b0:
08:2c:04:ba:a3:43:b4:c2:6d:8b:93:c3:fb:ee:51:
f8:a8:c0:49:8e:67:8d:26:e9:13:06:c0:ca:bb:c3:
d2:39:f6:79:82:f2:06:13:c0:1b:ab:29:89:4f:7f:
26:d3:53:cf:73:48:f6:dc:19:4b:3b:b9:13:ae:76:
a3:b9:12:7a:61:b4:5b:25:dd:83:6b:d1:ab:b4:5b:
16:3e:d0:a3:8e:7b:c4:84:2f:cf:bc:c9:29:29:da:
8e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:72:1A:62:6E:2A:E7:A6:C9:FD:19:6E:51:6E:14:FC:FF:4D:30:06
X509v3 Authority Key Identifier:
keyid:B0:D6:2D:16:66:C5:C4:D1:92:18:35:31:58:4A:FD:72:BE:D0:84:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sNYtFmbFxNGSGDUxWEr9cr7QhIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:06:c2:ec:c3:3e:8a:3f:a3:bf:c2:9e:ab:ed:b0:16:b6:de:
0c:5e:e4:e9:8f:31:d4:7e:95:eb:4d:7a:91:92:56:55:68:8b:
1e:8d:ed:16:db:29:6a:73:32:d8:7d:16:70:e2:94:34:0e:b3:
c8:29:99:9a:f9:65:5f:ed:33:f6:75:82:6c:f8:f8:d1:49:5c:
23:07:b8:84:73:a8:45:c2:e9:af:07:62:2e:36:ae:be:3b:ec:
69:ac:14:1a:84:5f:d8:86:c2:c2:57:fa:6b:4f:f3:6c:bb:1c:
3b:4c:5c:9e:4f:63:5c:3e:35:36:84:9a:e2:64:5c:84:65:7e:
6f:cf:af:e6:4d:9d:df:c4:4d:75:17:4c:b2:7d:a3:a0:c0:34:
23:90:d6:d6:55:ca:38:54:b0:aa:30:7e:b3:58:45:72:e0:05:
ca:0e:90:3c:0a:f7:8b:8b:8b:2b:d8:c1:8d:f7:28:f0:12:00:
a7:11:b1:92:1d:85:65:83:ab:e1:b4:52:31:1d:1c:2a:a7:b9:
33:f4:0f:f5:c2:f5:bf:09:3f:69:59:09:2c:1a:84:1d:7d:52:
13:7b:3b:44:0f:ed:97:a7:11:57:52:ab:4f:53:ce:75:80:fa:
14:46:8b:6a:eb:bb:39:f8:15:ea:ae:cb:07:31:a1:e0:88:00:
13:af:e4:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFbHqG170NSOmM6/hVN+R7sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwZDYyZDE2NjZjNWM0ZDE5MjE4MzUzMTU4NGFmZDcyYmVk
MDg0ODUwHhcNMjYxMDIwMjEwMTM2WhcNMjYxMDIxMjEwMTM2WjAzMTEwLwYDVQQD
Eyg1MzcyMWE2MjZlMmFlN2E2YzlmZDE5NmU1MTZlMTRmY2ZmNGQzMDA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXw6LJ12pb2647/BOQ6VPyAo8lii
30Dsr4jrfBROxjnLNy15y8mhJHCbGHXPjrq5F6gb2mZbZlS++b3iuCAjXvXk3U61
vFKJMv8cMU/w68lh4gjIce+5WJZc+tCjF4TYN+byXwrCiRH+OXD3/mKORbC3GiIs
q2Dmnl8Toa3ElHMqw3ioI7GxX3BjhUDAz0HVYI2gZ765KCInYhuTNIQyCD3nl7AI
LAS6o0O0wm2Lk8P77lH4qMBJjmeNJukTBsDKu8PSOfZ5gvIGE8AbqymJT38m01PP
c0j23BlLO7kTrnajuRJ6YbRbJd2Da9GrtFsWPtCjjnvEhC/PvMkpKdqOtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFNyGmJuKuemyf0ZblFuFPz/TTAGMB8GA1UdIwQY
MBaAFLDWLRZmxcTRkhg1MVhK/XK+0ISFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc05ZdEZtYkZ4TkdTR0RVeFdFcjljcjdRaElVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9iNGFhNjMtNDI1OS00NGU2LWFjMjkt
NGZhNTNiZjBlMTU1LzEvc05ZdEZtYkZ4TkdTR0RVeFdFcjljcjdRaElVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9iNGFhNjMtNDI1OS00NGU2LWFjMjktNGZhNTNiZjBlMTU1
LzEvc05ZdEZtYkZ4TkdTR0RVeFdFcjljcjdRaElVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKwbC7MM+
ij+jv8Keq+2wFrbeDF7k6Y8x1H6V6016kZJWVWiLHo3tFtspanMy2H0WcOKUNA6z
yCmZmvllX+0z9nWCbPj40UlcIwe4hHOoRcLprwdiLjauvjvsaawUGoRf2IbCwlf6
a0/zbLscO0xcnk9jXD41NoSa4mRchGV+b8+v5k2d38RNdRdMsn2joMA0I5DW1lXK
OFSwqjB+s1hFcuAFyg6QPAr3i4uLK9jBjfco8BIApxGxkh2FZYOr4bRSMR0cKqe5
M/QP9cL1vwk/aVkJLBqEHX1SE3s7RA/tl6cRV1KrT1POdYD6FEaLauu7OfgV6q7L
BzGh4IgAE6/k9g==
-----END CERTIFICATE-----
Generated at Wed Oct 21 03:14:32 2026 by rpki-client