Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.mft
File: SAw7k_8qNPv6WuglVvZwNAy11ck.mft (raw, json)
Hash identifier: FYWfnXAy5Gr/uJvxaMUCGYHEvI47CrPBGcV1+Q3HvCw=
Subject key identifier: 6F:88:90:79:0F:7B:AB:DF:14:4A:A7:A3:02:97:41:B2:12:E3:F2:DF
Authority key identifier: 48:0C:3B:93:FF:2A:34:FB:FA:5A:E8:25:56:F6:70:34:0C:B5:D5:C9
Certificate issuer: /CN=480c3b93ff2a34fbfa5ae82556f670340cb5d5c9
Certificate serial: 01A124D49409F8643F1BC6750B24EFE4ADCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAw7k_8qNPv6WuglVvZwNAy11ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.mft
Manifest number: 1A98
Signing time: Sat 10 Oct 2026 08:01:13 +0000
Manifest this update: Sat 10 Oct 2026 08:01:13 +0000
Manifest next update: Sun 11 Oct 2026 08:01:13 +0000
Files and hashes: 1: O0d4AJLZUHgcGy1VxJh3yfRZ8JM.roa (hash: mRjHVDH2yxnkGdxPRkyTQ4ZPW9vJVfEatCU81GhzSgo=)
2: SAw7k_8qNPv6WuglVvZwNAy11ck.crl (hash: aap/F2GpVq+sDEjcq+HLq2ABabGoTtIwkpGAyJG+uhQ=)
3: qaQdus1BOleDA5YBatWLdmpF4V8.roa (hash: qoEh+iI2D1MSwoWJBnblgqwJNtj9VkryalvSfDPlSuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAw7k_8qNPv6WuglVvZwNAy11ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 08:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:24:d4:94:09:f8:64:3f:1b:c6:75:0b:24:ef:e4:ad:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480c3b93ff2a34fbfa5ae82556f670340cb5d5c9
Validity
Not Before: Oct 10 08:01:13 2026 GMT
Not After : Oct 11 08:01:13 2026 GMT
Subject: CN=6f8890790f7babdf144aa7a3029741b212e3f2df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c2:12:1f:5c:88:cd:68:d9:41:93:ab:2b:2f:
ca:57:15:0d:76:0c:b0:d6:5f:f8:87:c5:c7:2d:07:
4a:f2:00:63:49:0e:3e:59:46:5c:58:59:17:25:74:
72:e3:f6:0b:54:be:4b:f4:93:aa:a8:91:2e:dd:47:
4e:9f:2f:42:11:85:af:82:ad:7b:f1:06:13:30:c2:
8e:50:90:ec:d4:ed:b5:3d:f8:a0:c1:58:09:e1:e0:
c6:a2:bf:94:83:f4:f9:f1:ea:85:8c:70:7a:46:d6:
31:0a:11:0d:99:e4:fa:2b:bb:e6:bf:55:18:dd:cf:
6e:39:d1:3a:a6:e2:c9:df:19:dd:4a:aa:3d:68:51:
ce:a9:aa:4b:ef:ec:f0:99:3d:e4:ab:4e:b2:68:4a:
43:eb:08:58:9e:76:14:a6:b5:9d:13:24:a1:bb:fd:
cf:00:0b:39:83:7d:98:28:98:9c:b9:92:92:0b:27:
58:de:df:a3:41:de:67:2b:2b:da:91:ae:4b:77:5e:
7e:47:e0:84:03:58:8e:2d:90:73:a2:e2:b9:7a:d1:
68:29:da:17:c9:2f:50:72:fd:25:fa:58:bd:d4:2d:
a3:56:f5:dc:59:fb:d7:9c:8e:b7:4b:ed:87:f4:92:
99:d9:85:95:16:ae:81:6e:3e:66:1e:8a:2d:3d:01:
63:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:88:90:79:0F:7B:AB:DF:14:4A:A7:A3:02:97:41:B2:12:E3:F2:DF
X509v3 Authority Key Identifier:
keyid:48:0C:3B:93:FF:2A:34:FB:FA:5A:E8:25:56:F6:70:34:0C:B5:D5:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAw7k_8qNPv6WuglVvZwNAy11ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:58:81:52:5d:00:1a:6f:b8:a5:d6:21:f0:b9:d0:bf:ea:f9:
f2:93:6e:1e:c0:d9:b4:09:26:06:38:14:db:a8:c6:39:dd:93:
5a:77:c3:11:84:d4:bd:31:e0:6e:20:63:1b:10:14:8b:d5:bd:
d0:2c:c6:ff:35:ee:ae:70:b5:57:c5:3e:41:72:91:4b:ce:91:
ab:65:1c:82:bd:0e:ec:d0:dd:ce:c7:82:bc:35:5b:36:73:3a:
b6:67:65:f3:0e:86:da:e7:e7:bf:46:d6:09:4c:55:9a:ec:68:
0e:16:1e:1a:90:a0:11:8a:dd:0d:d9:79:6c:74:d4:2a:ea:05:
89:79:09:5c:cd:d0:72:b2:26:d1:46:41:b5:1c:1d:4e:5e:a3:
82:24:79:b8:33:4b:d3:f8:f2:bf:d5:dc:b1:8c:74:04:75:6e:
a0:39:bb:ab:d2:88:38:80:7f:16:87:e7:8f:69:b6:91:77:fa:
8c:8d:a0:7e:f1:ab:c1:fc:c6:c3:61:e6:14:5d:2a:ae:7c:86:
3a:39:5f:52:c7:d2:4d:de:e5:b1:7e:10:19:df:ee:5f:18:c7:
4c:3c:9d:df:f4:87:2f:89:40:c8:fc:96:b5:a3:e0:a1:30:e2:
ce:55:9a:3b:e5:83:ae:a2:d0:7b:60:37:0d:d5:16:e3:2c:ad:
16:19:ee:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEk1JQJ+GQ/G8Z1CyTv5K3NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MGMzYjkzZmYyYTM0ZmJmYTVhZTgyNTU2ZjY3MDM0MGNi
NWQ1YzkwHhcNMjYxMDEwMDgwMTEzWhcNMjYxMDExMDgwMTEzWjAzMTEwLwYDVQQD
Eyg2Zjg4OTA3OTBmN2JhYmRmMTQ0YWE3YTMwMjk3NDFiMjEyZTNmMmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4cISH1yIzWjZQZOrKy/KVxUNdgyw
1l/4h8XHLQdK8gBjSQ4+WUZcWFkXJXRy4/YLVL5L9JOqqJEu3UdOny9CEYWvgq17
8QYTMMKOUJDs1O21PfigwVgJ4eDGor+Ug/T58eqFjHB6RtYxChENmeT6K7vmv1UY
3c9uOdE6puLJ3xndSqo9aFHOqapL7+zwmT3kq06yaEpD6whYnnYUprWdEyShu/3P
AAs5g32YKJicuZKSCydY3t+jQd5nKyvaka5Ld15+R+CEA1iOLZBzouK5etFoKdoX
yS9Qcv0l+li91C2jVvXcWfvXnI63S+2H9JKZ2YWVFq6Bbj5mHootPQFjBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG+IkHkPe6vfFEqnowKXQbIS4/LfMB8GA1UdIwQY
MBaAFEgMO5P/KjT7+lroJVb2cDQMtdXJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0F3N2tfOHFOUHY2V3VnbFZ2WndOQXkxMWNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8xODAwYTQtNTBmYy00ZmY4LTllMzYt
NDljNmZkYmJhZmI3LzEvU0F3N2tfOHFOUHY2V3VnbFZ2WndOQXkxMWNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8xODAwYTQtNTBmYy00ZmY4LTllMzYtNDljNmZkYmJhZmI3
LzEvU0F3N2tfOHFOUHY2V3VnbFZ2WndOQXkxMWNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHFiBUl0A
Gm+4pdYh8LnQv+r58pNuHsDZtAkmBjgU26jGOd2TWnfDEYTUvTHgbiBjGxAUi9W9
0CzG/zXurnC1V8U+QXKRS86Rq2Ucgr0O7NDdzseCvDVbNnM6tmdl8w6G2ufnv0bW
CUxVmuxoDhYeGpCgEYrdDdl5bHTUKuoFiXkJXM3QcrIm0UZBtRwdTl6jgiR5uDNL
0/jyv9XcsYx0BHVuoDm7q9KIOIB/Fofnj2m2kXf6jI2gfvGrwfzGw2HmFF0qrnyG
OjlfUsfSTd7lsX4QGd/uXxjHTDyd3/SHL4lAyPyWtaPgoTDizlWaO+WDrqLQe2A3
DdUW4yytFhnuRw==
-----END CERTIFICATE-----
Generated at Sat Oct 10 17:25:57 2026 by rpki-client