Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
File: SXIqDKi7yU1IpctIzMku_vhFp-M.mft (raw, json)
Hash identifier: gWmdsQz4pqBeH4a9tVhnyAtxX+n8C6TApDr+kqzK0o0=
Subject key identifier: 67:2F:04:AA:80:AD:92:75:86:26:5A:E7:64:4E:70:29:85:E1:B9:95
Authority key identifier: 49:72:2A:0C:A8:BB:C9:4D:48:A5:CB:48:CC:C9:2E:FE:F8:45:A7:E3
Certificate issuer: /CN=49722a0ca8bbc94d48a5cb48ccc92efef845a7e3
Certificate serial: 01A08C0D3E91279B8546A39973C8F741D517
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
Manifest number: 1A05
Signing time: Thu 10 Sep 2026 16:01:13 +0000
Manifest this update: Thu 10 Sep 2026 16:01:13 +0000
Manifest next update: Fri 11 Sep 2026 16:01:13 +0000
Files and hashes: 1: SXIqDKi7yU1IpctIzMku_vhFp-M.crl (hash: 2CsjbUFwWd0eueGSCrVboOni46maHd/BzL+af2XN8Xc=)
2: Y7BflHpDTlEOWh8-FjDosgwANDI.roa (hash: BNh1IcHDcawtVTnT8ZLo5aKLUrVIe97SR3mZxwBAYlo=)
3: kfeH-aHyiZ_llhlDCtwr8YeqKuk.roa (hash: 4qeVrLsRX3PjbQ9N5eaGFDLDZ8tMOqdmxHU/M5zIjWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0d:3e:91:27:9b:85:46:a3:99:73:c8:f7:41:d5:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49722a0ca8bbc94d48a5cb48ccc92efef845a7e3
Validity
Not Before: Sep 10 16:01:13 2026 GMT
Not After : Sep 11 16:01:13 2026 GMT
Subject: CN=672f04aa80ad927586265ae7644e702985e1b995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:05:e5:f9:0d:7c:f1:de:11:02:a1:b8:f6:b8:
da:aa:aa:e0:67:66:91:f2:3c:b5:22:8a:2d:79:2c:
6c:ee:a8:73:68:15:2d:b7:97:6a:3f:68:97:c0:2b:
c6:75:8b:6b:14:a2:c4:be:8c:b4:77:6d:1e:00:b9:
a2:40:9c:4e:91:dd:45:bf:97:f3:89:76:1a:43:e7:
b5:41:9f:ed:51:df:ef:ab:55:31:b3:04:37:a7:8f:
fa:25:54:9d:11:03:51:eb:cd:67:0e:db:67:9a:50:
29:a0:bc:12:29:a3:e8:96:6c:2a:ef:e4:22:da:2e:
03:0b:e4:d3:a4:5e:04:d2:a3:63:2e:90:2f:28:00:
b1:2b:86:aa:53:a5:e3:ef:b5:a6:73:5f:09:37:d0:
63:19:5a:a0:de:55:be:3b:74:81:63:a5:c1:82:78:
af:d4:fc:6d:f1:13:bd:c9:ca:b4:8f:65:1c:7a:0f:
6c:19:de:b8:72:1d:e5:26:38:77:eb:a6:a6:9f:d8:
8a:bc:28:5c:26:3a:d2:dc:f6:27:2a:eb:3b:88:b8:
bc:d5:a3:23:85:4a:9f:72:de:95:32:df:7b:3b:5a:
b3:fd:ce:5c:89:80:f9:a4:97:ff:bf:f9:c0:e3:38:
ff:bf:d8:77:17:e3:90:a6:de:58:70:5a:dc:29:b1:
2d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:2F:04:AA:80:AD:92:75:86:26:5A:E7:64:4E:70:29:85:E1:B9:95
X509v3 Authority Key Identifier:
keyid:49:72:2A:0C:A8:BB:C9:4D:48:A5:CB:48:CC:C9:2E:FE:F8:45:A7:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:be:cd:b4:36:7a:2e:78:1f:b7:9a:94:14:f1:1c:1d:86:91:
94:85:bb:bb:25:8c:1c:ff:4c:92:f8:26:9f:3e:6b:fa:00:c3:
26:98:7d:25:94:b6:b9:2f:7d:89:40:f8:75:a8:a3:6a:c5:1a:
3d:b7:9a:9b:d7:67:75:cd:1a:f9:b1:88:ca:91:59:23:4e:13:
2e:65:c0:3c:63:da:6c:c8:c6:00:a5:69:de:93:ef:13:a1:6a:
8c:e1:5b:f0:25:00:4b:31:f0:fc:4d:11:c5:2b:31:35:f8:3b:
37:3b:7a:32:51:63:11:05:34:28:60:71:b3:ec:29:51:5f:54:
20:49:63:a0:f4:c7:b5:d5:9f:47:6c:b2:b6:4f:35:72:0c:88:
2f:c4:b6:4e:b3:88:8c:3b:32:06:e1:f4:78:aa:3e:e3:68:a9:
d6:b9:28:da:bd:f2:89:23:b3:86:e6:97:a6:bf:85:a6:f8:38:
c8:3a:b3:a0:86:62:82:39:61:99:9b:2e:a4:10:fc:e9:41:34:
1f:07:a3:d9:22:9a:b3:43:ec:c4:04:b8:22:2c:85:96:9b:5c:
63:2a:12:db:a1:d5:f7:03:31:ab:51:7c:ce:78:dd:54:b1:7d:
4a:76:f5:ff:3e:80:06:2b:e5:ee:a1:1a:2f:c8:61:e5:9c:b1:
c8:0f:57:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCMDT6RJ5uFRqOZc8j3QdUXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5NzIyYTBjYThiYmM5NGQ0OGE1Y2I0OGNjYzkyZWZlZjg0
NWE3ZTMwHhcNMjYwOTEwMTYwMTEzWhcNMjYwOTExMTYwMTEzWjAzMTEwLwYDVQQD
Eyg2NzJmMDRhYTgwYWQ5Mjc1ODYyNjVhZTc2NDRlNzAyOTg1ZTFiOTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwXl+Q188d4RAqG49rjaqqrgZ2aR
8jy1IooteSxs7qhzaBUtt5dqP2iXwCvGdYtrFKLEvoy0d20eALmiQJxOkd1Fv5fz
iXYaQ+e1QZ/tUd/vq1UxswQ3p4/6JVSdEQNR681nDttnmlApoLwSKaPolmwq7+Qi
2i4DC+TTpF4E0qNjLpAvKACxK4aqU6Xj77Wmc18JN9BjGVqg3lW+O3SBY6XBgniv
1Pxt8RO9ycq0j2Uceg9sGd64ch3lJjh366amn9iKvChcJjrS3PYnKus7iLi81aMj
hUqfct6VMt97O1qz/c5ciYD5pJf/v/nA4zj/v9h3F+OQpt5YcFrcKbEtDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGcvBKqArZJ1hiZa52ROcCmF4bmVMB8GA1UdIwQY
MBaAFElyKgyou8lNSKXLSMzJLv74RafjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1hJcURLaTd5VTFJcGN0SXpNa3VfdmhGcC1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9lYzUyMDgtZjY5NS00YmRiLTliYjIt
ZTE4ZmE2NTgwNTVhLzEvU1hJcURLaTd5VTFJcGN0SXpNa3VfdmhGcC1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9lYzUyMDgtZjY5NS00YmRiLTliYjItZTE4ZmE2NTgwNTVh
LzEvU1hJcURLaTd5VTFJcGN0SXpNa3VfdmhGcC1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjL7NtDZ6
Lngft5qUFPEcHYaRlIW7uyWMHP9Mkvgmnz5r+gDDJph9JZS2uS99iUD4daijasUa
Pbeam9dndc0a+bGIypFZI04TLmXAPGPabMjGAKVp3pPvE6FqjOFb8CUASzHw/E0R
xSsxNfg7Nzt6MlFjEQU0KGBxs+wpUV9UIEljoPTHtdWfR2yytk81cgyIL8S2TrOI
jDsyBuH0eKo+42ip1rko2r3yiSOzhuaXpr+Fpvg4yDqzoIZigjlhmZsupBD86UE0
Hwej2SKas0PsxAS4IiyFlptcYyoS26HV9wMxq1F8znjdVLF9Snb1/z6ABivl7qEa
L8hh5ZyxyA9Xtg==
-----END CERTIFICATE-----
Generated at Thu Sep 10 18:26:35 2026 by rpki-client