Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.mft
File: SAqutTeS1SAWm84oDD3Yb4N27GM.mft (raw, json)
Hash identifier: 7zdHf9GBLW4hHpIKXW9AnCvvDSWa+Zrk7hGqNX6X108=
Subject key identifier: 8B:6D:40:E5:E6:F2:8B:87:23:B7:2F:55:EF:65:53:7A:07:89:1B:1C
Authority key identifier: 48:0A:AE:B5:37:92:D5:20:16:9B:CE:28:0C:3D:D8:6F:83:76:EC:63
Certificate issuer: /CN=480aaeb53792d520169bce280c3dd86f8376ec63
Certificate serial: 019DA45394CB8A30299C7627EFD9AD3F695A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAqutTeS1SAWm84oDD3Yb4N27GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.mft
Manifest number: 18C7
Signing time: Sun 19 Apr 2026 06:00:34 +0000
Manifest this update: Sun 19 Apr 2026 06:00:34 +0000
Manifest next update: Mon 20 Apr 2026 06:00:34 +0000
Files and hashes: 1: 9tvrLOuk22Ddo6KLDQ-Y3Q9IR10.roa (hash: Rswszywt1klmr2sfCBkXn3BlffpWK6hyUCobDy1eOZ0=)
2: SAqutTeS1SAWm84oDD3Yb4N27GM.crl (hash: Ky4eoe6dXrqoarUdMwPsUzZDl8dYPV76s+j2HiIt7Kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAqutTeS1SAWm84oDD3Yb4N27GM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:94:cb:8a:30:29:9c:76:27:ef:d9:ad:3f:69:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480aaeb53792d520169bce280c3dd86f8376ec63
Validity
Not Before: Apr 19 06:00:34 2026 GMT
Not After : Apr 20 06:00:34 2026 GMT
Subject: CN=8b6d40e5e6f28b8723b72f55ef65537a07891b1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:39:04:da:b2:ca:08:6d:70:f3:ba:1e:bd:fb:
22:15:2b:a9:b3:0a:9f:32:63:41:72:67:52:6a:de:
bc:33:61:4b:82:d8:47:68:e5:91:5f:f5:14:56:b8:
95:5d:5e:5f:74:85:b9:2b:82:45:45:eb:aa:b9:e3:
21:4c:31:7e:39:a5:3a:df:e0:a9:c8:52:86:a1:ae:
b3:d1:9e:af:35:0b:5c:24:21:3e:2a:a4:45:8e:06:
58:99:49:df:3b:15:a2:e0:39:c4:6b:e9:d0:e6:4f:
71:88:d5:32:f0:af:46:38:67:03:ee:00:de:83:f2:
f2:84:22:cc:3c:72:d9:c9:16:86:15:5f:38:e1:f4:
2b:f4:46:59:27:99:90:ca:7f:51:0d:20:97:f9:45:
07:e5:d1:de:92:bf:c6:30:91:ea:f4:57:4b:4b:88:
c7:31:a2:ea:e1:5a:8e:18:95:df:70:b2:73:b6:97:
97:95:31:9a:85:c0:08:95:94:00:89:e8:a1:68:79:
ce:c9:71:d4:04:a6:51:3d:7e:61:16:68:d0:be:eb:
5a:7b:cb:ae:ef:2c:db:6b:4e:7b:45:0a:aa:5d:18:
f6:f2:1b:26:b1:ae:db:c6:b7:c0:3a:55:85:45:df:
a4:a5:32:0d:4c:43:95:9f:ee:98:2a:20:4b:e5:cc:
23:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:6D:40:E5:E6:F2:8B:87:23:B7:2F:55:EF:65:53:7A:07:89:1B:1C
X509v3 Authority Key Identifier:
keyid:48:0A:AE:B5:37:92:D5:20:16:9B:CE:28:0C:3D:D8:6F:83:76:EC:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAqutTeS1SAWm84oDD3Yb4N27GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:c6:b0:4b:f5:b3:0e:07:3a:f4:4e:88:d2:d0:fa:3d:32:42:
d1:1a:91:57:d1:c7:12:b1:0f:27:85:bb:0f:6c:26:9f:c9:eb:
1e:b4:21:e2:92:6e:23:22:83:f8:70:e1:d2:d3:34:46:16:71:
bb:ee:9a:23:42:91:8e:e6:a0:38:30:9c:e5:43:b7:c1:5e:8e:
6a:1d:e8:82:b9:f5:48:c7:7b:0b:5c:60:6a:b6:d0:9b:b7:b3:
6e:b4:d7:73:8e:25:e0:28:6b:5d:6d:43:51:fb:4d:0f:54:22:
15:a6:b4:96:64:3b:dd:68:7a:69:f1:18:ea:ab:ae:2e:34:fc:
f0:a9:f4:bb:74:19:78:8d:5d:50:0c:78:ba:51:1a:81:c7:72:
d6:89:3c:dc:b1:05:63:94:4a:ce:32:23:c1:6f:f5:5d:76:d7:
d3:0d:45:9c:ed:e5:a7:87:2f:df:03:9a:a5:6a:d4:3e:7b:1f:
e1:04:f7:26:35:60:3f:52:88:50:a2:ca:fe:f2:5c:68:b3:90:
6a:f0:d5:4d:aa:0f:01:d8:08:68:d4:9c:a3:55:72:9e:44:10:
be:8b:56:a0:4e:8c:8b:0d:33:18:e9:dc:c9:76:ad:7b:3b:14:
68:4d:4c:69:2b:de:bb:0b:a3:e5:16:df:1c:e8:ed:a4:5c:8c:
34:08:62:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kU5TLijApnHYn79mtP2laMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MGFhZWI1Mzc5MmQ1MjAxNjliY2UyODBjM2RkODZmODM3
NmVjNjMwHhcNMjYwNDE5MDYwMDM0WhcNMjYwNDIwMDYwMDM0WjAzMTEwLwYDVQQD
Eyg4YjZkNDBlNWU2ZjI4Yjg3MjNiNzJmNTVlZjY1NTM3YTA3ODkxYjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7TkE2rLKCG1w87oevfsiFSupswqf
MmNBcmdSat68M2FLgthHaOWRX/UUVriVXV5fdIW5K4JFReuqueMhTDF+OaU63+Cp
yFKGoa6z0Z6vNQtcJCE+KqRFjgZYmUnfOxWi4DnEa+nQ5k9xiNUy8K9GOGcD7gDe
g/LyhCLMPHLZyRaGFV844fQr9EZZJ5mQyn9RDSCX+UUH5dHekr/GMJHq9FdLS4jH
MaLq4VqOGJXfcLJztpeXlTGahcAIlZQAieihaHnOyXHUBKZRPX5hFmjQvutae8uu
7yzba057RQqqXRj28hsmsa7bxrfAOlWFRd+kpTINTEOVn+6YKiBL5cwjOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIttQOXm8ouHI7cvVe9lU3oHiRscMB8GA1UdIwQY
MBaAFEgKrrU3ktUgFpvOKAw92G+DduxjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0FxdXRUZVMxU0FXbTg0b0REM1liNE4yN0dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8zZDU3OWYtODE1YS00NDZlLThlZDkt
ZDE2NjkxYWQ2OWZhLzEvU0FxdXRUZVMxU0FXbTg0b0REM1liNE4yN0dNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi8zZDU3OWYtODE1YS00NDZlLThlZDktZDE2NjkxYWQ2OWZh
LzEvU0FxdXRUZVMxU0FXbTg0b0REM1liNE4yN0dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC8awS/Wz
Dgc69E6I0tD6PTJC0RqRV9HHErEPJ4W7D2wmn8nrHrQh4pJuIyKD+HDh0tM0RhZx
u+6aI0KRjuagODCc5UO3wV6Oah3ogrn1SMd7C1xgarbQm7ezbrTXc44l4ChrXW1D
UftND1QiFaa0lmQ73Wh6afEY6quuLjT88Kn0u3QZeI1dUAx4ulEagcdy1ok83LEF
Y5RKzjIjwW/1XXbX0w1FnO3lp4cv3wOapWrUPnsf4QT3JjVgP1KIUKLK/vJcaLOQ
avDVTaoPAdgIaNSco1VynkQQvotWoE6Miw0zGOncyXatezsUaE1MaSveuwuj5Rbf
HOjtpFyMNAhi6g==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:48:56 2026 by rpki-client