Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/727267-421a-404b-9523-7285814344f3/1/SACbRi9GjH0BDdZBirzzFxK-Qyc.mft
File: SACbRi9GjH0BDdZBirzzFxK-Qyc.mft (raw, json)
Hash identifier: cDuCjJak0i29QcXtO1rTp2EXfU9JgA+/5M9NA/n2oz0=
Subject key identifier: A3:9C:38:12:53:19:8B:9E:3A:BB:2E:E9:8C:A2:7A:07:9A:F2:60:70
Authority key identifier: 48:00:9B:46:2F:46:8C:7D:01:0D:D6:41:8A:BC:F3:17:12:BE:43:27
Certificate issuer: /CN=48009b462f468c7d010dd6418abcf31712be4327
Certificate serial: 019FA90788AC1367AAA4F95F284763873DC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SACbRi9GjH0BDdZBirzzFxK-Qyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/727267-421a-404b-9523-7285814344f3/1/SACbRi9GjH0BDdZBirzzFxK-Qyc.mft
Manifest number: 12
Signing time: Tue 28 Jul 2026 14:01:11 +0000
Manifest this update: Tue 28 Jul 2026 14:01:11 +0000
Manifest next update: Wed 29 Jul 2026 14:01:11 +0000
Files and hashes: 1: QdmsIR_q76JEoiyIRUyIsIHre10.asa (hash: 5MqEaP2FsZvCce/Q2ZTtgOm7FxKQwr5pUd+B+FL4hhA=)
2: SACbRi9GjH0BDdZBirzzFxK-Qyc.crl (hash: OxAwnVLuZjKzi3tVd3meOL1pjIrUMlpwZvsYLythEtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/727267-421a-404b-9523-7285814344f3/1/SACbRi9GjH0BDdZBirzzFxK-Qyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/727267-421a-404b-9523-7285814344f3/1/SACbRi9GjH0BDdZBirzzFxK-Qyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SACbRi9GjH0BDdZBirzzFxK-Qyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:88:ac:13:67:aa:a4:f9:5f:28:47:63:87:3d:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48009b462f468c7d010dd6418abcf31712be4327
Validity
Not Before: Jul 28 14:01:11 2026 GMT
Not After : Jul 29 14:01:11 2026 GMT
Subject: CN=a39c381253198b9e3abb2ee98ca27a079af26070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ec:88:b0:9d:14:98:6b:b3:95:35:09:66:dd:
fd:8a:ab:3b:a7:b2:90:b6:a7:cb:18:3c:c6:e4:b1:
5f:af:7e:bb:2f:d7:e2:85:07:4d:2f:82:1d:6f:91:
e7:d5:66:b4:68:3e:bb:21:13:dc:bf:39:c9:34:aa:
76:03:bb:95:47:31:1c:0b:fc:f0:2b:fb:af:9d:f9:
08:75:34:59:85:c7:27:4e:a3:e9:db:0a:ef:1a:44:
8b:19:88:ad:45:0f:5c:09:1f:27:a9:c2:e2:0b:0c:
90:3c:f3:dc:ea:e1:fc:4e:a9:cf:5e:80:43:75:87:
a9:24:05:34:12:9f:b7:ce:3c:b5:f2:ed:93:c2:9b:
5b:92:30:c3:72:c6:11:23:f3:15:91:0c:55:6b:b9:
c6:a0:61:bc:cd:9c:d5:6d:fc:1a:f2:6a:11:44:e4:
29:03:5c:b1:ba:c4:bf:e2:03:de:1e:ec:ed:b8:2d:
1b:0b:1c:7a:69:85:11:59:d5:de:7a:15:44:7b:46:
62:91:f9:6f:5d:4c:df:89:43:01:68:40:3a:f6:4f:
8a:a7:db:1a:a9:8f:d2:c7:5f:32:11:62:2d:4b:e8:
e9:36:48:9d:50:ba:c6:ce:af:ac:02:9e:c2:b4:6f:
dd:3a:04:81:e5:9d:bd:00:df:f9:05:a0:01:5f:a0:
12:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:9C:38:12:53:19:8B:9E:3A:BB:2E:E9:8C:A2:7A:07:9A:F2:60:70
X509v3 Authority Key Identifier:
keyid:48:00:9B:46:2F:46:8C:7D:01:0D:D6:41:8A:BC:F3:17:12:BE:43:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SACbRi9GjH0BDdZBirzzFxK-Qyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/727267-421a-404b-9523-7285814344f3/1/SACbRi9GjH0BDdZBirzzFxK-Qyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/727267-421a-404b-9523-7285814344f3/1/SACbRi9GjH0BDdZBirzzFxK-Qyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:73:fa:44:d1:ed:77:62:c5:ee:a0:2c:57:c8:98:ea:fd:1b:
54:83:70:11:95:58:05:11:15:75:47:1e:21:34:3e:44:ec:d9:
eb:14:c3:3e:7a:2c:64:44:35:b3:9b:d4:f4:1e:88:54:a8:86:
7a:e1:75:7d:6f:5f:bc:9a:f0:5f:93:cf:e8:83:c4:03:94:26:
d3:3f:6d:4f:58:79:73:b5:1d:e3:4b:eb:f8:bc:39:82:dc:19:
0b:1f:69:a7:2d:5d:00:2d:50:94:dc:e0:81:66:aa:00:3d:1a:
75:80:ef:9f:92:ca:35:f2:a6:70:f9:a5:c4:84:4a:ff:58:9a:
3e:f1:2c:89:1c:50:4d:96:af:93:d9:f1:09:91:db:b2:cf:48:
db:98:13:f4:78:48:df:cf:5c:2d:34:7c:c6:0b:3e:4c:b1:29:
9b:ce:c2:fa:63:44:c2:bb:e1:a4:ae:95:5f:cf:89:51:05:e9:
3e:22:9b:dd:3c:43:3a:22:f1:98:13:46:9a:7d:a0:e5:b2:da:
2a:6c:4c:2c:f7:bb:6d:6a:80:7b:78:14:2f:f7:0a:5c:1e:4d:
43:aa:d2:3c:53:c9:0a:db:1e:0b:b0:ed:0e:e4:a8:45:db:9a:
a1:5d:7e:3d:4a:b5:32:eb:07:03:99:8c:e9:a9:ef:8a:10:b5:
d3:97:69:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pB4isE2eqpPlfKEdjhz3GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MDA5YjQ2MmY0NjhjN2QwMTBkZDY0MThhYmNmMzE3MTJi
ZTQzMjcwHhcNMjYwNzI4MTQwMTExWhcNMjYwNzI5MTQwMTExWjAzMTEwLwYDVQQD
EyhhMzljMzgxMjUzMTk4YjllM2FiYjJlZTk4Y2EyN2EwNzlhZjI2MDcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+yIsJ0UmGuzlTUJZt39iqs7p7KQ
tqfLGDzG5LFfr367L9fihQdNL4Idb5Hn1Wa0aD67IRPcvznJNKp2A7uVRzEcC/zw
K/uvnfkIdTRZhccnTqPp2wrvGkSLGYitRQ9cCR8nqcLiCwyQPPPc6uH8TqnPXoBD
dYepJAU0Ep+3zjy18u2TwptbkjDDcsYRI/MVkQxVa7nGoGG8zZzVbfwa8moRROQp
A1yxusS/4gPeHuztuC0bCxx6aYURWdXeehVEe0ZikflvXUzfiUMBaEA69k+Kp9sa
qY/Sx18yEWItS+jpNkidULrGzq+sAp7CtG/dOgSB5Z29AN/5BaABX6ASwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKOcOBJTGYueOrsu6Yyiegea8mBwMB8GA1UdIwQY
MBaAFEgAm0YvRox9AQ3WQYq88xcSvkMnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0FDYlJpOUdqSDBCRGRaQmlyenpGeEstUXljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi83MjcyNjctNDIxYS00MDRiLTk1MjMt
NzI4NTgxNDM0NGYzLzEvU0FDYlJpOUdqSDBCRGRaQmlyenpGeEstUXljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi83MjcyNjctNDIxYS00MDRiLTk1MjMtNzI4NTgxNDM0NGYz
LzEvU0FDYlJpOUdqSDBCRGRaQmlyenpGeEstUXljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAonP6RNHt
d2LF7qAsV8iY6v0bVINwEZVYBREVdUceITQ+ROzZ6xTDPnosZEQ1s5vU9B6IVKiG
euF1fW9fvJrwX5PP6IPEA5Qm0z9tT1h5c7Ud40vr+Lw5gtwZCx9ppy1dAC1QlNzg
gWaqAD0adYDvn5LKNfKmcPmlxIRK/1iaPvEsiRxQTZavk9nxCZHbss9I25gT9HhI
389cLTR8xgs+TLEpm87C+mNEwrvhpK6VX8+JUQXpPiKb3TxDOiLxmBNGmn2g5bLa
KmxMLPe7bWqAe3gUL/cKXB5NQ6rSPFPJCtseC7DtDuSoRduaoV1+PUq1MusHA5mM
6anvihC105dpcw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:05:28 2026 by rpki-client