Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
File: S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft (raw, json)
Hash identifier: ER7Oh8XxMYxRO0vTaDblVBo33mdQVYaMSMTwtsl4pCg=
Subject key identifier: D0:9A:E7:4D:1B:CB:83:70:D4:C3:16:C0:08:12:D6:37:5B:2E:38:40
Authority key identifier: 4B:48:CF:14:6B:4C:73:D2:74:09:6D:70:57:08:D2:4B:72:93:29:F8
Certificate issuer: /CN=4b48cf146b4c73d274096d705708d24b729329f8
Certificate serial: 01A0E218EE2C67766FFD7801E5EFE8E88D02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
Manifest number: 1A97
Signing time: Sun 27 Sep 2026 09:01:19 +0000
Manifest this update: Sun 27 Sep 2026 09:01:19 +0000
Manifest next update: Mon 28 Sep 2026 09:01:19 +0000
Files and hashes: 1: 3Vx1cnLpiAfNCzWy0I3_nXPcC9M.roa (hash: p+noQvGX+yQD2XLqg2x5Tru3ct/yVQ6G5E/ulPipjjA=)
2: H-3bQ-7Lc-BNSgANmO6MHSsPLSs.roa (hash: F2USW61FAReCMbWyEgVR2l80hK+ZfBgaE66ET3G7sBk=)
3: PQkXJQC844XrblWqXSwmAqWUi64.roa (hash: 2cLFr6U2XYR9sr+N19r2/hYJ/Yi/7BSVRT7pLcifiQg=)
4: S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl (hash: rXjqRtT0v4NT8jYi6Wkx/kB2hazbx002HVaWWFh3oWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 09:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:18:ee:2c:67:76:6f:fd:78:01:e5:ef:e8:e8:8d:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b48cf146b4c73d274096d705708d24b729329f8
Validity
Not Before: Sep 27 09:01:19 2026 GMT
Not After : Sep 28 09:01:19 2026 GMT
Subject: CN=d09ae74d1bcb8370d4c316c00812d6375b2e3840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:52:78:c1:2b:19:b5:9b:47:ae:1b:3b:e8:54:
ba:6d:0d:79:5f:56:a6:93:84:70:e9:b2:c0:3e:6b:
47:6d:6c:7d:ee:dc:8f:c3:b7:77:cd:19:93:cf:6c:
30:13:77:f8:d2:2b:74:8a:e5:00:e5:10:e9:f9:de:
b1:1f:da:c2:92:63:59:6c:57:28:eb:24:ca:3b:7c:
ea:35:24:c0:a3:4f:a8:26:4f:16:77:c9:6e:15:b7:
b2:26:70:ea:66:ec:6b:28:8c:2a:80:b9:6f:53:f8:
6f:b6:97:39:2a:d6:cd:df:73:8c:55:73:15:22:57:
38:81:6b:e5:98:63:22:c8:bf:72:a0:8c:33:cb:08:
3f:2c:be:eb:a4:b2:0b:14:e1:24:da:d2:19:aa:4e:
ea:12:80:75:0a:e4:a2:bb:c8:a2:5c:71:97:1e:4f:
66:b7:04:cd:0e:0d:39:e5:a8:49:f2:5f:a5:d5:2a:
d5:f4:cd:e5:8c:70:4c:4d:3b:c7:07:5a:3b:a2:08:
ed:7c:28:0b:1c:9e:e9:3d:30:67:6b:53:5d:5f:ee:
4d:80:13:52:2a:00:0d:b2:1a:f4:5f:02:c3:bb:13:
5e:d8:68:61:26:e5:42:79:52:ef:6c:b7:8a:76:dc:
e4:34:1f:01:0c:89:e0:d9:2f:ed:4f:1d:15:d1:fe:
6e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:9A:E7:4D:1B:CB:83:70:D4:C3:16:C0:08:12:D6:37:5B:2E:38:40
X509v3 Authority Key Identifier:
keyid:4B:48:CF:14:6B:4C:73:D2:74:09:6D:70:57:08:D2:4B:72:93:29:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:f5:a0:63:4f:5e:56:af:a4:71:d4:6d:c3:ea:41:7b:a6:ae:
58:4a:eb:58:be:62:31:d2:b5:e4:5d:23:58:84:99:01:81:88:
5b:7b:fe:12:1f:ae:f4:1a:93:83:48:b9:28:aa:10:37:ec:82:
6c:98:c4:dc:fd:83:94:74:f7:f2:ac:5a:f1:2a:c8:dd:7c:4e:
ad:42:f0:80:d1:76:cd:53:32:5d:1a:aa:d6:79:c9:44:50:84:
97:10:44:6c:49:62:cf:77:35:0a:84:42:4c:5b:cc:8a:6e:ec:
e8:45:e3:3c:97:0c:84:62:d4:66:8c:a3:82:d6:02:e0:b6:01:
19:ce:6b:ad:32:7b:f9:f5:bf:92:17:8d:39:02:d1:8a:e2:d2:
68:1c:f1:79:03:2a:15:ee:05:76:dd:89:fa:cb:b0:3b:d8:82:
75:85:7e:cc:eb:3b:d3:88:da:63:f8:94:48:1a:3f:ef:3a:b6:
bd:68:e8:52:24:4f:4a:0a:1f:3a:6f:18:68:eb:0e:b3:f7:f1:
8d:e0:78:dd:6c:04:e3:4c:07:2a:b0:bd:82:1a:63:2d:3e:cd:
5e:0b:ae:f3:18:2b:d1:1d:c9:38:a6:7c:75:e2:c3:8d:b1:b0:
73:97:3a:42:7f:fe:a1:89:9e:f8:2b:36:5f:fe:39:7f:ac:5e:
10:63:b8:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDiGO4sZ3Zv/XgB5e/o6I0CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiNDhjZjE0NmI0YzczZDI3NDA5NmQ3MDU3MDhkMjRiNzI5
MzI5ZjgwHhcNMjYwOTI3MDkwMTE5WhcNMjYwOTI4MDkwMTE5WjAzMTEwLwYDVQQD
EyhkMDlhZTc0ZDFiY2I4MzcwZDRjMzE2YzAwODEyZDYzNzViMmUzODQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlJ4wSsZtZtHrhs76FS6bQ15X1am
k4Rw6bLAPmtHbWx97tyPw7d3zRmTz2wwE3f40it0iuUA5RDp+d6xH9rCkmNZbFco
6yTKO3zqNSTAo0+oJk8Wd8luFbeyJnDqZuxrKIwqgLlvU/hvtpc5KtbN33OMVXMV
Ilc4gWvlmGMiyL9yoIwzywg/LL7rpLILFOEk2tIZqk7qEoB1CuSiu8iiXHGXHk9m
twTNDg055ahJ8l+l1SrV9M3ljHBMTTvHB1o7ogjtfCgLHJ7pPTBna1NdX+5NgBNS
KgANshr0XwLDuxNe2GhhJuVCeVLvbLeKdtzkNB8BDIng2S/tTx0V0f5uYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNCa500by4Nw1MMWwAgS1jdbLjhAMB8GA1UdIwQY
MBaAFEtIzxRrTHPSdAltcFcI0ktykyn4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzBqUEZHdE1jOUowQ1cxd1Z3alNTM0tUS2ZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8zYmJiNTItMzkzZS00NzYyLWE3MGMt
NjRhNmEwNWI5OTA1LzEvUzBqUEZHdE1jOUowQ1cxd1Z3alNTM0tUS2ZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8zYmJiNTItMzkzZS00NzYyLWE3MGMtNjRhNmEwNWI5OTA1
LzEvUzBqUEZHdE1jOUowQ1cxd1Z3alNTM0tUS2ZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdPWgY09e
Vq+kcdRtw+pBe6auWErrWL5iMdK15F0jWISZAYGIW3v+Eh+u9BqTg0i5KKoQN+yC
bJjE3P2DlHT38qxa8SrI3XxOrULwgNF2zVMyXRqq1nnJRFCElxBEbEliz3c1CoRC
TFvMim7s6EXjPJcMhGLUZoyjgtYC4LYBGc5rrTJ7+fW/kheNOQLRiuLSaBzxeQMq
Fe4Fdt2J+suwO9iCdYV+zOs704jaY/iUSBo/7zq2vWjoUiRPSgofOm8YaOsOs/fx
jeB43WwE40wHKrC9ghpjLT7NXguu8xgr0R3JOKZ8deLDjbGwc5c6Qn/+oYme+Cs2
X/45f6xeEGO4Kw==
-----END CERTIFICATE-----
Generated at Sun Sep 27 19:32:23 2026 by rpki-client