
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/027208-40dc-412a-b64c-38bf1e942a64/1/sRI3DKJgErTR0BVM73IwvYmluV0.mft
File: sRI3DKJgErTR0BVM73IwvYmluV0.mft (raw, json)
Hash identifier: 8dAkQJ4NS9tM2E3ONBIhR+oCzIfidJKgfm5XSu2PjkA=
Subject key identifier: 79:72:78:7F:43:FE:1A:DF:13:B7:0F:1E:64:14:1E:0F:89:99:47:56
Authority key identifier: B1:12:37:0C:A2:60:12:B4:D1:D0:15:4C:EF:72:30:BD:89:A5:B9:5D
Certificate issuer: /CN=b112370ca26012b4d1d0154cef7230bd89a5b95d
Certificate serial: 01A0DF17D9822C8FC7CCDDBE5B08A070DCC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRI3DKJgErTR0BVM73IwvYmluV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/027208-40dc-412a-b64c-38bf1e942a64/1/sRI3DKJgErTR0BVM73IwvYmluV0.mft
Manifest number: 0231
Signing time: Sat 26 Sep 2026 19:01:17 +0000
Manifest this update: Sat 26 Sep 2026 19:01:17 +0000
Manifest next update: Sun 27 Sep 2026 19:01:17 +0000
Files and hashes: 1: JQHbkZiCoz_ArYL3K_jRaitcYso.roa (hash: LSS9szWjmAex/d/OuZRvWyhXy/Z+aR2BRiVKGpC62GY=)
2: sRI3DKJgErTR0BVM73IwvYmluV0.crl (hash: 3MAiD5UFHKMD3w9BKgaXDfnHtYQ7lqeU0ys1tzzCdC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/027208-40dc-412a-b64c-38bf1e942a64/1/sRI3DKJgErTR0BVM73IwvYmluV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/027208-40dc-412a-b64c-38bf1e942a64/1/sRI3DKJgErTR0BVM73IwvYmluV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sRI3DKJgErTR0BVM73IwvYmluV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:17:d9:82:2c:8f:c7:cc:dd:be:5b:08:a0:70:dc:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b112370ca26012b4d1d0154cef7230bd89a5b95d
Validity
Not Before: Sep 26 19:01:17 2026 GMT
Not After : Sep 27 19:01:17 2026 GMT
Subject: CN=7972787f43fe1adf13b70f1e64141e0f89994756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:47:7f:56:23:28:36:9e:a2:22:f9:be:67:f3:
91:1e:3f:9a:87:52:fa:26:6c:0b:05:b2:99:49:c8:
7c:00:e4:ba:8b:21:00:a0:48:f8:56:a9:56:c7:d8:
ab:e2:55:ee:37:33:e0:bf:11:13:17:af:51:22:fa:
52:7d:f4:47:62:82:9f:28:1f:48:96:94:89:53:77:
bf:20:c1:49:af:9c:a5:6f:6e:38:66:6e:b9:e2:76:
7b:cf:66:b7:d8:27:02:e0:3c:80:74:a9:08:88:bc:
33:66:db:f3:2f:d3:c1:29:1c:e1:2e:41:81:81:b9:
57:7a:8a:d8:7a:de:5f:40:ac:37:69:46:54:13:41:
c9:8e:05:dd:ee:c4:43:63:2c:4e:b4:f3:56:87:31:
4e:ac:2a:55:01:57:a2:80:18:af:23:a7:89:68:46:
bc:5f:ce:f5:1a:d3:ca:bf:bd:cd:fd:4e:2d:d3:4f:
2c:45:26:c2:03:1f:98:8c:98:07:fc:17:0d:1f:65:
ee:eb:06:02:b2:40:2c:1b:d2:cb:73:81:ab:73:f6:
df:71:a8:c7:f9:de:3e:63:f4:ac:e6:ff:7c:0b:ef:
32:b5:17:6f:5a:81:27:9e:96:6c:df:3e:50:bb:93:
a3:f2:bc:6b:95:ad:84:ba:6a:ec:55:6c:d2:7b:6b:
0c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:72:78:7F:43:FE:1A:DF:13:B7:0F:1E:64:14:1E:0F:89:99:47:56
X509v3 Authority Key Identifier:
keyid:B1:12:37:0C:A2:60:12:B4:D1:D0:15:4C:EF:72:30:BD:89:A5:B9:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRI3DKJgErTR0BVM73IwvYmluV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/027208-40dc-412a-b64c-38bf1e942a64/1/sRI3DKJgErTR0BVM73IwvYmluV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/027208-40dc-412a-b64c-38bf1e942a64/1/sRI3DKJgErTR0BVM73IwvYmluV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:44:7f:6f:5e:f4:a3:c3:78:cd:0f:42:08:0a:42:00:70:98:
9e:e5:68:6f:cf:99:07:69:6a:1c:4d:95:92:10:f5:64:32:82:
89:55:46:ca:20:10:f8:a6:76:95:90:c3:10:21:5e:44:41:eb:
2f:1c:10:17:92:c6:f5:b7:98:b9:6e:9f:a5:dc:f4:0e:d1:ea:
0c:88:9e:41:2f:eb:12:cf:74:e4:bf:dd:ff:e9:54:5b:25:b4:
08:fe:66:15:d3:1b:fb:d6:c7:06:0c:4a:ac:79:71:0a:ab:ec:
5f:c7:6a:6b:5c:c3:d0:ee:3e:9f:ca:65:c3:a0:89:ba:11:ec:
0e:fc:d2:b6:6e:08:0b:81:6b:fb:71:8c:c6:9e:0c:5f:d1:4b:
3e:52:25:01:cc:a7:c1:c0:9d:fa:47:fe:b1:6a:bb:44:97:e9:
a0:e2:21:2f:4d:6e:65:48:21:27:0a:9a:cf:d2:d6:8d:70:27:
7d:fc:b3:3f:ce:a1:66:19:16:2c:15:49:c9:9a:9d:9a:36:bf:
8b:f6:69:28:31:8a:df:be:64:7c:a1:41:7d:70:4e:47:4c:dd:
ac:37:2d:80:ea:ec:dd:03:dd:db:4d:f8:fb:e9:99:c5:17:b3:
cf:e1:d3:c6:48:49:ef:09:6f:0d:85:5a:32:c8:f0:19:07:69:
a1:fd:6a:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDfF9mCLI/HzN2+WwigcNzCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxMTIzNzBjYTI2MDEyYjRkMWQwMTU0Y2VmNzIzMGJkODlh
NWI5NWQwHhcNMjYwOTI2MTkwMTE3WhcNMjYwOTI3MTkwMTE3WjAzMTEwLwYDVQQD
Eyg3OTcyNzg3ZjQzZmUxYWRmMTNiNzBmMWU2NDE0MWUwZjg5OTk0NzU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Ud/ViMoNp6iIvm+Z/ORHj+ah1L6
JmwLBbKZSch8AOS6iyEAoEj4VqlWx9ir4lXuNzPgvxETF69RIvpSffRHYoKfKB9I
lpSJU3e/IMFJr5ylb244Zm654nZ7z2a32CcC4DyAdKkIiLwzZtvzL9PBKRzhLkGB
gblXeorYet5fQKw3aUZUE0HJjgXd7sRDYyxOtPNWhzFOrCpVAVeigBivI6eJaEa8
X871GtPKv73N/U4t008sRSbCAx+YjJgH/BcNH2Xu6wYCskAsG9LLc4Grc/bfcajH
+d4+Y/Ss5v98C+8ytRdvWoEnnpZs3z5Qu5Oj8rxrla2EumrsVWzSe2sMNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHlyeH9D/hrfE7cPHmQUHg+JmUdWMB8GA1UdIwQY
MBaAFLESNwyiYBK00dAVTO9yML2JpbldMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1JJM0RLSmdFclRSMEJWTTczSXd2WW1sdVYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wMjcyMDgtNDBkYy00MTJhLWI2NGMt
MzhiZjFlOTQyYTY0LzEvc1JJM0RLSmdFclRSMEJWTTczSXd2WW1sdVYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8wMjcyMDgtNDBkYy00MTJhLWI2NGMtMzhiZjFlOTQyYTY0
LzEvc1JJM0RLSmdFclRSMEJWTTczSXd2WW1sdVYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxUR/b170
o8N4zQ9CCApCAHCYnuVob8+ZB2lqHE2VkhD1ZDKCiVVGyiAQ+KZ2lZDDECFeREHr
LxwQF5LG9beYuW6fpdz0DtHqDIieQS/rEs905L/d/+lUWyW0CP5mFdMb+9bHBgxK
rHlxCqvsX8dqa1zD0O4+n8plw6CJuhHsDvzStm4IC4Fr+3GMxp4MX9FLPlIlAcyn
wcCd+kf+sWq7RJfpoOIhL01uZUghJwqaz9LWjXAnffyzP86hZhkWLBVJyZqdmja/
i/ZpKDGK375kfKFBfXBOR0zdrDctgOrs3QPd2034++mZxRezz+HTxkhJ7wlvDYVa
MsjwGQdpof1qFw==
-----END CERTIFICATE-----
Generated at Sun Sep 27 01:56:27 2026 by rpki-client