Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.mft
File: SF92J0yAXSWxFaOtuh0uoVTe6tc.mft (raw, json)
Hash identifier: wc1cWAxpM6iAQqpVamwtSnIkqZoYdwAqO+jtSHdUArI=
Subject key identifier: 01:29:47:FC:17:4E:B2:A5:E5:05:04:6D:E8:70:6C:5D:AB:15:93:91
Authority key identifier: 48:5F:76:27:4C:80:5D:25:B1:15:A3:AD:BA:1D:2E:A1:54:DE:EA:D7
Certificate issuer: /CN=485f76274c805d25b115a3adba1d2ea154deead7
Certificate serial: 01A0C5203D207FFC3254CD5D9DAF4129E27C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SF92J0yAXSWxFaOtuh0uoVTe6tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.mft
Manifest number: 145F
Signing time: Mon 21 Sep 2026 18:00:19 +0000
Manifest this update: Mon 21 Sep 2026 18:00:19 +0000
Manifest next update: Tue 22 Sep 2026 18:00:19 +0000
Files and hashes: 1: SF92J0yAXSWxFaOtuh0uoVTe6tc.crl (hash: rJlIAlIEFvXqlXgWYjdnv8YtpmqXbJAV6cRTKa5F7Q8=)
2: VMZQ9NDd56nkh5RyTCLwouklkcA.roa (hash: uqsQckCvVpROGzhWbi/+xNcAtRw003GCNfZZ7Nd36Js=)
3: bOCkd18Ayb5bcI8G6YVBq7PIUcw.roa (hash: uKcVytuQYuouml3wIVfkbst8oBdAm0iOGlIFW2AnouI=)
4: yst2ONDag_b_ibKe9wGgyuGAS9Q.roa (hash: bBPvkD1PK6IY+yLnF/1fjVLXlk+SFKiXHO9PhdM/Fgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SF92J0yAXSWxFaOtuh0uoVTe6tc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:20:3d:20:7f:fc:32:54:cd:5d:9d:af:41:29:e2:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485f76274c805d25b115a3adba1d2ea154deead7
Validity
Not Before: Sep 21 18:00:19 2026 GMT
Not After : Sep 22 18:00:19 2026 GMT
Subject: CN=012947fc174eb2a5e505046de8706c5dab159391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:da:dd:9b:03:6b:6d:d4:e5:2b:c4:28:4e:73:
4a:cc:9e:b6:bd:76:c0:61:71:14:5a:e3:91:a7:e0:
3d:60:0f:ea:e1:5a:a2:89:b5:a6:cc:cd:a7:51:80:
56:f9:4e:48:82:24:c5:86:3b:72:5e:e3:82:8b:ff:
3a:e4:b0:df:92:4a:ed:f9:5f:93:fb:c1:5b:38:b1:
06:98:f9:07:bd:eb:99:ca:23:0f:ab:c2:90:4b:c6:
63:09:6c:9c:70:c1:08:98:03:01:e0:34:9c:d0:48:
1a:12:b2:be:e5:27:24:93:b7:8a:07:09:ef:2a:29:
5b:90:a0:06:6e:de:c6:93:9c:d2:98:e5:2d:90:2b:
a2:a5:b5:5c:87:e9:45:ed:e9:ba:a7:f0:3d:a8:4c:
e1:87:b4:5a:82:ef:01:a2:cf:03:37:c4:38:33:56:
1d:84:d4:b8:46:dc:06:fd:a8:62:65:b6:6e:95:09:
a3:60:60:33:b6:f2:8f:96:59:aa:cc:74:42:52:5f:
c0:e8:70:d2:09:9b:64:d6:79:f3:6d:27:15:ae:a8:
8a:86:ab:5a:c7:d3:b6:df:07:9e:bb:19:7f:22:a9:
73:4b:a3:02:b7:01:bf:ce:a7:e6:c5:b2:46:b6:38:
11:92:94:03:5d:f6:b4:28:25:1a:4e:c7:8b:76:aa:
d7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:29:47:FC:17:4E:B2:A5:E5:05:04:6D:E8:70:6C:5D:AB:15:93:91
X509v3 Authority Key Identifier:
keyid:48:5F:76:27:4C:80:5D:25:B1:15:A3:AD:BA:1D:2E:A1:54:DE:EA:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF92J0yAXSWxFaOtuh0uoVTe6tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:5e:4f:34:56:a2:62:c8:5a:0e:e0:5b:21:81:e0:cf:ae:17:
33:18:ca:45:2f:3b:5f:f3:19:94:4f:70:dd:26:e5:6c:d5:25:
3a:86:44:d8:b6:1c:9d:1e:0f:d9:b5:61:da:14:b9:ca:61:b0:
f9:89:0d:33:5a:cb:08:6e:6c:e6:e2:d6:8d:8f:b6:1f:e2:39:
0e:79:2f:64:15:97:d5:3d:6b:0f:cd:a7:ad:19:6b:7b:52:82:
96:30:50:e7:5b:df:6b:40:0f:0c:83:72:dd:87:01:d2:fd:19:
de:e4:c3:78:40:c0:9c:98:77:e6:33:1c:2b:43:5b:2d:d4:e2:
16:1f:5b:e0:7e:8d:48:7b:53:66:8b:df:7a:c2:b4:74:6f:ab:
87:6a:37:5a:8b:f1:2c:b0:7f:85:da:be:ef:5a:73:9c:c3:48:
7c:82:cf:f5:dc:46:01:59:36:9b:71:0a:5d:7d:6f:2f:3c:fc:
f2:33:41:ba:ce:07:c4:75:f9:50:02:12:7e:cc:f3:45:c6:c7:
ca:0c:0d:61:91:55:40:65:d9:8d:d9:c6:8e:4e:99:1e:39:f8:
7c:7a:4a:44:8e:bc:a9:70:f7:fd:e9:a2:2e:41:b3:67:46:6f:
d4:61:ee:f2:21:8a:68:e3:a7:00:af:e9:68:df:bf:a3:c7:c1:
5e:45:52:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:21:37 2026 by rpki-client