Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.mft
File: SF92J0yAXSWxFaOtuh0uoVTe6tc.mft (raw, json)
Hash identifier: GLQ3DX2km11aCKF8Bn+baNZ0ByrLbeu3vcVxqROc5+I=
Subject key identifier: 80:67:C4:98:84:A2:9D:FA:31:B4:B0:F1:A6:6E:61:7A:DC:6C:C1:24
Authority key identifier: 48:5F:76:27:4C:80:5D:25:B1:15:A3:AD:BA:1D:2E:A1:54:DE:EA:D7
Certificate issuer: /CN=485f76274c805d25b115a3adba1d2ea154deead7
Certificate serial: 019CAD22C4811B5A2E91733E0A353BA6F6F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SF92J0yAXSWxFaOtuh0uoVTe6tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.mft
Manifest number: 1240
Signing time: Mon 02 Mar 2026 06:01:02 +0000
Manifest this update: Mon 02 Mar 2026 06:01:02 +0000
Manifest next update: Tue 03 Mar 2026 06:01:02 +0000
Files and hashes: 1: Oya_7CTNloqoLGAwE4lej4v0gVU.roa (hash: pi6Tio3aUQA0JE16nMLeotjfbha9a+YODpOnjWqpmKM=)
2: SF92J0yAXSWxFaOtuh0uoVTe6tc.crl (hash: vK1iglMQjQ03UZ+4NUOAU/uvhT5Z1ntxK/TNLjq0UNY=)
3: VMZQ9NDd56nkh5RyTCLwouklkcA.roa (hash: uqsQckCvVpROGzhWbi/+xNcAtRw003GCNfZZ7Nd36Js=)
4: bOCkd18Ayb5bcI8G6YVBq7PIUcw.roa (hash: uKcVytuQYuouml3wIVfkbst8oBdAm0iOGlIFW2AnouI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SF92J0yAXSWxFaOtuh0uoVTe6tc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:c4:81:1b:5a:2e:91:73:3e:0a:35:3b:a6:f6:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485f76274c805d25b115a3adba1d2ea154deead7
Validity
Not Before: Mar 2 06:01:02 2026 GMT
Not After : Mar 3 06:01:02 2026 GMT
Subject: CN=8067c49884a29dfa31b4b0f1a66e617adc6cc124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5f:43:e9:d9:64:4c:ef:9d:8d:ac:3f:41:fa:
a4:b3:65:87:72:c1:18:49:9e:16:95:ee:7a:7c:39:
39:46:0d:d7:23:99:a6:91:b8:b4:af:d2:8d:28:b7:
64:fd:73:88:3e:bb:94:53:33:45:9a:9c:f7:75:4a:
f9:a2:b1:9b:64:23:fc:c4:5c:5b:f7:6e:06:a3:92:
32:7f:b8:f2:f7:69:c1:28:09:08:96:d4:2e:37:73:
08:52:44:09:36:be:5e:7e:1d:3e:f0:55:29:1d:ea:
1f:d1:c5:08:b6:f5:1a:b5:3c:20:7e:da:f8:1a:60:
44:85:34:15:92:ab:2b:9c:5f:61:21:43:00:c2:d5:
d9:56:92:f2:9b:2a:18:5b:06:68:e6:a2:75:23:3d:
5a:6b:a4:9c:a4:f6:5a:97:e5:3f:0c:0b:05:8e:57:
68:0b:5e:71:0f:c5:bf:79:15:59:30:f8:a9:1e:c4:
7e:77:8e:9a:27:e2:49:3e:3f:14:6a:77:8b:2c:9f:
f8:c6:34:ef:20:08:8c:a9:95:dc:5f:c1:59:6b:e8:
80:2e:e6:2d:70:85:8b:63:94:02:af:e5:1f:bb:26:
33:3f:4b:dc:4a:30:bf:74:a0:78:39:be:05:2a:ed:
a7:71:fc:e0:f7:25:7a:3b:c5:c0:07:d7:c7:50:96:
a0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:67:C4:98:84:A2:9D:FA:31:B4:B0:F1:A6:6E:61:7A:DC:6C:C1:24
X509v3 Authority Key Identifier:
keyid:48:5F:76:27:4C:80:5D:25:B1:15:A3:AD:BA:1D:2E:A1:54:DE:EA:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF92J0yAXSWxFaOtuh0uoVTe6tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:a5:71:88:bd:14:98:cf:23:cd:5e:95:38:b8:d8:4c:e2:98:
ab:c4:a1:6d:3f:fe:e0:d4:d8:62:31:32:18:75:8d:ed:7c:84:
d1:a9:d7:af:19:25:b2:f3:a7:0c:1a:f0:8e:a4:4a:5d:e2:27:
55:8b:ed:61:0d:63:5f:66:fc:f4:5e:51:bb:8f:56:f0:8a:a7:
74:ad:19:66:36:ea:1f:ce:f5:30:41:33:52:2e:18:ee:8b:52:
f2:b0:e7:f5:2c:d2:25:fe:89:a5:d3:97:b5:19:76:cd:fc:ae:
b5:e1:b4:3a:f1:86:df:1d:fb:08:2b:80:95:b5:ed:51:23:7c:
6a:ea:27:20:f9:29:62:4a:59:89:6a:00:c8:b6:e3:7d:f5:70:
9f:15:13:11:29:3a:02:ca:8d:09:b7:6b:46:74:a0:c7:a0:00:
82:ff:62:21:da:0c:94:55:c9:4b:9b:1c:bf:d2:f0:9b:60:46:
57:73:a5:7f:32:ba:45:f9:76:e3:23:25:5b:42:e6:ce:f8:3f:
af:f8:d1:47:20:2e:2a:1c:af:26:79:5a:e8:b0:15:18:fc:3b:
ef:9d:bd:95:1e:34:31:d9:f6:91:ce:21:c4:ca:4d:16:59:9a:
04:ab:91:99:82:47:0d:87:e6:ff:d5:0c:a5:66:bc:34:a8:20:
fd:1f:fc:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytIsSBG1oukXM+CjU7pvbzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4NWY3NjI3NGM4MDVkMjViMTE1YTNhZGJhMWQyZWExNTRk
ZWVhZDcwHhcNMjYwMzAyMDYwMTAyWhcNMjYwMzAzMDYwMTAyWjAzMTEwLwYDVQQD
Eyg4MDY3YzQ5ODg0YTI5ZGZhMzFiNGIwZjFhNjZlNjE3YWRjNmNjMTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApF9D6dlkTO+djaw/Qfqks2WHcsEY
SZ4Wle56fDk5Rg3XI5mmkbi0r9KNKLdk/XOIPruUUzNFmpz3dUr5orGbZCP8xFxb
924Go5Iyf7jy92nBKAkIltQuN3MIUkQJNr5efh0+8FUpHeof0cUItvUatTwgftr4
GmBEhTQVkqsrnF9hIUMAwtXZVpLymyoYWwZo5qJ1Iz1aa6ScpPZal+U/DAsFjldo
C15xD8W/eRVZMPipHsR+d46aJ+JJPj8UaneLLJ/4xjTvIAiMqZXcX8FZa+iALuYt
cIWLY5QCr+UfuyYzP0vcSjC/dKB4Ob4FKu2ncfzg9yV6O8XAB9fHUJagqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIBnxJiEop36MbSw8aZuYXrcbMEkMB8GA1UdIwQY
MBaAFEhfdidMgF0lsRWjrbodLqFU3urXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0Y5MkoweUFYU1d4RmFPdHVoMHVvVlRlNnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82ODViNTMtNmYxMS00MWRiLWJlYWQt
NDNlYWY3NTY3Y2FhLzEvU0Y5MkoweUFYU1d4RmFPdHVoMHVvVlRlNnRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC82ODViNTMtNmYxMS00MWRiLWJlYWQtNDNlYWY3NTY3Y2Fh
LzEvU0Y5MkoweUFYU1d4RmFPdHVoMHVvVlRlNnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjKVxiL0U
mM8jzV6VOLjYTOKYq8ShbT/+4NTYYjEyGHWN7XyE0anXrxklsvOnDBrwjqRKXeIn
VYvtYQ1jX2b89F5Ru49W8IqndK0ZZjbqH871MEEzUi4Y7otS8rDn9SzSJf6JpdOX
tRl2zfyuteG0OvGG3x37CCuAlbXtUSN8auonIPkpYkpZiWoAyLbjffVwnxUTESk6
AsqNCbdrRnSgx6AAgv9iIdoMlFXJS5scv9Lwm2BGV3OlfzK6Rfl24yMlW0Lmzvg/
r/jRRyAuKhyvJnla6LAVGPw77529lR40Mdn2kc4hxMpNFlmaBKuRmYJHDYfm/9UM
pWa8NKgg/R/8EQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:14:02 2026 by rpki-client