Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/51b2ce-09aa-438d-9907-101b9e80e359/1/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.mft
File: SX7eN_KfQKcbHLKl_OUm6KPQ5eE.mft (raw, json)
Hash identifier: JDUdUC1Tso/GdOUSkiB3zhlRJooqbV7K/T45aslg4b8=
Subject key identifier: 86:2E:1B:27:52:10:BD:9A:E4:32:9E:C0:00:F6:D1:C5:05:55:7B:44
Authority key identifier: 49:7E:DE:37:F2:9F:40:A7:1B:1C:B2:A5:FC:E5:26:E8:A3:D0:E5:E1
Certificate issuer: /CN=497ede37f29f40a71b1cb2a5fce526e8a3d0e5e1
Certificate serial: 01A0CA0FFA8FE16CB2B9E68BCF363BF788DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/51b2ce-09aa-438d-9907-101b9e80e359/1/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.mft
Manifest number: 0232
Signing time: Tue 22 Sep 2026 17:00:39 +0000
Manifest this update: Tue 22 Sep 2026 17:00:39 +0000
Manifest next update: Wed 23 Sep 2026 17:00:39 +0000
Files and hashes: 1: FsZqIeW01RfaEApHUES0cB5ebyI.roa (hash: VCT9mMAi/Cn+09fCPNJ/y3SBfVeioqWO5E+XzvEA3FA=)
2: KfCvlR8vu0qoz40NwG_o9ivr0L0.asa (hash: 28KOqwH8/su8P6T5Q9zLgm8jJkLHgtcR+NYZ8WhN7qk=)
3: SX7eN_KfQKcbHLKl_OUm6KPQ5eE.crl (hash: jkgg0qCjr5cew1Yb0j6OZ/dUKoY37x7H4AvZDrNErOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/51b2ce-09aa-438d-9907-101b9e80e359/1/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/51b2ce-09aa-438d-9907-101b9e80e359/1/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:0f:fa:8f:e1:6c:b2:b9:e6:8b:cf:36:3b:f7:88:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=497ede37f29f40a71b1cb2a5fce526e8a3d0e5e1
Validity
Not Before: Sep 22 17:00:39 2026 GMT
Not After : Sep 23 17:00:39 2026 GMT
Subject: CN=862e1b275210bd9ae4329ec000f6d1c505557b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d4:c9:b7:2c:0d:48:e9:5b:8f:0c:e9:75:ae:
1f:18:f8:d9:8e:15:a0:52:e3:79:bf:fb:a3:ea:2b:
82:8a:f3:44:91:5e:f2:d0:e6:0b:90:e0:3e:2f:e3:
c8:e3:6f:c9:68:b4:f0:ff:f1:a2:b4:8a:06:31:0e:
34:98:f3:51:6f:17:74:5c:a5:34:d3:58:94:0c:eb:
8c:a3:eb:61:3a:d7:17:1f:99:80:11:7e:46:a5:af:
df:38:c8:44:44:88:f7:dd:0f:6f:cf:c7:f2:47:4a:
52:97:de:3b:72:b1:19:85:95:78:06:77:98:6f:ea:
c8:d4:c5:f5:59:aa:40:46:68:2c:aa:b4:fd:75:85:
7e:bf:9d:e1:1c:5d:b3:be:2c:d2:96:ad:5c:23:c4:
8b:35:e7:2f:f9:4d:76:8c:59:db:54:9c:67:8e:40:
88:e9:44:9c:14:9a:c6:0c:9e:a1:87:a6:93:ed:f4:
66:a9:a1:6f:78:e5:7c:ea:50:30:e9:a3:84:08:3d:
65:99:09:01:a4:b1:55:ad:67:a9:00:70:5e:6c:34:
30:58:67:58:75:ba:7f:97:aa:a7:ff:62:e6:e2:b9:
63:05:9f:e5:e4:4a:9a:48:18:53:55:97:9f:66:e4:
83:3f:42:00:20:26:ab:bc:d2:6f:7d:a8:19:60:14:
68:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:2E:1B:27:52:10:BD:9A:E4:32:9E:C0:00:F6:D1:C5:05:55:7B:44
X509v3 Authority Key Identifier:
keyid:49:7E:DE:37:F2:9F:40:A7:1B:1C:B2:A5:FC:E5:26:E8:A3:D0:E5:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/51b2ce-09aa-438d-9907-101b9e80e359/1/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/51b2ce-09aa-438d-9907-101b9e80e359/1/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:14:3a:0b:10:ac:03:7f:0d:c8:53:a3:a2:8a:c4:6e:c3:e6:
3f:33:17:41:6d:c0:1e:bb:b7:1b:f4:3e:f3:49:f3:a9:f6:87:
83:a8:b5:11:a7:47:f3:48:24:e6:06:12:3e:f3:d1:04:3d:16:
33:f9:7b:bb:7b:60:a6:43:65:01:e5:d6:06:6e:5e:bd:8f:34:
23:9f:0b:62:88:99:39:70:9e:c3:43:7c:cc:35:c8:2e:2b:4f:
ff:ab:8e:42:fa:4d:7b:49:87:76:e9:5b:bf:df:e2:fa:17:d5:
ed:31:10:d9:b2:f8:3f:62:44:74:24:b2:47:7f:73:59:79:6b:
44:c9:d4:9b:7f:da:0e:ee:01:b2:ac:88:0f:c4:3b:76:4e:d6:
c9:d3:de:fb:5d:a3:fc:62:17:38:1a:75:8d:4b:4a:1d:5f:24:
11:25:6e:dd:17:fe:bf:34:30:81:b7:9a:f0:3f:e2:2c:6f:da:
f5:34:64:98:75:9c:95:87:09:a5:62:66:da:fb:de:20:3e:24:
85:0e:9e:fe:89:d9:22:44:54:d0:5e:ff:23:69:35:0a:e3:80:
c4:ce:6a:d4:e9:b7:88:c0:fa:80:8b:0a:e2:62:88:21:15:74:
d2:25:cb:c6:54:26:9a:2f:04:84:20:ca:6f:38:40:ca:83:94:
07:4e:a6:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:59:07 2026 by rpki-client