Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/51b2ce-09aa-438d-9907-101b9e80e359/1/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.mft
File: SX7eN_KfQKcbHLKl_OUm6KPQ5eE.mft (raw, json)
Hash identifier: 7dEth7sqLW7HRMHaKaQYymYYqMdQbIajzrTKZpCo+IM=
Subject key identifier: 27:92:3F:4A:23:D3:CB:BC:92:C4:B4:D4:C4:3B:F1:30:3D:48:CC:F9
Authority key identifier: 49:7E:DE:37:F2:9F:40:A7:1B:1C:B2:A5:FC:E5:26:E8:A3:D0:E5:E1
Certificate issuer: /CN=497ede37f29f40a71b1cb2a5fce526e8a3d0e5e1
Certificate serial: 019CA9B37823DB55654FDC21ED33B3CA2121
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/51b2ce-09aa-438d-9907-101b9e80e359/1/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.mft
Manifest number: 0F
Signing time: Sun 01 Mar 2026 14:00:36 +0000
Manifest this update: Sun 01 Mar 2026 14:00:36 +0000
Manifest next update: Mon 02 Mar 2026 14:00:36 +0000
Files and hashes: 1: FsZqIeW01RfaEApHUES0cB5ebyI.roa (hash: VCT9mMAi/Cn+09fCPNJ/y3SBfVeioqWO5E+XzvEA3FA=)
2: KfCvlR8vu0qoz40NwG_o9ivr0L0.asa (hash: 28KOqwH8/su8P6T5Q9zLgm8jJkLHgtcR+NYZ8WhN7qk=)
3: SX7eN_KfQKcbHLKl_OUm6KPQ5eE.crl (hash: A1TAaO8wSjFGbDwKEPBHATBPoOvssHzvnavCfO1esmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/51b2ce-09aa-438d-9907-101b9e80e359/1/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/51b2ce-09aa-438d-9907-101b9e80e359/1/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:78:23:db:55:65:4f:dc:21:ed:33:b3:ca:21:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=497ede37f29f40a71b1cb2a5fce526e8a3d0e5e1
Validity
Not Before: Mar 1 14:00:36 2026 GMT
Not After : Mar 2 14:00:36 2026 GMT
Subject: CN=27923f4a23d3cbbc92c4b4d4c43bf1303d48ccf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:bd:0c:ba:89:ac:eb:1f:a7:90:46:a3:77:1a:
ad:96:89:f3:45:72:75:9a:a8:7e:e2:3b:07:c8:21:
53:07:d3:74:2f:dd:65:8a:ff:fe:18:f1:fc:b6:c4:
8c:b8:0f:b7:b3:06:3f:f5:0a:67:87:d4:f6:4c:b7:
05:b8:d3:ed:63:fb:80:02:28:83:46:18:6d:d5:19:
50:f2:71:13:d1:dc:f2:0f:db:54:24:56:86:2e:9e:
be:7b:d4:78:fa:8b:97:bc:83:c3:0f:98:e9:cd:8d:
1a:48:c8:ff:c7:c1:85:2e:1c:26:ec:68:45:5f:bd:
ee:30:b5:7a:68:a3:29:fa:e9:7d:03:c6:36:be:d5:
92:fa:b6:ce:26:e9:24:e7:ca:49:21:7b:2b:e8:97:
5c:21:a8:f3:32:d8:d0:d5:60:b5:1f:c6:42:b8:07:
2b:ba:53:6b:4c:8f:e2:7a:70:5e:23:34:7c:df:f7:
99:ab:6b:ea:be:a3:04:e8:3f:a9:66:2e:bf:02:a1:
19:e1:4b:05:bf:24:f1:97:8e:71:16:c2:d7:72:e7:
ae:48:43:a0:ca:32:8e:68:3c:16:28:8b:63:89:9e:
bd:cf:ad:70:ac:94:78:5d:37:16:5f:40:bf:71:79:
bb:b0:88:96:7e:1c:bf:3e:98:99:54:50:7b:02:f6:
e5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:92:3F:4A:23:D3:CB:BC:92:C4:B4:D4:C4:3B:F1:30:3D:48:CC:F9
X509v3 Authority Key Identifier:
keyid:49:7E:DE:37:F2:9F:40:A7:1B:1C:B2:A5:FC:E5:26:E8:A3:D0:E5:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/51b2ce-09aa-438d-9907-101b9e80e359/1/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/51b2ce-09aa-438d-9907-101b9e80e359/1/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:90:72:06:86:30:59:a9:12:b1:4c:63:5e:39:09:85:e3:f9:
02:13:4e:a6:b9:be:af:87:8d:22:73:98:cf:3e:3c:ca:05:04:
8d:e3:6e:b4:a3:af:73:1c:3c:6a:a5:b9:1b:d5:40:e7:36:f7:
46:69:d9:b7:63:db:80:f1:27:68:5b:1b:2d:cf:13:a8:9d:97:
e5:e6:b2:ee:fd:d8:93:1b:04:0f:99:08:66:5b:59:e6:7d:a7:
f8:2a:3b:c9:f3:16:39:59:e9:af:ca:15:f0:dd:10:12:3b:46:
61:7c:08:e2:5e:c5:76:6b:1d:5f:9f:11:60:53:de:8a:36:47:
99:c4:1c:f6:d2:03:b0:02:2e:ac:04:b3:61:0e:24:e7:8e:cd:
ef:00:88:18:1c:92:2f:e1:0b:f0:cc:b1:71:bd:9e:30:eb:cd:
a1:84:2d:1a:30:5b:06:6d:50:a9:6a:e9:f2:da:85:58:83:2b:
fe:2b:dc:d3:f9:19:f8:17:0b:f1:e9:44:70:50:b5:93:da:b4:
09:e8:76:9c:0d:99:59:c4:5e:a4:20:12:ad:46:61:85:dd:e1:
6f:fe:26:78:5d:ea:de:aa:b8:83:60:08:ad:95:f5:b6:5f:b0:
7b:80:78:46:59:38:f1:22:84:be:40:7b:84:6b:26:5c:bf:e4:
22:36:b8:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyps3gj21VlT9wh7TOzyiEhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5N2VkZTM3ZjI5ZjQwYTcxYjFjYjJhNWZjZTUyNmU4YTNk
MGU1ZTEwHhcNMjYwMzAxMTQwMDM2WhcNMjYwMzAyMTQwMDM2WjAzMTEwLwYDVQQD
EygyNzkyM2Y0YTIzZDNjYmJjOTJjNGI0ZDRjNDNiZjEzMDNkNDhjY2Y5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk70Muoms6x+nkEajdxqtlonzRXJ1
mqh+4jsHyCFTB9N0L91liv/+GPH8tsSMuA+3swY/9Qpnh9T2TLcFuNPtY/uAAiiD
Rhht1RlQ8nET0dzyD9tUJFaGLp6+e9R4+ouXvIPDD5jpzY0aSMj/x8GFLhwm7GhF
X73uMLV6aKMp+ul9A8Y2vtWS+rbOJukk58pJIXsr6JdcIajzMtjQ1WC1H8ZCuAcr
ulNrTI/ienBeIzR83/eZq2vqvqME6D+pZi6/AqEZ4UsFvyTxl45xFsLXcueuSEOg
yjKOaDwWKItjiZ69z61wrJR4XTcWX0C/cXm7sIiWfhy/PpiZVFB7AvblbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCeSP0oj08u8ksS01MQ78TA9SMz5MB8GA1UdIwQY
MBaAFEl+3jfyn0CnGxyypfzlJuij0OXhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1g3ZU5fS2ZRS2NiSExLbF9PVW02S1BRNWVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC81MWIyY2UtMDlhYS00MzhkLTk5MDct
MTAxYjllODBlMzU5LzEvU1g3ZU5fS2ZRS2NiSExLbF9PVW02S1BRNWVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC81MWIyY2UtMDlhYS00MzhkLTk5MDctMTAxYjllODBlMzU5
LzEvU1g3ZU5fS2ZRS2NiSExLbF9PVW02S1BRNWVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF5ByBoYw
WakSsUxjXjkJheP5AhNOprm+r4eNInOYzz48ygUEjeNutKOvcxw8aqW5G9VA5zb3
RmnZt2PbgPEnaFsbLc8TqJ2X5eay7v3YkxsED5kIZltZ5n2n+Co7yfMWOVnpr8oV
8N0QEjtGYXwI4l7FdmsdX58RYFPeijZHmcQc9tIDsAIurASzYQ4k547N7wCIGByS
L+EL8Myxcb2eMOvNoYQtGjBbBm1QqWrp8tqFWIMr/ivc0/kZ+BcL8elEcFC1k9q0
Ceh2nA2ZWcRepCASrUZhhd3hb/4meF3q3qq4g2AIrZX1tl+we4B4Rlk48SKEvkB7
hGsmXL/kIja4cQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:01:43 2026 by rpki-client