Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/sCS1dKJD6FPfLfBUycnwke1H8aE.mft
File: sCS1dKJD6FPfLfBUycnwke1H8aE.mft (raw, json)
Hash identifier: TkHxvaqqY3KBx/QWsb4WYy6la0yUc5lxNlw7qi3VsDQ=
Subject key identifier: 47:03:35:B7:B0:E7:42:2D:77:4D:A7:78:C1:4B:E7:9C:DD:A5:90:D2
Authority key identifier: B0:24:B5:74:A2:43:E8:53:DF:2D:F0:54:C9:C9:F0:91:ED:47:F1:A1
Certificate issuer: /CN=b024b574a243e853df2df054c9c9f091ed47f1a1
Certificate serial: 01A0CE247AC2EA32523D6393BAAB80D8F2C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCS1dKJD6FPfLfBUycnwke1H8aE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/sCS1dKJD6FPfLfBUycnwke1H8aE.mft
Manifest number: E4
Signing time: Wed 23 Sep 2026 12:01:31 +0000
Manifest this update: Wed 23 Sep 2026 12:01:31 +0000
Manifest next update: Thu 24 Sep 2026 12:01:31 +0000
Files and hashes: 1: oqX2gExMo-KlgfeVjBQNl-V9kYQ.roa (hash: AhjEc5iJ0saymH9KLRkLm0lyxGwUZpd99G/NbAW7jGw=)
2: sCS1dKJD6FPfLfBUycnwke1H8aE.crl (hash: lwJfHJpJX6BNap3sy9ox5FIMHDjjzu/bXKFErDNNtHY=)
3: wcZFZKJuAQyp04XCR7u-DhFRd3A.roa (hash: 5hph13qMNz8BJaZ5fOJ0lHqfAydPPEugNlEoJOSv5SQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/sCS1dKJD6FPfLfBUycnwke1H8aE.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/sCS1dKJD6FPfLfBUycnwke1H8aE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCS1dKJD6FPfLfBUycnwke1H8aE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:24:7a:c2:ea:32:52:3d:63:93:ba:ab:80:d8:f2:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b024b574a243e853df2df054c9c9f091ed47f1a1
Validity
Not Before: Sep 23 12:01:31 2026 GMT
Not After : Sep 24 12:01:31 2026 GMT
Subject: CN=470335b7b0e7422d774da778c14be79cdda590d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:5d:aa:04:c4:56:88:7c:1c:cf:fd:2b:3b:a0:
04:01:1c:c0:6a:fc:7c:1c:39:ff:3a:b9:62:99:94:
b9:10:b6:82:b9:3e:3c:2d:d4:45:1b:de:1a:d5:75:
91:27:3b:28:cd:45:da:10:bb:86:4d:2e:2f:aa:c4:
ec:09:42:be:2c:7e:7a:e0:de:c2:bf:0e:38:f1:4d:
09:af:66:aa:db:d3:69:48:58:c6:ba:c4:58:bc:cd:
5f:0a:db:00:ca:0b:33:c7:14:94:ee:23:ae:d1:2e:
54:bf:d4:bf:fb:47:a8:b0:48:8c:c7:76:97:10:56:
2f:0c:18:a6:07:12:35:32:da:4d:ed:c6:e0:a0:39:
be:f6:c3:ad:d6:80:69:ec:10:89:4b:1f:f9:2f:b2:
4b:cc:ba:07:f7:63:79:3f:33:45:16:51:a5:ba:76:
d4:5a:65:97:7f:aa:3c:04:8e:1b:48:e1:6c:71:9d:
f4:a0:49:ac:bd:32:ca:21:3e:98:14:7c:4c:bc:26:
24:73:bd:d5:4a:e9:d3:aa:2f:36:75:5e:65:26:9b:
d3:76:2f:e6:4b:55:21:43:9b:fd:80:cb:6f:f4:3b:
7a:86:d6:7b:82:05:7c:08:91:83:f4:2f:19:40:5a:
e0:36:37:e3:b5:ce:12:08:4b:a6:d9:bc:2e:11:c6:
b0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:03:35:B7:B0:E7:42:2D:77:4D:A7:78:C1:4B:E7:9C:DD:A5:90:D2
X509v3 Authority Key Identifier:
keyid:B0:24:B5:74:A2:43:E8:53:DF:2D:F0:54:C9:C9:F0:91:ED:47:F1:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCS1dKJD6FPfLfBUycnwke1H8aE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/sCS1dKJD6FPfLfBUycnwke1H8aE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/sCS1dKJD6FPfLfBUycnwke1H8aE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:7d:3e:dc:35:ee:ea:f3:fd:b5:05:66:42:7e:63:94:b7:4c:
54:c2:48:99:6e:b9:f8:98:a4:da:37:c2:6e:7e:fc:c1:11:2a:
63:82:c1:b8:ed:da:97:df:9c:fb:92:35:fc:eb:38:04:7a:2a:
06:f0:ce:92:29:3f:5b:7d:91:b1:b1:5d:47:18:9f:07:c0:65:
6a:1b:8f:9e:a3:7e:43:ec:81:9e:56:01:5e:2d:14:7b:34:aa:
15:f6:58:46:6f:54:e1:e1:05:11:0e:e2:4e:58:e4:6c:4a:53:
97:24:5f:34:37:70:58:d8:a0:5d:02:ad:b0:03:b5:5c:ce:30:
b5:e3:30:33:b2:03:70:91:e0:38:0e:06:9e:9a:e1:98:bb:4c:
10:5e:41:38:21:21:ec:8c:26:0b:97:bd:ec:1e:59:ef:78:83:
27:68:6e:da:fb:03:b3:37:63:64:19:ec:38:69:38:8a:21:46:
33:6d:ff:7b:4d:70:47:2e:f2:4b:56:49:c1:8b:84:ab:ed:b5:
73:4f:19:f6:c7:85:6e:03:cf:34:f2:7a:5f:10:56:1d:80:66:
be:e2:52:97:9b:61:6b:1e:a4:95:b0:4b:a3:ce:66:c1:c2:4d:
77:b6:5a:e2:2c:01:80:5c:7f:3a:e4:46:d3:b0:05:e8:5f:79:
00:c2:80:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDOJHrC6jJSPWOTuquA2PLGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwMjRiNTc0YTI0M2U4NTNkZjJkZjA1NGM5YzlmMDkxZWQ0
N2YxYTEwHhcNMjYwOTIzMTIwMTMxWhcNMjYwOTI0MTIwMTMxWjAzMTEwLwYDVQQD
Eyg0NzAzMzViN2IwZTc0MjJkNzc0ZGE3NzhjMTRiZTc5Y2RkYTU5MGQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiF2qBMRWiHwcz/0rO6AEARzAavx8
HDn/OrlimZS5ELaCuT48LdRFG94a1XWRJzsozUXaELuGTS4vqsTsCUK+LH564N7C
vw448U0Jr2aq29NpSFjGusRYvM1fCtsAygszxxSU7iOu0S5Uv9S/+0eosEiMx3aX
EFYvDBimBxI1MtpN7cbgoDm+9sOt1oBp7BCJSx/5L7JLzLoH92N5PzNFFlGlunbU
WmWXf6o8BI4bSOFscZ30oEmsvTLKIT6YFHxMvCYkc73VSunTqi82dV5lJpvTdi/m
S1UhQ5v9gMtv9Dt6htZ7ggV8CJGD9C8ZQFrgNjfjtc4SCEum2bwuEcawjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEcDNbew50Itd02neMFL55zdpZDSMB8GA1UdIwQY
MBaAFLAktXSiQ+hT3y3wVMnJ8JHtR/GhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0NTMWRLSkQ2RlBmTGZCVXljbndrZTFIOGFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9hYzhlN2MtNDE3NC00ODBlLWJmYWYt
NjY3ZDY2NDY5Y2Q5LzEvc0NTMWRLSkQ2RlBmTGZCVXljbndrZTFIOGFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9hYzhlN2MtNDE3NC00ODBlLWJmYWYtNjY3ZDY2NDY5Y2Q5
LzEvc0NTMWRLSkQ2RlBmTGZCVXljbndrZTFIOGFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEn0+3DXu
6vP9tQVmQn5jlLdMVMJImW65+Jik2jfCbn78wREqY4LBuO3al9+c+5I1/Os4BHoq
BvDOkik/W32RsbFdRxifB8BlahuPnqN+Q+yBnlYBXi0UezSqFfZYRm9U4eEFEQ7i
TljkbEpTlyRfNDdwWNigXQKtsAO1XM4wteMwM7IDcJHgOA4GnprhmLtMEF5BOCEh
7IwmC5e97B5Z73iDJ2hu2vsDszdjZBnsOGk4iiFGM23/e01wRy7yS1ZJwYuEq+21
c08Z9seFbgPPNPJ6XxBWHYBmvuJSl5thax6klbBLo85mwcJNd7Za4iwBgFx/OuRG
07AF6F95AMKALg==
-----END CERTIFICATE-----
Generated at Wed Sep 23 17:25:42 2026 by rpki-client