Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft
File: sCJf0DWnzmSnyIveca61YPNIOXQ.mft (raw, json)
Hash identifier: qApzUTdNW8KRtSZkJ2dpcJRGVNgansebNoA6l9rMNDo=
Subject key identifier: A3:1D:1D:CB:9C:DD:23:78:11:29:A8:97:00:82:11:41:0C:F0:9F:FF
Authority key identifier: B0:22:5F:D0:35:A7:CE:64:A7:C8:8B:DE:71:AE:B5:60:F3:48:39:74
Certificate issuer: /CN=b0225fd035a7ce64a7c88bde71aeb560f3483974
Certificate serial: 019D9A74F809A7BDB08CE9E0967C4B5C9A3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft
Manifest number: 01E5
Signing time: Fri 17 Apr 2026 08:00:49 +0000
Manifest this update: Fri 17 Apr 2026 08:00:49 +0000
Manifest next update: Sat 18 Apr 2026 08:00:49 +0000
Files and hashes: 1: 75dJ9l9pm2mLQKlmsqkMPbP5nLU.roa (hash: y9JQO9ERriwN1YTQ2JmQZB4kivefmPeXhn7RTehloi0=)
2: AEeBq3XFkbn8pyHJEeb3isWEmIA.roa (hash: gkDvS6y+2rhPnDPFUFxFEdfe5IUZN7R+qqVkzML65dE=)
3: IIIXZtSualOwJL3v5moeDxfjfvI.roa (hash: 7rMLEXqsuij2IE2v0cNkJojz7+yY0hLnMUTfWDw4n9Q=)
4: S8PqQWvAZE-e0h1xwtiuNTE5rHY.roa (hash: w5hcZAmF4buAGhakgXjQA0sa4vpLG5fCK2GR/ajM+u0=)
5: dNXYaX82NX51pSFvpQpCqsG2lPo.roa (hash: 35cWo5gZ7UeSrOUHr9i+uJyPsLCbl8OtXgjF+qTOIsg=)
6: sCJf0DWnzmSnyIveca61YPNIOXQ.crl (hash: g6ywSUFfw9DtVLu/Xudzs4+1cxE/mAw+4YnUFImZsW8=)
7: wJQhpUcYRE9YbrS1hrhEwceSpsw.roa (hash: pKy+CJ0dPgWvUI++SXNGLH/W/2Tj4mADcaq6t4MuXsE=)
8: wPOPfa9gC7Gx-gFnDub7_hrEhi4.roa (hash: VxkO6fBbTYMBO4jXH/JD3dN5+ZLMhiKDYjCspmghV5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:f8:09:a7:bd:b0:8c:e9:e0:96:7c:4b:5c:9a:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0225fd035a7ce64a7c88bde71aeb560f3483974
Validity
Not Before: Apr 17 08:00:49 2026 GMT
Not After : Apr 18 08:00:49 2026 GMT
Subject: CN=a31d1dcb9cdd23781129a897008211410cf09fff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:66:59:17:c5:3b:4f:94:f9:08:fd:b2:15:ac:
15:de:b4:cb:be:fc:10:58:c8:29:52:9f:45:82:11:
d2:77:66:6c:97:c6:f0:d8:bb:a6:51:ea:b9:de:8d:
82:9b:03:71:7a:8a:b1:e4:1e:63:1f:14:1d:d9:53:
b6:d3:9e:ff:50:16:68:89:5c:f1:8b:90:fa:20:2e:
3a:93:71:0f:6c:4b:86:b8:8a:da:2b:ae:2d:53:ee:
8e:54:49:35:e8:98:7e:27:30:f1:cd:ea:df:fd:09:
44:a4:f2:4d:7c:08:5a:d5:5a:ae:97:1d:12:60:c9:
a3:55:93:59:4d:b5:50:09:c9:fa:e4:95:aa:52:8d:
b8:da:c4:9a:79:96:4c:74:7f:ab:e5:d1:62:1c:5d:
a1:53:b1:3e:9c:b7:93:8f:51:fa:04:d9:c0:c2:ef:
44:a4:d6:47:d2:9b:90:6b:3f:49:26:52:61:f1:c9:
f5:4c:46:40:4f:9e:d6:ce:cd:68:bd:35:3d:64:12:
e4:d1:a8:3a:d3:38:e5:68:69:1b:0d:aa:0f:84:db:
49:5c:1e:7d:1f:ce:ee:90:3f:8e:c0:67:e7:3e:e6:
55:f6:46:f6:0e:ee:84:6d:64:65:0c:d5:78:ed:a2:
8f:a8:27:17:b3:e4:0d:4e:4b:f8:f5:74:6a:00:48:
1c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:1D:1D:CB:9C:DD:23:78:11:29:A8:97:00:82:11:41:0C:F0:9F:FF
X509v3 Authority Key Identifier:
keyid:B0:22:5F:D0:35:A7:CE:64:A7:C8:8B:DE:71:AE:B5:60:F3:48:39:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:93:c7:d6:ee:8f:d0:ff:09:45:c0:6b:f6:57:70:34:e7:28:
a0:25:75:93:e8:7f:fe:f3:dd:73:a2:0e:0b:4c:47:23:12:8c:
ad:72:7e:a3:42:3d:d4:91:8c:80:2b:f1:81:8f:58:89:ec:1e:
13:97:27:8e:3e:c4:30:36:84:18:09:81:f7:b6:71:77:c4:6e:
39:b7:4c:93:6d:75:cd:16:88:60:e2:f2:ae:86:0a:97:37:64:
48:cc:a0:6e:0b:7c:6c:c7:0e:ab:b0:b2:e8:a7:7a:3d:43:6b:
db:97:3f:7a:f1:ec:6f:9d:11:ed:75:b8:65:6f:27:fc:f3:f3:
05:2f:b9:42:6b:c9:fa:6f:8f:88:41:91:76:74:21:2d:a5:76:
1c:27:19:46:17:73:48:3c:9b:0d:38:7b:6c:0c:ef:ea:be:06:
bd:5b:80:0b:5d:52:bc:ed:6d:d7:63:c1:23:48:a3:60:0f:da:
a7:05:c0:da:80:97:c0:ef:51:e5:81:78:e5:6a:37:e7:ca:e8:
e4:8f:8d:aa:ad:95:1d:27:44:c3:a8:37:8e:da:c3:4e:44:d8:
4c:78:2f:48:36:a2:8b:f4:ca:2a:dc:c3:c2:88:73:a9:32:44:
be:9e:3c:9f:16:c7:f8:91:2f:5f:c3:8a:1f:45:61:80:b5:7a:
a1:ea:e7:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2adPgJp72wjOnglnxLXJo7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwMjI1ZmQwMzVhN2NlNjRhN2M4OGJkZTcxYWViNTYwZjM0
ODM5NzQwHhcNMjYwNDE3MDgwMDQ5WhcNMjYwNDE4MDgwMDQ5WjAzMTEwLwYDVQQD
EyhhMzFkMWRjYjljZGQyMzc4MTEyOWE4OTcwMDgyMTE0MTBjZjA5ZmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2ZZF8U7T5T5CP2yFawV3rTLvvwQ
WMgpUp9FghHSd2Zsl8bw2LumUeq53o2CmwNxeoqx5B5jHxQd2VO2057/UBZoiVzx
i5D6IC46k3EPbEuGuIraK64tU+6OVEk16Jh+JzDxzerf/QlEpPJNfAha1Vqulx0S
YMmjVZNZTbVQCcn65JWqUo242sSaeZZMdH+r5dFiHF2hU7E+nLeTj1H6BNnAwu9E
pNZH0puQaz9JJlJh8cn1TEZAT57Wzs1ovTU9ZBLk0ag60zjlaGkbDaoPhNtJXB59
H87ukD+OwGfnPuZV9kb2Du6EbWRlDNV47aKPqCcXs+QNTkv49XRqAEgckwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKMdHcuc3SN4ESmolwCCEUEM8J//MB8GA1UdIwQY
MBaAFLAiX9A1p85kp8iL3nGutWDzSDl0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0NKZjBEV256bVNueUl2ZWNhNjFZUE5JT1hRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9jNDYyNzgtZTFkMC00ZGM3LTk4Yzct
NDQzZTRiYWI3ZGU2LzEvc0NKZjBEV256bVNueUl2ZWNhNjFZUE5JT1hRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9jNDYyNzgtZTFkMC00ZGM3LTk4YzctNDQzZTRiYWI3ZGU2
LzEvc0NKZjBEV256bVNueUl2ZWNhNjFZUE5JT1hRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMZPH1u6P
0P8JRcBr9ldwNOcooCV1k+h//vPdc6IOC0xHIxKMrXJ+o0I91JGMgCvxgY9Yiewe
E5cnjj7EMDaEGAmB97Zxd8RuObdMk211zRaIYOLyroYKlzdkSMygbgt8bMcOq7Cy
6Kd6PUNr25c/evHsb50R7XW4ZW8n/PPzBS+5QmvJ+m+PiEGRdnQhLaV2HCcZRhdz
SDybDTh7bAzv6r4GvVuAC11SvO1t12PBI0ijYA/apwXA2oCXwO9R5YF45Wo358ro
5I+Nqq2VHSdEw6g3jtrDTkTYTHgvSDaii/TKKtzDwohzqTJEvp48nxbH+JEvX8OK
H0VhgLV6oernng==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:54:57 2026 by rpki-client