Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/Sfkz_HMtQhKMPIiz3g5IypSs3X4.mft
File: Sfkz_HMtQhKMPIiz3g5IypSs3X4.mft (raw, json)
Hash identifier: QKXY11XP1CoCwIA4HoTNcb4iHMQh/i2kHWtZHMGcj/A=
Subject key identifier: 8E:70:12:AC:4E:24:E1:BB:0B:11:A6:59:8E:F0:77:2C:F2:9F:5E:F3
Authority key identifier: 49:F9:33:FC:73:2D:42:12:8C:3C:88:B3:DE:0E:48:CA:94:AC:DD:7E
Certificate issuer: /CN=49f933fc732d42128c3c88b3de0e48ca94acdd7e
Certificate serial: 01A0C85972FE642F5127263FBFB3C81CD7C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sfkz_HMtQhKMPIiz3g5IypSs3X4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/Sfkz_HMtQhKMPIiz3g5IypSs3X4.mft
Manifest number: E1
Signing time: Tue 22 Sep 2026 09:01:40 +0000
Manifest this update: Tue 22 Sep 2026 09:01:40 +0000
Manifest next update: Wed 23 Sep 2026 09:01:40 +0000
Files and hashes: 1: B4CslqeFh_G7kj31dFxVS_tQHdk.roa (hash: MrHNRAPoEgRUnj3uJCShn3/l5/jArte2wDeGYtIzlP0=)
2: IIzVxtmDhdZdhpAbkL-ndC6CsU4.roa (hash: CQ228xdqWMGw11CGwR9Uzvgy1Q7ztTnBAHC18ATjAq4=)
3: NzEbjZMTTNc2f7hUh_DfDiEmK50.roa (hash: LA2UVOwQLl1GFakMw+qYipgL+jCj7BhKjZLnryCHmW0=)
4: Sfkz_HMtQhKMPIiz3g5IypSs3X4.crl (hash: RvHLTmps+l62H2BTZGMBCcbs7d7GjEyMZv7ift1fbMU=)
5: SwlwWC6qeIOhSte4Utz7PdUgqHg.roa (hash: yli4qoeWd8be0mGTI1Qdhmlvgjg03i5HcPN89QNf6ro=)
6: YV9r1QeLQLzsNDA1e3nBSw4JJKg.roa (hash: DakRO0YaXIPdaZGDlB/0rhFuDBB490F3NKmIPT2J1GQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/Sfkz_HMtQhKMPIiz3g5IypSs3X4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/Sfkz_HMtQhKMPIiz3g5IypSs3X4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sfkz_HMtQhKMPIiz3g5IypSs3X4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 09:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:59:72:fe:64:2f:51:27:26:3f:bf:b3:c8:1c:d7:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f933fc732d42128c3c88b3de0e48ca94acdd7e
Validity
Not Before: Sep 22 09:01:40 2026 GMT
Not After : Sep 23 09:01:40 2026 GMT
Subject: CN=8e7012ac4e24e1bb0b11a6598ef0772cf29f5ef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a6:4c:e6:5c:53:61:51:d5:dc:17:2c:a9:aa:
fa:cf:03:19:c2:4d:96:96:63:9c:72:dc:e9:93:c8:
8b:7e:6e:e1:68:1b:cc:3a:ad:b1:a2:a4:ae:88:6f:
9f:a4:9e:c6:63:f8:3f:1e:19:26:71:fa:94:9d:cd:
c0:06:8c:e3:27:e5:69:a5:6f:7a:4d:32:0f:4a:f3:
04:0a:00:46:2a:77:05:8b:d4:af:04:e2:cf:79:3a:
21:ee:b1:bf:1c:ac:8a:cd:48:7a:a2:c3:2c:08:b0:
6b:01:9d:10:72:8c:9b:70:47:79:0b:2a:7f:d2:e2:
9e:73:2c:5d:e9:79:2a:48:7b:9f:a9:4c:39:ac:0f:
03:4e:dc:0a:c3:f9:b3:b7:59:c0:60:2d:ac:22:24:
85:3a:aa:ee:09:7d:a0:46:9d:e9:d5:57:3d:cb:8e:
18:0f:b5:74:4d:4b:0c:ef:bf:bb:97:32:d8:a3:dc:
d8:a7:da:0e:ab:4e:3b:bf:dc:8c:40:84:11:40:77:
d4:c9:26:0f:e4:e0:e0:04:bb:61:95:55:20:eb:d2:
69:79:02:b6:6f:15:fe:a5:76:35:9c:94:62:4e:4d:
ec:16:b7:ae:c0:21:0f:6b:6b:4c:0b:78:e0:11:f1:
8e:e1:ef:57:bd:62:d4:49:7b:25:51:4c:4c:48:d2:
5e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:70:12:AC:4E:24:E1:BB:0B:11:A6:59:8E:F0:77:2C:F2:9F:5E:F3
X509v3 Authority Key Identifier:
keyid:49:F9:33:FC:73:2D:42:12:8C:3C:88:B3:DE:0E:48:CA:94:AC:DD:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sfkz_HMtQhKMPIiz3g5IypSs3X4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/Sfkz_HMtQhKMPIiz3g5IypSs3X4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/Sfkz_HMtQhKMPIiz3g5IypSs3X4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:8f:95:ef:b1:e8:60:2d:ce:e3:0f:33:d8:dc:fa:a7:d4:cf:
6b:11:27:3c:90:4d:88:f7:a2:f8:96:49:91:d7:0a:fa:a7:2c:
5b:e5:7e:74:2a:25:df:09:0f:46:2a:0f:3f:5e:1c:42:65:d4:
4a:d4:71:51:f1:60:68:e5:b1:99:16:10:39:33:60:31:c5:02:
03:fe:b7:a7:f3:ea:52:ba:de:c8:50:9d:9a:7e:c9:0a:9c:11:
23:88:0f:32:62:ab:06:7a:a0:a3:c7:50:52:b4:64:d1:8a:d5:
cc:99:e6:7f:d2:7e:2c:dc:ae:69:bf:13:c7:2a:f4:33:9a:d9:
a0:9e:05:7a:a5:ea:b9:81:20:6e:b9:09:58:db:47:16:f6:74:
05:d5:9c:02:5e:ce:fd:a5:59:99:dd:ee:7d:4f:ee:5a:df:fa:
f8:a3:da:b1:ef:46:a7:bf:88:6f:bb:8e:03:cf:20:17:cb:20:
45:50:2b:05:c4:2b:85:4a:61:3e:a2:9c:45:c8:0d:a9:94:80:
98:bb:4d:0b:ee:ce:11:1e:44:9b:f8:3f:e7:34:73:ac:ee:92:
38:05:60:ef:f3:db:53:fe:f7:6e:c0:82:cd:63:8f:34:53:09:
da:01:88:8a:9d:c0:c2:1d:15:ee:75:d4:be:1d:e4:73:56:1c:
73:02:1b:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDIWXL+ZC9RJyY/v7PIHNfCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZjkzM2ZjNzMyZDQyMTI4YzNjODhiM2RlMGU0OGNhOTRh
Y2RkN2UwHhcNMjYwOTIyMDkwMTQwWhcNMjYwOTIzMDkwMTQwWjAzMTEwLwYDVQQD
Eyg4ZTcwMTJhYzRlMjRlMWJiMGIxMWE2NTk4ZWYwNzcyY2YyOWY1ZWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqZM5lxTYVHV3Bcsqar6zwMZwk2W
lmOcctzpk8iLfm7haBvMOq2xoqSuiG+fpJ7GY/g/HhkmcfqUnc3ABozjJ+VppW96
TTIPSvMECgBGKncFi9SvBOLPeToh7rG/HKyKzUh6osMsCLBrAZ0QcoybcEd5Cyp/
0uKecyxd6XkqSHufqUw5rA8DTtwKw/mzt1nAYC2sIiSFOqruCX2gRp3p1Vc9y44Y
D7V0TUsM77+7lzLYo9zYp9oOq047v9yMQIQRQHfUySYP5ODgBLthlVUg69JpeQK2
bxX+pXY1nJRiTk3sFreuwCEPa2tMC3jgEfGO4e9XvWLUSXslUUxMSNJeJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI5wEqxOJOG7CxGmWY7wdyzyn17zMB8GA1UdIwQY
MBaAFEn5M/xzLUISjDyIs94OSMqUrN1+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2Zrel9ITXRRaEtNUElpejNnNUl5cFNzM1g0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS81OGU2NTUtZTcxMy00NWQyLTk1OGEt
MTgyMjg2N2UxNTk2LzEvU2Zrel9ITXRRaEtNUElpejNnNUl5cFNzM1g0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS81OGU2NTUtZTcxMy00NWQyLTk1OGEtMTgyMjg2N2UxNTk2
LzEvU2Zrel9ITXRRaEtNUElpejNnNUl5cFNzM1g0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL4+V77Ho
YC3O4w8z2Nz6p9TPaxEnPJBNiPei+JZJkdcK+qcsW+V+dCol3wkPRioPP14cQmXU
StRxUfFgaOWxmRYQOTNgMcUCA/63p/PqUrreyFCdmn7JCpwRI4gPMmKrBnqgo8dQ
UrRk0YrVzJnmf9J+LNyuab8Txyr0M5rZoJ4FeqXquYEgbrkJWNtHFvZ0BdWcAl7O
/aVZmd3ufU/uWt/6+KPase9Gp7+Ib7uOA88gF8sgRVArBcQrhUphPqKcRcgNqZSA
mLtNC+7OER5Em/g/5zRzrO6SOAVg7/PbU/73bsCCzWOPNFMJ2gGIip3Awh0V7nXU
vh3kc1YccwIbFQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 17:22:03 2026 by rpki-client