Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.mft
File: SAw7k_8qNPv6WuglVvZwNAy11ck.mft (raw, json)
Hash identifier: DGGGIfRq35SLwLfuWPA8N0mySixzZI384aFkTQMlNnY=
Subject key identifier: F0:C8:F8:47:F1:16:A0:EA:C5:68:A2:62:2C:9F:AD:79:0B:CE:C1:0B
Authority key identifier: 48:0C:3B:93:FF:2A:34:FB:FA:5A:E8:25:56:F6:70:34:0C:B5:D5:C9
Certificate issuer: /CN=480c3b93ff2a34fbfa5ae82556f670340cb5d5c9
Certificate serial: 01A0D3B85D4F3343251F7BA1F3036E3B4C25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAw7k_8qNPv6WuglVvZwNAy11ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.mft
Manifest number: 1A6E
Signing time: Thu 24 Sep 2026 14:01:09 +0000
Manifest this update: Thu 24 Sep 2026 14:01:09 +0000
Manifest next update: Fri 25 Sep 2026 14:01:09 +0000
Files and hashes: 1: O0d4AJLZUHgcGy1VxJh3yfRZ8JM.roa (hash: mRjHVDH2yxnkGdxPRkyTQ4ZPW9vJVfEatCU81GhzSgo=)
2: SAw7k_8qNPv6WuglVvZwNAy11ck.crl (hash: rjTMixWPoHmhfey5kEmlQMEH92+K+0dWlYiSL+oe9JE=)
3: qaQdus1BOleDA5YBatWLdmpF4V8.roa (hash: qoEh+iI2D1MSwoWJBnblgqwJNtj9VkryalvSfDPlSuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAw7k_8qNPv6WuglVvZwNAy11ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:b8:5d:4f:33:43:25:1f:7b:a1:f3:03:6e:3b:4c:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480c3b93ff2a34fbfa5ae82556f670340cb5d5c9
Validity
Not Before: Sep 24 14:01:09 2026 GMT
Not After : Sep 25 14:01:09 2026 GMT
Subject: CN=f0c8f847f116a0eac568a2622c9fad790bcec10b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:63:2b:f2:08:81:14:d7:8e:65:cf:56:b7:d9:
43:8e:05:5a:15:6c:06:72:58:29:80:4a:77:0a:68:
90:6b:0c:41:40:61:60:b9:b1:2d:81:68:82:44:21:
ad:8a:ca:86:80:7f:63:5d:05:15:62:39:45:0b:05:
1a:67:43:39:d3:fb:8f:ba:1f:56:1d:0d:b2:74:85:
35:ed:59:e4:30:f0:14:66:8e:9c:02:81:11:58:08:
23:18:e9:4c:9e:63:0d:50:cc:b6:ed:c7:fa:b9:81:
f2:c5:12:40:34:a4:35:b1:3a:6f:c6:de:40:a6:d1:
87:c5:57:7f:c3:98:ea:d2:5f:b9:69:77:c5:66:9d:
80:db:c3:b1:b5:92:af:0a:7b:79:e9:c6:46:4a:c8:
3b:a1:3b:4a:aa:f6:75:96:3a:b0:5d:77:0b:6f:03:
30:89:9c:e8:c4:ad:76:4b:b1:4d:e5:a1:18:4d:3a:
62:04:18:f9:24:e7:e5:22:02:d1:22:87:b0:c2:09:
c0:b3:6c:85:72:cf:8c:87:e1:fb:7f:c9:81:67:e0:
87:98:f4:65:eb:9f:99:87:7d:8e:91:70:40:f5:60:
ab:76:9d:fe:2d:77:19:81:1c:e3:ff:d5:b4:d7:e2:
39:64:e1:16:ba:a0:75:db:20:1c:ed:07:20:8f:a6:
8a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C8:F8:47:F1:16:A0:EA:C5:68:A2:62:2C:9F:AD:79:0B:CE:C1:0B
X509v3 Authority Key Identifier:
keyid:48:0C:3B:93:FF:2A:34:FB:FA:5A:E8:25:56:F6:70:34:0C:B5:D5:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAw7k_8qNPv6WuglVvZwNAy11ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:40:72:da:b1:c8:5e:b8:18:b7:b1:2e:85:1e:38:e9:67:d7:
43:91:a7:bb:89:22:23:01:d4:d4:65:36:e3:9b:1a:24:70:e7:
9d:4f:7c:49:21:6b:35:3c:44:20:ee:78:1f:5d:cc:e4:b5:a2:
12:a7:6d:06:98:a9:63:03:0b:7d:5f:fe:93:77:a0:07:99:17:
96:5a:9c:71:4c:51:26:01:ec:80:89:c5:d0:6f:5b:c8:de:6a:
d7:7d:81:f6:37:6c:5a:5e:ca:0e:4f:5c:d5:2f:6f:c8:44:54:
e8:17:e5:37:62:20:b8:30:71:0f:a5:82:4b:d3:d3:4c:43:dc:
ab:71:78:3f:92:9e:85:16:45:d3:2c:58:a6:fe:e8:47:53:54:
80:a7:2a:55:24:3e:78:c7:90:8d:24:9f:44:36:69:e8:26:24:
8b:5a:89:42:b5:67:10:bb:73:ec:b0:34:23:e1:41:4b:b1:d7:
fb:f9:8c:11:b2:ef:5f:57:16:cb:bd:21:ce:29:46:78:14:19:
05:ae:17:9c:2d:50:ff:9e:fd:6a:16:79:21:8e:69:62:f6:d1:
b5:2c:34:62:82:6d:8c:1e:91:75:0f:bb:88:b9:80:6d:6c:44:
98:23:78:7b:07:05:b3:4b:d1:f0:2b:c0:da:a4:cc:3a:37:21:
3a:91:5e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:55:26 2026 by rpki-client