Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
File: SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft (raw, json)
Hash identifier: VyPAcq7q6AZRtod4Olg9Js/CZwgvo2oSJP4D7DAVQFw=
Subject key identifier: 16:46:5C:11:61:D7:1B:CC:A1:C6:48:21:77:E1:57:E4:D8:E4:52:27
Authority key identifier: 48:5D:DB:67:8C:4C:0D:0C:48:8E:FD:3B:83:67:14:21:89:F3:35:8A
Certificate issuer: /CN=485ddb678c4c0d0c488efd3b8367142189f3358a
Certificate serial: 019DA30AF2D0DFCA83EFE8D48F6539771ADC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
Manifest number: 08A6
Signing time: Sun 19 Apr 2026 00:01:36 +0000
Manifest this update: Sun 19 Apr 2026 00:01:36 +0000
Manifest next update: Mon 20 Apr 2026 00:01:36 +0000
Files and hashes: 1: 3jYKnkkcPN6zosdPDC704_TH7Vg.roa (hash: kX0KO9Whng4G4PQyxbPg/tClDSCWlQb64Svmgd3bElg=)
2: SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl (hash: wyHt093EFe0OblCRIwsFfSAGUcGX39lsBrNT9BFupCg=)
3: d7BNBvtBybD-ouMBr6YNcUi45jE.roa (hash: z33gEnZ5ORYGaYJCcJZ5qtqJlEn1QrL+f98X4D8eWjU=)
4: r_AxxcY8QiH2nWS9CL04AgPUmsY.roa (hash: l8fqDJAdHfTIgiiJd3kewidzUv4M6LymruB3QWo/rdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:f2:d0:df:ca:83:ef:e8:d4:8f:65:39:77:1a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485ddb678c4c0d0c488efd3b8367142189f3358a
Validity
Not Before: Apr 19 00:01:36 2026 GMT
Not After : Apr 20 00:01:36 2026 GMT
Subject: CN=16465c1161d71bcca1c6482177e157e4d8e45227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3e:a9:64:36:eb:b6:11:9a:8a:ce:f2:64:8d:
ec:fd:0a:a2:df:e1:f9:c1:77:38:17:85:35:4f:55:
df:33:00:d4:15:5f:41:17:45:75:37:9d:6e:90:bf:
2c:c2:c3:bc:d5:c6:98:db:8e:c6:23:24:21:8a:da:
1f:00:b5:ec:1d:47:b4:28:5f:40:b2:9b:f6:95:0a:
01:e6:7a:e7:9f:48:2f:02:26:a1:18:01:df:67:c1:
50:4c:f9:52:08:bf:79:35:2b:d3:f0:94:27:46:17:
45:5c:99:88:c4:d0:1b:6b:af:93:36:04:f0:c4:3d:
19:fd:08:05:aa:37:67:d3:51:13:18:e1:92:88:a2:
c4:b3:21:bf:90:5c:e5:f2:5b:4c:79:f1:3d:b8:e1:
00:9e:69:be:f6:41:f3:17:e4:0c:23:33:82:7b:07:
09:3e:f7:75:d8:89:a5:04:2c:5a:db:48:60:44:57:
ff:d3:c1:e9:fe:1c:d4:58:be:2c:61:68:6d:4b:4b:
11:8e:42:e8:d3:7b:6e:57:62:07:9d:c2:08:b4:0b:
9f:11:db:49:c9:97:bb:39:62:14:b4:e8:1c:ce:6b:
ed:5b:20:b8:4c:e1:b1:44:3b:6f:55:e5:0a:0a:ef:
53:28:0a:fa:2f:10:e5:7b:fc:28:5b:2f:9e:15:a2:
35:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:46:5C:11:61:D7:1B:CC:A1:C6:48:21:77:E1:57:E4:D8:E4:52:27
X509v3 Authority Key Identifier:
keyid:48:5D:DB:67:8C:4C:0D:0C:48:8E:FD:3B:83:67:14:21:89:F3:35:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:62:07:50:66:50:0a:b2:61:5d:08:d7:6b:c4:02:0c:6a:7b:
a3:57:7b:3f:bb:a9:0c:41:f2:21:26:e4:6e:82:ed:da:d6:00:
40:6c:e5:fa:7f:6e:40:f7:13:b4:67:8e:86:eb:72:7f:7b:4a:
58:64:19:2f:10:43:49:f3:6c:ac:47:8a:96:3a:85:ce:f9:43:
53:cf:3f:b4:7a:40:5d:bb:e0:d1:98:fe:d0:bc:06:6a:bb:5e:
80:6a:04:f8:d6:86:c3:af:37:93:ff:61:46:12:bb:0d:a8:4c:
4b:ad:9b:6c:2a:01:35:cb:95:4a:ca:42:e8:8b:c6:0e:13:d2:
66:97:b3:16:50:63:e4:56:1b:76:ca:f1:45:9c:c6:89:6f:0b:
18:a7:dc:b7:4e:c3:dc:aa:d1:8b:14:cd:fd:00:40:bd:b5:19:
9f:7b:ad:79:09:20:dc:bc:a0:f8:92:82:dd:df:33:5f:3e:f9:
11:37:3a:43:88:4f:05:14:28:46:95:22:11:60:93:e0:24:7a:
74:01:92:72:43:80:84:c9:c4:05:8c:64:5f:a4:aa:d9:6e:ce:
86:fd:11:c6:e4:b8:19:55:e7:23:73:d6:0d:88:47:0f:54:82:
87:d0:87:f5:30:07:60:05:0e:a5:f9:18:80:de:72:32:88:78:
7a:42:d0:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jCvLQ38qD7+jUj2U5dxrcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4NWRkYjY3OGM0YzBkMGM0ODhlZmQzYjgzNjcxNDIxODlm
MzM1OGEwHhcNMjYwNDE5MDAwMTM2WhcNMjYwNDIwMDAwMTM2WjAzMTEwLwYDVQQD
EygxNjQ2NWMxMTYxZDcxYmNjYTFjNjQ4MjE3N2UxNTdlNGQ4ZTQ1MjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApz6pZDbrthGais7yZI3s/Qqi3+H5
wXc4F4U1T1XfMwDUFV9BF0V1N51ukL8swsO81caY247GIyQhitofALXsHUe0KF9A
spv2lQoB5nrnn0gvAiahGAHfZ8FQTPlSCL95NSvT8JQnRhdFXJmIxNAba6+TNgTw
xD0Z/QgFqjdn01ETGOGSiKLEsyG/kFzl8ltMefE9uOEAnmm+9kHzF+QMIzOCewcJ
Pvd12ImlBCxa20hgRFf/08Hp/hzUWL4sYWhtS0sRjkLo03tuV2IHncIItAufEdtJ
yZe7OWIUtOgczmvtWyC4TOGxRDtvVeUKCu9TKAr6LxDle/woWy+eFaI1tQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBZGXBFh1xvMocZIIXfhV+TY5FInMB8GA1UdIwQY
MBaAFEhd22eMTA0MSI79O4NnFCGJ8zWKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0YzYlo0eE1EUXhJanYwN2cyY1VJWW56TllvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9iZWIyMDAtZTVkNi00Njk2LWFlMjUt
ZGViZmNkOWViMjBlLzEvU0YzYlo0eE1EUXhJanYwN2cyY1VJWW56TllvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9iZWIyMDAtZTVkNi00Njk2LWFlMjUtZGViZmNkOWViMjBl
LzEvU0YzYlo0eE1EUXhJanYwN2cyY1VJWW56TllvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcmIHUGZQ
CrJhXQjXa8QCDGp7o1d7P7upDEHyISbkboLt2tYAQGzl+n9uQPcTtGeOhutyf3tK
WGQZLxBDSfNsrEeKljqFzvlDU88/tHpAXbvg0Zj+0LwGartegGoE+NaGw683k/9h
RhK7DahMS62bbCoBNcuVSspC6IvGDhPSZpezFlBj5FYbdsrxRZzGiW8LGKfct07D
3KrRixTN/QBAvbUZn3uteQkg3Lyg+JKC3d8zXz75ETc6Q4hPBRQoRpUiEWCT4CR6
dAGSckOAhMnEBYxkX6Sq2W7Ohv0RxuS4GVXnI3PWDYhHD1SCh9CH9TAHYAUOpfkY
gN5yMoh4ekLQLg==
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:04:12 2026 by rpki-client