Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft
File: sWq92UIPBLqcHNLDTcezUpiK-Nk.mft (raw, json)
Hash identifier: YUT8nCLh4NjteosUtuVUs9Lb+7x0mRdujg3Q7lBSIEw=
Subject key identifier: DE:A3:18:4D:5E:E8:66:FE:31:E3:9B:96:F0:8E:90:0F:28:B6:50:C1
Authority key identifier: B1:6A:BD:D9:42:0F:04:BA:9C:1C:D2:C3:4D:C7:B3:52:98:8A:F8:D9
Certificate issuer: /CN=b16abdd9420f04ba9c1cd2c34dc7b352988af8d9
Certificate serial: 01A133A2A9547ED36DCAE1FD5B2C8CC3EBD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWq92UIPBLqcHNLDTcezUpiK-Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft
Manifest number: 17DC
Signing time: Tue 13 Oct 2026 05:01:00 +0000
Manifest this update: Tue 13 Oct 2026 05:01:00 +0000
Manifest next update: Wed 14 Oct 2026 05:01:00 +0000
Files and hashes: 1: 0WZc2xB5hVDGIEXjZ-HhqIhObPU.roa (hash: yv7agGUqeUNNQCncCwHxi4NpbbYoTQ6AYByrG78CfM4=)
2: sWq92UIPBLqcHNLDTcezUpiK-Nk.crl (hash: 49wvN/E0LFPYx2HMqp+0UPcoRZVDWiDDGkjgj4I3t1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sWq92UIPBLqcHNLDTcezUpiK-Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:33:a2:a9:54:7e:d3:6d:ca:e1:fd:5b:2c:8c:c3:eb:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b16abdd9420f04ba9c1cd2c34dc7b352988af8d9
Validity
Not Before: Oct 13 05:01:00 2026 GMT
Not After : Oct 14 05:01:00 2026 GMT
Subject: CN=dea3184d5ee866fe31e39b96f08e900f28b650c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:20:a8:ff:1e:df:6b:35:c1:01:34:ba:0a:06:
0a:8d:1a:9a:56:5a:ff:31:79:13:95:bf:a0:90:1f:
0b:74:55:5b:bd:c3:48:f8:63:d9:32:33:78:b5:77:
b6:48:c9:4f:7b:b9:d1:6c:a3:09:b9:46:00:79:70:
8a:43:40:8f:f4:ba:26:b1:c0:a0:e7:00:2b:3b:e0:
5b:f2:c3:ad:12:b7:83:9f:fc:8f:22:ec:22:1a:77:
76:e3:ce:3f:2d:0e:7f:5a:c5:3b:17:41:5b:d7:c6:
c6:dd:05:c6:62:af:24:f9:3c:33:93:a7:76:9c:70:
a2:59:91:89:1a:d0:34:08:41:eb:73:8a:b7:10:85:
1d:83:03:48:12:e3:2a:9c:ad:c8:de:aa:1a:91:70:
da:62:51:38:46:e8:c3:25:fc:c7:09:f2:fa:46:34:
08:63:c3:95:79:06:23:4f:38:27:0d:2d:45:a7:77:
7b:32:39:72:53:ea:11:d8:50:c0:14:e0:60:d8:82:
6c:ac:cc:c3:dd:1f:30:a4:66:9f:82:2e:c6:ea:6d:
17:c5:e4:95:29:82:32:c2:e1:59:a6:49:c1:58:1f:
8a:6a:af:b5:cd:1b:96:28:54:ba:0f:5e:d5:2d:88:
25:7a:0b:59:ca:b3:91:47:64:11:93:fb:ae:7a:c1:
1a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A3:18:4D:5E:E8:66:FE:31:E3:9B:96:F0:8E:90:0F:28:B6:50:C1
X509v3 Authority Key Identifier:
keyid:B1:6A:BD:D9:42:0F:04:BA:9C:1C:D2:C3:4D:C7:B3:52:98:8A:F8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWq92UIPBLqcHNLDTcezUpiK-Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:05:e9:1a:6a:b8:c4:7f:58:b9:a9:f1:0c:10:d2:9c:2e:eb:
f1:78:19:f9:84:58:5b:d6:5a:20:e9:ae:56:d8:f2:57:16:4a:
30:72:b7:81:ab:b1:1d:58:fe:9b:87:39:44:df:9e:7f:61:a5:
10:8e:81:eb:14:59:fe:a5:b8:36:f8:1f:92:05:4c:b4:8d:36:
61:74:7a:09:ab:84:74:0f:8c:34:b2:93:f3:a4:2d:6b:03:e0:
73:a4:f4:81:04:ec:41:6d:d6:b0:5b:57:b0:7b:cc:83:cc:ea:
47:94:1c:da:53:8f:58:33:ad:ae:d6:e1:f8:d2:47:52:b5:e1:
3f:8c:d0:0e:f8:7a:15:bd:d3:57:b5:04:b6:af:0b:d7:a1:9a:
55:ae:5e:c3:5c:f0:7b:dc:da:99:22:d6:4d:36:ab:d5:25:e7:
04:be:0f:18:bb:2e:78:bd:7e:02:d4:9e:40:4e:e1:9f:75:29:
60:fc:e7:db:a7:1e:ab:c1:e4:85:bf:a0:68:f3:87:67:49:9b:
0e:fb:52:a1:7c:bd:84:4e:55:b2:56:31:1f:4e:72:7c:30:32:
0f:1f:b9:46:3e:70:64:bd:d2:74:af:66:c5:76:e2:d3:fa:f9:
91:9f:d4:b3:42:3f:b6:fc:f4:04:dd:f2:92:3f:bc:35:2a:01:
36:f2:b9:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEzoqlUftNtyuH9WyyMw+vXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNmFiZGQ5NDIwZjA0YmE5YzFjZDJjMzRkYzdiMzUyOTg4
YWY4ZDkwHhcNMjYxMDEzMDUwMTAwWhcNMjYxMDE0MDUwMTAwWjAzMTEwLwYDVQQD
EyhkZWEzMTg0ZDVlZTg2NmZlMzFlMzliOTZmMDhlOTAwZjI4YjY1MGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCCo/x7fazXBATS6CgYKjRqaVlr/
MXkTlb+gkB8LdFVbvcNI+GPZMjN4tXe2SMlPe7nRbKMJuUYAeXCKQ0CP9LomscCg
5wArO+Bb8sOtEreDn/yPIuwiGnd2484/LQ5/WsU7F0Fb18bG3QXGYq8k+Twzk6d2
nHCiWZGJGtA0CEHrc4q3EIUdgwNIEuMqnK3I3qoakXDaYlE4RujDJfzHCfL6RjQI
Y8OVeQYjTzgnDS1Fp3d7MjlyU+oR2FDAFOBg2IJsrMzD3R8wpGafgi7G6m0XxeSV
KYIywuFZpknBWB+Kaq+1zRuWKFS6D17VLYglegtZyrORR2QRk/uuesEaQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN6jGE1e6Gb+MeOblvCOkA8otlDBMB8GA1UdIwQY
MBaAFLFqvdlCDwS6nBzSw03Hs1KYivjZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1dxOTJVSVBCTHFjSE5MRFRjZXpVcGlLLU5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8yYWRjMzktMzYzMC00MjVmLWFmMjkt
ZmJiMGQzYzEwNDIzLzEvc1dxOTJVSVBCTHFjSE5MRFRjZXpVcGlLLU5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8yYWRjMzktMzYzMC00MjVmLWFmMjktZmJiMGQzYzEwNDIz
LzEvc1dxOTJVSVBCTHFjSE5MRFRjZXpVcGlLLU5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnwXpGmq4
xH9YuanxDBDSnC7r8XgZ+YRYW9ZaIOmuVtjyVxZKMHK3gauxHVj+m4c5RN+ef2Gl
EI6B6xRZ/qW4NvgfkgVMtI02YXR6CauEdA+MNLKT86QtawPgc6T0gQTsQW3WsFtX
sHvMg8zqR5Qc2lOPWDOtrtbh+NJHUrXhP4zQDvh6Fb3TV7UEtq8L16GaVa5ew1zw
e9zamSLWTTar1SXnBL4PGLsueL1+AtSeQE7hn3UpYPzn26ceq8Hkhb+gaPOHZ0mb
DvtSoXy9hE5VslYxH05yfDAyDx+5Rj5wZL3SdK9mxXbi0/r5kZ/Us0I/tvz0BN3y
kj+8NSoBNvK5vg==
-----END CERTIFICATE-----
Generated at Tue Oct 13 16:41:51 2026 by rpki-client