Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
File: sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft (raw, json)
Hash identifier: 2xpVwbta7tYqPBbNiS/pbhIbrzfNhwE4Ry0mgHt1mIk=
Subject key identifier: 02:22:5B:1D:99:CE:DE:1F:CE:31:FB:FC:F6:0A:9D:58:F4:F6:0C:5B
Authority key identifier: B0:AF:D0:CB:97:75:FF:47:8F:18:5F:8F:98:0D:5B:1D:92:D4:BE:4F
Certificate issuer: /CN=b0afd0cb9775ff478f185f8f980d5b1d92d4be4f
Certificate serial: 01A10701AB0CEAACE786F7BFF8BEB33BFEF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
Manifest number: 1A86
Signing time: Sun 04 Oct 2026 13:01:52 +0000
Manifest this update: Sun 04 Oct 2026 13:01:52 +0000
Manifest next update: Mon 05 Oct 2026 13:01:52 +0000
Files and hashes: 1: RxwpeJEtkWGwK-FiT9nGtEZel1w.roa (hash: nRWo2u6OOJDMeQ+Qn8P1QxPMq9RxzCeIuOjLATj51Ms=)
2: sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl (hash: e2NXbLqZPmKUORTj/VBan4WpIBYAOOiDgHMQEjuTGxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:01:ab:0c:ea:ac:e7:86:f7:bf:f8:be:b3:3b:fe:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0afd0cb9775ff478f185f8f980d5b1d92d4be4f
Validity
Not Before: Oct 4 13:01:52 2026 GMT
Not After : Oct 5 13:01:52 2026 GMT
Subject: CN=02225b1d99cede1fce31fbfcf60a9d58f4f60c5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b6:24:9c:f0:86:14:5a:88:2d:0b:a9:2a:88:
08:5a:1f:cd:1d:7c:46:4c:fa:eb:72:ce:1c:98:58:
5c:03:f4:a6:ba:f1:5e:e7:1a:6a:8f:03:e6:27:15:
54:ee:ed:5c:8d:54:bd:87:43:d9:82:6b:92:8e:82:
5a:15:a8:6e:89:b0:e8:55:ea:73:b4:a4:10:5f:9e:
a0:5a:eb:3d:7a:89:71:0d:71:72:5e:34:42:d4:b0:
bf:af:9a:1b:3a:35:2a:5e:76:7b:9d:68:9f:38:ba:
8a:61:b3:23:dd:1e:a2:db:1c:58:79:67:c4:8f:c7:
f9:d8:5b:7a:be:68:74:d2:ce:3e:a3:49:5b:99:a5:
50:c4:85:30:2d:48:bc:da:86:5c:d9:ec:51:3d:d2:
61:8d:1c:40:f4:92:62:f5:7c:0f:2b:07:d5:9e:72:
7a:e2:84:89:7f:9e:6c:87:ff:ca:b5:43:14:ac:18:
72:74:b4:19:a0:ef:0f:03:12:f5:1e:13:60:a7:c8:
74:e1:78:b6:16:e3:79:fc:76:c6:1d:b3:a0:6f:c6:
55:aa:74:c9:9a:9f:7b:99:57:47:20:5c:0d:85:19:
f3:5e:26:93:ef:8e:e9:a9:93:fd:aa:4a:a7:b4:7a:
c6:c0:f0:24:10:a8:22:98:0c:45:2d:fd:64:28:d3:
89:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:22:5B:1D:99:CE:DE:1F:CE:31:FB:FC:F6:0A:9D:58:F4:F6:0C:5B
X509v3 Authority Key Identifier:
keyid:B0:AF:D0:CB:97:75:FF:47:8F:18:5F:8F:98:0D:5B:1D:92:D4:BE:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:83:34:2b:e0:22:f6:05:71:d3:3b:f3:1a:df:25:b1:14:6b:
ee:8e:04:f1:fa:ed:7c:6d:43:81:76:0f:1f:5b:31:c0:4b:0f:
38:83:52:85:71:0f:83:21:a4:95:a9:0f:f6:9b:cc:3d:2b:9a:
ce:f4:98:35:ae:e0:00:75:68:29:e6:aa:e9:85:dd:bf:e7:bb:
de:80:cf:cc:1a:1f:4a:42:0f:0e:88:e6:b2:11:bb:72:57:fb:
bc:4b:0a:c3:31:7f:26:99:6d:e9:3c:d4:2c:f3:9d:d2:e0:1b:
15:81:78:92:fb:ae:65:99:33:ca:bb:69:d1:2a:fd:63:34:1c:
21:7e:68:c5:73:b0:51:37:7c:1b:8a:16:7e:fd:0b:94:db:52:
b3:4b:f5:29:05:b1:a6:ff:3d:01:27:fc:f1:08:72:5c:8c:62:
56:60:9f:e6:61:66:5c:cb:7f:f7:32:13:40:e8:a3:c4:de:67:
f4:b9:ae:52:b4:e9:b4:da:38:1a:c7:32:c0:98:4f:83:04:78:
db:09:ef:7a:f7:86:c7:8b:8d:e1:48:7c:00:a9:bb:5a:57:9a:
54:44:0a:8b:71:09:1d:93:7d:c7:d2:e5:fc:45:06:7c:15:51:
c2:47:87:fd:5d:38:19:65:a1:13:af:fc:7c:c1:53:c8:b8:eb:
ed:f4:fe:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEHAasM6qznhve/+L6zO/7wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYWZkMGNiOTc3NWZmNDc4ZjE4NWY4Zjk4MGQ1YjFkOTJk
NGJlNGYwHhcNMjYxMDA0MTMwMTUyWhcNMjYxMDA1MTMwMTUyWjAzMTEwLwYDVQQD
EygwMjIyNWIxZDk5Y2VkZTFmY2UzMWZiZmNmNjBhOWQ1OGY0ZjYwYzViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLYknPCGFFqILQupKogIWh/NHXxG
TPrrcs4cmFhcA/SmuvFe5xpqjwPmJxVU7u1cjVS9h0PZgmuSjoJaFahuibDoVepz
tKQQX56gWus9eolxDXFyXjRC1LC/r5obOjUqXnZ7nWifOLqKYbMj3R6i2xxYeWfE
j8f52Ft6vmh00s4+o0lbmaVQxIUwLUi82oZc2exRPdJhjRxA9JJi9XwPKwfVnnJ6
4oSJf55sh//KtUMUrBhydLQZoO8PAxL1HhNgp8h04Xi2FuN5/HbGHbOgb8ZVqnTJ
mp97mVdHIFwNhRnzXiaT747pqZP9qkqntHrGwPAkEKgimAxFLf1kKNOJyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAIiWx2Zzt4fzjH7/PYKnVj09gxbMB8GA1UdIwQY
MBaAFLCv0MuXdf9Hjxhfj5gNWx2S1L5PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0tfUXk1ZDFfMGVQR0YtUG1BMWJIWkxVdms4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy84MDBmZmQtYzUzYi00NjQ2LWIyNmUt
NmVmNWM0NzM1ZThhLzEvc0tfUXk1ZDFfMGVQR0YtUG1BMWJIWkxVdms4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy84MDBmZmQtYzUzYi00NjQ2LWIyNmUtNmVmNWM0NzM1ZThh
LzEvc0tfUXk1ZDFfMGVQR0YtUG1BMWJIWkxVdms4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT4M0K+Ai
9gVx0zvzGt8lsRRr7o4E8frtfG1DgXYPH1sxwEsPOINShXEPgyGklakP9pvMPSua
zvSYNa7gAHVoKeaq6YXdv+e73oDPzBofSkIPDojmshG7clf7vEsKwzF/Jplt6TzU
LPOd0uAbFYF4kvuuZZkzyrtp0Sr9YzQcIX5oxXOwUTd8G4oWfv0LlNtSs0v1KQWx
pv89ASf88QhyXIxiVmCf5mFmXMt/9zITQOijxN5n9LmuUrTptNo4GscywJhPgwR4
2wnveveGx4uN4Uh8AKm7WleaVEQKi3EJHZN9x9Ll/EUGfBVRwkeH/V04GWWhE6/8
fMFTyLjr7fT+LA==
-----END CERTIFICATE-----
Generated at Sun Oct 4 22:55:14 2026 by rpki-client