Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/6b4a18-07bc-4353-b7ea-19ca50cf34ab/1/sd-OADfxroL3viI1rmEsQBD2_pE.mft
File: sd-OADfxroL3viI1rmEsQBD2_pE.mft (raw, json)
Hash identifier: YrOClICjvXzvtHpzdJ0gDbK1nrPV3kiPbwOQVigIdXE=
Subject key identifier: 8A:FA:EA:CF:EC:7E:C2:A8:16:D2:DA:EC:F1:16:7F:0D:10:09:AC:5F
Authority key identifier: B1:DF:8E:00:37:F1:AE:82:F7:BE:22:35:AE:61:2C:40:10:F6:FE:91
Certificate issuer: /CN=b1df8e0037f1ae82f7be2235ae612c4010f6fe91
Certificate serial: 01A1035B184A4203E800EE899359FDB02DE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sd-OADfxroL3viI1rmEsQBD2_pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/6b4a18-07bc-4353-b7ea-19ca50cf34ab/1/sd-OADfxroL3viI1rmEsQBD2_pE.mft
Manifest number: 059C
Signing time: Sat 03 Oct 2026 20:01:03 +0000
Manifest this update: Sat 03 Oct 2026 20:01:03 +0000
Manifest next update: Sun 04 Oct 2026 20:01:03 +0000
Files and hashes: 1: 9TrF8CvIENAUqcixyxTQa2bps6c.roa (hash: 45f33UvxirhWF+GLCEMK1OB/89v95KaqtgcQX1BWw+8=)
2: sd-OADfxroL3viI1rmEsQBD2_pE.crl (hash: yZd1KUbuY7dCTgW14Ak8UxMaOdgBQBKMuBpp4nMCE0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/6b4a18-07bc-4353-b7ea-19ca50cf34ab/1/sd-OADfxroL3viI1rmEsQBD2_pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/6b4a18-07bc-4353-b7ea-19ca50cf34ab/1/sd-OADfxroL3viI1rmEsQBD2_pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sd-OADfxroL3viI1rmEsQBD2_pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:03:5b:18:4a:42:03:e8:00:ee:89:93:59:fd:b0:2d:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1df8e0037f1ae82f7be2235ae612c4010f6fe91
Validity
Not Before: Oct 3 20:01:03 2026 GMT
Not After : Oct 4 20:01:03 2026 GMT
Subject: CN=8afaeacfec7ec2a816d2daecf1167f0d1009ac5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:3b:b4:86:09:39:80:6a:18:e0:ad:a1:ec:c6:
b8:88:c7:44:ca:b6:1b:47:4f:ce:36:9e:24:dc:a6:
e6:7c:72:5b:03:cb:ad:08:12:a4:4f:96:b5:fb:6c:
a6:92:5c:d6:c5:e5:fc:ce:e7:25:5d:d4:db:71:b5:
9a:05:38:37:63:97:cc:b0:1c:f7:4a:60:b4:61:69:
77:44:69:c5:51:61:fe:72:f9:cc:6e:1b:bd:9a:d6:
e3:f9:2f:f9:fa:77:94:9f:dc:18:65:27:bb:da:48:
0f:54:87:b0:62:61:d6:05:42:1c:4f:dc:7f:8e:32:
bc:89:76:48:b8:1b:eb:10:93:ff:29:57:d8:a3:23:
e6:4c:10:32:ca:c6:35:5c:87:f7:57:39:f3:b8:75:
ad:82:48:fb:b7:84:a4:9c:eb:79:a0:e8:06:ee:d9:
97:2b:22:80:94:82:1a:9d:d4:fd:16:c9:10:6e:c7:
88:0f:6a:fc:8e:af:38:db:4d:a4:4c:eb:ab:06:83:
3f:11:92:99:1d:f0:f9:aa:53:e6:d8:20:dd:0e:63:
a7:3a:29:ef:b8:4f:da:cd:cc:1d:d2:40:b6:6e:47:
7e:2f:44:10:df:2d:4d:c9:da:00:75:17:18:ef:58:
70:fa:95:c8:bd:c6:09:a9:8b:5b:db:86:b6:3d:b7:
b4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:FA:EA:CF:EC:7E:C2:A8:16:D2:DA:EC:F1:16:7F:0D:10:09:AC:5F
X509v3 Authority Key Identifier:
keyid:B1:DF:8E:00:37:F1:AE:82:F7:BE:22:35:AE:61:2C:40:10:F6:FE:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sd-OADfxroL3viI1rmEsQBD2_pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6b4a18-07bc-4353-b7ea-19ca50cf34ab/1/sd-OADfxroL3viI1rmEsQBD2_pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6b4a18-07bc-4353-b7ea-19ca50cf34ab/1/sd-OADfxroL3viI1rmEsQBD2_pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:b4:7d:40:5c:8f:ad:7d:3d:c8:bd:66:03:05:91:9c:a4:80:
42:d8:61:14:d4:70:55:c6:85:d1:5c:20:54:56:68:a4:9d:ba:
43:ea:ec:31:46:e5:e9:0d:85:70:6d:da:27:cb:a0:44:da:dd:
1b:14:fd:9d:18:d9:ae:5a:c9:8d:d9:85:af:aa:ec:e8:a1:8e:
44:98:a6:e1:00:2c:92:3a:5a:91:99:33:5e:e7:b5:f0:05:6c:
57:6e:b5:79:68:cc:c3:bc:28:09:bc:31:a0:a8:23:7e:0b:53:
35:4a:04:ee:90:8d:09:6c:20:f1:da:0c:d8:74:9f:fd:04:e0:
e1:14:e6:6c:1e:67:a7:43:34:8d:10:61:cf:08:fa:b7:44:a0:
7b:b4:d3:9b:d5:3d:57:ab:fb:c8:7a:02:75:17:c2:31:c6:a5:
84:72:7e:b2:23:9f:a0:ae:93:f1:be:3e:e9:11:25:ed:04:8f:
80:0c:81:2a:41:26:e9:03:e4:74:ba:9e:5f:81:50:76:31:30:
0b:95:6a:b6:5e:44:9b:e5:2c:1f:4b:96:9e:ed:3b:94:91:a0:
33:37:ba:d6:0c:81:8f:85:87:10:ff:75:1d:fe:b1:2e:43:45:
70:0a:12:47:d1:41:4d:f8:8a:2f:45:fd:f3:b8:3c:73:e2:53:
20:58:21:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEDWxhKQgPoAO6Jk1n9sC3hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxZGY4ZTAwMzdmMWFlODJmN2JlMjIzNWFlNjEyYzQwMTBm
NmZlOTEwHhcNMjYxMDAzMjAwMTAzWhcNMjYxMDA0MjAwMTAzWjAzMTEwLwYDVQQD
Eyg4YWZhZWFjZmVjN2VjMmE4MTZkMmRhZWNmMTE2N2YwZDEwMDlhYzVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Du0hgk5gGoY4K2h7Ma4iMdEyrYb
R0/ONp4k3KbmfHJbA8utCBKkT5a1+2ymklzWxeX8zuclXdTbcbWaBTg3Y5fMsBz3
SmC0YWl3RGnFUWH+cvnMbhu9mtbj+S/5+neUn9wYZSe72kgPVIewYmHWBUIcT9x/
jjK8iXZIuBvrEJP/KVfYoyPmTBAyysY1XIf3VznzuHWtgkj7t4SknOt5oOgG7tmX
KyKAlIIandT9FskQbseID2r8jq84202kTOurBoM/EZKZHfD5qlPm2CDdDmOnOinv
uE/azcwd0kC2bkd+L0QQ3y1NydoAdRcY71hw+pXIvcYJqYtb24a2Pbe0kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIr66s/sfsKoFtLa7PEWfw0QCaxfMB8GA1UdIwQY
MBaAFLHfjgA38a6C974iNa5hLEAQ9v6RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2QtT0FEZnhyb0wzdmlJMXJtRXNRQkQyX3BFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My82YjRhMTgtMDdiYy00MzUzLWI3ZWEt
MTljYTUwY2YzNGFiLzEvc2QtT0FEZnhyb0wzdmlJMXJtRXNRQkQyX3BFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My82YjRhMTgtMDdiYy00MzUzLWI3ZWEtMTljYTUwY2YzNGFi
LzEvc2QtT0FEZnhyb0wzdmlJMXJtRXNRQkQyX3BFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZrR9QFyP
rX09yL1mAwWRnKSAQthhFNRwVcaF0VwgVFZopJ26Q+rsMUbl6Q2FcG3aJ8ugRNrd
GxT9nRjZrlrJjdmFr6rs6KGORJim4QAskjpakZkzXue18AVsV261eWjMw7woCbwx
oKgjfgtTNUoE7pCNCWwg8doM2HSf/QTg4RTmbB5np0M0jRBhzwj6t0Sge7TTm9U9
V6v7yHoCdRfCMcalhHJ+siOfoK6T8b4+6REl7QSPgAyBKkEm6QPkdLqeX4FQdjEw
C5Vqtl5Em+UsH0uWnu07lJGgMze61gyBj4WHEP91Hf6xLkNFcAoSR9FBTfiKL0X9
87g8c+JTIFghCw==
-----END CERTIFICATE-----
Generated at Sun Oct 4 05:42:32 2026 by rpki-client