Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft
File: sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft (raw, json)
Hash identifier: 0RCZyiP+3QgiXZZFSwOom0kyh/O2WYgz6XaXCHJ8DMM=
Subject key identifier: F3:7F:CA:68:95:B6:13:9A:EE:31:BC:A3:9A:2A:6E:04:25:C0:2A:D4
Authority key identifier: B3:1F:06:71:F3:99:E4:DA:20:A4:8B:D3:27:C4:7A:FA:4A:41:FF:C3
Certificate issuer: /CN=b31f0671f399e4da20a48bd327c47afa4a41ffc3
Certificate serial: 01A0DBA91FD7BEFC5535690CF06861F929ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft
Manifest number: 1A05
Signing time: Sat 26 Sep 2026 03:01:28 +0000
Manifest this update: Sat 26 Sep 2026 03:01:28 +0000
Manifest next update: Sun 27 Sep 2026 03:01:28 +0000
Files and hashes: 1: YxQQWDg_coyEB6pTn4AJqkDaXAs.roa (hash: FxWNGXvs3glxGeqRKNIBrVgkNIhHyCpETztEe1qzaRU=)
2: sx8GcfOZ5NogpIvTJ8R6-kpB_8M.crl (hash: PZodvrkGbrTUgcCy1/r18bByh/r96bEr6gri5c4Gr2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:06:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:a9:1f:d7:be:fc:55:35:69:0c:f0:68:61:f9:29:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31f0671f399e4da20a48bd327c47afa4a41ffc3
Validity
Not Before: Sep 26 03:01:28 2026 GMT
Not After : Sep 27 03:01:28 2026 GMT
Subject: CN=f37fca6895b6139aee31bca39a2a6e0425c02ad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c2:80:1c:33:b8:3f:53:cc:94:aa:32:17:25:
36:71:07:6c:f3:a7:b9:5b:c6:2c:48:12:3c:9f:b2:
ce:ec:97:91:7e:66:f3:89:97:c9:ee:7a:38:6d:36:
92:dc:db:3c:d6:9e:d3:a9:48:c9:4d:ec:e3:69:2d:
d9:15:8c:31:2d:b2:66:97:0c:32:bb:84:53:14:f9:
af:2a:0b:85:d9:3d:73:a4:af:c9:d4:cc:5a:c8:98:
06:59:fa:97:4a:1b:f7:b5:67:a2:b7:57:36:04:c7:
b0:e9:ab:13:0d:9b:e5:be:a2:fc:b5:67:20:23:44:
ab:99:ff:77:7b:2c:d2:e6:79:fc:d7:16:83:23:c2:
0d:15:46:2b:9f:96:59:19:82:25:b2:ad:5f:76:1e:
5f:2f:52:39:69:ef:f5:79:d4:81:82:bd:dc:01:30:
10:24:91:44:e9:9b:75:63:cf:06:ef:4c:31:83:f3:
69:ba:11:85:c9:f0:b2:76:3b:26:8c:08:4b:c7:f0:
09:ba:08:be:17:56:f3:41:b7:99:20:7a:c6:df:57:
ad:c5:20:6e:8b:86:54:c2:20:1a:d7:96:76:3f:07:
de:a0:31:5f:60:83:06:67:f2:0b:65:92:1e:87:58:
33:c0:38:d4:ab:db:86:19:89:4d:48:f9:bb:fa:91:
e0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:7F:CA:68:95:B6:13:9A:EE:31:BC:A3:9A:2A:6E:04:25:C0:2A:D4
X509v3 Authority Key Identifier:
keyid:B3:1F:06:71:F3:99:E4:DA:20:A4:8B:D3:27:C4:7A:FA:4A:41:FF:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:b1:37:8f:1d:ba:9c:e8:fc:48:cb:c1:71:41:ca:ba:a4:89:
92:2d:8c:68:87:07:12:f2:bd:ca:74:70:c6:55:18:16:3d:02:
f5:86:59:0b:1e:44:aa:f1:8b:f8:be:0f:ab:12:04:65:f6:bf:
f4:ee:2e:9e:79:c2:5b:35:f3:5d:98:ac:2f:6e:96:a0:92:c5:
ab:35:5e:f8:06:e6:72:34:30:4c:13:5c:d8:a6:ce:f5:06:7e:
35:ad:d5:c1:d3:d1:0d:49:39:3d:22:b8:0a:17:00:da:de:6f:
8e:03:16:c3:b7:7b:b2:4e:e4:91:ef:a6:b5:2a:10:6c:df:6d:
f5:a9:d3:51:15:7d:e5:bc:14:67:56:54:5b:83:6d:66:4b:de:
4f:f6:f5:33:2c:1d:c1:d6:0e:aa:c2:4e:61:18:b0:4b:28:41:
d5:9c:13:78:8b:50:66:e9:a9:3b:75:08:a1:25:b0:b4:47:89:
e4:2f:fd:ef:3b:ec:df:d4:69:7c:d9:42:00:a7:25:ca:c5:86:
b7:8a:0b:78:a5:8c:4d:e1:c2:17:ed:44:8c:8d:44:b3:64:35:
d5:76:89:27:d2:d8:46:f7:35:59:a3:ca:1f:a3:1f:8f:ff:eb:
6f:4f:00:95:d8:1d:61:63:b0:fc:17:79:07:2a:b1:2f:b5:b2:
0c:9a:07:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDbqR/XvvxVNWkM8Ghh+SntMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMWYwNjcxZjM5OWU0ZGEyMGE0OGJkMzI3YzQ3YWZhNGE0
MWZmYzMwHhcNMjYwOTI2MDMwMTI4WhcNMjYwOTI3MDMwMTI4WjAzMTEwLwYDVQQD
EyhmMzdmY2E2ODk1YjYxMzlhZWUzMWJjYTM5YTJhNmUwNDI1YzAyYWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8KAHDO4P1PMlKoyFyU2cQds86e5
W8YsSBI8n7LO7JeRfmbziZfJ7no4bTaS3Ns81p7TqUjJTezjaS3ZFYwxLbJmlwwy
u4RTFPmvKguF2T1zpK/J1MxayJgGWfqXShv3tWeit1c2BMew6asTDZvlvqL8tWcg
I0Srmf93eyzS5nn81xaDI8INFUYrn5ZZGYIlsq1fdh5fL1I5ae/1edSBgr3cATAQ
JJFE6Zt1Y88G70wxg/NpuhGFyfCydjsmjAhLx/AJugi+F1bzQbeZIHrG31etxSBu
i4ZUwiAa15Z2PwfeoDFfYIMGZ/ILZZIeh1gzwDjUq9uGGYlNSPm7+pHgFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPN/ymiVthOa7jG8o5oqbgQlwCrUMB8GA1UdIwQY
MBaAFLMfBnHzmeTaIKSL0yfEevpKQf/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3g4R2NmT1o1Tm9ncEl2VEo4UjYta3BCXzhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC84NzhhMWMtYTdhMC00ZmQxLTk4YTAt
MzNlNDQ2MjFkYjA3LzEvc3g4R2NmT1o1Tm9ncEl2VEo4UjYta3BCXzhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC84NzhhMWMtYTdhMC00ZmQxLTk4YTAtMzNlNDQ2MjFkYjA3
LzEvc3g4R2NmT1o1Tm9ncEl2VEo4UjYta3BCXzhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANLE3jx26
nOj8SMvBcUHKuqSJki2MaIcHEvK9ynRwxlUYFj0C9YZZCx5EqvGL+L4PqxIEZfa/
9O4unnnCWzXzXZisL26WoJLFqzVe+AbmcjQwTBNc2KbO9QZ+Na3VwdPRDUk5PSK4
ChcA2t5vjgMWw7d7sk7kke+mtSoQbN9t9anTURV95bwUZ1ZUW4NtZkveT/b1Mywd
wdYOqsJOYRiwSyhB1ZwTeItQZumpO3UIoSWwtEeJ5C/97zvs39RpfNlCAKclysWG
t4oLeKWMTeHCF+1EjI1Es2Q11XaJJ9LYRvc1WaPKH6Mfj//rb08AldgdYWOw/Bd5
ByqxL7WyDJoHtQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 05:37:27 2026 by rpki-client