Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
File: SA488NEiV0x-ezvwNNDT0BPuvBU.mft (raw, json)
Hash identifier: wpnz8xzOS3NX5XSdBC+8NSTkk68xHyjpHNc3cOZ461A=
Subject key identifier: 1A:F1:0A:B5:86:23:88:80:AC:42:52:9B:2F:2D:26:A0:2A:45:33:49
Authority key identifier: 48:0E:3C:F0:D1:22:57:4C:7E:7B:3B:F0:34:D0:D3:D0:13:EE:BC:15
Certificate issuer: /CN=480e3cf0d122574c7e7b3bf034d0d3d013eebc15
Certificate serial: 019F90C7B75753816E7B5ACA009C68E384C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SA488NEiV0x-ezvwNNDT0BPuvBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
Manifest number: 0ECE
Signing time: Thu 23 Jul 2026 21:00:35 +0000
Manifest this update: Thu 23 Jul 2026 21:00:35 +0000
Manifest next update: Fri 24 Jul 2026 21:00:35 +0000
Files and hashes: 1: 1-Jvy4cSjaj8AFJqw5ncsPjDeR28.roa (hash: +Ni2CLOoRpCVmzTI9f4DnaA4YvB7dZwIDsF6rECn1wA=)
2: LbwUBW6UnU18v-U18rNDE3l0xQQ.roa (hash: SkrwHdQX53t1+eW9cdOIIYqsrHJtmmj6qudznw4zEbg=)
3: SA488NEiV0x-ezvwNNDT0BPuvBU.crl (hash: 7HEolwHxVh49dgatTL0LafCMFTGc9WCIENCOCdNgcP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SA488NEiV0x-ezvwNNDT0BPuvBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:b7:57:53:81:6e:7b:5a:ca:00:9c:68:e3:84:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480e3cf0d122574c7e7b3bf034d0d3d013eebc15
Validity
Not Before: Jul 23 21:00:35 2026 GMT
Not After : Jul 24 21:00:35 2026 GMT
Subject: CN=1af10ab586238880ac42529b2f2d26a02a453349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6c:5f:b8:87:fa:b2:04:04:a0:38:1f:76:e9:
07:5f:d3:e3:06:fe:33:ae:48:f0:d2:05:e4:8a:b0:
ab:e9:b1:63:c6:fa:37:5b:40:8e:8d:49:67:30:48:
a9:ab:32:55:0c:88:d4:a3:07:67:43:97:fe:4f:85:
ea:7e:72:bc:dc:92:de:37:b6:c9:8f:fa:9d:25:7c:
d1:13:96:50:02:d6:6f:d0:31:72:75:82:60:9f:5e:
c3:40:0d:1f:68:12:98:8b:7c:4f:a3:67:d7:fb:ca:
e2:7a:7e:be:24:8a:8b:1a:53:eb:6d:8c:89:a6:66:
cc:a8:e7:56:3e:be:c3:00:e6:8f:a3:30:cd:91:ca:
d9:02:87:42:2d:7d:9c:b7:ee:3c:71:d1:54:e7:d6:
83:5b:29:aa:aa:39:16:00:81:b7:6a:0c:72:cd:60:
49:6d:82:c4:8b:42:cc:78:0e:ba:2e:49:ba:5e:30:
35:4f:bb:3e:32:d3:9f:c0:a5:4a:0e:25:cf:99:a7:
4e:2e:e6:aa:97:de:7e:18:46:11:04:3f:ed:dd:19:
59:e9:e3:0f:46:99:36:41:54:58:2e:53:17:be:64:
dd:3c:2d:b8:0a:e1:04:ff:a3:67:76:14:69:8b:e2:
b9:33:66:35:ae:25:e7:02:4c:c7:07:30:3a:fe:8e:
e8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F1:0A:B5:86:23:88:80:AC:42:52:9B:2F:2D:26:A0:2A:45:33:49
X509v3 Authority Key Identifier:
keyid:48:0E:3C:F0:D1:22:57:4C:7E:7B:3B:F0:34:D0:D3:D0:13:EE:BC:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SA488NEiV0x-ezvwNNDT0BPuvBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:a8:0f:d6:19:34:12:24:e5:8b:d0:37:81:eb:de:71:42:b1:
d8:c2:a7:4a:0c:68:65:f4:2a:fc:51:3b:81:10:5f:cb:3f:5e:
8f:88:67:40:ec:8a:54:69:54:e6:f2:94:95:7f:23:1f:9e:6b:
36:77:e6:6d:b0:67:d2:91:ee:2a:8d:b7:5b:ef:ad:62:d0:1f:
3d:a9:2a:b9:64:d8:3e:8d:b4:0d:8d:05:f3:b2:e2:76:e6:0d:
06:5b:a0:b0:ea:32:c0:a1:cc:ce:ba:31:6a:65:fb:8a:ed:fe:
d1:5c:e4:df:3f:c4:ee:9a:b8:91:b2:b5:fa:1b:53:c2:8a:f0:
78:67:c2:f8:fd:2b:a2:30:51:c1:63:bd:34:50:20:38:4f:23:
a1:f6:48:7e:af:81:fa:60:62:c9:7b:c9:fb:63:b9:b6:11:51:
4a:8a:19:49:78:41:f5:92:b3:c0:c2:42:98:ba:80:42:a8:7c:
7d:ac:f9:fa:c1:ad:16:06:08:f9:91:7c:8b:b3:89:b2:92:98:
ad:66:ad:43:9e:e8:23:ff:6a:4f:27:1f:47:cc:77:0c:5c:16:
4d:e3:86:80:17:d6:ba:52:6f:5f:13:bf:de:93:a3:a0:08:6b:
20:bb:ed:68:f7:1b:23:52:17:3d:0c:09:96:58:11:0f:6e:bf:
a2:fd:16:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Qx7dXU4Fue1rKAJxo44TDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MGUzY2YwZDEyMjU3NGM3ZTdiM2JmMDM0ZDBkM2QwMTNl
ZWJjMTUwHhcNMjYwNzIzMjEwMDM1WhcNMjYwNzI0MjEwMDM1WjAzMTEwLwYDVQQD
EygxYWYxMGFiNTg2MjM4ODgwYWM0MjUyOWIyZjJkMjZhMDJhNDUzMzQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2xfuIf6sgQEoDgfdukHX9PjBv4z
rkjw0gXkirCr6bFjxvo3W0COjUlnMEipqzJVDIjUowdnQ5f+T4XqfnK83JLeN7bJ
j/qdJXzRE5ZQAtZv0DFydYJgn17DQA0faBKYi3xPo2fX+8rien6+JIqLGlPrbYyJ
pmbMqOdWPr7DAOaPozDNkcrZAodCLX2ct+48cdFU59aDWymqqjkWAIG3agxyzWBJ
bYLEi0LMeA66Lkm6XjA1T7s+MtOfwKVKDiXPmadOLuaql95+GEYRBD/t3RlZ6eMP
Rpk2QVRYLlMXvmTdPC24CuEE/6NndhRpi+K5M2Y1riXnAkzHBzA6/o7oSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBrxCrWGI4iArEJSmy8tJqAqRTNJMB8GA1UdIwQY
MBaAFEgOPPDRIldMfns78DTQ09AT7rwVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0E0ODhORWlWMHgtZXp2d05ORFQwQlB1dkJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9iYTY2ZjItZGUzZS00ZGU4LWJkNjUt
MjJmMjNmZTI5Mjg3LzEvU0E0ODhORWlWMHgtZXp2d05ORFQwQlB1dkJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9iYTY2ZjItZGUzZS00ZGU4LWJkNjUtMjJmMjNmZTI5Mjg3
LzEvU0E0ODhORWlWMHgtZXp2d05ORFQwQlB1dkJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmagP1hk0
EiTli9A3gevecUKx2MKnSgxoZfQq/FE7gRBfyz9ej4hnQOyKVGlU5vKUlX8jH55r
NnfmbbBn0pHuKo23W++tYtAfPakquWTYPo20DY0F87LiduYNBlugsOoywKHMzrox
amX7iu3+0Vzk3z/E7pq4kbK1+htTworweGfC+P0rojBRwWO9NFAgOE8jofZIfq+B
+mBiyXvJ+2O5thFRSooZSXhB9ZKzwMJCmLqAQqh8faz5+sGtFgYI+ZF8i7OJspKY
rWatQ57oI/9qTycfR8x3DFwWTeOGgBfWulJvXxO/3pOjoAhrILvtaPcbI1IXPQwJ
llgRD26/ov0W6Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:08:10 2026 by rpki-client