Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.mft
File: sXtEkEx2lKVAig0pcsOf8LGwPqU.mft (raw, json)
Hash identifier: +bE6sMWKK+vJqleZkWcDQJvxJU2Gt4LFquGxBK+CwsA=
Subject key identifier: 65:11:7C:AF:12:C1:50:1B:00:81:0C:81:16:72:3C:C2:81:CA:2F:41
Authority key identifier: B1:7B:44:90:4C:76:94:A5:40:8A:0D:29:72:C3:9F:F0:B1:B0:3E:A5
Certificate issuer: /CN=b17b44904c7694a5408a0d2972c39ff0b1b03ea5
Certificate serial: 019F943751BF53E6628CC4FBC6780D45B7BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXtEkEx2lKVAig0pcsOf8LGwPqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.mft
Manifest number: 1212
Signing time: Fri 24 Jul 2026 13:01:21 +0000
Manifest this update: Fri 24 Jul 2026 13:01:21 +0000
Manifest next update: Sat 25 Jul 2026 13:01:21 +0000
Files and hashes: 1: _RUk9FpS67FmhL3-cjuZddAmpdk.roa (hash: B9UAAuPL9bMWFoRGXof1Klm+Lwvuj9esb9qSVPpnlxw=)
2: sXtEkEx2lKVAig0pcsOf8LGwPqU.crl (hash: e6rzdBBz6rcpzstVf/G1zEN9a7IB2GANZeIhQt3NEZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXtEkEx2lKVAig0pcsOf8LGwPqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 13:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:37:51:bf:53:e6:62:8c:c4:fb:c6:78:0d:45:b7:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b17b44904c7694a5408a0d2972c39ff0b1b03ea5
Validity
Not Before: Jul 24 13:01:21 2026 GMT
Not After : Jul 25 13:01:21 2026 GMT
Subject: CN=65117caf12c1501b00810c8116723cc281ca2f41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:59:e9:a7:c7:f5:30:34:af:52:a7:16:14:a5:
91:42:3b:eb:e3:aa:be:71:d5:a0:b3:aa:f9:38:b5:
8e:6a:81:d6:b9:4b:f8:74:e6:cc:61:b2:47:0e:49:
19:e7:72:15:73:cb:d6:bb:c5:8f:08:ac:0e:04:43:
f8:2d:48:c3:ac:a1:85:22:52:84:d4:f6:59:77:aa:
a8:3a:1c:c8:bb:9d:0e:fc:c2:1f:c3:3d:17:6f:58:
09:e9:72:f5:d5:a7:27:08:15:3e:af:03:c2:78:07:
ba:db:7a:42:97:5b:77:87:65:cc:f5:97:d7:b3:d7:
fd:21:63:2f:76:10:52:3a:c2:41:c4:55:a1:e4:ca:
b4:af:e5:61:bd:e3:60:50:df:ef:36:5f:6e:86:bb:
7c:a0:c4:d0:59:3d:a1:e2:0c:7b:94:f0:3f:15:53:
8c:5f:cb:94:17:a1:71:3d:0f:fc:65:8a:99:c5:24:
98:53:a5:39:eb:a8:07:df:de:ea:3a:79:02:09:8c:
19:60:ef:3f:1b:03:d9:4e:1f:71:62:a0:67:68:7b:
1c:24:6a:86:da:37:3e:a4:f6:e3:a8:25:36:62:41:
af:d0:1a:6b:3c:81:55:1d:aa:8d:34:03:31:c7:82:
f6:3d:3c:c9:3c:21:49:5f:fb:4b:65:01:b3:cf:b0:
84:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:11:7C:AF:12:C1:50:1B:00:81:0C:81:16:72:3C:C2:81:CA:2F:41
X509v3 Authority Key Identifier:
keyid:B1:7B:44:90:4C:76:94:A5:40:8A:0D:29:72:C3:9F:F0:B1:B0:3E:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXtEkEx2lKVAig0pcsOf8LGwPqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:5e:c6:f9:1f:f2:64:ea:bf:6e:96:67:e6:05:5a:90:b7:95:
28:09:35:54:90:80:e7:4f:33:2f:52:7c:6a:79:70:08:8f:1f:
f2:4e:e6:a1:02:e3:6a:9c:45:22:1c:11:71:cb:17:cc:db:1b:
91:57:c9:65:de:31:bb:0d:4c:34:82:9a:43:c5:ab:2e:07:f2:
37:b8:26:b1:2b:ff:91:c1:6e:6a:92:91:8e:f7:3b:b9:b0:89:
c2:b1:dd:a2:82:36:61:ba:ca:85:58:d4:3d:58:69:2b:7c:9d:
33:94:ca:7e:12:38:a4:09:75:75:2a:06:f4:6b:2b:67:8b:0f:
f0:44:90:fc:eb:66:74:b5:c9:50:09:55:07:06:41:96:4f:bd:
7c:43:15:25:76:d4:8f:bc:2c:5c:9f:7e:ce:99:df:88:98:de:
79:54:8e:5a:4d:d3:da:fb:9c:55:cc:6c:28:3a:ae:30:8a:a8:
73:f6:8c:08:dc:18:68:b4:29:07:86:4c:1b:33:de:6b:88:9d:
6f:f5:95:bc:98:57:04:71:ee:d3:03:28:28:74:d3:52:47:3c:
99:1d:97:c7:cc:2e:3b:1c:e7:56:02:42:d3:65:90:44:eb:62:
6f:d6:2c:1d:63:60:3f:d2:10:21:10:d8:0c:b5:72:4c:f2:5b:
b4:6c:9f:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UN1G/U+ZijMT7xngNRbe7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxN2I0NDkwNGM3Njk0YTU0MDhhMGQyOTcyYzM5ZmYwYjFi
MDNlYTUwHhcNMjYwNzI0MTMwMTIxWhcNMjYwNzI1MTMwMTIxWjAzMTEwLwYDVQQD
Eyg2NTExN2NhZjEyYzE1MDFiMDA4MTBjODExNjcyM2NjMjgxY2EyZjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVnpp8f1MDSvUqcWFKWRQjvr46q+
cdWgs6r5OLWOaoHWuUv4dObMYbJHDkkZ53IVc8vWu8WPCKwOBEP4LUjDrKGFIlKE
1PZZd6qoOhzIu50O/MIfwz0Xb1gJ6XL11acnCBU+rwPCeAe623pCl1t3h2XM9ZfX
s9f9IWMvdhBSOsJBxFWh5Mq0r+VhveNgUN/vNl9uhrt8oMTQWT2h4gx7lPA/FVOM
X8uUF6FxPQ/8ZYqZxSSYU6U566gH397qOnkCCYwZYO8/GwPZTh9xYqBnaHscJGqG
2jc+pPbjqCU2YkGv0BprPIFVHaqNNAMxx4L2PTzJPCFJX/tLZQGzz7CEzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGURfK8SwVAbAIEMgRZyPMKByi9BMB8GA1UdIwQY
MBaAFLF7RJBMdpSlQIoNKXLDn/CxsD6lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1h0RWtFeDJsS1ZBaWcwcGNzT2Y4TEd3UHFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC85MTgyNDUtN2I1MC00OTUyLWEzYTct
YTQ1OTE2OTU1ZTZmLzEvc1h0RWtFeDJsS1ZBaWcwcGNzT2Y4TEd3UHFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC85MTgyNDUtN2I1MC00OTUyLWEzYTctYTQ1OTE2OTU1ZTZm
LzEvc1h0RWtFeDJsS1ZBaWcwcGNzT2Y4TEd3UHFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASV7G+R/y
ZOq/bpZn5gVakLeVKAk1VJCA508zL1J8anlwCI8f8k7moQLjapxFIhwRccsXzNsb
kVfJZd4xuw1MNIKaQ8WrLgfyN7gmsSv/kcFuapKRjvc7ubCJwrHdooI2YbrKhVjU
PVhpK3ydM5TKfhI4pAl1dSoG9GsrZ4sP8ESQ/OtmdLXJUAlVBwZBlk+9fEMVJXbU
j7wsXJ9+zpnfiJjeeVSOWk3T2vucVcxsKDquMIqoc/aMCNwYaLQpB4ZMGzPea4id
b/WVvJhXBHHu0wMoKHTTUkc8mR2Xx8wuOxznVgJC02WQROtib9YsHWNgP9IQIRDY
DLVyTPJbtGyfnQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:46:59 2026 by rpki-client