Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft
File: Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft (raw, json)
Hash identifier: tgPVVD/amm7OxDaujhHuVwr1p98dMRpINl1bO61vmSg=
Subject key identifier: CA:E3:25:F9:54:D5:64:E0:40:2C:A0:B2:6D:8E:C5:8E:FC:0D:74:00
Authority key identifier: 4A:3C:36:0C:36:4B:B6:6D:C6:35:17:19:35:68:F5:BA:85:17:AC:E8
Certificate issuer: /CN=4a3c360c364bb66dc63517193568f5ba8517ace8
Certificate serial: 01A10E1572E0B9C2329B789D3B854646EE4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft
Manifest number: 18D9
Signing time: Mon 05 Oct 2026 22:00:48 +0000
Manifest this update: Mon 05 Oct 2026 22:00:48 +0000
Manifest next update: Tue 06 Oct 2026 22:00:48 +0000
Files and hashes: 1: Sjw2DDZLtm3GNRcZNWj1uoUXrOg.crl (hash: SfN/D0HGahdrFuwkIkSawu0Kd8MtBDlbr+ZX457Xvbg=)
2: Yj8wjFZpgFB7N8QVvr8_EZtHm74.roa (hash: VttLajARZj1VpP60iZ08cMDJLdMSXXWBBP02KPI/yEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 20:22:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0e:15:72:e0:b9:c2:32:9b:78:9d:3b:85:46:46:ee:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a3c360c364bb66dc63517193568f5ba8517ace8
Validity
Not Before: Oct 5 22:00:48 2026 GMT
Not After : Oct 6 22:00:48 2026 GMT
Subject: CN=cae325f954d564e0402ca0b26d8ec58efc0d7400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e3:a1:a0:b5:8e:2a:39:74:a2:69:e1:4d:f2:
e9:17:9b:0d:2a:71:de:72:29:fb:c1:ee:34:ee:0c:
2b:37:0c:78:c8:1b:74:bc:b5:62:36:cd:f1:39:b3:
27:7c:08:ef:2a:4e:d8:c3:e9:79:9f:32:79:10:11:
07:1f:d6:06:cb:90:b0:06:00:de:b5:f3:47:e0:6f:
2b:e7:25:e0:b7:0c:e3:b0:b7:ff:c4:2b:4e:7b:2d:
92:48:fe:8f:08:2f:d1:c1:4b:31:fd:e5:51:dc:d2:
da:38:8d:40:27:f4:68:62:ba:98:b4:81:55:04:8b:
31:c5:4b:2e:a3:64:7c:5c:b1:60:7b:c4:2e:38:05:
5f:8a:d4:98:71:9a:6e:94:95:6a:25:e1:c2:a3:f5:
a0:a9:85:94:86:65:e8:de:f3:8a:9f:ba:8f:f5:96:
9d:25:5f:d0:cf:a4:77:61:71:39:17:90:fd:d7:88:
d0:7e:7a:3c:a1:5f:06:72:5b:5d:c6:c6:52:1b:98:
ec:6b:f4:01:49:a3:9e:1c:eb:67:61:30:d4:24:ab:
ae:b4:54:cd:5b:89:86:89:d7:4f:1a:bd:77:ae:c2:
93:c7:2d:e2:6e:d4:74:1a:34:de:71:63:13:a5:23:
5d:1a:f9:ed:08:a2:70:16:c8:e4:64:0e:b0:84:44:
a7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E3:25:F9:54:D5:64:E0:40:2C:A0:B2:6D:8E:C5:8E:FC:0D:74:00
X509v3 Authority Key Identifier:
keyid:4A:3C:36:0C:36:4B:B6:6D:C6:35:17:19:35:68:F5:BA:85:17:AC:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/8ad4e5-d9c9-43e7-be0f-1d9c86416e9b/1/Sjw2DDZLtm3GNRcZNWj1uoUXrOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:fe:6e:e7:62:09:2e:9f:63:5a:0a:95:d2:59:6a:26:a2:11:
b0:8f:11:ca:93:6e:24:39:bd:45:02:c6:4e:16:f5:c6:23:50:
54:5d:51:f9:fc:67:b2:24:32:2f:a1:da:96:c3:ec:92:37:12:
ad:89:de:78:12:ad:82:ee:82:9c:c0:74:8f:b1:6c:a3:67:f0:
99:3c:33:9e:d2:ea:19:41:0a:34:ab:de:3e:f5:d9:f6:ce:9f:
5b:7e:aa:9b:ff:1a:49:3b:51:16:f5:2d:cf:2c:18:d9:d2:c5:
d1:d8:1e:35:b2:ea:ec:1b:0d:8e:9f:32:4b:ed:db:00:15:a5:
27:b8:f3:e3:3b:ad:7e:7c:93:2a:1d:19:8b:47:07:8d:98:67:
19:12:a8:dd:5e:5e:08:55:4b:aa:f7:38:77:61:87:70:c1:20:
84:8f:5e:b2:78:8d:68:2a:7d:a9:6b:9a:5d:0c:f0:04:76:f4:
b4:dd:8a:6b:2a:dd:62:b5:a2:b9:04:c4:d0:62:ef:94:48:c7:
3d:43:e8:b2:d0:c9:71:ea:71:52:d9:bd:bb:a1:a4:19:a1:02:
8e:16:c4:14:14:d1:20:29:8e:f5:a6:69:25:4f:39:ba:67:1a:
ba:48:68:ec:33:56:0f:44:43:9a:d0:03:61:57:d6:d2:a1:4e:
cc:e1:66:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEOFXLgucIym3idO4VGRu5NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhM2MzNjBjMzY0YmI2NmRjNjM1MTcxOTM1NjhmNWJhODUx
N2FjZTgwHhcNMjYxMDA1MjIwMDQ4WhcNMjYxMDA2MjIwMDQ4WjAzMTEwLwYDVQQD
EyhjYWUzMjVmOTU0ZDU2NGUwNDAyY2EwYjI2ZDhlYzU4ZWZjMGQ3NDAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+OhoLWOKjl0omnhTfLpF5sNKnHe
cin7we407gwrNwx4yBt0vLViNs3xObMnfAjvKk7Yw+l5nzJ5EBEHH9YGy5CwBgDe
tfNH4G8r5yXgtwzjsLf/xCtOey2SSP6PCC/RwUsx/eVR3NLaOI1AJ/RoYrqYtIFV
BIsxxUsuo2R8XLFge8QuOAVfitSYcZpulJVqJeHCo/WgqYWUhmXo3vOKn7qP9Zad
JV/Qz6R3YXE5F5D914jQfno8oV8GcltdxsZSG5jsa/QBSaOeHOtnYTDUJKuutFTN
W4mGiddPGr13rsKTxy3ibtR0GjTecWMTpSNdGvntCKJwFsjkZA6whESn8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMrjJflU1WTgQCygsm2OxY78DXQAMB8GA1UdIwQY
MBaAFEo8Ngw2S7ZtxjUXGTVo9bqFF6zoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2p3MkREWkx0bTNHTlJjWk5XajF1b1VYck9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi84YWQ0ZTUtZDljOS00M2U3LWJlMGYt
MWQ5Yzg2NDE2ZTliLzEvU2p3MkREWkx0bTNHTlJjWk5XajF1b1VYck9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi84YWQ0ZTUtZDljOS00M2U3LWJlMGYtMWQ5Yzg2NDE2ZTli
LzEvU2p3MkREWkx0bTNHTlJjWk5XajF1b1VYck9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE/5u52IJ
Lp9jWgqV0llqJqIRsI8RypNuJDm9RQLGThb1xiNQVF1R+fxnsiQyL6HalsPskjcS
rYneeBKtgu6CnMB0j7Fso2fwmTwzntLqGUEKNKvePvXZ9s6fW36qm/8aSTtRFvUt
zywY2dLF0dgeNbLq7BsNjp8yS+3bABWlJ7jz4zutfnyTKh0Zi0cHjZhnGRKo3V5e
CFVLqvc4d2GHcMEghI9esniNaCp9qWuaXQzwBHb0tN2KayrdYrWiuQTE0GLvlEjH
PUPostDJcepxUtm9u6GkGaECjhbEFBTRICmO9aZpJU85umcaukho7DNWD0RDmtAD
YVfW0qFOzOFmNA==
-----END CERTIFICATE-----
Generated at Tue Oct 6 02:14:55 2026 by rpki-client