Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.mft
File: sK3wWv729l-hmmHDCuT7EcfPJbY.mft (raw, json)
Hash identifier: QTxYDzrTc2nJytVZz0mU3T3NoB2bAZVIohnt0jRUEVU=
Subject key identifier: 3B:E9:0B:2E:33:07:AC:CE:B5:90:B0:A0:3F:BC:49:87:CA:FC:63:18
Authority key identifier: B0:AD:F0:5A:FE:F6:F6:5F:A1:9A:61:C3:0A:E4:FB:11:C7:CF:25:B6
Certificate issuer: /CN=b0adf05afef6f65fa19a61c30ae4fb11c7cf25b6
Certificate serial: 01A0DBE024467AA06B2861CEAD949F1948C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sK3wWv729l-hmmHDCuT7EcfPJbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.mft
Manifest number: 1A73
Signing time: Sat 26 Sep 2026 04:01:34 +0000
Manifest this update: Sat 26 Sep 2026 04:01:34 +0000
Manifest next update: Sun 27 Sep 2026 04:01:34 +0000
Files and hashes: 1: cJdPxb0RSH0QMcbmsxnfVVZLI9o.roa (hash: 7Mc+8VOQ2R5S9UUsL5A35++MoKrgCRu3M3X3wsPiNFQ=)
2: sK3wWv729l-hmmHDCuT7EcfPJbY.crl (hash: 9cGBLdBD2cgR4IpuxTiLQ+yV+CKe7Zk7YG0iR4A+7Mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sK3wWv729l-hmmHDCuT7EcfPJbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:e0:24:46:7a:a0:6b:28:61:ce:ad:94:9f:19:48:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0adf05afef6f65fa19a61c30ae4fb11c7cf25b6
Validity
Not Before: Sep 26 04:01:34 2026 GMT
Not After : Sep 27 04:01:34 2026 GMT
Subject: CN=3be90b2e3307acceb590b0a03fbc4987cafc6318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:8f:77:92:58:79:e1:4f:9f:bd:2c:64:a4:5b:
2d:3f:fc:1f:a4:f3:0f:3a:6f:8a:02:b0:89:b7:e3:
1f:70:4c:4a:4b:d0:35:35:f5:9d:21:15:ce:0e:e9:
75:95:00:51:40:ed:03:8f:06:cd:96:9e:da:bb:d3:
33:0b:35:9e:71:f1:9a:58:0e:eb:d3:88:f3:96:0c:
4b:cc:de:0e:fe:bb:29:3d:25:8e:8d:fb:b8:7e:be:
22:e0:be:ad:34:93:79:0d:6e:72:dc:88:98:8e:da:
c1:ac:ea:07:d6:5a:dd:de:43:4e:a0:b7:51:ac:26:
0f:74:b0:9b:32:74:92:6d:0a:1c:75:a8:53:d5:42:
65:1c:e0:ea:e1:dd:55:09:85:f8:3a:23:9b:1e:3d:
48:25:45:20:3e:7f:0f:80:2e:7c:99:a2:2e:f1:e7:
96:29:5f:83:81:cc:16:25:43:71:a0:2b:d9:e1:d4:
db:a8:06:aa:44:ab:fb:85:7e:40:dc:04:f7:3c:ad:
b6:1f:99:33:df:4e:07:27:40:ec:11:6a:93:93:10:
97:c3:6b:69:b0:73:1f:38:24:7e:2c:c6:9b:3b:4b:
cf:de:1e:39:1d:f4:df:66:18:c5:7d:00:31:30:1d:
d2:3d:97:ef:06:7c:da:42:a2:e0:5b:ae:1e:e1:48:
ed:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E9:0B:2E:33:07:AC:CE:B5:90:B0:A0:3F:BC:49:87:CA:FC:63:18
X509v3 Authority Key Identifier:
keyid:B0:AD:F0:5A:FE:F6:F6:5F:A1:9A:61:C3:0A:E4:FB:11:C7:CF:25:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK3wWv729l-hmmHDCuT7EcfPJbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/70959b-d79b-42dc-b893-5f2d0e2ae714/1/sK3wWv729l-hmmHDCuT7EcfPJbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:61:8c:73:dc:f2:bc:81:77:14:d7:49:de:d9:00:01:b2:bb:
a0:69:09:2d:c8:03:d2:53:bc:96:16:a3:30:b5:27:a6:e9:29:
eb:ff:d6:d7:35:ea:c2:2e:c1:c9:49:bd:6d:a7:4a:03:c2:37:
8e:a2:15:d5:ec:ea:97:4c:c2:12:3c:8e:e0:0c:6b:36:94:40:
f9:00:c6:57:1a:64:4e:ec:47:db:df:fe:9e:71:a6:df:1a:25:
32:f4:9d:6d:93:9d:49:55:f8:2b:c8:94:eb:0c:c1:2d:ad:9f:
55:cc:ff:de:a1:32:3f:bf:4b:45:a0:b8:e4:31:90:da:24:00:
5c:92:dd:14:2e:6e:bd:c9:76:69:bd:25:7e:4b:1e:27:3f:72:
13:b5:06:4a:e0:02:b7:1e:c1:09:0d:22:b5:2d:0e:33:ef:64:
34:c0:24:04:bd:87:d5:08:84:33:b0:f7:82:7c:f2:79:99:fb:
b4:8d:68:27:06:22:e4:4a:0c:ec:34:74:8a:b6:26:f6:23:97:
f9:ba:b0:74:40:5b:02:e0:d4:f2:ce:97:c4:d1:0b:01:ce:66:
56:c1:65:0e:93:e1:74:47:38:13:c1:e9:4c:7f:03:d9:41:77:
12:46:bd:68:f1:af:42:26:1a:d8:76:b8:0d:72:ab:ee:10:46:
67:32:a1:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDb4CRGeqBrKGHOrZSfGUjJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYWRmMDVhZmVmNmY2NWZhMTlhNjFjMzBhZTRmYjExYzdj
ZjI1YjYwHhcNMjYwOTI2MDQwMTM0WhcNMjYwOTI3MDQwMTM0WjAzMTEwLwYDVQQD
EygzYmU5MGIyZTMzMDdhY2NlYjU5MGIwYTAzZmJjNDk4N2NhZmM2MzE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj493klh54U+fvSxkpFstP/wfpPMP
Om+KArCJt+MfcExKS9A1NfWdIRXODul1lQBRQO0DjwbNlp7au9MzCzWecfGaWA7r
04jzlgxLzN4O/rspPSWOjfu4fr4i4L6tNJN5DW5y3IiYjtrBrOoH1lrd3kNOoLdR
rCYPdLCbMnSSbQocdahT1UJlHODq4d1VCYX4OiObHj1IJUUgPn8PgC58maIu8eeW
KV+DgcwWJUNxoCvZ4dTbqAaqRKv7hX5A3AT3PK22H5kz304HJ0DsEWqTkxCXw2tp
sHMfOCR+LMabO0vP3h45HfTfZhjFfQAxMB3SPZfvBnzaQqLgW64e4UjtjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDvpCy4zB6zOtZCwoD+8SYfK/GMYMB8GA1UdIwQY
MBaAFLCt8Fr+9vZfoZphwwrk+xHHzyW2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0szd1d2NzI5bC1obW1IREN1VDdFY2ZQSmJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS83MDk1OWItZDc5Yi00MmRjLWI4OTMt
NWYyZDBlMmFlNzE0LzEvc0szd1d2NzI5bC1obW1IREN1VDdFY2ZQSmJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS83MDk1OWItZDc5Yi00MmRjLWI4OTMtNWYyZDBlMmFlNzE0
LzEvc0szd1d2NzI5bC1obW1IREN1VDdFY2ZQSmJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEWGMc9zy
vIF3FNdJ3tkAAbK7oGkJLcgD0lO8lhajMLUnpukp6//W1zXqwi7ByUm9badKA8I3
jqIV1ezql0zCEjyO4AxrNpRA+QDGVxpkTuxH29/+nnGm3xolMvSdbZOdSVX4K8iU
6wzBLa2fVcz/3qEyP79LRaC45DGQ2iQAXJLdFC5uvcl2ab0lfkseJz9yE7UGSuAC
tx7BCQ0itS0OM+9kNMAkBL2H1QiEM7D3gnzyeZn7tI1oJwYi5EoM7DR0irYm9iOX
+bqwdEBbAuDU8s6XxNELAc5mVsFlDpPhdEc4E8HpTH8D2UF3Eka9aPGvQiYa2Ha4
DXKr7hBGZzKhtA==
-----END CERTIFICATE-----
Generated at Sat Sep 26 10:51:08 2026 by rpki-client