Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.mft
File: sYxKQwCDfE6hetHjghoJrVN2QIc.mft (raw, json)
Hash identifier: SWc49k2n56Xlb1BihvVzFkcDS03haWrpL3UF4dtaGAI=
Subject key identifier: E6:A0:CB:E0:2E:0C:22:08:96:89:33:4F:E1:28:5B:C2:1C:3F:C6:57
Authority key identifier: B1:8C:4A:43:00:83:7C:4E:A1:7A:D1:E3:82:1A:09:AD:53:76:40:87
Certificate issuer: /CN=b18c4a4300837c4ea17ad1e3821a09ad53764087
Certificate serial: 019CAA8F55EA49DAC3E3DE94637D28D555E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sYxKQwCDfE6hetHjghoJrVN2QIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.mft
Manifest number: 10DE
Signing time: Sun 01 Mar 2026 18:00:46 +0000
Manifest this update: Sun 01 Mar 2026 18:00:46 +0000
Manifest next update: Mon 02 Mar 2026 18:00:46 +0000
Files and hashes: 1: OztHm958aRJRxZODVtzftmoIutM.roa (hash: LyCjNgF1WRtdSw3T7qrOJsi3Hm2+foAc8JYBqHMHMdE=)
2: sYxKQwCDfE6hetHjghoJrVN2QIc.crl (hash: vZIADKZfUCqhSlRTmwHktSl+lHSTBXgK3gvNlvGQC1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sYxKQwCDfE6hetHjghoJrVN2QIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:55:ea:49:da:c3:e3:de:94:63:7d:28:d5:55:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b18c4a4300837c4ea17ad1e3821a09ad53764087
Validity
Not Before: Mar 1 18:00:46 2026 GMT
Not After : Mar 2 18:00:46 2026 GMT
Subject: CN=e6a0cbe02e0c22089689334fe1285bc21c3fc657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:62:5e:35:2e:0f:40:21:55:42:2a:c7:7f:dc:
95:ea:61:2c:93:a5:64:fa:5d:49:85:cd:03:2c:66:
d9:7c:68:3e:0a:f6:9f:b3:a8:7e:ca:b0:a4:32:9f:
bd:5c:9c:22:b0:dd:eb:fc:75:86:fe:f8:ba:45:be:
39:5c:88:70:e5:ed:40:4d:fd:ed:de:96:08:93:db:
e0:a4:5b:59:9f:e1:36:06:91:c0:87:b7:4f:12:f1:
46:7a:bc:23:5f:84:ef:cf:5f:67:4f:bf:b1:71:38:
7a:2a:09:46:b9:3c:61:89:9b:6b:86:18:fa:3f:a8:
f5:49:db:9b:0e:ed:69:71:90:a5:db:46:ef:ae:0c:
b8:7b:90:86:b3:69:37:83:ab:83:8c:0e:d0:72:f4:
8a:c6:3c:9a:aa:d1:aa:70:4f:07:fb:fb:1b:9c:0a:
d8:a8:cb:17:77:6f:91:e7:40:72:55:3c:07:d4:e6:
ff:e7:84:75:0c:6e:79:84:91:88:4a:e0:3b:d0:5b:
1e:35:3f:76:e2:f2:6f:3c:e2:74:15:bb:ca:45:32:
7e:b5:32:87:71:89:b7:3a:e4:c4:9e:04:1d:63:91:
55:7e:76:5b:9a:68:34:08:10:68:19:3d:39:a8:b6:
e9:f9:25:32:8b:62:04:49:12:24:99:4f:59:4f:7b:
56:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A0:CB:E0:2E:0C:22:08:96:89:33:4F:E1:28:5B:C2:1C:3F:C6:57
X509v3 Authority Key Identifier:
keyid:B1:8C:4A:43:00:83:7C:4E:A1:7A:D1:E3:82:1A:09:AD:53:76:40:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYxKQwCDfE6hetHjghoJrVN2QIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:c7:b1:ef:66:fd:b6:a7:b5:ea:5b:11:af:30:dc:97:77:32:
06:02:b5:f2:21:49:80:2d:a8:ca:5e:c5:bf:47:05:c8:02:17:
7f:92:b1:ad:83:8f:0a:38:f4:04:e5:dd:3e:4f:f8:2a:7e:17:
a4:87:66:6f:59:0f:d2:69:29:55:ee:ec:2a:99:1d:21:b8:d8:
a0:96:c9:99:b8:7a:f2:36:30:0e:2e:1e:fc:33:9f:1d:d7:f6:
93:38:12:7b:47:46:bf:6e:b4:ef:e2:6b:d6:ab:5d:cb:54:29:
d2:25:54:7a:17:7b:b3:2b:01:db:da:ca:05:b5:36:87:86:31:
fd:65:a7:de:02:58:3b:6a:8a:26:d5:b9:da:e8:88:38:1e:63:
e4:24:d1:39:4b:56:de:f2:a8:49:0e:80:c3:9f:69:e0:ab:e3:
47:dd:d3:96:ba:74:ec:58:c4:e6:cb:4e:c3:b7:17:31:72:ed:
5c:2e:35:ad:cc:7a:fc:bb:26:4a:a5:02:1a:b0:da:94:74:1a:
1e:18:27:b2:3f:2e:b5:6f:95:8e:53:76:70:bd:bb:54:f4:8b:
83:c4:e3:84:73:6e:c0:dc:fb:41:17:7d:9c:d7:1f:8b:27:df:
85:f8:8a:38:54:28:31:19:61:14:0e:91:45:3a:50:b1:ee:f9:
4d:63:3b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:02 2026 by rpki-client