Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.mft
File: sYxKQwCDfE6hetHjghoJrVN2QIc.mft (raw, json)
Hash identifier: FKzWPdT3Pfnbk9Yms8hhkxQMxAL8dKYAUrKUOLIXpdk=
Subject key identifier: CC:89:E3:34:88:C0:FF:7C:E6:E6:9F:BA:3B:23:14:F5:2B:62:2B:03
Authority key identifier: B1:8C:4A:43:00:83:7C:4E:A1:7A:D1:E3:82:1A:09:AD:53:76:40:87
Certificate issuer: /CN=b18c4a4300837c4ea17ad1e3821a09ad53764087
Certificate serial: 019DA3AF34C92609A5D1552D7E931E9AE097
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sYxKQwCDfE6hetHjghoJrVN2QIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.mft
Manifest number: 115F
Signing time: Sun 19 Apr 2026 03:01:01 +0000
Manifest this update: Sun 19 Apr 2026 03:01:01 +0000
Manifest next update: Mon 20 Apr 2026 03:01:01 +0000
Files and hashes: 1: OztHm958aRJRxZODVtzftmoIutM.roa (hash: LyCjNgF1WRtdSw3T7qrOJsi3Hm2+foAc8JYBqHMHMdE=)
2: sYxKQwCDfE6hetHjghoJrVN2QIc.crl (hash: 0BnW7RY8c/TdhVZwUeSBqWQ8jDk5kSy3My0qZ0pTI88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sYxKQwCDfE6hetHjghoJrVN2QIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:af:34:c9:26:09:a5:d1:55:2d:7e:93:1e:9a:e0:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b18c4a4300837c4ea17ad1e3821a09ad53764087
Validity
Not Before: Apr 19 03:01:01 2026 GMT
Not After : Apr 20 03:01:01 2026 GMT
Subject: CN=cc89e33488c0ff7ce6e69fba3b2314f52b622b03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:96:3e:57:fb:9d:6a:23:4b:58:66:17:bb:f5:
e8:bf:6f:ad:85:63:69:5f:91:4f:0d:12:db:7d:b7:
83:82:1e:f8:5f:00:8b:50:77:18:3c:fc:e3:13:98:
12:c6:8f:98:cf:a0:82:7b:50:35:2f:28:02:2c:82:
5a:ea:c9:45:42:ec:37:5a:78:9d:c3:0b:4e:c4:0e:
3e:4f:e5:16:58:ec:46:6e:d1:1a:30:17:f6:cf:33:
a1:f7:a9:35:ae:75:b1:d7:e1:32:48:4a:86:73:f8:
ea:c9:54:71:99:c6:69:9f:26:8e:7e:1f:95:54:27:
2d:b4:dd:f5:35:de:69:29:35:61:2c:f9:2b:89:63:
c9:b2:9c:8c:56:2b:d9:9d:61:55:09:f8:80:1d:e9:
a6:c7:aa:0c:45:66:12:ea:15:a1:04:49:c1:e3:8b:
a4:0a:87:6a:3c:a6:5b:4b:92:b4:95:b3:87:73:3c:
a5:4e:f5:2a:c8:c0:7e:4d:4b:70:fc:50:b3:d1:40:
2a:45:02:16:b3:4b:ed:46:c7:a3:33:5e:fb:de:1e:
4a:bd:6c:50:ff:b2:d8:0b:94:e3:40:54:b0:dc:b3:
2a:25:60:22:11:1e:61:e8:fe:ac:96:78:e4:cf:28:
60:d4:2d:53:7f:5c:20:d5:fd:40:88:31:c3:20:38:
eb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:89:E3:34:88:C0:FF:7C:E6:E6:9F:BA:3B:23:14:F5:2B:62:2B:03
X509v3 Authority Key Identifier:
keyid:B1:8C:4A:43:00:83:7C:4E:A1:7A:D1:E3:82:1A:09:AD:53:76:40:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYxKQwCDfE6hetHjghoJrVN2QIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:f6:4b:b8:73:24:d0:c9:5b:12:67:8f:59:c8:13:3a:30:16:
ae:85:ca:34:3f:69:45:3d:cb:17:70:d4:0e:00:1e:4d:a9:d5:
c5:da:2c:d6:1a:d0:d3:2f:30:50:6b:b6:c9:ca:ba:a3:18:79:
8f:34:d7:1f:50:08:72:5e:1f:b0:7d:6f:79:65:da:84:07:a0:
3a:a8:75:eb:2c:17:63:54:ed:16:f9:82:c4:bc:87:4c:33:80:
e8:41:1b:a7:bc:86:da:0b:3b:27:9c:c2:18:28:9c:8a:76:08:
52:22:ed:e0:a0:ca:af:f9:50:8c:5b:e7:21:6a:34:be:92:de:
01:a3:f1:13:54:34:68:c6:22:ee:6a:5f:f0:f6:28:5b:44:61:
57:bc:ea:d3:0b:b6:c5:79:2a:3e:a0:ba:59:94:66:3a:76:62:
6f:79:4c:ce:c3:57:a8:18:24:9c:d1:92:42:d9:ca:ca:ce:aa:
41:28:6d:65:f3:f9:fe:c0:64:49:6c:37:fa:3a:5d:b6:71:84:
3d:d3:d0:ca:20:df:82:40:3e:e7:aa:8c:fc:2b:91:ee:67:82:
c3:f7:7d:c2:81:b8:6b:e6:8e:34:f0:d1:a4:7d:46:ff:48:13:
99:77:9d:5b:46:e3:be:01:d5:85:21:89:d5:3f:cc:3a:d6:cf:
83:75:ba:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:14:49 2026 by rpki-client