Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft
File: sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft (raw, json)
Hash identifier: 2MzsL7F8cFYHXpYVf0WeJfO7N1mJKPaCWsxu1G1fuRg=
Subject key identifier: 70:B8:28:CC:A8:81:68:9F:57:37:AA:DC:97:8C:F0:E9:DF:EE:B6:CF
Authority key identifier: B1:85:9F:3D:2C:D2:83:E7:DB:90:F0:2F:E1:B0:D4:F6:15:60:59:47
Certificate issuer: /CN=b1859f3d2cd283e7db90f02fe1b0d4f615605947
Certificate serial: 019DA454040696253FE8E62919CDA82C5C3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sYWfPSzSg-fbkPAv4bDU9hVgWUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft
Manifest number: 0BE7
Signing time: Sun 19 Apr 2026 06:01:02 +0000
Manifest this update: Sun 19 Apr 2026 06:01:02 +0000
Manifest next update: Mon 20 Apr 2026 06:01:02 +0000
Files and hashes: 1: fwlXtqb10A-wV_bek-0TtXLyN60.roa (hash: EBH4JtRrxBkeHaZ/uJMc1tdnxhG7UT1SgBTpReFISGs=)
2: sYWfPSzSg-fbkPAv4bDU9hVgWUc.crl (hash: 1FvVWRMLmpPvL1+3EAxG5+FKu6N5Bwzn+7Q5q+Rnk8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sYWfPSzSg-fbkPAv4bDU9hVgWUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:54:04:06:96:25:3f:e8:e6:29:19:cd:a8:2c:5c:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1859f3d2cd283e7db90f02fe1b0d4f615605947
Validity
Not Before: Apr 19 06:01:02 2026 GMT
Not After : Apr 20 06:01:02 2026 GMT
Subject: CN=70b828cca881689f5737aadc978cf0e9dfeeb6cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:13:a4:85:48:1c:2b:86:af:95:f8:fb:39:b2:
42:8c:a0:28:81:56:ae:e3:3f:28:1d:2f:f3:14:a3:
44:81:f3:5f:d0:95:fd:ab:d9:01:3a:2c:e3:c3:07:
af:f1:27:9f:42:c2:5c:ff:58:8d:dc:0a:d5:f5:70:
e8:2d:ec:e6:a8:a8:62:76:8e:f4:7c:33:62:9e:55:
f0:f5:54:1e:a9:4f:a0:43:90:65:3b:88:b9:ad:2d:
6c:ad:89:6e:8f:57:74:c1:ee:e2:91:4c:2c:6f:c0:
e0:4c:b9:e7:e0:9b:20:06:4b:37:1e:d5:23:5c:6c:
ac:57:e4:cf:7e:db:d4:cd:96:1e:18:28:a4:be:e8:
78:53:1b:79:86:fd:b8:c6:c9:63:9d:e2:6f:13:08:
20:81:69:59:c2:d2:ce:3b:3b:64:aa:d1:c5:e9:ab:
0e:6c:33:9b:9c:89:3f:b8:7f:90:18:90:2d:e9:dc:
be:4e:f4:f6:0a:f0:ab:49:0f:b6:06:13:22:eb:11:
8d:e0:19:4b:01:84:c2:4d:99:45:0c:42:87:ad:dc:
67:1b:a4:53:b6:64:fd:b3:2a:e3:84:59:c0:39:51:
61:d2:f9:59:8e:54:bc:ec:8f:b5:77:c5:26:93:40:
4e:18:c8:ce:b1:94:8f:58:d7:2e:97:cc:d2:f8:7b:
9a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B8:28:CC:A8:81:68:9F:57:37:AA:DC:97:8C:F0:E9:DF:EE:B6:CF
X509v3 Authority Key Identifier:
keyid:B1:85:9F:3D:2C:D2:83:E7:DB:90:F0:2F:E1:B0:D4:F6:15:60:59:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYWfPSzSg-fbkPAv4bDU9hVgWUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:a6:1d:44:50:28:04:46:23:3c:79:2a:86:b5:01:c9:66:87:
9b:ca:57:e1:3d:0a:7b:95:80:6f:5a:c3:8c:40:ba:12:26:af:
8a:f1:b7:3e:cc:e8:d4:b0:54:49:33:e9:dc:bf:6c:49:91:00:
f0:95:e9:87:f4:cc:d4:6f:2d:44:89:70:e1:6d:f8:7e:27:ba:
f0:29:96:6f:48:72:b1:80:8f:63:3a:85:98:f5:64:47:2e:a1:
de:bb:73:4e:d8:77:da:30:ed:16:ef:dc:6e:f4:88:ae:06:0e:
06:11:4e:7c:02:f8:51:e5:91:ce:ef:10:29:7b:34:73:02:37:
65:13:37:9c:ae:9e:be:80:b9:40:ab:20:ce:c5:52:9c:6e:e9:
69:7c:68:ec:89:e2:32:97:60:c6:9f:78:c5:7b:da:f9:75:77:
9d:a7:70:fb:6c:c0:50:2e:32:b8:c7:5e:bb:68:91:8d:4e:4b:
51:f1:68:50:5e:53:52:48:d8:0d:2e:fe:c3:15:03:3e:65:de:
d7:2f:24:a9:80:58:9d:76:26:5f:13:4c:f8:0a:a3:3b:20:55:
31:3f:21:d7:6d:19:d7:66:61:1e:ea:0d:ea:b4:7d:91:94:da:
ce:ca:28:d2:5c:14:cf:da:cb:15:c5:43:80:89:ba:36:da:d4:
3e:4e:15:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:02:49 2026 by rpki-client