Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft
File: sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft (raw, json)
Hash identifier: IeclHTFxNi5Li9dflcp8T/Nhj0KWwo7y6FJrTtdz9Lo=
Subject key identifier: 8C:34:B5:48:AB:FF:4C:90:8B:9C:D3:AE:AF:29:60:E5:5D:E0:E1:5D
Authority key identifier: B1:85:9F:3D:2C:D2:83:E7:DB:90:F0:2F:E1:B0:D4:F6:15:60:59:47
Certificate issuer: /CN=b1859f3d2cd283e7db90f02fe1b0d4f615605947
Certificate serial: 019CAB3409896A2A11249D726AC659880B23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sYWfPSzSg-fbkPAv4bDU9hVgWUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft
Manifest number: 0B66
Signing time: Sun 01 Mar 2026 21:00:40 +0000
Manifest this update: Sun 01 Mar 2026 21:00:40 +0000
Manifest next update: Mon 02 Mar 2026 21:00:40 +0000
Files and hashes: 1: fwlXtqb10A-wV_bek-0TtXLyN60.roa (hash: EBH4JtRrxBkeHaZ/uJMc1tdnxhG7UT1SgBTpReFISGs=)
2: sYWfPSzSg-fbkPAv4bDU9hVgWUc.crl (hash: eMkchtEUEteZpGq/5Iqevc6sUZhyAbpLdA83Yge8mtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sYWfPSzSg-fbkPAv4bDU9hVgWUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:09:89:6a:2a:11:24:9d:72:6a:c6:59:88:0b:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1859f3d2cd283e7db90f02fe1b0d4f615605947
Validity
Not Before: Mar 1 21:00:40 2026 GMT
Not After : Mar 2 21:00:40 2026 GMT
Subject: CN=8c34b548abff4c908b9cd3aeaf2960e55de0e15d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e9:b2:7e:a8:5d:bf:4d:8c:6f:31:19:f7:12:
13:40:7d:ea:bd:bb:cc:47:db:e3:ed:9f:72:b1:3c:
94:0c:c1:4b:65:99:8f:13:d6:da:dd:75:52:b0:47:
f2:49:01:56:0f:88:d4:7c:91:c3:97:35:ac:3b:66:
0a:bf:53:25:c3:45:20:fb:d7:c7:40:71:ba:59:50:
07:90:59:cd:19:f2:08:d3:42:8f:2e:f3:76:19:55:
ca:60:57:e8:25:84:fd:a7:f9:1f:3e:47:7b:ee:a0:
0f:c4:c8:09:7a:40:0b:75:87:66:57:5c:75:13:c1:
86:1f:0c:cf:55:6c:ad:d9:ac:0e:a7:e4:23:0f:ea:
97:ef:be:35:73:2c:ac:4f:41:0d:5b:e6:49:58:c2:
b8:3e:98:21:f9:80:b6:18:93:99:88:1e:02:f7:c9:
57:ae:6f:0c:f0:92:53:21:76:cf:0a:1d:35:df:8e:
24:95:86:47:79:c0:14:76:be:e9:96:6d:3f:31:f7:
00:ad:f7:aa:dd:ad:fe:25:19:3c:10:ee:d6:a3:8d:
07:75:df:67:85:19:bc:d1:3f:1b:03:16:89:94:3e:
41:e2:24:ef:18:7d:30:8e:aa:c5:29:13:a4:76:f3:
2b:a0:ca:28:4f:17:1b:5d:5c:3b:53:9d:2b:2b:bc:
2d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:34:B5:48:AB:FF:4C:90:8B:9C:D3:AE:AF:29:60:E5:5D:E0:E1:5D
X509v3 Authority Key Identifier:
keyid:B1:85:9F:3D:2C:D2:83:E7:DB:90:F0:2F:E1:B0:D4:F6:15:60:59:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYWfPSzSg-fbkPAv4bDU9hVgWUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:3e:1c:03:ff:f9:00:93:c9:37:66:d4:fd:9f:b3:57:50:e2:
c0:d2:43:8a:6e:7e:18:c0:92:d2:c3:d9:90:78:42:7f:cc:8d:
35:9f:1b:4e:f9:6b:70:92:51:f5:34:63:f4:ec:97:10:ed:29:
22:e4:c6:3d:c9:6b:ff:23:5a:08:e0:60:48:59:03:1d:11:85:
87:15:92:e5:b0:fb:54:99:f0:91:e8:e2:b4:cc:10:94:45:cb:
e8:5d:2c:c0:7c:ad:2b:09:17:ad:cf:7b:b8:1e:ae:b8:78:dc:
ee:70:5c:3f:97:1e:c4:87:7c:ea:cb:0b:c6:92:2b:5f:94:fd:
b2:93:9d:d4:68:2b:3a:da:53:f8:69:c5:d8:09:8c:0c:83:ce:
b8:c5:71:af:23:f1:c7:66:a7:c9:cb:50:ae:70:20:0b:23:f3:
e4:e0:d9:3b:6f:6e:7b:b5:a5:59:28:6e:d5:ee:57:8a:c1:7b:
5d:bb:67:5a:0a:07:f0:5a:d5:ee:d5:23:05:71:8b:be:f8:e8:
d7:a4:02:9e:02:45:49:ec:88:6e:a6:07:a9:0e:a7:53:2d:59:
02:ce:a5:c1:c8:c0:39:a2:7c:51:8f:60:01:80:d7:d7:06:6b:
1b:cf:13:73:ef:94:44:e7:21:e1:b7:3e:37:59:d2:60:4d:68:
c0:2a:0e:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNAmJaioRJJ1yasZZiAsjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxODU5ZjNkMmNkMjgzZTdkYjkwZjAyZmUxYjBkNGY2MTU2
MDU5NDcwHhcNMjYwMzAxMjEwMDQwWhcNMjYwMzAyMjEwMDQwWjAzMTEwLwYDVQQD
Eyg4YzM0YjU0OGFiZmY0YzkwOGI5Y2QzYWVhZjI5NjBlNTVkZTBlMTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlumyfqhdv02MbzEZ9xITQH3qvbvM
R9vj7Z9ysTyUDMFLZZmPE9ba3XVSsEfySQFWD4jUfJHDlzWsO2YKv1Mlw0Ug+9fH
QHG6WVAHkFnNGfII00KPLvN2GVXKYFfoJYT9p/kfPkd77qAPxMgJekALdYdmV1x1
E8GGHwzPVWyt2awOp+QjD+qX7741cyysT0ENW+ZJWMK4Ppgh+YC2GJOZiB4C98lX
rm8M8JJTIXbPCh01344klYZHecAUdr7plm0/MfcArfeq3a3+JRk8EO7Wo40Hdd9n
hRm80T8bAxaJlD5B4iTvGH0wjqrFKROkdvMroMooTxcbXVw7U50rK7wt+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIw0tUir/0yQi5zTrq8pYOVd4OFdMB8GA1UdIwQY
MBaAFLGFnz0s0oPn25DwL+Gw1PYVYFlHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1lXZlBTelNnLWZia1BBdjRiRFU5aFZnV1VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9mN2E1NjAtODg3My00MGVlLWE3YzUt
MmFhZGM1YzNjNTdkLzEvc1lXZlBTelNnLWZia1BBdjRiRFU5aFZnV1VjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9mN2E1NjAtODg3My00MGVlLWE3YzUtMmFhZGM1YzNjNTdk
LzEvc1lXZlBTelNnLWZia1BBdjRiRFU5aFZnV1VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADj4cA//5
AJPJN2bU/Z+zV1DiwNJDim5+GMCS0sPZkHhCf8yNNZ8bTvlrcJJR9TRj9OyXEO0p
IuTGPclr/yNaCOBgSFkDHRGFhxWS5bD7VJnwkejitMwQlEXL6F0swHytKwkXrc97
uB6uuHjc7nBcP5cexId86ssLxpIrX5T9spOd1GgrOtpT+GnF2AmMDIPOuMVxryPx
x2anyctQrnAgCyPz5ODZO29ue7WlWShu1e5XisF7XbtnWgoH8FrV7tUjBXGLvvjo
16QCngJFSeyIbqYHqQ6nUy1ZAs6lwcjAOaJ8UY9gAYDX1wZrG88Tc++UROch4bc+
N1nSYE1owCoO1Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:40:43 2026 by rpki-client