Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft
File: sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft (raw, json)
Hash identifier: 8Uu7YFU9nFmAY7SIy8yu4mpkL8qvvCDZcC4h++tl65I=
Subject key identifier: AA:90:2B:03:E3:B8:76:B7:80:1D:C5:8A:72:DA:23:0E:73:C3:04:7E
Authority key identifier: B1:85:9F:3D:2C:D2:83:E7:DB:90:F0:2F:E1:B0:D4:F6:15:60:59:47
Certificate issuer: /CN=b1859f3d2cd283e7db90f02fe1b0d4f615605947
Certificate serial: 01A0CC6BE3E0C1208268569BECE1F1E9723F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sYWfPSzSg-fbkPAv4bDU9hVgWUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft
Manifest number: 0D8A
Signing time: Wed 23 Sep 2026 04:00:17 +0000
Manifest this update: Wed 23 Sep 2026 04:00:17 +0000
Manifest next update: Thu 24 Sep 2026 04:00:17 +0000
Files and hashes: 1: 6tRNFOHlYPyCYFIHgatSgb5gCeA.roa (hash: E6/vpznSWjmg4YEWxQ9xApX1IggzL3noXqAm0pLp65E=)
2: sYWfPSzSg-fbkPAv4bDU9hVgWUc.crl (hash: HKmSaM79PTeaO1uhsZAgpnvrNm6K+0+RufBSDU8xxvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sYWfPSzSg-fbkPAv4bDU9hVgWUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:6b:e3:e0:c1:20:82:68:56:9b:ec:e1:f1:e9:72:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1859f3d2cd283e7db90f02fe1b0d4f615605947
Validity
Not Before: Sep 23 04:00:17 2026 GMT
Not After : Sep 24 04:00:17 2026 GMT
Subject: CN=aa902b03e3b876b7801dc58a72da230e73c3047e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e0:6a:09:be:22:d0:eb:49:c3:c2:d1:f9:1c:
81:71:9e:02:f0:5b:ec:b6:3f:f6:06:a5:78:0d:89:
73:07:2a:d0:16:55:d6:5a:af:32:92:d0:a7:df:80:
c1:eb:14:42:bc:43:21:d2:38:57:68:65:3d:40:7c:
f6:f3:f2:ab:1e:2b:0c:bb:70:ed:9c:40:b7:98:47:
de:03:1f:96:19:f6:ba:e3:8e:e9:53:e0:e8:b7:02:
54:d5:65:1d:69:3f:bb:eb:ca:53:63:be:66:27:78:
ac:e8:d5:c9:63:b9:2a:85:13:e0:86:f9:ba:5d:e8:
15:83:f9:13:89:b3:35:98:0d:71:8d:21:74:e9:e3:
9b:0b:c7:30:aa:65:99:ab:0d:6d:23:db:e5:6e:37:
67:03:95:9d:a2:8e:f3:7f:12:c3:da:b4:04:90:b3:
84:42:50:15:26:59:c1:8e:90:a4:f7:5a:5a:05:0e:
eb:d1:ce:e0:b7:fa:7c:42:5b:3e:ee:e5:a7:54:03:
8b:7c:74:5d:e0:ae:ce:37:1f:b3:a3:fa:30:58:00:
be:ba:14:6a:1b:f1:0d:c8:cd:8e:b3:b4:38:84:22:
55:12:77:eb:6e:70:1b:ea:d4:41:2d:ae:17:e7:66:
2f:7a:8c:cd:14:a5:f2:3e:b8:ef:34:8b:d8:27:bb:
a8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:90:2B:03:E3:B8:76:B7:80:1D:C5:8A:72:DA:23:0E:73:C3:04:7E
X509v3 Authority Key Identifier:
keyid:B1:85:9F:3D:2C:D2:83:E7:DB:90:F0:2F:E1:B0:D4:F6:15:60:59:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYWfPSzSg-fbkPAv4bDU9hVgWUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:4a:8d:35:92:24:26:fb:f4:10:63:db:c6:73:1c:f9:9a:da:
17:05:ee:b0:b3:28:84:b1:bf:f8:55:96:f6:99:d4:7e:73:64:
2a:90:ad:d2:b7:1d:60:41:b8:c4:9f:df:6e:d6:4f:67:80:55:
26:53:6b:e1:67:99:1b:a4:6e:6b:9d:f3:9f:e5:3c:ce:87:65:
a0:f3:5c:f9:84:26:68:03:b6:c3:46:63:3b:6c:9e:44:0c:96:
c1:da:68:16:ad:52:7c:af:4c:7e:91:62:e1:a4:bf:d1:18:c0:
ee:9f:a5:da:05:1c:ef:32:b7:9a:7b:d8:df:11:d5:d1:16:30:
95:f9:77:c9:7b:8f:01:3f:2e:73:de:80:db:a7:0d:42:63:81:
1f:36:bc:5a:50:5e:83:34:0c:a3:dc:db:9f:81:73:72:d9:11:
36:d5:d8:2a:86:eb:05:23:0d:1f:8a:31:48:50:e6:4d:9a:9e:
5e:6c:1f:a6:16:e2:a7:3c:c0:8d:c0:15:75:db:ed:bc:ee:f9:
4e:96:fe:f9:66:4b:70:f4:7b:92:ae:e7:e7:06:fa:4d:0b:e6:
f9:12:d6:d6:29:d2:94:fb:b4:ea:d3:76:7f:42:0e:c7:40:c1:
f5:83:b6:66:fd:5c:60:ec:11:02:af:f0:63:4b:05:47:2e:a0:
8a:4e:39:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:20:08 2026 by rpki-client