Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft
File: sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft (raw, json)
Hash identifier: GhL2CcoeyFo04XA+CE49UQ6HuqRyxAfJMuEbhTkggXw=
Subject key identifier: C8:85:98:4A:8A:1E:18:9F:1F:7E:4C:DB:6A:6F:2B:F2:D8:4C:7E:5A
Authority key identifier: B1:85:9F:3D:2C:D2:83:E7:DB:90:F0:2F:E1:B0:D4:F6:15:60:59:47
Certificate issuer: /CN=b1859f3d2cd283e7db90f02fe1b0d4f615605947
Certificate serial: 01A0D4269B771E3EDAEE77C5F728A3BD2322
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sYWfPSzSg-fbkPAv4bDU9hVgWUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft
Manifest number: 0D8E
Signing time: Thu 24 Sep 2026 16:01:34 +0000
Manifest this update: Thu 24 Sep 2026 16:01:34 +0000
Manifest next update: Fri 25 Sep 2026 16:01:34 +0000
Files and hashes: 1: 6tRNFOHlYPyCYFIHgatSgb5gCeA.roa (hash: E6/vpznSWjmg4YEWxQ9xApX1IggzL3noXqAm0pLp65E=)
2: sYWfPSzSg-fbkPAv4bDU9hVgWUc.crl (hash: 0UVxc2ORXoqcl0Y0rIb+tTUHnLr2aj/0dHsxNzcbfWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sYWfPSzSg-fbkPAv4bDU9hVgWUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:26:9b:77:1e:3e:da:ee:77:c5:f7:28:a3:bd:23:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1859f3d2cd283e7db90f02fe1b0d4f615605947
Validity
Not Before: Sep 24 16:01:34 2026 GMT
Not After : Sep 25 16:01:34 2026 GMT
Subject: CN=c885984a8a1e189f1f7e4cdb6a6f2bf2d84c7e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fc:7e:2b:65:67:b5:91:99:2d:4d:e8:68:d7:
fc:4d:3c:9b:63:33:10:33:0c:14:d4:f6:6c:f9:a1:
7b:de:44:b5:8e:7f:1f:0e:3d:df:52:a8:13:ff:5a:
c8:24:78:1b:4f:56:ae:b7:91:cc:7e:83:d1:ab:99:
39:01:9c:f5:f6:a8:98:4c:70:0c:d8:b9:d0:cc:95:
29:b7:0b:bc:75:a6:a2:5a:a1:e4:59:cb:d3:a2:01:
43:4d:7d:40:7b:6c:09:c6:1b:39:94:54:74:82:9a:
a1:70:be:0c:5f:74:45:5a:36:58:1e:43:ee:60:00:
dd:63:e4:e2:59:31:b5:bb:b7:35:74:95:f0:e7:99:
b1:d8:0e:29:f5:08:af:14:40:77:62:b7:51:69:67:
87:d5:2e:a3:a4:5d:7e:c4:2d:33:4a:77:f1:37:61:
12:c9:85:37:c6:0f:05:fd:38:78:e0:43:f7:c0:0f:
5e:96:2a:08:93:7d:3a:1b:89:7c:8f:68:77:f0:ac:
65:95:d6:5f:53:be:24:5d:e3:c0:f3:fb:ce:cd:ad:
bb:ec:a6:6c:71:bc:5d:a1:dd:80:99:9c:1a:c6:ff:
a9:33:0a:8a:c1:1a:1c:f5:ad:bc:0d:5f:3f:dd:6f:
83:d6:f9:ce:ac:8e:04:5f:c6:38:5f:d9:8c:41:17:
d4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:85:98:4A:8A:1E:18:9F:1F:7E:4C:DB:6A:6F:2B:F2:D8:4C:7E:5A
X509v3 Authority Key Identifier:
keyid:B1:85:9F:3D:2C:D2:83:E7:DB:90:F0:2F:E1:B0:D4:F6:15:60:59:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYWfPSzSg-fbkPAv4bDU9hVgWUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:43:19:fd:4d:de:ec:a0:09:4a:f9:ae:e5:d5:03:0e:64:c2:
75:37:fe:2c:27:81:44:8e:f9:e9:73:2d:b5:93:96:86:6c:e3:
11:2b:d4:ee:d6:02:1a:d0:85:96:2e:fa:c1:39:a1:47:4c:81:
a2:50:80:63:63:1d:d8:6e:de:f9:a1:f2:03:12:70:c5:63:3e:
57:8d:a7:a6:72:49:18:5c:38:0f:c1:e2:1f:e7:b1:47:1f:da:
16:72:80:dc:41:df:53:e9:85:54:45:53:63:fa:b5:33:75:36:
ce:d6:80:6c:57:4f:78:d3:71:f4:48:54:b7:ee:77:e8:4e:a1:
28:35:a7:48:80:f6:49:15:3e:4f:81:f1:87:bf:ff:93:61:19:
3e:3d:ba:db:31:cc:57:1e:2b:5c:48:00:46:05:2d:93:56:9b:
a0:b8:b2:d6:8e:21:f9:13:e6:4f:3d:e6:59:e8:26:05:87:81:
0b:f5:ec:06:f3:65:47:69:ff:e3:a3:0c:51:33:d1:91:15:4d:
80:3f:d3:f8:30:e3:e8:0b:a3:e4:01:0b:bc:52:64:0f:89:57:
58:6f:98:f5:ed:d9:67:81:bd:5b:b3:e5:31:e6:4a:71:2c:44:
c5:7b:b3:fd:35:3b:de:48:26:08:e5:14:50:e4:5d:43:82:1c:
b5:99:2e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:19:19 2026 by rpki-client