Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
File: sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft (raw, json)
Hash identifier: 18jeXdXbx7yWkdZ7g6LHBwEX55GKXMqEQ8Sw9OFP6wE=
Subject key identifier: 1C:30:A2:8C:DE:93:5E:AB:56:CB:DB:89:64:B6:E9:FD:50:CA:F3:15
Authority key identifier: B1:70:6F:CD:B7:EF:05:80:F4:FF:20:32:CE:EF:FD:29:B7:0A:B6:39
Certificate issuer: /CN=b1706fcdb7ef0580f4ff2032ceeffd29b70ab639
Certificate serial: 019EC111C305808B4F1DE2535BC9184147F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
Manifest number: 072B
Signing time: Sat 13 Jun 2026 13:00:27 +0000
Manifest this update: Sat 13 Jun 2026 13:00:27 +0000
Manifest next update: Sun 14 Jun 2026 13:00:27 +0000
Files and hashes: 1: oowSifZpNNKYzrjcaNUZJWL3m3Y.roa (hash: uwi3PfId3re9pl7ftEeebbIx30aPGmKfgvOr1N4WMJM=)
2: sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl (hash: 3udSLl7j7aJdITOcX3/ACYyQZ6hj5XzHpJnnl0c1fh4=)
3: wYNkgivHmczBfVK47-ZJaMoKgac.asa (hash: 1Kkc1HWLJWlsQ7tek7Nc/E33P76aNAyNEBUZAmhQX4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:11:c3:05:80:8b:4f:1d:e2:53:5b:c9:18:41:47:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1706fcdb7ef0580f4ff2032ceeffd29b70ab639
Validity
Not Before: Jun 13 13:00:27 2026 GMT
Not After : Jun 14 13:00:27 2026 GMT
Subject: CN=1c30a28cde935eab56cbdb8964b6e9fd50caf315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6b:91:b8:05:4e:35:eb:ef:85:f5:3b:f2:7c:
70:04:25:4a:49:2d:b2:40:86:33:5f:7d:35:11:64:
23:95:97:f3:17:78:31:ba:b1:ba:15:1c:34:c0:c8:
3c:98:e0:84:8f:a3:7d:98:34:0b:d7:b0:76:31:fb:
b6:1b:9a:79:24:b7:f3:be:c1:f3:23:ac:f2:e4:32:
3a:71:26:c0:c3:6b:a0:10:3a:be:b8:76:c9:04:f1:
47:06:1e:0c:82:d8:59:ea:72:b7:7b:93:69:9f:1d:
af:39:0c:a0:ed:4e:95:1d:5a:d1:c0:e7:f3:8f:a1:
c2:af:10:25:f7:f1:b0:07:7e:1c:d2:4f:40:1e:ff:
35:fe:91:64:bb:17:7c:77:30:ea:26:ec:1d:75:d9:
b4:12:18:3a:6d:18:2c:f0:56:e3:75:67:1c:65:9c:
80:99:79:80:97:3a:98:0d:b4:39:c9:86:85:51:2d:
bf:e0:f4:a6:89:cd:00:5d:cc:e2:da:7b:81:c8:33:
09:46:da:36:88:84:27:98:87:19:30:77:66:91:53:
14:31:63:e4:69:3f:d8:72:4f:2b:b4:1a:5f:b1:c8:
c8:97:25:58:5a:50:6c:84:f2:a4:92:ed:30:e6:f5:
44:db:42:f5:5b:00:2e:12:6b:1f:81:c1:56:78:d6:
66:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:30:A2:8C:DE:93:5E:AB:56:CB:DB:89:64:B6:E9:FD:50:CA:F3:15
X509v3 Authority Key Identifier:
keyid:B1:70:6F:CD:B7:EF:05:80:F4:FF:20:32:CE:EF:FD:29:B7:0A:B6:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:2d:cf:cc:1b:4e:ae:38:e4:bc:9b:9a:e8:36:20:81:c6:10:
64:0c:cf:db:b1:7b:79:a9:06:25:81:f8:55:c3:63:23:5f:c2:
01:3c:cd:21:1f:eb:d8:24:61:06:18:0e:b9:64:9b:a0:24:32:
e9:03:64:b8:17:17:05:28:1b:aa:82:ed:d0:cc:80:7b:ff:92:
f0:31:c4:a1:f6:22:18:15:2c:b9:ca:6e:9b:8f:19:e5:19:b6:
f7:c2:08:10:84:da:aa:03:48:9a:f5:51:d5:bc:ee:3a:d6:23:
57:a4:da:03:de:15:38:d9:7a:76:43:e1:03:77:89:24:a6:4c:
58:df:26:13:f3:bf:46:6a:32:ae:d3:53:8c:5c:0d:a0:79:f1:
f1:6d:e2:4a:ac:11:66:9d:c2:a3:1b:e4:d9:d9:ed:67:38:ad:
b9:78:dd:6f:f0:24:53:78:4c:cb:6f:16:44:fc:82:81:d8:04:
72:2f:b2:02:18:6f:2f:4c:62:fc:ab:cf:2d:46:47:4b:91:17:
ff:ff:f8:56:a9:aa:a6:9f:36:f4:2b:00:a3:3c:00:65:8f:ea:
38:b2:50:a4:37:d0:dc:80:3b:75:b8:1c:4f:27:08:0f:83:fa:
e2:e0:be:6a:d5:d2:34:c6:d9:41:1c:9c:51:06:dd:61:76:3a:
3a:d2:cb:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:32:15 2026 by rpki-client