Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
File: sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft (raw, json)
Hash identifier: L2cOK1RAIGpTpAQcXG5H4s4bMBvX1oXhbzxZjf5TeC0=
Subject key identifier: A3:D1:09:C9:DC:20:60:0E:A2:34:D6:98:6C:C6:7C:2F:9B:12:59:4A
Authority key identifier: B1:70:6F:CD:B7:EF:05:80:F4:FF:20:32:CE:EF:FD:29:B7:0A:B6:39
Certificate issuer: /CN=b1706fcdb7ef0580f4ff2032ceeffd29b70ab639
Certificate serial: 01A0DFF44B3E0BDA2DF817FEE7D32D45C3DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
Manifest number: 0846
Signing time: Sat 26 Sep 2026 23:02:04 +0000
Manifest this update: Sat 26 Sep 2026 23:02:04 +0000
Manifest next update: Sun 27 Sep 2026 23:02:04 +0000
Files and hashes: 1: 7vR5Q4m_T61PHPMKP_nErvCFyBE.roa (hash: gq1L8G0x7ivAnw58QCU9tDfYfjdILP3qn6SNIqxyess=)
2: 8FU176wvyGzu3qZRWgZp007b1qg.asa (hash: x8k6LNUsfOGRKHX9gJ4g2GjQMcqtY9wp9At0D9QB+yM=)
3: sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl (hash: t7ldZlVrZECeEGYmsg2BkfeLBl6mGk8sTTIMD79gMsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:f4:4b:3e:0b:da:2d:f8:17:fe:e7:d3:2d:45:c3:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1706fcdb7ef0580f4ff2032ceeffd29b70ab639
Validity
Not Before: Sep 26 23:02:04 2026 GMT
Not After : Sep 27 23:02:04 2026 GMT
Subject: CN=a3d109c9dc20600ea234d6986cc67c2f9b12594a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c0:41:8d:5a:e8:60:bd:23:00:db:93:e6:47:
3b:f7:f7:14:e9:7c:03:a2:e6:c7:e3:ac:35:eb:72:
63:b7:fd:4d:90:12:8f:b5:29:d8:99:c6:aa:6d:20:
85:4c:3d:0a:ef:04:0d:65:d8:fa:3f:1f:41:cf:8b:
6e:e4:74:8b:02:69:18:bf:01:c5:4d:c5:5b:e7:eb:
7b:08:0c:b5:f6:1e:6d:5b:26:e4:67:b8:39:39:af:
7b:ef:d7:d0:97:44:eb:f1:91:80:e6:60:5b:e4:9f:
a0:68:85:94:e6:43:14:1e:e2:63:ce:9a:9b:8a:a7:
cf:89:61:e6:cf:93:8c:c2:1a:ed:3f:cc:33:dd:76:
6d:64:99:7d:14:13:cc:b1:25:ec:60:e7:1e:31:93:
9d:19:8c:c6:9e:41:99:a5:b5:92:d8:79:22:2a:ef:
07:56:3c:af:c4:c9:7d:01:30:e3:72:bf:ff:85:8c:
16:36:df:d4:38:d0:70:a3:1a:c6:bf:36:ce:7b:bc:
75:d8:9a:52:c0:d2:2c:fb:ac:77:2e:dd:50:f0:08:
84:a7:c3:e8:96:37:7b:92:f7:63:2a:65:fc:4f:34:
be:6f:22:48:27:d6:39:28:5a:a8:b3:88:06:fd:72:
19:39:07:54:35:9e:c7:b7:8c:44:09:81:d4:1d:09:
3c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D1:09:C9:DC:20:60:0E:A2:34:D6:98:6C:C6:7C:2F:9B:12:59:4A
X509v3 Authority Key Identifier:
keyid:B1:70:6F:CD:B7:EF:05:80:F4:FF:20:32:CE:EF:FD:29:B7:0A:B6:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:5e:1c:d7:e3:42:f0:bb:96:41:8a:bc:0b:18:16:1f:c8:1b:
48:51:07:73:99:9f:19:b6:38:24:68:8e:a1:17:4f:7e:7e:8a:
d9:62:99:2a:d0:c8:71:cc:7a:aa:d0:18:6b:a3:11:c7:2f:8b:
e6:df:4d:fe:88:37:4e:aa:a6:8d:98:2e:53:c5:6e:c5:3f:ff:
4f:82:86:18:00:f6:62:86:25:c4:79:c0:8a:9e:c8:aa:62:47:
47:d6:ba:55:f5:27:8c:83:78:04:6b:e4:31:8a:91:4f:c3:8e:
9f:99:e8:08:ce:d7:54:8d:24:f6:59:a4:09:8e:8b:4b:66:71:
7a:b1:37:bd:ea:62:d7:ee:36:fd:31:c2:d7:ce:1d:f6:3c:62:
d2:34:f1:7a:73:2a:6e:bc:1b:0a:a5:2f:0c:28:5b:98:ea:33:
7a:19:6c:a8:bf:97:20:b0:71:6c:eb:6a:c5:98:29:ac:7d:5e:
d3:31:50:4f:bc:87:c2:ad:65:2e:e7:90:af:78:c1:a2:6e:a0:
47:6e:fa:40:7b:bc:2d:51:ae:f5:b8:ce:5a:9c:be:71:b2:ad:
de:94:a9:ce:18:9b:08:9d:fd:66:59:0e:aa:65:ca:7a:7d:38:
76:93:22:8e:97:35:44:07:f3:83:00:c1:57:3e:b7:a3:2d:d6:
af:57:d0:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 05:32:26 2026 by rpki-client