Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
File: sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft (raw, json)
Hash identifier: ZqCY55iXCw0PWAeQ+SV1UIs33nGy2o6e39lBH30p14Q=
Subject key identifier: 99:77:14:A4:73:E4:B7:E0:C4:3F:74:23:58:E7:07:B4:24:2F:20:B7
Authority key identifier: B1:70:6F:CD:B7:EF:05:80:F4:FF:20:32:CE:EF:FD:29:B7:0A:B6:39
Certificate issuer: /CN=b1706fcdb7ef0580f4ff2032ceeffd29b70ab639
Certificate serial: 019CAAC6DE0391298B2DDBA44BBCAFBEED56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
Manifest number: 0616
Signing time: Sun 01 Mar 2026 19:01:25 +0000
Manifest this update: Sun 01 Mar 2026 19:01:25 +0000
Manifest next update: Mon 02 Mar 2026 19:01:25 +0000
Files and hashes: 1: oowSifZpNNKYzrjcaNUZJWL3m3Y.roa (hash: uwi3PfId3re9pl7ftEeebbIx30aPGmKfgvOr1N4WMJM=)
2: sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl (hash: AlphOD9/XIF2pTTHvj/DIQb7M5YnukoXFqswb2Wet7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:de:03:91:29:8b:2d:db:a4:4b:bc:af:be:ed:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1706fcdb7ef0580f4ff2032ceeffd29b70ab639
Validity
Not Before: Mar 1 19:01:25 2026 GMT
Not After : Mar 2 19:01:25 2026 GMT
Subject: CN=997714a473e4b7e0c43f742358e707b4242f20b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8c:c6:ff:be:e4:11:11:ea:d0:09:cb:6a:4c:
e1:4c:9f:1b:e3:37:e4:b2:2b:1a:6a:79:cc:7b:40:
2d:76:0d:ae:4d:65:78:10:bc:61:57:80:f9:88:5b:
5b:69:22:ae:2d:d6:9e:93:d4:3d:32:00:97:a3:29:
6a:c4:ea:3b:25:91:8e:2d:0e:8a:d0:79:27:64:fd:
62:c9:99:46:f7:09:a9:2d:b7:e2:49:a4:42:cd:7a:
b5:1c:21:2e:97:40:da:1a:2c:be:0e:50:da:51:2d:
d1:9f:12:f2:45:bb:de:94:e8:39:46:53:0e:2a:19:
0f:53:f1:ef:30:36:30:ff:6b:02:16:69:e5:96:65:
b3:b9:dd:b7:18:ba:9e:2a:98:76:7b:b7:df:a2:12:
13:95:46:0c:b1:de:3e:56:d1:e4:f9:23:29:73:32:
59:dd:40:04:5c:5e:ab:e0:90:6a:c6:ca:96:83:4f:
50:ec:08:e2:90:89:ed:b6:b9:5a:01:1b:21:e2:ad:
96:63:de:be:a5:72:18:b7:e5:d2:b1:a0:49:31:52:
3d:43:8c:0d:4a:9d:fb:99:fa:01:32:c7:de:de:71:
c0:89:f6:1c:7b:ba:de:41:ea:1e:ce:5c:b0:9f:13:
36:3e:86:36:25:95:94:cc:1f:e6:7d:84:8c:07:da:
2c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:77:14:A4:73:E4:B7:E0:C4:3F:74:23:58:E7:07:B4:24:2F:20:B7
X509v3 Authority Key Identifier:
keyid:B1:70:6F:CD:B7:EF:05:80:F4:FF:20:32:CE:EF:FD:29:B7:0A:B6:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:0a:56:4d:ad:af:32:f5:6a:94:04:e8:70:75:04:61:ea:80:
61:02:3a:ee:b5:af:d1:be:95:1e:86:30:dc:84:0d:3c:ff:40:
d4:2f:1a:42:f7:0b:3d:6e:c3:10:da:f8:f4:82:af:20:dc:4c:
88:bc:7b:1f:eb:2c:43:7b:dd:c6:a1:ae:af:5f:28:25:ed:03:
be:ee:6e:33:9b:b9:2d:2f:90:d1:b1:f6:4b:3d:4c:4c:f4:9d:
20:ab:e3:f1:91:a4:cc:3a:c5:d9:d1:b7:f6:5b:c9:cd:4c:3f:
ec:fc:c1:e8:3a:c2:7c:ff:9e:8b:82:e0:5f:ad:89:db:6e:65:
3b:a4:6f:53:48:ae:95:04:69:55:a4:ef:22:81:47:88:9f:8d:
d7:3b:16:9c:48:44:85:b0:cc:15:50:92:75:b7:ef:ce:96:5c:
f7:7b:32:f2:bd:61:39:bc:01:ec:be:c0:06:78:0b:5a:87:64:
f4:d4:03:72:6e:e2:13:cd:a8:8c:18:a8:d7:ab:5d:f6:40:93:
84:a2:c9:97:83:0e:e5:50:36:7a:57:0e:8c:2c:5c:c5:89:76:
9c:eb:25:50:41:da:48:89:98:75:66:e8:02:0e:cd:f5:c2:fb:
52:3b:b6:1c:04:4e:d7:41:7e:2a:e6:f6:ca:97:a4:70:67:ad:
3c:e9:d6:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:15:37 2026 by rpki-client