Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.mft
File: sda67LY65G_uowyrhiHUbFn3KAg.mft (raw, json)
Hash identifier: qBj+hD/gzhgcLtbGzb9Arh2XEODfmD4mpLAZk3sJxoo=
Subject key identifier: F2:3A:AA:FD:DA:A4:23:52:D0:4B:DA:2D:62:69:94:49:DA:41:6E:08
Authority key identifier: B1:D6:BA:EC:B6:3A:E4:6F:EE:A3:0C:AB:86:21:D4:6C:59:F7:28:08
Certificate issuer: /CN=b1d6baecb63ae46feea30cab8621d46c59f72808
Certificate serial: 019CABA21E1C4BDB093BD780EA467AB8087E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sda67LY65G_uowyrhiHUbFn3KAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.mft
Manifest number: 1598
Signing time: Sun 01 Mar 2026 23:00:54 +0000
Manifest this update: Sun 01 Mar 2026 23:00:54 +0000
Manifest next update: Mon 02 Mar 2026 23:00:54 +0000
Files and hashes: 1: 8JPDTRJcWjJC1p6Bup8VRe1Gagc.roa (hash: /UT/Fa23tq8Vnw8GXuEzSsDokpGGbDVoxclf2hd11P4=)
2: sda67LY65G_uowyrhiHUbFn3KAg.crl (hash: xEeLZ3rb34/ar58JOqsOiPLODxSFFhZd35qyohxsYDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/sda67LY65G_uowyrhiHUbFn3KAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:1e:1c:4b:db:09:3b:d7:80:ea:46:7a:b8:08:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1d6baecb63ae46feea30cab8621d46c59f72808
Validity
Not Before: Mar 1 23:00:54 2026 GMT
Not After : Mar 2 23:00:54 2026 GMT
Subject: CN=f23aaafddaa42352d04bda2d62699449da416e08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0c:c0:24:42:65:f3:c7:5a:cf:ff:f3:cf:21:
c0:02:47:97:5a:fa:69:66:16:85:4b:56:90:65:70:
5f:ab:8f:6b:ea:a6:cf:8c:48:7b:a7:0e:16:79:70:
0c:10:1c:cd:e7:ce:08:90:99:a1:d1:9e:cd:8c:23:
c8:de:8c:15:a0:97:72:17:e1:aa:60:6d:f8:81:d4:
c5:90:b9:10:d2:c8:c0:df:ae:a1:c7:2c:f0:3d:ad:
ce:dd:ec:5c:5d:cb:42:6d:df:3c:79:fa:ce:80:e2:
51:39:1d:cb:20:c5:fb:f5:c8:f8:c2:9e:be:d6:88:
fd:cd:60:26:71:8c:aa:e2:75:cb:d0:e0:2a:33:f8:
39:f0:98:6a:1f:bd:64:1c:b6:67:d5:f6:7a:3a:f0:
60:df:8b:12:90:27:5d:65:93:ae:44:f8:d2:c1:ab:
e0:45:29:41:92:ea:66:49:70:9c:73:73:72:66:ef:
8c:98:f0:ce:86:42:7d:2d:e5:27:74:12:40:24:c0:
20:4b:ed:79:43:6a:28:ee:91:8b:ec:30:b7:48:4b:
20:65:fa:01:8e:17:1c:30:d5:de:2c:38:1c:c7:35:
7d:72:69:af:da:47:f7:61:32:1f:6b:a2:ae:80:2a:
dd:dc:af:74:a8:01:cb:ff:c2:64:aa:3a:8f:4f:32:
64:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:3A:AA:FD:DA:A4:23:52:D0:4B:DA:2D:62:69:94:49:DA:41:6E:08
X509v3 Authority Key Identifier:
keyid:B1:D6:BA:EC:B6:3A:E4:6F:EE:A3:0C:AB:86:21:D4:6C:59:F7:28:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sda67LY65G_uowyrhiHUbFn3KAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/703d96-e34b-4c24-9c9c-7af79daa69b9/1/sda67LY65G_uowyrhiHUbFn3KAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:87:18:5a:f6:09:bc:0a:35:a5:6e:10:e8:ec:09:ae:59:2d:
53:d2:50:a1:6e:71:20:60:1a:73:2c:06:f0:45:f3:f5:ab:6d:
9d:85:69:23:6a:1b:44:0e:4b:61:64:d7:28:e0:5b:86:e7:d0:
5e:b5:8a:69:7a:a3:1a:8b:cc:bd:f3:42:2a:6e:88:09:e9:68:
e0:c6:69:ae:8c:64:64:59:f2:57:d6:d1:f4:d8:69:c6:1c:14:
08:83:8b:d5:f1:28:f9:f9:a9:55:89:5f:b2:05:2c:70:7a:49:
4a:e7:40:18:b7:36:c6:58:9e:f5:6e:fc:e8:1a:e7:a7:d4:1f:
72:fd:5f:74:99:84:6e:1c:cf:de:67:85:19:92:a9:f1:06:05:
72:12:4b:f6:a2:03:85:d2:23:83:9f:5e:00:55:45:87:bb:58:
76:07:2f:16:8a:cc:26:b0:b9:7a:cf:ec:ff:e2:63:3d:ab:7a:
0b:0e:fa:14:be:e6:fd:fa:19:1b:d3:7c:f9:d8:e4:a8:47:eb:
f2:51:90:ba:4a:03:d6:24:c6:6a:f4:fc:5a:07:4b:7b:06:bc:
b3:3f:15:fc:be:47:34:fc:46:01:77:7c:73:3d:01:e8:ec:32:
17:d0:65:f8:44:2e:6f:90:18:e8:41:70:d5:1f:36:9c:48:ae:
1c:7a:7e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:00 2026 by rpki-client