Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft
File: sSUy4p8i-iMdxvyOUw77HHYRngo.mft (raw, json)
Hash identifier: wvYVCbenPC79bFe7d6j7SowwxCBrkXyWuwKHlPlD8g8=
Subject key identifier: 5C:C8:5E:FC:F6:B9:8A:13:59:89:13:97:E5:91:09:95:3A:BC:1E:55
Authority key identifier: B1:25:32:E2:9F:22:FA:23:1D:C6:FC:8E:53:0E:FB:1C:76:11:9E:0A
Certificate issuer: /CN=b12532e29f22fa231dc6fc8e530efb1c76119e0a
Certificate serial: 019CA86AC221D63B147E77FB55504C953EC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sSUy4p8i-iMdxvyOUw77HHYRngo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft
Manifest number: EB
Signing time: Sun 01 Mar 2026 08:01:34 +0000
Manifest this update: Sun 01 Mar 2026 08:01:34 +0000
Manifest next update: Mon 02 Mar 2026 08:01:34 +0000
Files and hashes: 1: FRuPa3TQLmOFKS43Th1eCNTwaoI.asa (hash: 27T9GCi2bfzmEH7qtY+uT56lMZiqysQt1tGrtXQaUjY=)
2: sSUy4p8i-iMdxvyOUw77HHYRngo.crl (hash: XICtul7lDZ/KRXvKdv27g+w0US5aMrN3DILNmGgyWDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft
rsync://rpki.ripe.net/repository/DEFAULT/sSUy4p8i-iMdxvyOUw77HHYRngo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:6a:c2:21:d6:3b:14:7e:77:fb:55:50:4c:95:3e:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b12532e29f22fa231dc6fc8e530efb1c76119e0a
Validity
Not Before: Mar 1 08:01:34 2026 GMT
Not After : Mar 2 08:01:34 2026 GMT
Subject: CN=5cc85efcf6b98a1359891397e59109953abc1e55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e7:e1:94:12:f2:12:09:57:01:de:19:da:53:
69:ee:c5:a7:bf:57:cd:2d:9c:b0:7f:f2:3a:db:66:
31:80:a0:5f:9c:6d:4c:e4:c7:1b:9f:12:f8:16:13:
48:7e:1a:79:70:72:4e:dc:5b:b6:1a:44:de:e9:08:
ad:00:2a:12:c6:4e:c5:da:81:8c:1d:ca:5a:34:e8:
6a:74:bd:27:38:51:52:69:1f:c2:fc:e6:39:9a:fb:
97:2e:ac:8f:e0:7b:2a:a6:05:c7:f5:a2:33:aa:4d:
c7:75:69:eb:d5:2b:00:bb:f6:94:e1:e7:2b:cb:99:
4c:42:77:a0:3c:2a:78:1a:2d:92:97:b3:68:64:93:
2e:ba:60:08:16:cf:cc:88:61:2c:59:a5:d2:23:54:
8d:f9:06:a4:e0:ba:42:27:be:de:5a:51:82:95:d5:
50:9e:74:d3:8a:01:40:b0:49:f7:4d:d7:49:ff:c4:
b8:93:15:d9:ae:f2:07:49:c1:4f:cf:40:aa:42:b4:
4f:2c:49:84:11:28:81:e5:81:c3:d5:cd:ec:ef:1d:
20:ff:fc:a0:36:cc:b0:b8:61:16:9b:ae:c1:2e:71:
c1:f7:be:09:3f:b1:fd:fd:50:09:12:aa:cd:86:19:
10:51:0f:94:66:58:3d:a9:04:28:e5:a6:9e:07:21:
96:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C8:5E:FC:F6:B9:8A:13:59:89:13:97:E5:91:09:95:3A:BC:1E:55
X509v3 Authority Key Identifier:
keyid:B1:25:32:E2:9F:22:FA:23:1D:C6:FC:8E:53:0E:FB:1C:76:11:9E:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sSUy4p8i-iMdxvyOUw77HHYRngo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:94:ab:c7:af:27:90:e7:5a:a6:01:45:1a:31:75:a9:8d:9c:
c5:e7:c0:8b:d8:7b:72:7e:ea:af:65:8f:50:79:a8:97:5f:63:
29:99:20:55:4b:93:5e:d1:35:5d:7d:bf:6c:05:25:b0:02:89:
a1:59:2a:db:fd:e2:1f:2e:4d:93:9d:fe:32:0b:f7:69:66:e6:
ee:54:1a:07:bd:49:5c:f0:50:c8:6a:79:75:8e:35:26:7d:22:
a6:05:70:1f:93:23:34:7b:cf:ac:ad:34:c9:f6:dc:61:4a:ba:
3c:4f:71:ba:1a:82:10:1f:68:a7:fe:82:4b:ba:d9:4b:24:46:
de:58:f6:cb:33:c3:59:77:4a:cc:ae:40:59:b8:a1:28:ca:5d:
a3:9c:00:ab:3e:01:60:95:91:d6:cc:ec:7d:f8:a8:f8:c1:f5:
0b:0f:e3:81:78:89:38:ef:88:05:25:5d:65:50:a8:c2:db:23:
e2:4c:5b:63:b7:86:f1:ce:e8:05:e2:18:99:c2:da:5a:0f:d0:
ab:02:f3:01:53:81:9d:bf:d1:8a:60:73:9f:17:f6:c2:47:26:
20:8a:65:34:23:3c:5c:be:a3:fa:2f:56:ab:57:c7:f0:de:44:
3d:e1:19:61:87:d2:94:dd:b5:9a:df:b8:38:c6:82:84:7e:e0:
f1:25:8d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:28:35 2026 by rpki-client