Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft
File: sSUy4p8i-iMdxvyOUw77HHYRngo.mft (raw, json)
Hash identifier: 9htZ4WfuGKbr3gTVbQ95xvhUzR/EsCAUNSMpW+R++ho=
Subject key identifier: C2:65:4C:06:DE:45:0D:DF:DB:51:60:7B:1D:6B:EF:5E:73:34:5F:E2
Authority key identifier: B1:25:32:E2:9F:22:FA:23:1D:C6:FC:8E:53:0E:FB:1C:76:11:9E:0A
Certificate issuer: /CN=b12532e29f22fa231dc6fc8e530efb1c76119e0a
Certificate serial: 019EBF5A1AD237D49E0DB43B4425AEAF3546
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sSUy4p8i-iMdxvyOUw77HHYRngo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft
Manifest number: 0200
Signing time: Sat 13 Jun 2026 05:00:13 +0000
Manifest this update: Sat 13 Jun 2026 05:00:13 +0000
Manifest next update: Sun 14 Jun 2026 05:00:13 +0000
Files and hashes: 1: FRuPa3TQLmOFKS43Th1eCNTwaoI.asa (hash: 27T9GCi2bfzmEH7qtY+uT56lMZiqysQt1tGrtXQaUjY=)
2: sSUy4p8i-iMdxvyOUw77HHYRngo.crl (hash: fnagVpFbRaahjbDSaPHR5eWt5hiIX/NFYd2syFIwL8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft
rsync://rpki.ripe.net/repository/DEFAULT/sSUy4p8i-iMdxvyOUw77HHYRngo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:1a:d2:37:d4:9e:0d:b4:3b:44:25:ae:af:35:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b12532e29f22fa231dc6fc8e530efb1c76119e0a
Validity
Not Before: Jun 13 05:00:13 2026 GMT
Not After : Jun 14 05:00:13 2026 GMT
Subject: CN=c2654c06de450ddfdb51607b1d6bef5e73345fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:13:a0:ce:ec:26:26:1e:4f:e6:ad:e3:e7:e4:
e4:c9:70:c6:7c:6a:a7:5b:32:5f:87:b0:45:03:66:
20:46:ca:52:51:fe:5e:a8:f4:13:e0:af:c9:4f:aa:
3d:d1:d6:92:62:6e:77:1b:ba:dd:03:16:bb:d7:22:
72:cd:31:f8:0f:59:dd:9e:2a:ef:4e:8e:f1:80:9d:
3b:84:80:a0:e3:17:03:72:f7:c7:45:95:ce:dc:ea:
e1:53:ee:88:8b:56:78:55:af:73:9f:43:8f:e4:86:
f1:48:f9:4b:78:e5:f2:e4:03:84:15:cf:02:0f:96:
44:6c:01:10:09:cb:b3:11:f8:d4:0a:5b:d9:94:39:
4e:c7:09:bc:f4:42:42:52:98:ba:3a:c3:eb:e0:4c:
6d:5e:bf:38:f0:ad:66:e7:46:93:3f:20:cd:f7:13:
c5:77:35:11:82:c1:6b:4c:59:6d:b1:b1:eb:4f:d4:
0b:9d:a7:1f:4c:20:dd:cd:2e:50:db:b4:14:37:79:
b6:0e:64:ac:bd:03:9c:73:8a:71:8c:66:d5:29:44:
fd:8b:e4:9b:f2:43:dd:41:21:16:b8:30:4e:76:19:
37:73:39:f7:c3:3a:07:95:d6:ca:47:04:50:14:5b:
eb:18:3e:08:ef:e0:cf:e8:4b:58:2b:00:eb:ee:87:
56:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:65:4C:06:DE:45:0D:DF:DB:51:60:7B:1D:6B:EF:5E:73:34:5F:E2
X509v3 Authority Key Identifier:
keyid:B1:25:32:E2:9F:22:FA:23:1D:C6:FC:8E:53:0E:FB:1C:76:11:9E:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sSUy4p8i-iMdxvyOUw77HHYRngo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:5c:47:a0:33:6d:ef:61:3d:34:fa:75:38:7d:ee:b6:d5:18:
0b:fb:74:66:18:7b:fd:36:ac:c6:65:49:28:2a:7c:5d:e9:c5:
09:b0:c3:fc:c5:90:c4:e5:26:c5:e0:e2:25:79:03:97:1a:d0:
e2:ed:77:37:3d:88:58:dc:75:88:f8:ed:a2:e2:75:89:ea:92:
f8:b2:d8:b0:da:22:77:a4:b8:58:b0:36:7e:c4:51:aa:a5:07:
30:6c:2a:27:0e:ef:4c:cf:c4:a6:d7:32:5a:18:bd:b4:38:1a:
fc:a1:e6:80:6b:ae:b9:18:bc:d5:bc:3e:11:f2:ed:a7:7b:36:
6b:89:bc:e9:ed:3e:51:a7:a9:83:cf:1c:e0:5e:27:79:39:d9:
ea:03:ac:2b:ac:c3:08:33:61:82:d1:ed:90:a0:c8:79:f1:ff:
5b:02:fc:17:f7:35:8c:d2:3b:c1:f8:bb:ab:e7:9f:08:0a:40:
bf:90:3e:1b:4c:2b:a7:e8:93:c2:e9:03:d0:6a:41:da:fa:f9:
79:44:62:97:0c:c0:a0:4a:cc:9b:49:e8:61:94:34:86:e0:19:
ad:c2:6d:42:9f:f7:87:9f:0f:58:9b:92:3c:9f:cf:30:21:6d:
7b:5b:65:ca:9d:9d:1f:41:49:30:f1:af:59:13:d5:ec:38:6c:
6c:6e:ee:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:03:35 2026 by rpki-client