Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft
File: sSUy4p8i-iMdxvyOUw77HHYRngo.mft (raw, json)
Hash identifier: 1IXokhuxTHPiBplqL9xd2KrmBMpJeVGYlU8urkuIBvU=
Subject key identifier: 05:26:5A:17:E6:0C:4A:F9:77:DA:9D:DE:39:BF:0C:08:13:06:32:12
Authority key identifier: B1:25:32:E2:9F:22:FA:23:1D:C6:FC:8E:53:0E:FB:1C:76:11:9E:0A
Certificate issuer: /CN=b12532e29f22fa231dc6fc8e530efb1c76119e0a
Certificate serial: 019D99D0244CD6BCBF92D97AABC7D0AFAE91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sSUy4p8i-iMdxvyOUw77HHYRngo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft
Manifest number: 0168
Signing time: Fri 17 Apr 2026 05:00:47 +0000
Manifest this update: Fri 17 Apr 2026 05:00:47 +0000
Manifest next update: Sat 18 Apr 2026 05:00:47 +0000
Files and hashes: 1: FRuPa3TQLmOFKS43Th1eCNTwaoI.asa (hash: 27T9GCi2bfzmEH7qtY+uT56lMZiqysQt1tGrtXQaUjY=)
2: sSUy4p8i-iMdxvyOUw77HHYRngo.crl (hash: JAxO8fbN20aRqiXu8H6v+G7pyjl+lDnZ3DbEOlZ46Cc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft
rsync://rpki.ripe.net/repository/DEFAULT/sSUy4p8i-iMdxvyOUw77HHYRngo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:24:4c:d6:bc:bf:92:d9:7a:ab:c7:d0:af:ae:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b12532e29f22fa231dc6fc8e530efb1c76119e0a
Validity
Not Before: Apr 17 05:00:47 2026 GMT
Not After : Apr 18 05:00:47 2026 GMT
Subject: CN=05265a17e60c4af977da9dde39bf0c0813063212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9a:57:3e:9f:ec:33:82:9c:aa:be:5f:8b:f5:
49:e8:c3:6a:e1:c5:ad:ad:06:9b:93:c9:ea:fd:f0:
b5:67:41:a6:70:3b:18:1f:a4:fe:08:ac:06:95:f2:
8a:64:51:c3:91:d3:94:2d:3f:53:ef:40:92:2d:30:
0b:98:92:06:35:f4:c2:3c:73:e3:48:a9:ce:b9:c7:
f1:f9:74:84:0e:23:51:06:89:05:43:c5:98:28:63:
5e:07:72:1a:56:0f:be:dc:cd:34:44:62:1f:31:39:
72:6b:90:32:ed:fe:b5:dc:3b:aa:13:c9:32:58:96:
ce:4f:ed:a0:2b:2b:ea:13:75:73:ce:74:ba:7d:c6:
e0:c0:1f:a8:41:a6:53:88:5d:f6:c2:e7:98:df:2d:
c3:49:a1:17:ef:d1:9d:27:16:b0:16:1b:80:4a:9a:
a3:e2:ef:00:51:4f:6c:9c:3f:7d:66:82:da:79:e0:
92:c6:0a:ac:a7:77:94:76:86:09:83:a5:b7:1e:64:
b6:c0:39:07:67:6d:02:c5:cf:97:cf:da:4a:e3:bf:
f7:63:d6:dd:cb:e3:51:e8:09:e8:13:35:ba:32:e8:
88:0f:fa:b8:21:5e:dc:25:e3:1c:80:c2:26:96:66:
f6:4e:3c:b3:71:a8:48:c5:e3:fb:5d:d0:f5:26:05:
23:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:26:5A:17:E6:0C:4A:F9:77:DA:9D:DE:39:BF:0C:08:13:06:32:12
X509v3 Authority Key Identifier:
keyid:B1:25:32:E2:9F:22:FA:23:1D:C6:FC:8E:53:0E:FB:1C:76:11:9E:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sSUy4p8i-iMdxvyOUw77HHYRngo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:ac:e3:a1:43:d0:c7:4c:8c:b9:79:7a:29:f7:17:19:77:3f:
24:38:b1:ba:f1:25:6c:88:0a:ca:87:a5:7a:ee:b7:d9:89:96:
7c:ce:da:3e:ab:34:e5:5b:68:7c:67:d7:6e:7e:26:8c:71:29:
c7:d3:28:39:e1:7d:74:1c:2f:cf:d6:bd:52:c9:12:59:9c:2b:
1e:54:3a:7b:ce:d1:c5:de:41:47:b9:e4:c5:a8:6c:9d:83:11:
88:34:3b:77:9b:97:9f:e5:09:b3:e0:c8:3c:5b:70:46:f4:74:
ab:c9:2f:6d:27:d3:ab:38:ad:56:53:6c:38:11:4e:3f:78:d4:
a6:f2:82:a2:30:61:1e:72:aa:e5:07:a8:cd:8e:82:a1:7c:dd:
7f:6b:f7:3e:fd:64:7d:69:d0:f7:0c:55:00:79:69:50:1f:e5:
4e:17:90:e8:63:0c:32:db:0c:be:30:9b:79:20:5a:d0:f1:28:
f1:fb:e5:56:64:7e:bb:14:63:20:f5:aa:92:77:c3:58:93:5b:
ad:30:e3:3c:1e:0b:c5:1e:3a:bc:8e:1c:0d:33:7f:12:82:9e:
4a:49:b1:55:67:fe:96:cb:15:35:11:17:7f:23:2c:06:b4:af:
ea:1f:a1:09:50:2c:cc:93:85:59:c5:df:b0:40:c7:da:50:64:
df:04:1b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:17:35 2026 by rpki-client