Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft
File: sSUy4p8i-iMdxvyOUw77HHYRngo.mft (raw, json)
Hash identifier: kWW/dpsVyLMcXl0X2T0n8ZArzK+96HK3/Z7ResE2YWE=
Subject key identifier: 72:96:D0:EA:4A:AF:53:1D:AA:F7:64:AB:48:B4:50:E8:EC:D6:5D:01
Authority key identifier: B1:25:32:E2:9F:22:FA:23:1D:C6:FC:8E:53:0E:FB:1C:76:11:9E:0A
Certificate issuer: /CN=b12532e29f22fa231dc6fc8e530efb1c76119e0a
Certificate serial: 01A0D1246AB356E4B28DE1393552E28E6035
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sSUy4p8i-iMdxvyOUw77HHYRngo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft
Manifest number: 0313
Signing time: Thu 24 Sep 2026 02:00:19 +0000
Manifest this update: Thu 24 Sep 2026 02:00:19 +0000
Manifest next update: Fri 25 Sep 2026 02:00:19 +0000
Files and hashes: 1: 25Etx6_KQUT1qjkjo3vSdgOyHEA.asa (hash: GYD2auqrIWxCAdXwTRlw0CXeGugYstxuAXqctHif/nI=)
2: sSUy4p8i-iMdxvyOUw77HHYRngo.crl (hash: 8DmAmQysA7Tjgnslfe4ZTnmikxtPxVRn8xwwwoFhLh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft
rsync://rpki.ripe.net/repository/DEFAULT/sSUy4p8i-iMdxvyOUw77HHYRngo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:24:6a:b3:56:e4:b2:8d:e1:39:35:52:e2:8e:60:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b12532e29f22fa231dc6fc8e530efb1c76119e0a
Validity
Not Before: Sep 24 02:00:19 2026 GMT
Not After : Sep 25 02:00:19 2026 GMT
Subject: CN=7296d0ea4aaf531daaf764ab48b450e8ecd65d01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6e:57:31:73:04:fd:46:d2:12:95:18:a3:4d:
31:1d:dc:5b:a1:10:5b:64:68:d1:fa:59:4d:e1:a9:
87:07:c5:59:9b:13:2e:7d:3f:fb:ac:3f:60:8b:40:
4c:a5:a8:03:a5:ef:17:d2:7e:c2:88:0a:ef:a3:27:
7c:4a:4d:0c:30:7d:7a:3e:dd:dc:e5:da:d3:32:a2:
f1:d5:ee:83:c8:e6:bb:8a:48:17:0a:41:eb:94:3e:
e3:c1:73:27:14:3c:af:22:3a:02:aa:4b:0a:c4:f3:
2c:75:37:a2:b7:19:c0:07:5b:88:f4:49:07:25:7c:
1c:0a:9b:9a:fd:4e:2f:f2:12:b9:bd:0c:64:c1:07:
47:02:f5:1e:a7:b3:06:2b:a4:17:91:9f:e9:dd:1d:
24:78:78:94:57:77:3e:77:1e:f7:bf:70:3f:b5:f7:
69:20:20:33:d5:8a:f8:5b:ce:99:38:34:ba:7f:e0:
76:0f:4c:9f:44:cc:80:ec:18:81:b0:53:88:24:56:
d0:6b:be:ac:59:57:fa:be:35:b4:1d:50:1a:33:0d:
4b:da:df:18:e3:bf:aa:0d:d9:15:25:ba:c7:26:4c:
e3:43:52:14:d5:a4:89:06:d0:d0:41:ad:62:5f:6a:
d3:e4:d9:ef:5e:cb:10:43:ce:1a:98:aa:14:49:cc:
b0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:96:D0:EA:4A:AF:53:1D:AA:F7:64:AB:48:B4:50:E8:EC:D6:5D:01
X509v3 Authority Key Identifier:
keyid:B1:25:32:E2:9F:22:FA:23:1D:C6:FC:8E:53:0E:FB:1C:76:11:9E:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sSUy4p8i-iMdxvyOUw77HHYRngo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:11:aa:4e:4e:95:13:eb:d6:de:f4:e1:38:a0:aa:21:96:a4:
71:10:ce:89:c8:fc:49:b3:67:0c:7d:15:2d:dc:e3:21:0e:1e:
b2:01:23:1d:d6:93:c9:91:38:ad:a5:0f:4a:c9:b8:85:c0:09:
9b:b8:97:3e:5c:cf:42:41:ba:16:af:b6:25:75:94:d9:9e:2b:
b1:88:2e:87:f2:1a:57:d6:ae:5c:c5:31:aa:14:02:67:f4:05:
07:2c:36:57:de:4c:a2:b2:98:b9:4e:b8:52:33:40:79:12:46:
53:4c:29:fe:50:bd:4b:43:3b:50:ac:f8:23:ec:43:04:a4:b1:
de:0b:ed:39:6b:54:1e:41:ff:88:30:b8:0d:c7:2e:97:8d:0f:
ae:24:4f:73:e9:b5:b9:82:e2:96:18:0a:0b:c8:3d:90:3c:b1:
6f:3a:48:24:89:21:a7:fd:bb:6c:59:d7:02:f9:8f:d0:dd:36:
c3:33:e9:cc:89:df:24:3a:3b:11:79:78:0b:15:c6:cc:99:3a:
8a:de:6d:34:e6:f5:7f:79:23:c7:47:e3:b3:3e:82:1c:de:b6:
91:8d:3e:be:7d:30:53:8e:a6:d5:0b:84:b6:bd:9b:c7:90:c0:
75:a6:14:0b:cc:1f:85:62:60:f3:5d:8a:41:a0:7e:d4:26:66:
f6:b7:bb:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:38:07 2026 by rpki-client