Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft
File: sSUy4p8i-iMdxvyOUw77HHYRngo.mft (raw, json)
Hash identifier: bkhNBw5VfASFVagA6PNIm9xkbSdvGjWXc+H1i4cwgP0=
Subject key identifier: 3A:6F:85:91:66:B2:6B:CB:8F:F8:44:37:FE:9E:DA:1A:26:3C:C1:6A
Authority key identifier: B1:25:32:E2:9F:22:FA:23:1D:C6:FC:8E:53:0E:FB:1C:76:11:9E:0A
Certificate issuer: /CN=b12532e29f22fa231dc6fc8e530efb1c76119e0a
Certificate serial: 019FA7BDE790791583E1DF3C59EC5DB511C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sSUy4p8i-iMdxvyOUw77HHYRngo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft
Manifest number: 0279
Signing time: Tue 28 Jul 2026 08:01:08 +0000
Manifest this update: Tue 28 Jul 2026 08:01:08 +0000
Manifest next update: Wed 29 Jul 2026 08:01:08 +0000
Files and hashes: 1: 25Etx6_KQUT1qjkjo3vSdgOyHEA.asa (hash: GYD2auqrIWxCAdXwTRlw0CXeGugYstxuAXqctHif/nI=)
2: sSUy4p8i-iMdxvyOUw77HHYRngo.crl (hash: wgDChGlBwYHQXB+gFGwaVdSM/621aAo1o5gZa9qp0wY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft
rsync://rpki.ripe.net/repository/DEFAULT/sSUy4p8i-iMdxvyOUw77HHYRngo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:bd:e7:90:79:15:83:e1:df:3c:59:ec:5d:b5:11:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b12532e29f22fa231dc6fc8e530efb1c76119e0a
Validity
Not Before: Jul 28 08:01:08 2026 GMT
Not After : Jul 29 08:01:08 2026 GMT
Subject: CN=3a6f859166b26bcb8ff84437fe9eda1a263cc16a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9e:20:d1:92:10:f6:30:e5:c4:78:3d:28:8b:
8f:d1:e3:b6:c6:ac:76:35:de:12:79:34:67:ae:99:
b4:1b:4c:43:75:6e:12:8d:08:d9:fd:f5:86:9a:6b:
88:2b:57:b6:4b:d1:39:d7:8b:f0:df:33:c6:4f:81:
62:d7:96:d5:98:15:c7:d7:5d:24:c3:0d:93:c9:a0:
aa:26:a5:2d:92:37:6f:82:c3:7d:b3:63:fc:04:47:
84:ce:6c:fd:cc:13:22:b9:64:32:b7:5f:60:61:1d:
3c:d2:5a:13:40:52:70:fc:13:ee:b3:cf:38:3d:b6:
ff:22:5d:f5:1e:a2:10:c5:68:3d:90:a4:12:70:c6:
d9:14:80:54:76:c4:eb:6c:6b:6b:f1:e3:8f:5b:35:
32:47:7c:b4:82:3c:1c:b0:14:27:3e:01:79:87:6b:
5a:24:7d:68:76:31:58:18:4e:3e:c3:e4:83:bc:a2:
45:eb:9e:a4:c9:22:8d:97:51:c6:8e:0b:51:ca:31:
4c:62:49:c6:21:ba:5b:56:de:f1:46:6d:9e:03:9d:
0f:c1:5b:73:d7:6d:35:dc:79:e4:7b:87:65:4a:93:
e8:ea:05:f1:7d:a0:51:cd:52:25:13:90:54:e4:2a:
8f:84:f2:2f:4d:f4:5b:15:64:60:a8:f8:83:85:f4:
10:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:6F:85:91:66:B2:6B:CB:8F:F8:44:37:FE:9E:DA:1A:26:3C:C1:6A
X509v3 Authority Key Identifier:
keyid:B1:25:32:E2:9F:22:FA:23:1D:C6:FC:8E:53:0E:FB:1C:76:11:9E:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sSUy4p8i-iMdxvyOUw77HHYRngo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:5c:5e:0a:38:b9:e0:18:12:dd:ee:ef:95:38:f3:c5:34:49:
f7:2d:c1:be:25:00:b1:e7:db:5b:f2:bd:6e:97:e4:33:25:57:
9f:f3:67:a9:79:e0:4c:66:08:76:c7:e9:d8:3f:ce:3a:4b:7a:
a9:71:f2:58:2d:58:55:ae:9f:af:b0:b5:30:86:44:eb:d2:f2:
f7:15:db:f2:7d:c2:c4:5f:1c:55:d4:e8:03:ca:44:73:d1:a4:
30:92:7b:a6:1d:83:9f:dd:21:4c:39:22:8d:62:b8:96:d9:cf:
1d:bc:c4:15:39:b4:a7:95:ef:66:43:86:05:e9:04:55:95:c1:
d6:82:5c:04:4c:23:48:fd:1b:73:32:5e:af:f6:0d:61:c3:74:
db:c6:81:e2:19:0c:84:dc:1e:7f:e0:df:99:12:ee:4a:92:aa:
42:f8:0b:7b:2b:88:df:44:a3:42:d6:f2:f7:c9:26:f2:00:cf:
91:d8:0d:e0:20:09:86:ec:44:b3:f5:76:65:63:e2:fc:72:0a:
29:e3:c6:16:b2:03:a4:1b:6e:03:ff:2e:d1:c0:47:bb:63:c7:
e8:68:10:13:51:93:0e:b2:72:b8:9a:99:3c:eb:d8:9c:64:55:
24:08:bd:41:1d:83:f0:e3:40:68:07:c4:fb:dc:50:08:cb:01:
30:35:a1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:47:42 2026 by rpki-client