Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft
File: sSUy4p8i-iMdxvyOUw77HHYRngo.mft (raw, json)
Hash identifier: lx+Npi9T4WXxNxCbfbuyHAG0NPVsID9FkKNAO9o2gxA=
Subject key identifier: 73:CF:B5:A4:3B:65:9D:70:0B:7A:98:4E:79:96:65:4A:5B:36:0B:E0
Authority key identifier: B1:25:32:E2:9F:22:FA:23:1D:C6:FC:8E:53:0E:FB:1C:76:11:9E:0A
Certificate issuer: /CN=b12532e29f22fa231dc6fc8e530efb1c76119e0a
Certificate serial: 019D9DACE7906328427F1DE3343E024C0060
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sSUy4p8i-iMdxvyOUw77HHYRngo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft
Manifest number: 016A
Signing time: Fri 17 Apr 2026 23:00:47 +0000
Manifest this update: Fri 17 Apr 2026 23:00:47 +0000
Manifest next update: Sat 18 Apr 2026 23:00:47 +0000
Files and hashes: 1: FRuPa3TQLmOFKS43Th1eCNTwaoI.asa (hash: 27T9GCi2bfzmEH7qtY+uT56lMZiqysQt1tGrtXQaUjY=)
2: sSUy4p8i-iMdxvyOUw77HHYRngo.crl (hash: 8UzHSvR4HQW4DwwJHhcgzSvHYFKqPTakS1f74VN4beM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft
rsync://rpki.ripe.net/repository/DEFAULT/sSUy4p8i-iMdxvyOUw77HHYRngo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:ac:e7:90:63:28:42:7f:1d:e3:34:3e:02:4c:00:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b12532e29f22fa231dc6fc8e530efb1c76119e0a
Validity
Not Before: Apr 17 23:00:47 2026 GMT
Not After : Apr 18 23:00:47 2026 GMT
Subject: CN=73cfb5a43b659d700b7a984e7996654a5b360be0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6b:4d:15:59:a5:9e:f5:1e:01:33:fb:12:c1:
f1:9b:2a:a3:dc:8a:df:af:e7:fc:78:d2:0d:e5:3c:
0a:63:f3:e7:07:68:38:63:20:6f:2a:af:8a:68:99:
ee:56:06:e7:05:59:17:26:b8:45:da:94:89:f7:ad:
84:cd:b5:b4:fc:f8:aa:7f:cf:b2:cd:df:bb:f0:6a:
ce:d6:52:16:70:6d:37:f1:59:da:b4:50:3b:ed:c6:
a1:54:1f:82:13:51:4c:bd:ba:8e:09:6d:90:28:e5:
56:c5:6d:0f:c6:e3:a1:40:35:e0:97:86:89:49:b2:
bc:2c:0e:28:2c:91:a8:8d:38:56:04:6a:ee:5a:01:
22:62:5a:f5:79:0e:9d:42:36:a5:1f:4b:f1:01:38:
d4:91:57:05:53:f7:72:d4:e0:3a:40:ca:fb:2b:ad:
ad:44:02:e0:fe:02:a9:d9:39:1b:94:d2:ef:41:85:
63:94:1d:66:d1:e1:84:b9:fa:ae:f7:14:6d:e1:7a:
4f:19:81:e7:83:26:9b:0c:9d:5e:1b:21:ed:8e:1b:
cb:25:8b:0d:2b:46:ab:f8:33:fb:bc:01:7e:b4:e2:
f9:58:f4:9b:ad:d1:84:cd:97:99:4d:1e:46:e1:1b:
e7:74:c9:3e:a2:71:bd:69:ce:c5:26:4f:c1:b0:17:
21:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:CF:B5:A4:3B:65:9D:70:0B:7A:98:4E:79:96:65:4A:5B:36:0B:E0
X509v3 Authority Key Identifier:
keyid:B1:25:32:E2:9F:22:FA:23:1D:C6:FC:8E:53:0E:FB:1C:76:11:9E:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sSUy4p8i-iMdxvyOUw77HHYRngo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:02:83:81:d7:99:d4:8d:ba:bc:3a:d2:6b:b3:12:a3:e1:04:
21:43:99:04:f8:3b:bb:87:73:4d:0e:0f:04:be:91:15:3f:35:
e1:62:42:6f:59:41:66:52:f2:b3:f1:d6:05:5c:43:20:8f:7c:
49:7b:40:f5:41:b6:c7:ce:53:8c:60:48:37:93:c3:ad:ba:63:
0b:f1:0b:45:63:f0:5e:d0:52:92:4e:70:22:95:6f:9e:c1:8a:
a0:0e:9a:f5:4f:07:87:94:d1:16:62:2e:b6:21:45:fa:5f:95:
a0:6a:30:f4:39:39:8b:df:7e:d7:b1:88:df:95:14:58:63:1b:
e6:41:2c:8a:6c:e4:29:d1:f2:80:e2:d4:4e:9d:40:b7:1f:ef:
5f:94:98:59:ef:47:87:5e:fe:72:b8:ed:27:ef:23:1d:40:06:
b7:fc:26:38:02:30:65:1a:16:90:38:d7:da:ad:4c:f0:a9:a9:
f2:33:06:54:bf:8d:52:9e:1c:57:db:97:5d:0b:c3:a5:8d:d6:
76:67:bc:8e:69:e5:f3:6d:61:2f:13:32:e0:fe:57:eb:4e:91:
d9:8b:71:f0:e2:61:f9:cd:86:92:2a:8e:d1:aa:9d:f5:12:ab:
c0:a3:e4:f0:e3:73:79:6e:7a:6c:e2:ba:08:41:9f:10:ac:5a:
ba:0a:67:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:59:39 2026 by rpki-client