Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft
File: sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft (raw, json)
Hash identifier: eGE33OwOBt3+bJuXe6ezsNDCkcAyT4arQGuAIhNpugs=
Subject key identifier: 56:2B:3D:B6:EC:84:82:73:D1:6E:86:BC:8B:2B:AF:81:FB:4A:4B:B5
Authority key identifier: B0:D6:2D:16:66:C5:C4:D1:92:18:35:31:58:4A:FD:72:BE:D0:84:85
Certificate issuer: /CN=b0d62d1666c5c4d192183531584afd72bed08485
Certificate serial: 019FAA8764C75FF87B9051DB70AA6EC71FB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sNYtFmbFxNGSGDUxWEr9cr7QhIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft
Manifest number: 19D6
Signing time: Tue 28 Jul 2026 21:00:27 +0000
Manifest this update: Tue 28 Jul 2026 21:00:27 +0000
Manifest next update: Wed 29 Jul 2026 21:00:27 +0000
Files and hashes: 1: 6Ie5sPRwouKDZ63tHw4hyjJqq10.roa (hash: XieQfcrAZvNQQrTrpSeqvq6G/q8IwApTZ6vvc3HLXb0=)
2: sNYtFmbFxNGSGDUxWEr9cr7QhIU.crl (hash: BRKloi2kZpjjnElVukShcrWhBrXUk5IQRZa3moTAWtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sNYtFmbFxNGSGDUxWEr9cr7QhIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:64:c7:5f:f8:7b:90:51:db:70:aa:6e:c7:1f:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0d62d1666c5c4d192183531584afd72bed08485
Validity
Not Before: Jul 28 21:00:27 2026 GMT
Not After : Jul 29 21:00:27 2026 GMT
Subject: CN=562b3db6ec848273d16e86bc8b2baf81fb4a4bb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:c2:88:d9:08:ea:ad:28:e5:32:e4:6f:06:82:
70:fa:7f:b9:db:c4:74:3e:b4:b9:e1:9c:41:4f:15:
0d:b2:78:02:00:60:0f:06:71:bc:fb:0e:65:f9:1f:
76:ab:8d:fa:6d:68:9f:dc:3d:c8:e1:13:de:6e:b9:
e2:76:fc:f5:ba:f0:64:e5:23:0b:3f:a9:3b:67:66:
38:46:5f:9f:98:2b:a4:68:62:eb:b6:70:71:1d:9f:
1f:72:fa:34:76:25:1b:03:63:14:65:c8:5d:2b:15:
61:ee:37:0a:43:ca:e8:63:65:83:d4:a7:db:cb:57:
34:30:f4:ff:cb:60:58:a1:3d:64:61:e1:19:66:97:
4f:b0:64:21:9d:1d:20:f6:73:9c:e0:87:78:af:8d:
8c:98:b6:7b:91:d7:85:20:b5:48:c3:39:5c:0c:77:
71:c6:ae:6f:9c:0b:60:45:f0:7c:c3:7c:b8:ed:9a:
0a:2d:91:83:cb:c3:c2:41:24:92:f7:47:ef:83:39:
ff:f8:1f:65:f9:69:7f:3b:0a:6d:34:99:7d:c1:20:
14:cd:2b:01:c1:53:03:3b:bc:b1:ad:ca:c3:fe:5c:
eb:47:85:4b:0c:d3:10:2e:c3:22:74:97:7c:66:6f:
da:4d:51:74:5b:76:4d:ab:ad:a7:63:52:32:ad:d8:
90:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:2B:3D:B6:EC:84:82:73:D1:6E:86:BC:8B:2B:AF:81:FB:4A:4B:B5
X509v3 Authority Key Identifier:
keyid:B0:D6:2D:16:66:C5:C4:D1:92:18:35:31:58:4A:FD:72:BE:D0:84:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sNYtFmbFxNGSGDUxWEr9cr7QhIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:9f:03:ff:78:06:80:ba:01:79:98:03:e5:86:6d:b1:90:db:
b8:7f:24:3a:d8:82:da:b4:95:7a:75:4f:aa:d1:18:0b:df:03:
ae:8a:51:97:30:8e:98:a3:99:09:17:82:8b:43:f1:aa:78:df:
80:c5:eb:08:34:e3:e8:5d:13:4e:2d:c4:6a:b1:27:c7:e7:64:
1a:b3:76:2c:43:67:85:06:9d:a0:97:df:6c:af:7d:09:22:31:
82:87:a9:89:87:8d:0a:8d:01:5b:48:74:58:aa:ad:54:ca:83:
b2:9d:c7:79:a8:85:e4:52:d4:a1:1a:75:1b:5d:b5:39:e0:4f:
71:04:bd:b6:03:7f:8c:ef:88:33:4a:43:dd:5f:be:50:26:a8:
5c:4b:e6:b2:23:18:67:e2:de:0c:e0:a2:29:fd:e7:ab:90:4a:
42:32:92:be:91:f9:c1:aa:eb:4f:f5:76:a6:1e:a3:1f:0e:6a:
e6:08:ed:74:2b:be:a4:a5:52:cf:ba:c9:23:0d:53:85:d5:67:
18:c1:07:a1:f0:6f:43:51:34:29:c3:21:c6:fe:a2:63:c7:79:
45:30:83:80:35:e7:e2:7a:6f:3d:a2:2b:f6:e9:63:6c:d5:04:
37:d7:24:a4:27:68:d1:53:de:86:78:9b:47:dd:62:71:2c:86:
42:c1:8c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:43:38 2026 by rpki-client