Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
File: sUYBAoOoIC7qo_7zJTTj6X4EB54.mft (raw, json)
Hash identifier: j4l+32F8WH9C9CWCWG98qqPhBjv8dZQHMcfXK4H5+L4=
Subject key identifier: D1:E6:7A:80:8E:E4:52:4E:53:C6:61:BF:7D:45:EB:4C:30:3B:E4:7F
Authority key identifier: B1:46:01:02:83:A8:20:2E:EA:A3:FE:F3:25:34:E3:E9:7E:04:07:9E
Certificate issuer: /CN=b146010283a8202eeaa3fef32534e3e97e04079e
Certificate serial: 01A0D1C9A6017E0A19FDF45CF21B7DA4867F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
Manifest number: 1A6A
Signing time: Thu 24 Sep 2026 05:00:48 +0000
Manifest this update: Thu 24 Sep 2026 05:00:48 +0000
Manifest next update: Fri 25 Sep 2026 05:00:48 +0000
Files and hashes: 1: Y8yMvjdM8WzBnbLjMBe-EIHd6sY.roa (hash: EcntA0METUox1iYBkhoXa3famNCFNSmSo3ZvzLXW5TQ=)
2: sUYBAoOoIC7qo_7zJTTj6X4EB54.crl (hash: dHqGLgnee8frpPVJlqqC4jFJFNOikFsvpSgVIJoE+sQ=)
3: spIlTecfIOkshZMwK9KtOYZfUkI.roa (hash: F/eeG2fLu4g1L7wn7uLLQklSodsS5/Mx2XBm7dOwxcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:c9:a6:01:7e:0a:19:fd:f4:5c:f2:1b:7d:a4:86:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b146010283a8202eeaa3fef32534e3e97e04079e
Validity
Not Before: Sep 24 05:00:48 2026 GMT
Not After : Sep 25 05:00:48 2026 GMT
Subject: CN=d1e67a808ee4524e53c661bf7d45eb4c303be47f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:25:6d:70:df:2c:02:ba:e7:50:79:cb:43:17:
ff:e7:b8:74:9b:cb:51:01:d8:64:74:f5:24:58:97:
6d:6c:51:5b:b2:eb:3c:ce:a1:a9:a6:86:e3:a1:67:
c4:ea:6a:04:61:d4:27:13:20:3d:e1:aa:67:58:96:
35:59:ab:65:4c:4c:c6:08:a4:1d:99:e4:e1:0e:cc:
12:99:7d:97:8b:47:ee:d2:5f:d3:a6:44:21:d3:5e:
46:95:eb:1b:e0:ec:49:20:91:d4:5b:1e:94:f5:7b:
c0:83:55:88:4b:85:d8:f4:3d:57:c9:5d:2b:81:e4:
46:75:f5:7e:de:70:ad:21:46:de:eb:ed:cf:15:6c:
83:49:64:c3:a4:9f:33:5a:7c:89:5c:14:49:d5:0d:
29:ff:d5:8f:81:72:0b:cf:82:11:a1:31:57:aa:a7:
ec:7f:a7:76:83:2b:28:2e:02:06:e0:c7:3b:01:44:
6a:5e:ed:7b:ee:fd:21:e5:b5:4e:08:dd:47:17:35:
28:95:b7:f5:a1:0f:7e:b9:95:f8:c2:ef:c5:fb:08:
25:23:57:35:ad:b8:2f:e5:6f:eb:55:81:b4:ab:0b:
f4:bd:93:7d:71:72:2d:43:d2:b3:89:24:ae:5c:23:
e7:b4:04:e7:cb:33:e4:f6:23:bd:93:b7:34:67:0f:
35:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E6:7A:80:8E:E4:52:4E:53:C6:61:BF:7D:45:EB:4C:30:3B:E4:7F
X509v3 Authority Key Identifier:
keyid:B1:46:01:02:83:A8:20:2E:EA:A3:FE:F3:25:34:E3:E9:7E:04:07:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:7c:f1:bc:b3:5c:38:d7:2d:e8:d5:32:96:2c:00:f5:8d:7a:
f5:16:51:c4:bd:67:b7:87:28:90:20:24:0b:40:d3:34:e8:c4:
fb:93:6e:26:86:e9:fd:26:2a:c3:5a:a9:ba:49:34:b1:89:16:
00:66:ab:e7:fd:e3:de:09:e1:7f:67:60:45:77:e9:49:2c:38:
26:a8:9d:5b:8c:d4:00:b8:91:32:ad:46:32:e7:0f:c1:9e:db:
8a:1a:f6:03:d9:5e:ca:f8:ec:5b:f4:c0:f0:91:36:85:c5:f6:
f9:89:02:1a:4a:68:24:71:44:12:fc:df:15:8e:76:61:3b:65:
67:4d:db:d9:bc:e0:7d:9f:59:47:21:52:42:27:39:8d:e5:2c:
ae:81:4f:09:68:16:e6:60:ac:95:60:57:b7:e7:d6:13:12:17:
f0:de:6d:a1:ec:a9:1b:a6:66:62:69:5d:4f:5f:67:32:43:2f:
7c:2b:6b:95:d4:03:85:68:cb:1c:2c:09:ca:a6:8b:b9:4d:c1:
0c:7a:23:05:e6:54:e7:75:84:8f:37:21:3b:eb:c4:7e:6b:3a:
14:83:04:70:4d:67:5f:dc:d8:df:53:36:21:7e:ec:18:a1:35:
28:a2:df:4c:ad:b9:bb:21:d6:fb:70:56:1f:46:a1:3e:f1:52:
06:35:69:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:58:04 2026 by rpki-client