Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
File: sUYBAoOoIC7qo_7zJTTj6X4EB54.mft (raw, json)
Hash identifier: z3TYvaSJlh4lIddd9w9T9D0gs0fATVSmrQLUF+XKHJA=
Subject key identifier: 07:A3:4E:8F:A3:3E:60:4E:17:36:84:5F:8F:09:28:4B:1A:75:CC:FC
Authority key identifier: B1:46:01:02:83:A8:20:2E:EA:A3:FE:F3:25:34:E3:E9:7E:04:07:9E
Certificate issuer: /CN=b146010283a8202eeaa3fef32534e3e97e04079e
Certificate serial: 019CAD90AF3ABB27EDA479551021BCD2A41E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
Manifest number: 1845
Signing time: Mon 02 Mar 2026 08:01:06 +0000
Manifest this update: Mon 02 Mar 2026 08:01:06 +0000
Manifest next update: Tue 03 Mar 2026 08:01:06 +0000
Files and hashes: 1: Y8yMvjdM8WzBnbLjMBe-EIHd6sY.roa (hash: EcntA0METUox1iYBkhoXa3famNCFNSmSo3ZvzLXW5TQ=)
2: sUYBAoOoIC7qo_7zJTTj6X4EB54.crl (hash: mCWHB8STm02CETCEND7g4aJlLNgAk3XTh5Qkv2YPk2c=)
3: spIlTecfIOkshZMwK9KtOYZfUkI.roa (hash: F/eeG2fLu4g1L7wn7uLLQklSodsS5/Mx2XBm7dOwxcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:af:3a:bb:27:ed:a4:79:55:10:21:bc:d2:a4:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b146010283a8202eeaa3fef32534e3e97e04079e
Validity
Not Before: Mar 2 08:01:06 2026 GMT
Not After : Mar 3 08:01:06 2026 GMT
Subject: CN=07a34e8fa33e604e1736845f8f09284b1a75ccfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2a:59:22:41:f5:ed:35:e9:da:70:c3:4d:59:
25:e4:62:4b:60:32:62:5d:92:ae:44:32:e4:4e:53:
0d:7c:28:2f:16:46:64:31:d9:2a:46:dd:7e:78:56:
f1:07:97:9d:cd:7b:51:a0:e7:4c:36:a7:2a:56:8f:
be:58:09:c7:bb:26:ad:aa:e5:0f:58:cc:03:b5:4a:
ab:f7:b1:49:9f:78:4d:06:5b:61:c0:4c:de:67:1d:
52:6b:b1:3c:9a:8e:ca:2e:5a:62:45:bd:d6:70:a5:
fb:02:9a:72:81:d8:84:2a:31:4c:6b:ab:97:8f:11:
49:04:71:72:bd:ef:06:e4:b5:37:6c:9e:f1:f6:4c:
58:60:ab:a9:5a:32:0b:1c:fd:ec:e3:62:95:d7:fc:
0c:ec:f4:26:5f:77:45:18:6d:27:4e:4c:dc:72:fc:
15:2d:c0:77:ea:de:9a:14:e8:4c:e1:67:b5:d9:ce:
c2:c8:cd:d7:46:99:50:7a:19:68:18:5d:73:12:bb:
0e:21:12:f1:2f:7e:7e:7f:1e:4c:9f:d6:a5:0f:fa:
fb:e2:9d:ac:56:c7:90:16:90:53:b8:3c:d0:6b:e6:
7e:dd:fc:f3:25:ef:90:b8:a1:b9:1f:0a:09:7b:78:
27:59:6f:db:b3:cd:06:d7:40:ee:e5:aa:9c:7b:3c:
e4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A3:4E:8F:A3:3E:60:4E:17:36:84:5F:8F:09:28:4B:1A:75:CC:FC
X509v3 Authority Key Identifier:
keyid:B1:46:01:02:83:A8:20:2E:EA:A3:FE:F3:25:34:E3:E9:7E:04:07:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:1b:d9:86:1f:7c:5c:a7:d4:5a:dc:45:68:8d:8d:8a:14:ba:
57:19:be:d3:1f:a6:f0:ad:c0:cf:44:d6:c9:68:31:44:72:65:
9a:47:29:7e:1b:c0:ef:cb:57:3d:04:d2:2b:1d:43:c5:54:c9:
95:78:d3:e9:b5:57:5e:6d:87:95:88:76:69:11:6f:42:c9:be:
65:99:42:72:93:c5:6e:71:67:cb:68:86:19:ae:43:b5:43:5b:
f8:88:0d:38:0a:7c:00:a0:83:d7:0b:a3:37:6f:d7:ba:19:4a:
b6:56:ed:c6:63:45:8d:1f:0a:66:83:0e:1b:20:df:4f:86:7e:
a3:a6:3c:24:aa:d5:19:c2:56:0c:a4:03:ad:6f:f7:95:49:1b:
20:bf:e4:d9:57:0b:bd:4e:70:7e:99:1f:86:f4:47:b8:c0:b6:
58:a6:28:f6:49:70:2a:35:0a:e2:a9:67:88:48:f6:10:24:f2:
b0:82:47:94:5e:03:34:7b:3f:8b:d1:7f:c4:46:5a:f4:2c:57:
a4:4d:cf:e7:35:f4:79:cb:cd:5b:7b:fe:31:e6:a7:9f:3b:92:
14:2e:c3:2e:c4:90:ed:b3:c6:a4:60:b0:7f:58:ac:f0:b3:e4:
39:86:cf:60:4f:0b:6b:51:25:38:a8:4c:0d:9f:f3:b7:92:89:
60:72:71:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:39:23 2026 by rpki-client