Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
File: sUYBAoOoIC7qo_7zJTTj6X4EB54.mft (raw, json)
Hash identifier: hCBsYy+o/vhpfR62qRqL8CqkGlBIfcW8AscBvLrEe3I=
Subject key identifier: FB:49:A7:33:7F:5C:0F:9A:A0:BE:02:22:79:BF:E5:E9:20:2D:8D:DD
Authority key identifier: B1:46:01:02:83:A8:20:2E:EA:A3:FE:F3:25:34:E3:E9:7E:04:07:9E
Certificate issuer: /CN=b146010283a8202eeaa3fef32534e3e97e04079e
Certificate serial: 019FAC3F1EAD7311BE7D40A3D5FACAC6B13E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
Manifest number: 19D2
Signing time: Wed 29 Jul 2026 05:00:45 +0000
Manifest this update: Wed 29 Jul 2026 05:00:45 +0000
Manifest next update: Thu 30 Jul 2026 05:00:45 +0000
Files and hashes: 1: Y8yMvjdM8WzBnbLjMBe-EIHd6sY.roa (hash: EcntA0METUox1iYBkhoXa3famNCFNSmSo3ZvzLXW5TQ=)
2: sUYBAoOoIC7qo_7zJTTj6X4EB54.crl (hash: 9sL/WyTd0uhiG9xS/D/wVWAgKNe06SEh5OBxOjPRrNo=)
3: spIlTecfIOkshZMwK9KtOYZfUkI.roa (hash: F/eeG2fLu4g1L7wn7uLLQklSodsS5/Mx2XBm7dOwxcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 05:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3f:1e:ad:73:11:be:7d:40:a3:d5:fa:ca:c6:b1:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b146010283a8202eeaa3fef32534e3e97e04079e
Validity
Not Before: Jul 29 05:00:45 2026 GMT
Not After : Jul 30 05:00:45 2026 GMT
Subject: CN=fb49a7337f5c0f9aa0be022279bfe5e9202d8ddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2c:31:25:06:bc:7e:ee:61:cc:4e:db:b6:fd:
55:6c:2c:0f:28:15:3d:d3:b0:3b:b9:2a:8b:22:0c:
09:6e:33:ff:7f:45:15:62:6f:a4:55:65:fe:94:e6:
77:ef:23:fe:33:1e:20:12:bf:3f:75:26:a5:e0:1d:
f9:0e:9d:40:e8:c3:1e:d8:c0:33:68:88:fa:e6:12:
e1:6e:33:f1:0b:a3:02:2f:b1:ba:a8:11:50:0e:40:
a0:ad:52:13:9b:3e:1e:ee:f5:9c:16:61:14:33:6d:
d8:08:d0:9d:f9:39:67:d2:9a:21:d6:16:1b:28:19:
d2:d2:58:5f:0d:69:72:ca:7b:04:58:8a:fe:77:b8:
93:04:b9:73:9b:49:13:41:78:b8:3a:f8:b6:96:d8:
9e:3a:be:df:dd:d9:62:99:33:c7:4d:49:2c:01:e2:
c5:78:39:4a:16:1f:24:4a:7c:e1:1b:4a:60:7b:63:
b7:7c:73:c6:85:15:0f:7f:48:bb:e9:6d:28:76:26:
e0:0b:20:53:81:88:03:3d:bd:37:54:57:85:10:69:
3a:1d:55:4b:8a:2a:ef:37:73:b2:82:65:16:38:e0:
ee:cb:a1:c9:8f:c1:6c:01:c2:f5:ad:6a:6e:d2:dd:
0a:dd:79:0b:3b:10:73:39:77:dd:0d:a1:e8:b8:2f:
d9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:49:A7:33:7F:5C:0F:9A:A0:BE:02:22:79:BF:E5:E9:20:2D:8D:DD
X509v3 Authority Key Identifier:
keyid:B1:46:01:02:83:A8:20:2E:EA:A3:FE:F3:25:34:E3:E9:7E:04:07:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:72:af:f8:c8:f6:e9:eb:dc:b6:45:9c:92:8e:8f:67:12:71:
80:be:82:6c:b1:46:20:00:93:a6:65:13:8e:c3:27:5a:31:0d:
4d:4b:e5:07:f4:2f:1f:9b:f6:b1:5c:c0:7f:85:f1:52:b3:dd:
a9:d9:a1:71:b1:7f:27:a1:0b:7f:fa:88:68:1e:59:61:68:93:
ef:1b:f1:4a:27:5f:49:28:77:8b:f3:5b:ed:0d:2e:49:aa:de:
db:58:13:6d:54:de:64:62:c9:ca:f7:b3:aa:13:4a:66:48:f5:
86:71:2a:2a:5d:5f:53:2d:2e:a2:7e:40:d8:6d:d0:16:11:2a:
f2:ce:f9:e5:a7:7f:67:0c:a4:d6:9b:93:57:62:44:23:56:5a:
4b:cd:b0:68:a4:bb:20:b3:4f:74:30:2f:8a:b4:73:cd:f1:d1:
24:33:2b:25:d8:17:c5:5a:8f:36:be:23:4e:12:fe:05:5b:9f:
5c:80:bd:94:bb:b0:57:d2:a2:44:05:f4:df:ab:8d:80:b0:81:
58:f5:5e:39:6b:5a:f0:5d:0c:d1:af:bd:f8:fc:85:bf:ce:d2:
1d:51:7b:fa:5c:84:df:c2:c6:a1:58:92:4c:70:26:0b:9c:b4:
17:44:e3:68:10:8e:e0:bd:38:00:69:0f:17:f5:ea:6c:23:e6:
ab:b9:5b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:51:31 2026 by rpki-client