Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.mft
File: sYxKQwCDfE6hetHjghoJrVN2QIc.mft (raw, json)
Hash identifier: ULh0rixccTijm70XR0swKxQS118ej6E46DCOIq8nfpM=
Subject key identifier: 68:E6:AE:EC:DC:6D:80:FC:3F:AA:5C:A8:81:89:F6:5F:12:46:00:B3
Authority key identifier: B1:8C:4A:43:00:83:7C:4E:A1:7A:D1:E3:82:1A:09:AD:53:76:40:87
Certificate issuer: /CN=b18c4a4300837c4ea17ad1e3821a09ad53764087
Certificate serial: 01A020FA08587B897DD8FF40458824F33A31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sYxKQwCDfE6hetHjghoJrVN2QIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.mft
Manifest number: 12A9
Signing time: Thu 20 Aug 2026 21:00:52 +0000
Manifest this update: Thu 20 Aug 2026 21:00:52 +0000
Manifest next update: Fri 21 Aug 2026 21:00:52 +0000
Files and hashes: 1: OztHm958aRJRxZODVtzftmoIutM.roa (hash: LyCjNgF1WRtdSw3T7qrOJsi3Hm2+foAc8JYBqHMHMdE=)
2: sYxKQwCDfE6hetHjghoJrVN2QIc.crl (hash: PPeL8L7LTfP94kn2S84bwu0HL5D/e6Wf1fwOhbtHCRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sYxKQwCDfE6hetHjghoJrVN2QIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:fa:08:58:7b:89:7d:d8:ff:40:45:88:24:f3:3a:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b18c4a4300837c4ea17ad1e3821a09ad53764087
Validity
Not Before: Aug 20 21:00:52 2026 GMT
Not After : Aug 21 21:00:52 2026 GMT
Subject: CN=68e6aeecdc6d80fc3faa5ca88189f65f124600b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ba:a2:e7:0f:ec:08:89:d8:9b:f0:5c:e7:ed:
d7:5c:e3:31:c7:35:47:6d:f7:27:34:d7:9c:ed:12:
09:82:a9:e3:2d:f2:01:db:30:48:50:b3:61:55:3e:
32:81:09:4e:b1:6a:f5:f8:e7:c4:36:28:26:ad:01:
c8:89:99:19:c2:50:16:ab:28:46:0c:aa:8b:f9:7e:
f1:25:5f:5f:01:a3:f9:c8:a9:39:38:3e:46:c5:f9:
b2:ae:0b:f2:25:3c:9b:7d:7f:ee:b2:3a:3f:c3:68:
bd:2d:b1:66:f5:17:5c:d0:e9:00:ce:80:68:c0:63:
f2:bb:95:74:98:1f:fe:70:10:5e:84:95:05:dc:cb:
dc:11:a0:30:6e:ea:68:dd:15:c9:36:28:7f:df:b1:
c4:56:14:1c:0d:25:8a:ba:78:28:04:a9:2d:c0:97:
5a:6c:e7:31:66:9b:9b:0a:e6:ca:13:90:81:70:ac:
dd:45:3f:a1:6c:e8:12:84:60:94:82:ee:67:03:b2:
fe:a7:2a:b0:c3:bb:70:f8:71:cf:d2:fe:cf:8b:74:
35:4a:89:4d:99:76:86:6f:bf:12:ae:86:01:b1:b0:
97:a1:30:14:26:b7:5a:06:55:d3:31:00:51:c9:c5:
dd:14:17:1a:c8:ee:b9:17:77:93:ea:39:60:f6:df:
c3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E6:AE:EC:DC:6D:80:FC:3F:AA:5C:A8:81:89:F6:5F:12:46:00:B3
X509v3 Authority Key Identifier:
keyid:B1:8C:4A:43:00:83:7C:4E:A1:7A:D1:E3:82:1A:09:AD:53:76:40:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYxKQwCDfE6hetHjghoJrVN2QIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:17:e5:d0:9a:fd:f5:5b:45:14:03:b5:02:45:45:a4:6f:8d:
68:8a:15:ad:ba:03:c8:48:e2:7a:74:2a:40:63:49:03:ef:71:
16:7b:e2:a0:7b:54:c2:45:61:ee:61:22:0e:09:8b:84:85:b3:
69:c6:32:6b:c7:d8:dc:f4:63:ce:51:5c:1a:97:d2:a5:5b:65:
e8:47:67:41:fa:c3:b3:74:3f:02:38:76:41:d1:30:5b:b9:e8:
a1:7c:b5:95:fc:44:7a:0b:24:d6:e3:d9:57:35:9d:39:76:43:
12:70:92:80:66:cd:15:46:79:62:5a:a1:42:9a:ae:dc:eb:61:
d1:72:ed:6d:05:54:f9:d7:73:05:7f:af:77:50:0e:6e:2a:bf:
30:5d:1b:1d:e0:48:b2:32:36:97:8b:8b:56:5e:d2:11:a2:70:
4c:bd:4e:d8:28:b5:57:c4:52:04:ae:48:d4:b3:cb:8d:df:4d:
d5:10:aa:b9:ba:45:e9:02:00:ce:f2:ce:7b:8e:dd:19:b7:39:
de:de:16:67:c6:25:cb:fa:f7:63:1d:95:68:de:9f:f4:23:f8:
ec:b4:37:31:79:3f:0c:aa:4a:4e:a3:2f:74:83:5e:3f:26:e6:
a7:7e:e4:94:dc:d2:f0:f5:02:ac:f5:b6:60:96:3d:fd:2e:a3:
65:f9:b2:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 03:59:26 2026 by rpki-client