Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.mft
File: sYxKQwCDfE6hetHjghoJrVN2QIc.mft (raw, json)
Hash identifier: 9eQTiJxQA0rhabUBr0RC1FGJaY23sKTTCnevD32VkxI=
Subject key identifier: 64:AF:97:AB:BE:CF:93:D8:31:18:FD:2B:E1:0B:0D:A3:60:83:77:BD
Authority key identifier: B1:8C:4A:43:00:83:7C:4E:A1:7A:D1:E3:82:1A:09:AD:53:76:40:87
Certificate issuer: /CN=b18c4a4300837c4ea17ad1e3821a09ad53764087
Certificate serial: 01A13334E30DA6E4A1BAE70F56DE6E65E0BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sYxKQwCDfE6hetHjghoJrVN2QIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.mft
Manifest number: 1337
Signing time: Tue 13 Oct 2026 03:01:06 +0000
Manifest this update: Tue 13 Oct 2026 03:01:06 +0000
Manifest next update: Wed 14 Oct 2026 03:01:06 +0000
Files and hashes: 1: OztHm958aRJRxZODVtzftmoIutM.roa (hash: LyCjNgF1WRtdSw3T7qrOJsi3Hm2+foAc8JYBqHMHMdE=)
2: sYxKQwCDfE6hetHjghoJrVN2QIc.crl (hash: fAwQt4EOFFFvsehnnRm5nHPG0DHfIomGoadUPUTUThQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sYxKQwCDfE6hetHjghoJrVN2QIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 03:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:33:34:e3:0d:a6:e4:a1:ba:e7:0f:56:de:6e:65:e0:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b18c4a4300837c4ea17ad1e3821a09ad53764087
Validity
Not Before: Oct 13 03:01:06 2026 GMT
Not After : Oct 14 03:01:06 2026 GMT
Subject: CN=64af97abbecf93d83118fd2be10b0da3608377bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c6:02:b4:f6:c8:ef:eb:69:73:70:66:1a:d5:
1f:3a:05:1e:a6:3f:1a:65:03:92:66:3a:28:d4:26:
67:5c:da:3d:cc:03:22:4b:1b:cb:89:c8:f3:42:6a:
74:2b:de:0a:0f:27:12:68:3a:ac:3c:e4:ad:88:6e:
55:0c:88:34:91:45:06:50:9d:ba:28:87:48:98:4f:
61:ce:55:78:d7:ce:0e:7a:84:bf:cb:65:ff:93:e7:
48:2d:77:ef:c9:6b:c2:66:8e:56:82:3a:1f:bb:fd:
fe:68:69:b9:bf:09:8a:f1:22:e3:73:a7:12:8d:cc:
e2:91:62:80:f0:ea:20:4a:f2:1a:4e:f1:80:38:60:
7f:f0:3c:b5:a3:13:8b:7c:55:38:6a:be:93:c8:51:
b7:25:26:eb:1b:7e:3d:0c:ca:4f:ca:8e:8e:ac:ac:
81:57:69:87:c0:03:8a:5a:e8:85:f1:6e:d5:1f:4e:
7d:34:e9:55:47:e3:73:1c:45:7d:1e:af:55:52:10:
93:94:45:ae:f3:78:df:85:cc:b7:5a:52:fd:c0:ee:
84:dd:a9:d9:73:4d:de:79:75:f4:b5:4e:b3:ce:51:
8c:ff:c1:f4:49:d8:00:a3:e2:11:c6:3f:2c:f7:ff:
b0:86:3d:90:04:64:46:c4:ba:e2:7e:98:1d:e9:4c:
d1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:AF:97:AB:BE:CF:93:D8:31:18:FD:2B:E1:0B:0D:A3:60:83:77:BD
X509v3 Authority Key Identifier:
keyid:B1:8C:4A:43:00:83:7C:4E:A1:7A:D1:E3:82:1A:09:AD:53:76:40:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYxKQwCDfE6hetHjghoJrVN2QIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:14:dc:73:c0:14:34:31:74:e9:d1:77:1f:a5:09:39:b8:85:
25:9a:43:b6:44:95:a2:4d:26:9b:2b:f0:9d:b9:93:60:c6:87:
b8:ca:a6:c0:35:db:89:8b:8d:11:00:e5:f9:52:0b:32:57:d4:
52:c2:6c:26:fd:dd:31:9d:15:07:c2:2a:fd:3a:ab:79:50:f5:
8f:20:c8:3f:d2:b2:51:04:8a:85:32:f3:47:70:26:87:d3:54:
c0:3c:53:ee:8c:40:69:0c:97:c6:88:35:18:cc:cd:f7:26:64:
d8:c1:c8:29:f7:56:f3:53:5a:6c:d0:67:16:90:c1:4d:d3:c6:
55:e4:d6:63:46:47:7e:f0:7e:66:7c:ef:49:68:b2:a0:3c:95:
8e:dc:58:cd:70:52:c4:50:d8:78:67:38:df:85:25:3a:11:1c:
c1:99:0a:74:f7:26:df:78:d1:34:aa:85:e1:e6:96:69:a2:fe:
de:90:76:f2:3c:49:be:7d:63:29:11:53:a7:64:98:ee:73:e7:
72:bb:83:f3:f9:db:72:79:6b:e6:fa:cf:df:a0:b3:24:0d:3e:
f1:f7:18:08:24:b1:54:3d:bb:96:ba:c5:3d:45:67:0d:d0:ac:
36:9a:b3:f9:e2:78:43:90:bf:c3:9a:4f:df:08:e4:fc:53:fd:
2c:37:00:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 12:47:29 2026 by rpki-client