Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.mft
File: sYxKQwCDfE6hetHjghoJrVN2QIc.mft (raw, json)
Hash identifier: enXYfbjA6XRDUqmidD2rBGMJiE4Ng5uw/qNk4Fxywu8=
Subject key identifier: 40:7C:57:DF:42:D9:30:4F:15:1A:BA:66:41:4E:5C:CD:F0:BF:D2:6F
Authority key identifier: B1:8C:4A:43:00:83:7C:4E:A1:7A:D1:E3:82:1A:09:AD:53:76:40:87
Certificate issuer: /CN=b18c4a4300837c4ea17ad1e3821a09ad53764087
Certificate serial: 01A12F58316F4D193237EB92111FDB5916CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sYxKQwCDfE6hetHjghoJrVN2QIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.mft
Manifest number: 1335
Signing time: Mon 12 Oct 2026 09:01:11 +0000
Manifest this update: Mon 12 Oct 2026 09:01:11 +0000
Manifest next update: Tue 13 Oct 2026 09:01:11 +0000
Files and hashes: 1: OztHm958aRJRxZODVtzftmoIutM.roa (hash: LyCjNgF1WRtdSw3T7qrOJsi3Hm2+foAc8JYBqHMHMdE=)
2: sYxKQwCDfE6hetHjghoJrVN2QIc.crl (hash: meS+yEZGVs3MJMHehXooWDDgYu/ybxIErY9Oc5AhcOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sYxKQwCDfE6hetHjghoJrVN2QIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:58:31:6f:4d:19:32:37:eb:92:11:1f:db:59:16:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b18c4a4300837c4ea17ad1e3821a09ad53764087
Validity
Not Before: Oct 12 09:01:11 2026 GMT
Not After : Oct 13 09:01:11 2026 GMT
Subject: CN=407c57df42d9304f151aba66414e5ccdf0bfd26f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:aa:87:14:a3:97:ef:d7:91:f9:40:a2:06:2a:
61:4c:77:39:7f:c3:39:4b:45:ed:50:d1:be:45:9f:
97:6a:47:8a:d3:81:93:69:d5:9a:6e:e5:04:d5:1d:
ea:31:14:ee:a1:6c:8c:1c:cc:10:d8:26:05:ea:e3:
56:e6:ac:44:b1:7b:ed:93:a3:30:cb:a9:0f:60:84:
d6:19:fe:13:a0:0e:bb:0c:5f:f8:75:85:a1:b8:2f:
3d:9e:6b:a2:a2:13:9b:f4:b4:b8:e6:2e:fa:14:a7:
0f:26:4f:c2:28:dc:c0:c6:49:db:e9:97:24:1e:fa:
18:71:ea:a0:f4:49:f1:44:6c:90:11:a6:cd:35:b1:
94:b2:5c:9a:af:d7:26:c0:a6:f0:9c:1e:13:a0:1e:
ef:a9:b1:3f:f5:95:32:77:fd:14:3e:38:6a:c6:eb:
1d:2a:2e:f9:87:a6:f5:69:eb:a8:ee:21:d0:85:db:
cc:39:8f:1b:4c:d0:49:f2:8e:93:aa:22:ae:aa:4f:
c0:e5:75:d3:72:84:ff:44:2d:0a:f9:c9:42:12:a1:
c6:fc:3c:de:b0:5f:8a:36:98:c0:35:5f:66:b5:3a:
6d:ae:2e:be:fd:a1:3c:17:b6:21:aa:0b:ac:54:d0:
5d:18:58:79:16:62:cf:f8:90:b9:bc:27:18:8c:7c:
17:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:7C:57:DF:42:D9:30:4F:15:1A:BA:66:41:4E:5C:CD:F0:BF:D2:6F
X509v3 Authority Key Identifier:
keyid:B1:8C:4A:43:00:83:7C:4E:A1:7A:D1:E3:82:1A:09:AD:53:76:40:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYxKQwCDfE6hetHjghoJrVN2QIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:ff:6d:3c:3b:c6:f9:0e:30:41:14:c2:61:ca:19:08:31:b8:
c9:bb:22:36:63:a4:28:ce:06:5b:94:97:ed:d0:1a:3c:d1:7e:
db:33:26:c6:b7:2e:fc:56:7f:6b:e5:20:b2:2b:f5:5a:63:02:
28:e1:f9:5e:1a:ae:a0:6b:6b:f5:f9:cd:41:89:e0:83:8f:d4:
54:2b:1f:d0:23:89:06:fe:62:89:33:5d:59:de:57:01:62:94:
c5:b0:be:8b:9f:43:91:3d:6f:f7:db:fd:d1:46:3f:46:68:b1:
0e:00:48:4e:fc:05:bc:50:43:25:5c:d5:e0:9e:6d:4a:9a:65:
21:29:c9:67:21:a2:58:6a:55:72:4e:a1:d9:74:b0:72:72:73:
50:d4:92:d1:8f:89:5c:ba:ca:db:7f:fd:f8:e5:2f:01:01:ba:
94:b3:ce:02:98:4d:89:68:d5:ee:db:99:ee:10:ec:11:8c:b2:
9f:d0:0a:88:1f:43:23:7b:d4:b9:67:3b:b6:50:ea:23:f8:fe:
d7:5e:33:b9:ad:b7:e4:ef:f3:cd:f6:0d:96:b1:5d:64:05:ed:
7c:a1:2a:ff:83:97:99:64:8a:a5:cc:a7:76:a7:fd:51:3a:c6:
c2:5a:66:73:b3:c7:77:9e:bc:57:ee:a7:8f:42:cb:b5:eb:d6:
a2:75:cc:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 15:14:42 2026 by rpki-client