Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft
File: sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft (raw, json)
Hash identifier: hfNZVyuZq0BZWZIwoC4ahhLtnCk0MsFp9vAQnvQkstM=
Subject key identifier: DB:1A:69:8F:72:6E:89:23:EA:48:83:A5:2F:E6:1C:57:EF:6C:77:12
Authority key identifier: B1:85:9F:3D:2C:D2:83:E7:DB:90:F0:2F:E1:B0:D4:F6:15:60:59:47
Certificate issuer: /CN=b1859f3d2cd283e7db90f02fe1b0d4f615605947
Certificate serial: 01A19EEC9BE41060E87638E9DC8BD2689B6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sYWfPSzSg-fbkPAv4bDU9hVgWUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft
Manifest number: 0DF7
Signing time: Tue 03 Nov 2026 01:01:08 +0000
Manifest this update: Tue 03 Nov 2026 01:01:08 +0000
Manifest next update: Wed 04 Nov 2026 01:01:08 +0000
Files and hashes: 1: 6tRNFOHlYPyCYFIHgatSgb5gCeA.roa (hash: E6/vpznSWjmg4YEWxQ9xApX1IggzL3noXqAm0pLp65E=)
2: sYWfPSzSg-fbkPAv4bDU9hVgWUc.crl (hash: KzdWfy79x5jNfYY8OID36ij8/sb48kh10W0RKqEZ70k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sYWfPSzSg-fbkPAv4bDU9hVgWUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Nov 2026 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9e:ec:9b:e4:10:60:e8:76:38:e9:dc:8b:d2:68:9b:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1859f3d2cd283e7db90f02fe1b0d4f615605947
Validity
Not Before: Nov 3 01:01:08 2026 GMT
Not After : Nov 4 01:01:08 2026 GMT
Subject: CN=db1a698f726e8923ea4883a52fe61c57ef6c7712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e0:6a:83:be:40:0c:5a:6b:27:31:fd:8c:70:
6f:de:89:5e:9a:5a:75:0e:43:e4:f8:42:59:d4:25:
43:17:3e:30:31:d8:c8:d2:52:31:f0:ec:20:b3:2e:
ed:4f:0c:23:7d:0b:8e:35:2d:f2:59:13:cf:fe:7f:
0d:10:e7:8e:8e:3f:d5:03:a8:40:a9:58:40:55:8b:
78:cb:7d:20:db:cb:1e:f8:aa:32:1e:a8:93:67:42:
d5:b8:c3:49:f3:aa:b7:ac:03:b6:54:99:35:22:20:
96:1a:df:78:ff:97:8e:14:59:31:a7:3f:41:be:cf:
c5:01:92:84:90:90:6c:90:5c:c3:63:2d:37:63:12:
c6:8d:f6:a3:7d:1b:6c:6a:52:7a:be:d5:e5:8e:96:
69:31:23:b8:dc:c5:8b:79:83:34:2f:cf:c6:60:68:
eb:3d:fc:dc:b7:ba:8e:bd:c7:73:4c:96:c8:0c:1d:
50:92:4d:e5:67:20:27:35:d7:7d:c5:66:51:b7:70:
f5:25:c7:0d:fe:f2:e5:82:2d:d1:f2:01:99:78:13:
9e:86:3a:1a:ba:21:63:a6:84:ba:95:a5:ca:5e:23:
76:6a:a2:9b:78:34:86:9f:bb:d8:e8:bf:6c:33:56:
1d:5f:b1:7e:46:b1:7e:46:1d:00:f7:8e:55:da:93:
d2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:1A:69:8F:72:6E:89:23:EA:48:83:A5:2F:E6:1C:57:EF:6C:77:12
X509v3 Authority Key Identifier:
keyid:B1:85:9F:3D:2C:D2:83:E7:DB:90:F0:2F:E1:B0:D4:F6:15:60:59:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYWfPSzSg-fbkPAv4bDU9hVgWUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:00:c4:a5:70:e9:91:64:fb:38:0d:10:c8:6f:c3:77:4a:77:
90:a2:e4:52:69:a2:31:68:e5:1d:31:f6:b8:98:cc:4f:9e:40:
a3:81:09:41:15:df:2e:a7:da:b6:6d:ba:38:e4:e1:4c:af:59:
40:c5:92:2e:55:f5:4b:0f:ab:5e:90:b7:5e:65:5a:a1:25:86:
8b:73:e7:df:d5:e2:fa:95:05:a7:3d:ad:94:90:39:02:05:c3:
a1:a2:8d:8d:93:e0:36:fb:9e:4b:6e:63:50:e4:d1:ba:57:78:
e8:89:a5:9a:ee:11:73:f9:6b:3c:b1:45:bc:47:e5:7c:7e:5c:
96:46:eb:5a:f5:13:69:07:aa:1a:b1:69:ff:21:0b:dc:2f:69:
92:36:3b:2e:d7:98:1f:9d:65:e9:fe:cf:a5:84:a5:50:dc:de:
65:e1:4a:9c:a2:7c:63:cf:32:0d:39:50:2d:41:42:ad:91:a0:
13:ee:35:a1:0f:e8:c9:e1:f7:d0:d0:fb:9c:a7:52:e1:00:2c:
5f:87:d2:e1:88:34:1e:04:27:4c:c8:ef:92:7d:17:08:a0:0e:
d8:ca:3b:37:36:f9:db:4c:32:dd:d5:09:f9:97:8b:3a:db:7a:
31:0b:cd:74:9f:a5:62:dd:34:19:17:e4:76:51:13:23:4b:54:
47:07:f4:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 06:33:57 2026 by rpki-client