Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft
File: sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft (raw, json)
Hash identifier: i4WCanX1n+urhIRqR4pA/ytVTS12vIlWbBL2I3Fcnto=
Subject key identifier: 32:CA:7F:ED:4E:FB:4E:4C:DA:A3:14:81:CB:32:DD:28:BE:2C:E8:6B
Authority key identifier: B1:85:9F:3D:2C:D2:83:E7:DB:90:F0:2F:E1:B0:D4:F6:15:60:59:47
Certificate issuer: /CN=b1859f3d2cd283e7db90f02fe1b0d4f615605947
Certificate serial: 019FA30553174C5BC968D6507DFA3400EBE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sYWfPSzSg-fbkPAv4bDU9hVgWUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft
Manifest number: 0CF0
Signing time: Mon 27 Jul 2026 10:01:02 +0000
Manifest this update: Mon 27 Jul 2026 10:01:02 +0000
Manifest next update: Tue 28 Jul 2026 10:01:02 +0000
Files and hashes: 1: 6tRNFOHlYPyCYFIHgatSgb5gCeA.roa (hash: E6/vpznSWjmg4YEWxQ9xApX1IggzL3noXqAm0pLp65E=)
2: sYWfPSzSg-fbkPAv4bDU9hVgWUc.crl (hash: XNZgS12HnbXBuWsfp1rFV4Lv3YarjeRsGgxjxQCvA1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sYWfPSzSg-fbkPAv4bDU9hVgWUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:05:53:17:4c:5b:c9:68:d6:50:7d:fa:34:00:eb:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1859f3d2cd283e7db90f02fe1b0d4f615605947
Validity
Not Before: Jul 27 10:01:02 2026 GMT
Not After : Jul 28 10:01:02 2026 GMT
Subject: CN=32ca7fed4efb4e4cdaa31481cb32dd28be2ce86b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7c:4d:ef:9d:a4:db:c4:5f:5d:47:dc:ae:25:
77:2f:4b:d4:50:d6:3e:6c:c5:4b:b0:c2:63:0f:3e:
42:c6:2e:1e:51:3a:56:23:ad:7f:f1:d7:84:c2:29:
a2:55:f0:2b:93:c7:9d:2c:d3:a7:f9:d5:c5:cd:72:
88:53:52:35:01:0b:04:95:60:c8:2e:97:c9:33:42:
7b:fb:3d:67:38:5e:51:88:92:4c:e5:28:4a:b0:30:
81:54:28:52:9d:06:a8:f6:ee:15:e6:66:67:c4:b9:
d0:7d:fa:7e:bd:e5:82:7f:98:81:8b:44:89:96:86:
39:0f:c5:13:76:e2:5c:f3:f7:33:05:d4:9e:0f:3b:
72:bb:97:6d:a6:b2:f0:c0:6c:9f:39:77:0a:f9:4f:
ce:b8:a1:a5:03:3b:fe:fa:8f:d9:f6:62:e0:dd:d3:
cb:b4:ba:1f:01:0f:69:93:86:30:87:f0:e4:12:29:
30:71:d2:f2:af:17:da:bb:9b:0e:56:45:75:c5:84:
ab:82:79:12:cc:c1:2c:e3:95:14:0f:53:f2:89:69:
ff:30:c6:0a:22:be:f1:f8:50:00:62:30:18:92:7e:
a1:4b:f5:e3:6b:f9:e1:cc:37:91:81:a9:ae:ba:9d:
f0:02:41:41:5f:37:14:1f:12:c3:7d:04:d4:6a:65:
cc:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:CA:7F:ED:4E:FB:4E:4C:DA:A3:14:81:CB:32:DD:28:BE:2C:E8:6B
X509v3 Authority Key Identifier:
keyid:B1:85:9F:3D:2C:D2:83:E7:DB:90:F0:2F:E1:B0:D4:F6:15:60:59:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYWfPSzSg-fbkPAv4bDU9hVgWUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:ba:97:69:eb:36:fb:8d:81:c3:28:8f:b5:0c:d4:c2:32:07:
61:3c:01:9b:84:58:e3:63:fe:95:33:74:86:c4:e8:f9:41:d2:
e0:96:0c:71:ea:31:61:0a:e7:31:82:ef:d4:16:97:8d:8d:0d:
1a:7a:d9:aa:42:92:8d:09:36:15:b7:b4:0f:b9:e3:40:2a:0c:
37:eb:90:7f:41:3f:4f:22:7a:3d:91:89:fb:33:de:f6:35:38:
8d:d1:43:4c:c8:94:73:ee:3a:8e:cf:ac:1c:36:99:e0:8c:0f:
9f:ed:9a:b6:bc:13:45:f6:ca:22:1b:14:00:8c:3f:2c:fd:d7:
d7:a5:4a:14:1e:13:b7:eb:a0:b9:9f:15:f6:ea:34:db:09:dc:
f6:25:07:d7:8c:02:23:35:b4:60:80:a6:2e:0a:d3:99:4e:c4:
0c:d0:86:35:95:39:40:5c:24:89:30:b0:22:ee:80:71:34:22:
8c:96:d8:c0:3c:5c:36:37:c7:26:c6:f5:72:df:a4:33:fd:cf:
fa:31:b1:a0:3a:02:b6:a5:e5:ae:62:fb:80:c5:d2:5f:89:70:
7f:86:ce:23:b4:10:60:fc:4b:4d:11:5b:7f:98:b8:ba:07:44:
f0:ee:ec:c9:da:db:e0:d5:ce:8a:51:50:ae:ce:15:3c:63:ee:
71:2e:89:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 12:31:21 2026 by rpki-client