Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
File: sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft (raw, json)
Hash identifier: Iv6hvQcQblwJzIwNhMWCV6dvk9OPUZze6ULJcBaoMes=
Subject key identifier: E8:EF:48:0D:76:06:10:87:4A:AC:6D:C0:B7:98:86:31:89:B1:79:41
Authority key identifier: B1:70:6F:CD:B7:EF:05:80:F4:FF:20:32:CE:EF:FD:29:B7:0A:B6:39
Certificate issuer: /CN=b1706fcdb7ef0580f4ff2032ceeffd29b70ab639
Certificate serial: 01A03E96AA2FEDC41D0D195EACF14E1EBC10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
Manifest number: 07F2
Signing time: Wed 26 Aug 2026 15:00:56 +0000
Manifest this update: Wed 26 Aug 2026 15:00:56 +0000
Manifest next update: Thu 27 Aug 2026 15:00:56 +0000
Files and hashes: 1: 7vR5Q4m_T61PHPMKP_nErvCFyBE.roa (hash: gq1L8G0x7ivAnw58QCU9tDfYfjdILP3qn6SNIqxyess=)
2: sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl (hash: XxgqnfYKrEm1OeFvXR79PLKzx9Hizj8CR63NeY7VEt0=)
3: viGbixW9Ey-H17FuZSo2Lp3uGUw.asa (hash: E6TsHnwWV1QVDbu4pe9aJsjOLMMqrUzZTM18kgvJ3l8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:96:aa:2f:ed:c4:1d:0d:19:5e:ac:f1:4e:1e:bc:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1706fcdb7ef0580f4ff2032ceeffd29b70ab639
Validity
Not Before: Aug 26 15:00:56 2026 GMT
Not After : Aug 27 15:00:56 2026 GMT
Subject: CN=e8ef480d760610874aac6dc0b798863189b17941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6d:b5:74:6f:d4:d1:d1:51:29:2f:f7:8a:00:
90:af:93:eb:84:e6:21:7c:29:3a:11:e5:b8:6e:3f:
20:01:f4:f2:51:e8:83:3e:ef:04:e2:f9:8c:67:b8:
a5:5f:a1:10:27:55:db:b6:e8:cd:9a:e7:5e:fb:6b:
21:c8:2d:39:ea:ae:22:a0:a6:90:f1:e4:56:9c:a4:
f3:b5:f6:0b:cd:9b:a3:08:70:09:5b:ef:e7:42:ce:
b1:b9:1b:09:bf:66:4b:a2:3e:21:8f:b9:9f:86:b2:
b1:72:45:44:c0:cf:3c:b8:2e:b9:b0:5d:97:c8:f5:
f8:62:9b:62:81:29:7b:af:0b:8c:75:17:e7:87:2a:
70:85:9d:2c:4d:ca:68:1d:3b:91:76:53:ec:ee:c7:
f6:62:1b:f3:c7:b6:67:64:eb:cc:7b:9b:ed:7e:94:
1c:dd:c9:e6:ef:49:5c:32:ba:db:8f:74:1a:aa:97:
3d:c6:d2:bc:b4:21:61:94:c0:18:ed:cb:5a:83:8a:
88:d2:02:bf:d8:a2:d6:e5:00:c2:cc:3b:51:fb:c8:
4e:07:2e:4e:44:76:32:c2:60:35:7d:db:4b:38:5f:
57:b0:bf:fd:91:8f:50:21:a3:e6:80:3c:12:45:8c:
e9:d5:44:a9:81:b4:55:39:23:bb:37:9d:7d:35:6d:
26:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:EF:48:0D:76:06:10:87:4A:AC:6D:C0:B7:98:86:31:89:B1:79:41
X509v3 Authority Key Identifier:
keyid:B1:70:6F:CD:B7:EF:05:80:F4:FF:20:32:CE:EF:FD:29:B7:0A:B6:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:62:d8:b5:5a:42:b1:34:b2:c7:52:ec:d8:92:2c:86:1f:a4:
80:19:24:ee:60:e3:7e:89:f7:9a:d6:d1:02:92:dd:f4:48:77:
b3:31:f4:81:eb:ce:d6:f1:32:bb:70:7d:e0:da:b6:51:89:ab:
cb:d1:b1:1f:b6:1c:79:fc:02:1c:81:9e:0d:a9:70:a0:29:0e:
ea:93:61:fb:ef:1f:4d:fd:40:66:03:50:c9:4e:93:11:5d:c2:
66:ab:b3:a9:e3:10:cb:47:3c:35:a5:ca:28:e1:6c:0d:85:be:
05:63:9d:1d:1c:c9:14:c6:a1:5e:df:b8:a7:4b:41:68:15:8d:
ce:cc:20:cb:2b:34:a7:dc:b3:84:10:3a:d1:9b:f5:89:55:8b:
87:26:01:36:58:40:bd:a0:42:b8:5c:9f:53:44:49:17:99:9e:
ec:5f:52:d8:53:7b:ed:d4:bf:95:f2:fd:3a:78:d6:97:91:d1:
28:68:ab:e6:11:63:bc:29:97:28:9e:a1:8e:68:fb:69:5d:38:
9e:e8:9f:4a:c4:99:b7:d1:17:e5:7d:40:55:4d:e7:d3:d9:a3:
1b:55:f2:b4:73:c3:ce:92:8b:68:d7:a9:08:42:d7:fc:c4:66:
08:f5:14:f1:ec:97:7a:cf:ec:15:f8:9d:4f:22:b5:49:85:cf:
9d:b9:ad:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA+lqov7cQdDRlerPFOHrwQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNzA2ZmNkYjdlZjA1ODBmNGZmMjAzMmNlZWZmZDI5Yjcw
YWI2MzkwHhcNMjYwODI2MTUwMDU2WhcNMjYwODI3MTUwMDU2WjAzMTEwLwYDVQQD
EyhlOGVmNDgwZDc2MDYxMDg3NGFhYzZkYzBiNzk4ODYzMTg5YjE3OTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtm21dG/U0dFRKS/3igCQr5PrhOYh
fCk6EeW4bj8gAfTyUeiDPu8E4vmMZ7ilX6EQJ1XbtujNmude+2shyC056q4ioKaQ
8eRWnKTztfYLzZujCHAJW+/nQs6xuRsJv2ZLoj4hj7mfhrKxckVEwM88uC65sF2X
yPX4YptigSl7rwuMdRfnhypwhZ0sTcpoHTuRdlPs7sf2Yhvzx7ZnZOvMe5vtfpQc
3cnm70lcMrrbj3Qaqpc9xtK8tCFhlMAY7ctag4qI0gK/2KLW5QDCzDtR+8hOBy5O
RHYywmA1fdtLOF9XsL/9kY9QIaPmgDwSRYzp1USpgbRVOSO7N519NW0m4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOjvSA12BhCHSqxtwLeYhjGJsXlBMB8GA1UdIwQY
MBaAFLFwb8237wWA9P8gMs7v/Sm3CrY5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1hCdnpiZnZCWUQwX3lBeXp1XzlLYmNLdGprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9kZDI5OTAtZDI4Yy00ZjFhLWI2YmQt
ZTgxY2Q3MDIyNTUzLzEvc1hCdnpiZnZCWUQwX3lBeXp1XzlLYmNLdGprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9kZDI5OTAtZDI4Yy00ZjFhLWI2YmQtZTgxY2Q3MDIyNTUz
LzEvc1hCdnpiZnZCWUQwX3lBeXp1XzlLYmNLdGprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgGLYtVpC
sTSyx1Ls2JIshh+kgBkk7mDjfon3mtbRApLd9Eh3szH0gevO1vEyu3B94Nq2UYmr
y9GxH7YcefwCHIGeDalwoCkO6pNh++8fTf1AZgNQyU6TEV3CZquzqeMQy0c8NaXK
KOFsDYW+BWOdHRzJFMahXt+4p0tBaBWNzswgyys0p9yzhBA60Zv1iVWLhyYBNlhA
vaBCuFyfU0RJF5me7F9S2FN77dS/lfL9OnjWl5HRKGir5hFjvCmXKJ6hjmj7aV04
nuifSsSZt9EX5X1AVU3n09mjG1XytHPDzpKLaNepCELX/MRmCPUU8eyXes/sFfid
TyK1SYXPnbmtUg==
-----END CERTIFICATE-----
Generated at Wed Aug 26 17:31:05 2026 by rpki-client