Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
File: sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft (raw, json)
Hash identifier: tnWRr5a2jyB78oC9Kl/O+R1ZzqmHRYoQiKaCFDcfH8w=
Subject key identifier: 03:16:8D:C3:3B:1B:F8:A7:91:76:37:9C:0A:35:61:47:B6:AD:18:18
Authority key identifier: B1:70:6F:CD:B7:EF:05:80:F4:FF:20:32:CE:EF:FD:29:B7:0A:B6:39
Certificate issuer: /CN=b1706fcdb7ef0580f4ff2032ceeffd29b70ab639
Certificate serial: 019E2882527D0F72B25BD364C190BE1659AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
Manifest number: 06DC
Signing time: Thu 14 May 2026 22:01:29 +0000
Manifest this update: Thu 14 May 2026 22:01:29 +0000
Manifest next update: Fri 15 May 2026 22:01:29 +0000
Files and hashes: 1: oowSifZpNNKYzrjcaNUZJWL3m3Y.roa (hash: uwi3PfId3re9pl7ftEeebbIx30aPGmKfgvOr1N4WMJM=)
2: sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl (hash: /ESuQmndfWutmyoGGfyDnsLQLVfNXoIl9rwdHFOInnk=)
3: wYNkgivHmczBfVK47-ZJaMoKgac.asa (hash: 1Kkc1HWLJWlsQ7tek7Nc/E33P76aNAyNEBUZAmhQX4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 22:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:82:52:7d:0f:72:b2:5b:d3:64:c1:90:be:16:59:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1706fcdb7ef0580f4ff2032ceeffd29b70ab639
Validity
Not Before: May 14 22:01:29 2026 GMT
Not After : May 15 22:01:29 2026 GMT
Subject: CN=03168dc33b1bf8a79176379c0a356147b6ad1818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:02:bc:4e:44:61:3f:d2:bb:75:80:e5:20:dc:
d9:c5:79:e4:2c:46:09:cc:29:a3:53:41:81:de:b6:
9f:32:95:9e:d0:39:20:c5:f0:c7:15:e8:bf:5c:57:
66:c9:38:15:7b:62:5e:44:3e:4c:ce:57:93:25:a6:
e2:b0:15:15:73:e2:6f:8c:86:75:52:dd:1a:dc:4e:
d5:1d:4e:3d:30:16:e5:f4:76:d1:a2:5a:57:8a:f7:
68:2f:58:e8:fb:d0:01:ac:d5:d4:6b:e4:f7:a8:45:
23:34:c1:3d:d8:44:9d:40:5d:de:ba:3e:34:88:45:
67:ed:88:65:61:68:65:f3:10:34:cc:6e:be:6a:f2:
0a:fa:5a:9e:e1:c1:46:a4:db:b2:2a:22:3d:10:0a:
0c:0f:00:af:19:d8:99:94:35:07:93:42:20:e0:33:
bf:bc:6d:9c:d8:9a:85:73:ac:c3:54:07:e7:3b:68:
e4:4a:fe:b6:96:80:1c:a5:f8:ed:08:ba:0e:f4:56:
c3:fd:3a:1b:44:b9:19:0e:38:ab:b3:ac:a7:7a:5f:
8e:ba:f6:12:20:80:e1:bb:92:fa:d5:14:db:61:37:
bc:11:76:35:7e:27:e1:4a:ea:ef:c8:dc:af:a5:7d:
58:aa:0e:30:f8:26:df:1b:1a:b3:25:a2:57:74:91:
1d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:16:8D:C3:3B:1B:F8:A7:91:76:37:9C:0A:35:61:47:B6:AD:18:18
X509v3 Authority Key Identifier:
keyid:B1:70:6F:CD:B7:EF:05:80:F4:FF:20:32:CE:EF:FD:29:B7:0A:B6:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:f4:10:7b:5e:76:2f:a2:1a:9b:4c:21:0d:95:67:2b:8c:4e:
3a:be:b8:84:6f:3f:1f:3b:2d:50:35:c1:9b:bb:49:b3:6c:a8:
28:49:06:31:4c:b0:2a:32:f5:86:ed:f0:a3:f7:7a:53:78:97:
af:6c:5f:50:02:76:70:56:d3:e6:c0:f4:e6:20:54:9b:c2:74:
5f:f7:92:20:a5:e8:20:28:60:1f:bc:47:71:03:df:e2:92:46:
6f:03:81:0b:e3:41:24:7f:92:85:bf:b0:20:71:18:65:5e:e0:
92:d6:aa:c2:83:8d:f1:c5:a0:77:3d:5f:1c:2d:12:b2:4b:c4:
df:b9:88:5b:44:94:4c:37:5e:a2:a3:f6:4f:fd:76:1c:f1:3f:
46:7c:00:b4:d4:e1:d0:bc:f7:26:7b:6e:a8:92:e0:40:00:bf:
f7:cc:28:10:64:99:9a:38:7c:c7:eb:35:a5:fa:18:3b:84:46:
04:d6:45:35:1b:82:df:35:f8:0c:ae:b4:3e:33:a0:96:d4:04:
97:19:8c:41:38:5e:f4:ad:3f:08:f1:20:e5:9a:c7:76:c0:03:
41:14:e9:df:da:0a:bb:81:74:36:a7:c0:36:c5:49:4e:cb:2e:
0c:37:34:02:6c:44:e7:84:e3:0b:67:89:40:23:13:0b:10:67:
a1:e4:aa:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 07:03:40 2026 by rpki-client