Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
File: sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft (raw, json)
Hash identifier: xhdnuzu19u/yK0YDVbjTKZSIqvbyuCmHi5ahp4wdIrY=
Subject key identifier: 28:D9:9C:3A:8F:C1:99:13:6E:72:BD:19:E5:7E:C4:33:3D:AB:35:9D
Authority key identifier: B1:70:6F:CD:B7:EF:05:80:F4:FF:20:32:CE:EF:FD:29:B7:0A:B6:39
Certificate issuer: /CN=b1706fcdb7ef0580f4ff2032ceeffd29b70ab639
Certificate serial: 019D39AE58670AB93F47EB85B51B48AC6A27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
Manifest number: 0660
Signing time: Sun 29 Mar 2026 13:00:20 +0000
Manifest this update: Sun 29 Mar 2026 13:00:20 +0000
Manifest next update: Mon 30 Mar 2026 13:00:20 +0000
Files and hashes: 1: oowSifZpNNKYzrjcaNUZJWL3m3Y.roa (hash: uwi3PfId3re9pl7ftEeebbIx30aPGmKfgvOr1N4WMJM=)
2: sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl (hash: aE4YnVokE9/VHtOxEzDRRixQcgQ18rLDZTND2yZR2nY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:58:67:0a:b9:3f:47:eb:85:b5:1b:48:ac:6a:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1706fcdb7ef0580f4ff2032ceeffd29b70ab639
Validity
Not Before: Mar 29 13:00:20 2026 GMT
Not After : Mar 30 13:00:20 2026 GMT
Subject: CN=28d99c3a8fc199136e72bd19e57ec4333dab359d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:94:e4:e2:81:75:e7:cc:df:68:74:aa:b4:af:
3e:74:42:7a:40:91:8a:82:d1:9c:14:83:6d:24:26:
95:3a:ce:42:e1:02:5e:3c:a3:64:08:4d:ce:7c:40:
61:c3:2d:3b:f6:cb:77:46:fe:42:e2:20:df:60:31:
0f:3f:c9:99:08:5b:7d:0c:68:5f:df:b8:2f:66:c0:
64:5f:62:c1:e9:b2:6e:b2:c3:28:7a:cb:cb:17:cf:
e0:ec:dd:7e:c8:5a:6e:40:c1:24:3e:5e:b4:ab:00:
e1:08:5b:f7:2e:4d:7f:ea:a2:28:3d:9e:7d:69:e1:
a4:63:7f:ff:11:25:1c:98:cf:6c:67:85:4f:13:7e:
54:a5:82:22:a7:c1:1d:db:81:07:cb:84:18:30:29:
bf:f2:1f:79:d4:06:0e:1e:1f:67:ca:a2:c8:e5:66:
94:10:a2:16:f9:1f:4a:f5:bc:7f:c9:05:33:3b:68:
26:83:0c:40:5f:54:6a:6b:33:23:6b:21:27:b9:83:
d8:f3:a4:d6:6e:ca:72:e7:a1:de:67:55:cf:55:c1:
70:d1:a1:54:16:2a:e9:c0:97:f2:3b:a1:9b:d0:5a:
b7:0e:3b:4c:a3:c7:41:7c:53:f9:bd:cf:21:d6:4f:
fe:32:be:28:00:b8:34:45:58:7b:40:ee:42:5b:be:
e2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D9:9C:3A:8F:C1:99:13:6E:72:BD:19:E5:7E:C4:33:3D:AB:35:9D
X509v3 Authority Key Identifier:
keyid:B1:70:6F:CD:B7:EF:05:80:F4:FF:20:32:CE:EF:FD:29:B7:0A:B6:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:45:65:04:86:f6:99:ee:1d:75:d8:2f:a5:01:44:3f:e5:f7:
a8:4f:8f:95:b3:0a:47:6e:d6:73:51:cd:a2:ac:f6:db:49:57:
ce:d0:e6:f9:68:3a:fd:7c:e3:da:b4:92:63:5e:58:2f:88:00:
98:ed:4e:35:0b:38:58:20:0e:4e:1b:91:a3:bc:23:a6:a9:60:
f9:b3:dd:a9:1f:a7:63:f4:a3:73:3f:c5:f9:ed:06:b9:01:0c:
1b:61:90:11:fc:0d:1e:7f:47:be:1f:20:11:c7:1b:09:67:3f:
37:9b:17:e7:c9:da:92:ba:69:ed:88:d6:54:ca:fb:46:52:91:
e3:53:05:b7:de:2c:2e:92:5f:e4:b0:8d:76:1a:81:e9:33:31:
85:48:9a:8e:66:f8:7c:8a:94:41:37:af:da:18:d1:eb:49:3e:
9c:4f:9f:1b:1b:01:cd:4f:aa:d2:f6:48:4f:90:d3:31:7d:d5:
f7:19:5b:39:34:14:6b:b5:f9:96:d0:84:a4:bb:3a:5d:89:42:
31:74:83:8c:09:94:29:1b:3b:6e:e9:f6:32:3c:9f:90:4b:fd:
6b:35:98:a5:76:e4:1f:2b:83:0f:7f:df:b9:b4:99:7b:32:cc:
e4:3e:4b:19:8a:79:95:a2:ab:17:fe:be:c0:85:87:d2:51:5f:
e6:99:14:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05rlhnCrk/R+uFtRtIrGonMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNzA2ZmNkYjdlZjA1ODBmNGZmMjAzMmNlZWZmZDI5Yjcw
YWI2MzkwHhcNMjYwMzI5MTMwMDIwWhcNMjYwMzMwMTMwMDIwWjAzMTEwLwYDVQQD
EygyOGQ5OWMzYThmYzE5OTEzNmU3MmJkMTllNTdlYzQzMzNkYWIzNTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpTk4oF158zfaHSqtK8+dEJ6QJGK
gtGcFINtJCaVOs5C4QJePKNkCE3OfEBhwy079st3Rv5C4iDfYDEPP8mZCFt9DGhf
37gvZsBkX2LB6bJussMoesvLF8/g7N1+yFpuQMEkPl60qwDhCFv3Lk1/6qIoPZ59
aeGkY3//ESUcmM9sZ4VPE35UpYIip8Ed24EHy4QYMCm/8h951AYOHh9nyqLI5WaU
EKIW+R9K9bx/yQUzO2gmgwxAX1RqazMjayEnuYPY86TWbspy56HeZ1XPVcFw0aFU
FirpwJfyO6Gb0Fq3DjtMo8dBfFP5vc8h1k/+Mr4oALg0RVh7QO5CW77iyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCjZnDqPwZkTbnK9GeV+xDM9qzWdMB8GA1UdIwQY
MBaAFLFwb8237wWA9P8gMs7v/Sm3CrY5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1hCdnpiZnZCWUQwX3lBeXp1XzlLYmNLdGprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9kZDI5OTAtZDI4Yy00ZjFhLWI2YmQt
ZTgxY2Q3MDIyNTUzLzEvc1hCdnpiZnZCWUQwX3lBeXp1XzlLYmNLdGprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9kZDI5OTAtZDI4Yy00ZjFhLWI2YmQtZTgxY2Q3MDIyNTUz
LzEvc1hCdnpiZnZCWUQwX3lBeXp1XzlLYmNLdGprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbEVlBIb2
me4dddgvpQFEP+X3qE+PlbMKR27Wc1HNoqz220lXztDm+Wg6/Xzj2rSSY15YL4gA
mO1ONQs4WCAOThuRo7wjpqlg+bPdqR+nY/Sjcz/F+e0GuQEMG2GQEfwNHn9Hvh8g
EccbCWc/N5sX58nakrpp7YjWVMr7RlKR41MFt94sLpJf5LCNdhqB6TMxhUiajmb4
fIqUQTev2hjR60k+nE+fGxsBzU+q0vZIT5DTMX3V9xlbOTQUa7X5ltCEpLs6XYlC
MXSDjAmUKRs7bun2MjyfkEv9azWYpXbkHyuDD3/fubSZezLM5D5LGYp5laKrF/6+
wIWH0lFf5pkU6w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 21:19:46 2026 by rpki-client