Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.mft
File: fySblURiBoP5SziKdVGmimST7RI.mft (raw, json)
Hash identifier: voS5igh/ZE1P4XhzU1fXa7VKWRj+pvHSb4tuR1wRkh8=
Subject key identifier: 20:5C:11:20:37:58:99:E0:8F:A5:CC:D0:D5:E6:54:17:6B:7E:E6:BD
Authority key identifier: 7F:24:9B:95:44:62:06:83:F9:4B:38:8A:75:51:A6:8A:64:93:ED:12
Certificate issuer: /CN=7f249b9544620683f94b388a7551a68a6493ed12
Certificate serial: 019E9C2A4F6F5E8077B9D8B6BEC3EEC6B0A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fySblURiBoP5SziKdVGmimST7RI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.mft
Manifest number: 0578
Signing time: Sat 06 Jun 2026 09:01:18 +0000
Manifest this update: Sat 06 Jun 2026 09:01:18 +0000
Manifest next update: Sun 07 Jun 2026 09:01:18 +0000
Files and hashes: 1: YvcN6K_UssWa3nJxS1veSyl_xQY.roa (hash: t+mIJo/SlLUrms8Z2lET1unxQJd9AMYvk21JZsGJ2+0=)
2: dnXyH3vZjdJd8T6MD3l1oA-JYEE.roa (hash: xs3AEKZ6AnA/WEhDya53kTTaCVsu33jeAdkrvd9mk2w=)
3: fySblURiBoP5SziKdVGmimST7RI.crl (hash: c48f1AOtaxoVAwtcXHZPX/uRB2NDRtKlOLfwqDCga00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.mft
rsync://rpki.ripe.net/repository/DEFAULT/fySblURiBoP5SziKdVGmimST7RI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 09:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9c:2a:4f:6f:5e:80:77:b9:d8:b6:be:c3:ee:c6:b0:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f249b9544620683f94b388a7551a68a6493ed12
Validity
Not Before: Jun 6 09:01:18 2026 GMT
Not After : Jun 7 09:01:18 2026 GMT
Subject: CN=205c1120375899e08fa5ccd0d5e654176b7ee6bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:73:0a:2b:58:ae:d7:8a:80:ec:13:78:0e:62:
00:1d:61:1f:22:ee:ea:ae:5a:45:08:e1:80:da:b1:
d8:ed:d2:b5:eb:b5:1c:25:9a:a2:7b:8b:d9:37:f3:
53:72:80:62:58:94:ee:33:e7:65:94:9f:bc:8a:20:
25:0a:64:0a:50:9f:f7:48:da:c1:74:78:e2:64:db:
62:90:9c:2b:a0:df:c1:52:4b:06:ba:d3:95:03:73:
15:65:e8:e4:ba:1d:55:6b:f7:27:91:45:77:1f:d6:
bc:52:b1:03:be:43:75:78:2f:3b:d6:c2:65:67:6e:
46:8d:05:e8:f9:1d:11:4f:9d:9c:ae:6e:75:4a:31:
a0:c7:2f:91:87:da:b8:f1:0f:62:4a:08:a4:ee:99:
1c:0d:f2:d8:76:cf:b9:32:01:46:cc:4e:a7:4f:94:
37:f7:54:67:f2:49:72:6d:2b:39:0d:4f:df:5b:4b:
5c:1a:77:e8:d3:72:a4:71:87:c1:44:4d:02:cb:7c:
70:fd:06:2e:c4:57:7e:62:00:0a:16:32:66:f9:77:
76:35:6f:21:d8:62:a8:63:c8:82:6d:c0:cb:36:c1:
80:ab:ef:53:af:f6:7a:80:cf:f6:32:ac:b4:20:61:
df:f1:d0:c6:0e:af:d7:78:6e:de:0a:1f:85:cb:d3:
3a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:5C:11:20:37:58:99:E0:8F:A5:CC:D0:D5:E6:54:17:6B:7E:E6:BD
X509v3 Authority Key Identifier:
keyid:7F:24:9B:95:44:62:06:83:F9:4B:38:8A:75:51:A6:8A:64:93:ED:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fySblURiBoP5SziKdVGmimST7RI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:cd:54:6b:d7:5f:19:c6:5b:f8:6f:c0:13:ad:0e:c2:b7:87:
9e:1d:51:c7:10:f5:82:06:12:87:43:8a:55:87:98:d9:57:31:
12:e7:4d:cd:fe:e1:ed:f9:9b:4e:08:b8:61:00:a3:9d:f1:ec:
92:d8:5d:40:bf:84:33:3a:f3:75:4c:5f:f2:7b:2f:92:64:e5:
19:3d:c5:0d:2e:71:13:50:1b:21:3f:e5:e2:24:61:bd:f1:c7:
a5:ab:5f:f0:10:5b:e8:ff:88:e1:0b:1f:fe:fb:b7:6d:da:97:
b5:6b:bc:83:b3:8a:06:df:06:2b:17:bc:ec:d3:47:ef:b0:3a:
03:ce:49:32:41:22:0c:f0:77:f4:0f:31:47:45:4d:e4:e0:dc:
90:b3:19:f6:ab:b7:0b:18:29:66:32:80:87:27:34:b3:54:ac:
bb:20:ac:f5:45:72:2b:7d:e3:f0:bc:d8:14:84:f0:4c:b6:41:
b8:c7:d8:61:3a:eb:c0:91:bb:5b:d6:7b:60:c4:0d:9b:77:cd:
60:8b:28:20:5b:62:7c:88:8b:fd:a8:a8:70:90:0e:53:e4:ba:
0e:47:2d:5c:5e:a6:ed:17:04:4f:f4:54:79:57:7b:39:5a:fb:
05:8a:ee:7f:00:5b:a6:6f:a7:56:de:78:9a:c9:13:50:8f:6b:
21:b6:89:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 18:04:22 2026 by rpki-client