Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/4a559f-dd5f-4d01-b082-b07889eb8e93/1/sURkGfXmsb7Ze59nGGiggstykPA.mft
File: sURkGfXmsb7Ze59nGGiggstykPA.mft (raw, json)
Hash identifier: AVF2PI4OWWo/+POvPodbMCn6dxMyFHnh3BrvDOA7ZcY=
Subject key identifier: CA:9B:3A:A7:B9:EB:79:57:E6:08:8B:2F:FC:37:B3:FA:80:F8:CC:A8
Authority key identifier: B1:44:64:19:F5:E6:B1:BE:D9:7B:9F:67:18:68:A0:82:CB:72:90:F0
Certificate issuer: /CN=b1446419f5e6b1bed97b9f671868a082cb7290f0
Certificate serial: 019EFC168357FD57E1FCA2777A4FBE8C0298
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sURkGfXmsb7Ze59nGGiggstykPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/4a559f-dd5f-4d01-b082-b07889eb8e93/1/sURkGfXmsb7Ze59nGGiggstykPA.mft
Manifest number: B3
Signing time: Thu 25 Jun 2026 00:03:14 +0000
Manifest this update: Thu 25 Jun 2026 00:03:14 +0000
Manifest next update: Fri 26 Jun 2026 00:03:14 +0000
Files and hashes: 1: l-aEHGRr6mSwaOOPXptMqOfSa6g.roa (hash: oYGqjiujvvcpv0QPtMiNNXBDknKaO4zREWr9HxsSg3Y=)
2: lIV0OLq5vZmpNkImZ3IfIzUlakw.asa (hash: GoXOVmTlMc0X832ucVGmd5nO2/93OWcyKlbli6Jdw2c=)
3: sURkGfXmsb7Ze59nGGiggstykPA.crl (hash: sQMTnrW/yORhJRd0otY+6poPx8nTsIAXt0BGdqhvg60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/4a559f-dd5f-4d01-b082-b07889eb8e93/1/sURkGfXmsb7Ze59nGGiggstykPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/4a559f-dd5f-4d01-b082-b07889eb8e93/1/sURkGfXmsb7Ze59nGGiggstykPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sURkGfXmsb7Ze59nGGiggstykPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fc:16:83:57:fd:57:e1:fc:a2:77:7a:4f:be:8c:02:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1446419f5e6b1bed97b9f671868a082cb7290f0
Validity
Not Before: Jun 25 00:03:14 2026 GMT
Not After : Jun 26 00:03:14 2026 GMT
Subject: CN=ca9b3aa7b9eb7957e6088b2ffc37b3fa80f8cca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:a8:ae:8c:03:90:21:3f:34:79:c7:05:f8:ee:
da:d6:52:6a:90:d1:71:1d:56:00:b3:88:54:c5:62:
00:51:e2:e3:ca:65:07:5a:d9:f4:bf:aa:23:97:79:
19:b9:47:45:05:e7:1a:eb:19:a9:9e:c6:05:8d:f3:
c5:a5:1f:75:2a:75:07:c5:33:a0:87:74:8d:b2:61:
c3:fa:5f:18:ce:c7:87:d8:8b:98:42:a0:60:0a:71:
9c:45:60:24:d5:73:15:2f:13:01:b9:6d:80:01:fc:
43:fa:74:76:4e:4e:01:c2:aa:51:d6:12:79:a1:e3:
fa:96:00:a0:5e:b6:a4:99:a5:33:27:33:82:d4:9b:
91:d9:67:6c:89:c6:ac:7e:d4:c9:68:6e:6e:05:ea:
d6:17:3e:79:85:36:59:62:ec:bd:54:de:86:f2:3d:
e8:57:94:b5:b4:0a:a1:a1:69:5f:ba:54:66:c7:77:
86:09:e0:ef:af:04:1e:90:f8:c9:00:a8:05:3f:7c:
6b:c6:7a:2e:8b:a6:e9:36:a2:c2:cf:c7:02:89:3b:
9d:83:40:06:dc:fe:fa:01:ff:c6:17:66:7b:41:8a:
f9:f9:7b:f3:d8:61:8f:77:0d:c7:4f:b8:3b:63:0c:
90:c0:3e:cb:89:e3:82:de:11:14:75:5b:ae:86:06:
70:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:9B:3A:A7:B9:EB:79:57:E6:08:8B:2F:FC:37:B3:FA:80:F8:CC:A8
X509v3 Authority Key Identifier:
keyid:B1:44:64:19:F5:E6:B1:BE:D9:7B:9F:67:18:68:A0:82:CB:72:90:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sURkGfXmsb7Ze59nGGiggstykPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4a559f-dd5f-4d01-b082-b07889eb8e93/1/sURkGfXmsb7Ze59nGGiggstykPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4a559f-dd5f-4d01-b082-b07889eb8e93/1/sURkGfXmsb7Ze59nGGiggstykPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:91:c4:a6:1a:1d:80:b6:2b:92:ed:80:6a:f5:06:5b:05:14:
7d:84:3a:b9:41:02:fe:4c:c2:a6:2f:b3:0f:8a:c1:98:f9:7f:
95:39:5f:6a:93:f8:f9:79:bf:fc:e2:9f:a9:e0:08:32:f7:3c:
a2:6d:f2:23:3e:06:ef:6e:bf:af:ac:9d:df:ad:34:d6:96:16:
3d:6e:c5:8d:f8:75:4b:ac:11:e3:43:38:c5:e0:e8:5e:96:19:
e1:32:dd:db:63:65:71:1e:ed:93:56:99:ea:da:94:42:30:99:
65:00:6e:cd:17:ea:ad:94:e2:04:8d:50:74:ae:4c:92:e5:3c:
3b:56:06:80:aa:20:ae:a0:26:c2:5f:37:8f:28:88:54:3b:15:
10:c6:80:ae:17:7f:2e:66:eb:cd:54:b1:60:4e:5d:24:29:d2:
05:c3:2b:a8:52:a9:03:e7:6d:8c:e7:55:82:b8:98:1d:7d:43:
4d:8b:2f:26:04:c6:21:9a:ec:92:6d:ff:88:3a:24:6b:ce:3c:
f0:d6:17:88:ec:66:b0:21:52:1f:88:1f:e9:67:7d:4e:85:05:
6f:cd:9b:2e:fa:ed:02:a0:72:0d:1d:ee:e1:fb:b5:aa:58:c5:
de:2d:d2:05:11:6d:5d:08:94:d9:ed:96:eb:c0:3c:31:ac:e9:
56:be:b1:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:27:56 2026 by rpki-client