Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft
File: sSUy4p8i-iMdxvyOUw77HHYRngo.mft (raw, json)
Hash identifier: p/1tFuNmrOq2RfLZQmKaJECuzw8yq9b3nIA1ScxW7Cg=
Subject key identifier: 41:CC:20:8C:64:20:21:76:91:39:3F:15:D6:D8:22:0F:B9:BC:50:D0
Authority key identifier: B1:25:32:E2:9F:22:FA:23:1D:C6:FC:8E:53:0E:FB:1C:76:11:9E:0A
Certificate issuer: /CN=b12532e29f22fa231dc6fc8e530efb1c76119e0a
Certificate serial: 019FA1F274DF74C3686B5527606DDCD71939
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sSUy4p8i-iMdxvyOUw77HHYRngo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft
Manifest number: 0276
Signing time: Mon 27 Jul 2026 05:00:48 +0000
Manifest this update: Mon 27 Jul 2026 05:00:48 +0000
Manifest next update: Tue 28 Jul 2026 05:00:48 +0000
Files and hashes: 1: 25Etx6_KQUT1qjkjo3vSdgOyHEA.asa (hash: GYD2auqrIWxCAdXwTRlw0CXeGugYstxuAXqctHif/nI=)
2: sSUy4p8i-iMdxvyOUw77HHYRngo.crl (hash: qoR1KJwR5q03a1TxenxxxXLCH5S44aO7QYRyr4ykmzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft
rsync://rpki.ripe.net/repository/DEFAULT/sSUy4p8i-iMdxvyOUw77HHYRngo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:f2:74:df:74:c3:68:6b:55:27:60:6d:dc:d7:19:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b12532e29f22fa231dc6fc8e530efb1c76119e0a
Validity
Not Before: Jul 27 05:00:48 2026 GMT
Not After : Jul 28 05:00:48 2026 GMT
Subject: CN=41cc208c6420217691393f15d6d8220fb9bc50d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:42:98:0a:db:af:3c:4a:0a:0a:7d:62:52:2c:
f3:cc:92:1c:4b:78:34:39:ce:7b:4f:f9:4c:58:9a:
b9:07:83:37:a3:b9:4c:8b:92:de:22:94:e1:f5:1a:
19:5d:99:8b:c7:f6:c0:9b:14:a5:84:16:df:f1:7d:
31:fe:e2:18:0a:3b:22:c4:c9:13:1a:d0:00:91:03:
98:63:e1:29:55:45:60:b1:c8:96:4f:e5:f3:34:d7:
92:67:bc:04:9d:f4:4d:6e:4f:0a:f0:01:9b:d3:ff:
54:45:ef:35:90:e3:a3:dd:60:75:e1:3f:21:9f:30:
4c:75:8f:d4:05:02:95:c0:5b:fb:4b:41:5f:a9:91:
e5:85:9a:91:94:a6:ca:bf:a4:cd:e4:0f:bf:af:14:
e1:df:4c:9a:97:43:44:d1:f3:04:04:be:2a:61:0f:
56:01:36:ea:8f:35:f6:5e:ac:81:7b:22:2c:90:ae:
7c:f3:03:54:c6:4a:98:78:d8:13:9d:70:cd:7f:65:
34:ad:50:0f:cb:80:6e:3d:db:81:dc:7f:27:01:f8:
1c:00:46:97:3d:0f:de:0b:8a:17:61:42:7b:36:aa:
d0:f2:4d:68:bc:5b:44:43:f0:2b:af:c3:24:5c:23:
87:5e:81:e3:18:cc:20:8a:81:0f:ca:54:ae:40:87:
a4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:CC:20:8C:64:20:21:76:91:39:3F:15:D6:D8:22:0F:B9:BC:50:D0
X509v3 Authority Key Identifier:
keyid:B1:25:32:E2:9F:22:FA:23:1D:C6:FC:8E:53:0E:FB:1C:76:11:9E:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sSUy4p8i-iMdxvyOUw77HHYRngo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:bb:cd:26:44:90:c7:82:00:11:d1:df:a4:37:9a:ec:1c:0e:
cc:ed:26:f5:f6:34:b1:ca:73:58:38:28:e2:8e:b1:61:89:0f:
e4:c0:aa:b3:df:7e:1b:0c:eb:14:ed:7b:7b:1a:8c:81:db:07:
31:30:b3:c7:2d:c5:39:f2:31:b3:8c:07:b9:2c:b5:b9:93:63:
1f:3b:12:a3:e6:11:7f:c7:60:5a:f1:f1:06:4a:15:cb:e4:a8:
b4:57:4f:2e:26:ea:38:46:0f:f6:fd:0c:94:e4:41:93:45:43:
12:62:3f:f0:26:75:54:73:07:78:f4:cc:b2:9b:c2:35:00:c1:
a5:c8:b1:31:dc:ce:74:88:c9:6f:ba:db:7a:59:89:7c:fe:18:
67:6d:ae:b8:7f:4d:cc:4f:56:bc:a5:a0:0e:4b:37:9d:56:43:
88:01:a6:58:15:7c:be:7b:66:0d:c5:f3:b4:34:ea:61:04:7f:
a4:03:fe:b9:b6:d8:59:5c:08:4e:25:13:3e:aa:ac:f8:77:a4:
d8:05:c3:22:e0:5e:0b:61:61:60:7f:91:0a:b4:ae:e4:95:1d:
af:08:d2:e9:18:34:ab:eb:c1:aa:19:86:be:0d:44:9c:5e:bc:
fd:76:fd:80:b8:3b:09:f2:ba:3a:f5:ef:6a:1c:07:0e:87:52:
89:88:25:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 12:09:04 2026 by rpki-client