Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft
File: sSUy4p8i-iMdxvyOUw77HHYRngo.mft (raw, json)
Hash identifier: inJn5nqXgXApQr4RAklqDi40YlZ4PanWdI91s7yEm8I=
Subject key identifier: 25:86:0C:72:06:43:0C:3F:15:98:11:AA:5B:37:1A:BB:4B:E6:41:EB
Authority key identifier: B1:25:32:E2:9F:22:FA:23:1D:C6:FC:8E:53:0E:FB:1C:76:11:9E:0A
Certificate issuer: /CN=b12532e29f22fa231dc6fc8e530efb1c76119e0a
Certificate serial: 01A08B9F7AB1D360DA23AE5127AC873284BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sSUy4p8i-iMdxvyOUw77HHYRngo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft
Manifest number: 02EF
Signing time: Thu 10 Sep 2026 14:01:19 +0000
Manifest this update: Thu 10 Sep 2026 14:01:19 +0000
Manifest next update: Fri 11 Sep 2026 14:01:19 +0000
Files and hashes: 1: 25Etx6_KQUT1qjkjo3vSdgOyHEA.asa (hash: GYD2auqrIWxCAdXwTRlw0CXeGugYstxuAXqctHif/nI=)
2: sSUy4p8i-iMdxvyOUw77HHYRngo.crl (hash: wqy2e3O3bNi0pWGRLfHqexMJjgEi25O395vcn1l41Sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft
rsync://rpki.ripe.net/repository/DEFAULT/sSUy4p8i-iMdxvyOUw77HHYRngo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:9f:7a:b1:d3:60:da:23:ae:51:27:ac:87:32:84:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b12532e29f22fa231dc6fc8e530efb1c76119e0a
Validity
Not Before: Sep 10 14:01:19 2026 GMT
Not After : Sep 11 14:01:19 2026 GMT
Subject: CN=25860c7206430c3f159811aa5b371abb4be641eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d2:cd:d3:5f:52:34:1f:03:b5:a7:cc:09:71:
12:38:5b:68:85:47:ca:a8:d7:22:88:ee:98:1f:1c:
cf:9a:22:37:90:04:2f:9a:dc:ea:c3:0e:5b:cb:25:
f4:ac:c1:1d:fb:2f:ed:a9:12:fb:27:1b:b2:dd:56:
61:b1:42:92:9d:71:e7:67:e1:be:22:87:96:b2:36:
6c:47:5b:40:2d:3b:33:72:33:3e:70:7c:06:8f:d6:
b1:b4:9d:5c:59:98:df:28:66:b8:6e:c2:e2:85:c5:
d4:30:4f:d0:b4:5a:98:9b:3c:e8:f3:75:88:93:e7:
14:a8:df:b8:bf:50:2d:57:07:a6:dd:25:52:7a:c7:
7f:8b:c8:9d:04:37:64:25:fa:9a:a8:a6:1d:d4:fb:
e1:ff:7b:88:03:e6:f5:2f:dc:fd:8f:30:33:78:ac:
b5:09:3d:7a:6c:c0:43:6c:27:81:84:17:d6:fc:de:
77:2d:8c:8e:1a:b4:dc:02:00:6c:6c:6d:66:82:e3:
37:87:8a:1f:1b:34:65:8e:ba:bc:9e:2d:1a:a6:5e:
f2:f6:a2:16:40:fd:c3:c9:fd:7d:81:9e:a4:5b:19:
f8:c0:32:a9:e5:2c:85:0a:b3:fc:4c:81:18:c2:4a:
af:ae:7f:4d:51:20:bd:d6:92:e3:f1:a2:71:df:34:
a6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:86:0C:72:06:43:0C:3F:15:98:11:AA:5B:37:1A:BB:4B:E6:41:EB
X509v3 Authority Key Identifier:
keyid:B1:25:32:E2:9F:22:FA:23:1D:C6:FC:8E:53:0E:FB:1C:76:11:9E:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sSUy4p8i-iMdxvyOUw77HHYRngo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:46:78:5d:7e:0e:47:4d:d5:43:dc:ef:9b:af:12:6a:4a:e3:
df:eb:7d:e9:bf:95:cd:cf:d7:c9:c7:f1:ac:62:ff:62:d5:38:
2b:1a:45:3a:ac:5a:ae:38:f2:72:28:0d:b4:57:0f:92:d1:0b:
f6:cf:f5:c9:07:ee:8e:4d:ed:f0:b4:4a:e0:bf:c1:61:52:ca:
c6:ea:a8:15:7f:d8:9f:d4:b6:8f:69:fd:ad:40:c2:18:d6:aa:
db:7f:62:41:15:28:a1:47:27:a3:36:7d:6f:96:ff:6b:d6:5a:
b3:a7:e8:01:7a:71:ec:c1:8d:8d:5c:cf:a3:08:25:b2:35:ac:
d7:70:6e:3f:77:64:29:ef:9c:f9:8b:aa:0e:ba:56:1d:88:6b:
76:92:24:88:3e:3c:07:3e:dd:2a:db:35:33:ab:2d:5c:f8:29:
31:5e:00:3e:45:25:f0:13:0e:69:bd:83:41:3a:e9:bb:e3:94:
ee:ad:e7:6a:09:1e:0a:cb:1a:73:f5:3d:b5:bd:c4:4e:8d:88:
c9:45:d3:93:fb:61:b8:c0:7f:34:d1:ec:84:99:16:ab:29:85:
b8:a5:29:77:c7:5a:08:70:96:dc:a3:e7:eb:a8:f7:e1:ab:9d:
80:33:e6:88:d7:f8:8d:a4:aa:7b:16:78:ab:9d:27:f0:bb:c6:
83:33:81:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCLn3qx02DaI65RJ6yHMoS8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxMjUzMmUyOWYyMmZhMjMxZGM2ZmM4ZTUzMGVmYjFjNzYx
MTllMGEwHhcNMjYwOTEwMTQwMTE5WhcNMjYwOTExMTQwMTE5WjAzMTEwLwYDVQQD
EygyNTg2MGM3MjA2NDMwYzNmMTU5ODExYWE1YjM3MWFiYjRiZTY0MWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdLN019SNB8DtafMCXESOFtohUfK
qNciiO6YHxzPmiI3kAQvmtzqww5byyX0rMEd+y/tqRL7Jxuy3VZhsUKSnXHnZ+G+
IoeWsjZsR1tALTszcjM+cHwGj9axtJ1cWZjfKGa4bsLihcXUME/QtFqYmzzo83WI
k+cUqN+4v1AtVwem3SVSesd/i8idBDdkJfqaqKYd1Pvh/3uIA+b1L9z9jzAzeKy1
CT16bMBDbCeBhBfW/N53LYyOGrTcAgBsbG1mguM3h4ofGzRljrq8ni0apl7y9qIW
QP3Dyf19gZ6kWxn4wDKp5SyFCrP8TIEYwkqvrn9NUSC91pLj8aJx3zSmawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCWGDHIGQww/FZgRqls3GrtL5kHrMB8GA1UdIwQY
MBaAFLElMuKfIvojHcb8jlMO+xx2EZ4KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1NVeTRwOGktaU1keHZ5T1V3NzdISFlSbmdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS80NzJkZDQtMTlhNi00NDBmLWE4N2Qt
OTMzZWZiZDc3ZjViLzEvc1NVeTRwOGktaU1keHZ5T1V3NzdISFlSbmdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS80NzJkZDQtMTlhNi00NDBmLWE4N2QtOTMzZWZiZDc3ZjVi
LzEvc1NVeTRwOGktaU1keHZ5T1V3NzdISFlSbmdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPUZ4XX4O
R03VQ9zvm68Sakrj3+t96b+Vzc/XycfxrGL/YtU4KxpFOqxarjjycigNtFcPktEL
9s/1yQfujk3t8LRK4L/BYVLKxuqoFX/Yn9S2j2n9rUDCGNaq239iQRUooUcnozZ9
b5b/a9Zas6foAXpx7MGNjVzPowglsjWs13BuP3dkKe+c+YuqDrpWHYhrdpIkiD48
Bz7dKts1M6stXPgpMV4APkUl8BMOab2DQTrpu+OU7q3nagkeCssac/U9tb3ETo2I
yUXTk/thuMB/NNHshJkWqymFuKUpd8daCHCW3KPn66j34audgDPmiNf4jaSqexZ4
q50n8LvGgzOB1A==
-----END CERTIFICATE-----
Generated at Fri Sep 11 00:53:45 2026 by rpki-client