Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft
File: sSUy4p8i-iMdxvyOUw77HHYRngo.mft (raw, json)
Hash identifier: tOMbrjmJNGcSnyux65pbGDdqwXZu+JuU4Kexiah0eHM=
Subject key identifier: 89:8C:4E:49:8D:FA:A1:3B:D4:E9:F6:D3:EC:7D:79:27:BA:D5:76:1D
Authority key identifier: B1:25:32:E2:9F:22:FA:23:1D:C6:FC:8E:53:0E:FB:1C:76:11:9E:0A
Certificate issuer: /CN=b12532e29f22fa231dc6fc8e530efb1c76119e0a
Certificate serial: 019EB98F5009F86BB859F3F716D7EB917B2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sSUy4p8i-iMdxvyOUw77HHYRngo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft
Manifest number: 01FD
Signing time: Fri 12 Jun 2026 02:00:37 +0000
Manifest this update: Fri 12 Jun 2026 02:00:37 +0000
Manifest next update: Sat 13 Jun 2026 02:00:37 +0000
Files and hashes: 1: FRuPa3TQLmOFKS43Th1eCNTwaoI.asa (hash: 27T9GCi2bfzmEH7qtY+uT56lMZiqysQt1tGrtXQaUjY=)
2: sSUy4p8i-iMdxvyOUw77HHYRngo.crl (hash: 0QvoioBQqGumJTV1rXbJ3Kv107op1BUmgDHHARi+WY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft
rsync://rpki.ripe.net/repository/DEFAULT/sSUy4p8i-iMdxvyOUw77HHYRngo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:8f:50:09:f8:6b:b8:59:f3:f7:16:d7:eb:91:7b:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b12532e29f22fa231dc6fc8e530efb1c76119e0a
Validity
Not Before: Jun 12 02:00:37 2026 GMT
Not After : Jun 13 02:00:37 2026 GMT
Subject: CN=898c4e498dfaa13bd4e9f6d3ec7d7927bad5761d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5b:6c:0b:e8:c9:51:43:3b:b8:d2:43:6c:dd:
ea:d1:c6:2e:d3:e9:b0:37:58:75:01:5d:17:27:77:
dc:70:bd:03:a3:00:49:50:cd:78:29:7e:1f:b9:2b:
02:7b:7f:19:a7:a1:5a:79:c4:5f:88:18:73:52:52:
ad:3a:6a:c3:57:a8:8d:40:bf:cb:d3:5a:1a:91:0e:
f2:ae:7c:44:14:db:26:60:84:0d:68:17:32:81:f7:
6c:7c:dc:72:3c:7b:01:e2:2e:c9:81:16:4e:db:73:
51:50:9c:82:eb:65:91:e6:b9:56:81:3e:8c:cb:7b:
ee:f4:51:9f:90:7d:57:98:db:7e:81:e4:35:ba:52:
94:8b:28:c2:e3:ac:44:83:5e:fd:4d:5d:60:4f:bf:
f4:ed:87:0e:02:c2:0f:3a:bf:50:70:e4:77:7b:61:
78:7d:c2:2a:36:ee:88:63:df:4d:59:1e:e3:98:59:
f1:9d:80:60:a6:2f:dd:a0:84:e5:f2:8a:aa:28:8b:
d5:53:ff:15:b2:5b:d5:c7:e6:3e:ce:08:f7:25:bf:
23:1e:87:07:ce:59:6b:a4:76:94:9c:bb:db:13:d5:
98:55:8e:37:fd:36:57:99:2b:d8:e8:e9:99:4e:b9:
e7:f9:b0:a5:e0:2f:24:0c:6f:f3:91:c4:28:39:aa:
51:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:8C:4E:49:8D:FA:A1:3B:D4:E9:F6:D3:EC:7D:79:27:BA:D5:76:1D
X509v3 Authority Key Identifier:
keyid:B1:25:32:E2:9F:22:FA:23:1D:C6:FC:8E:53:0E:FB:1C:76:11:9E:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sSUy4p8i-iMdxvyOUw77HHYRngo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:34:39:2a:67:80:d4:93:a8:1a:3c:b8:c0:a3:2d:7f:9f:08:
fc:48:96:9a:1f:8b:a1:93:08:58:33:26:91:1e:e7:57:3f:cc:
39:45:4e:ca:e9:59:54:10:96:7f:2f:da:d4:c2:f4:97:6d:3c:
b4:29:6b:b6:04:bf:8d:68:00:44:b7:d9:e5:0e:29:99:b0:f2:
12:ac:ea:48:e6:c7:13:d0:e5:b8:a7:67:e3:b5:09:6f:eb:79:
a1:59:52:35:64:78:2b:6b:1f:ef:1e:b4:b2:5f:39:88:9d:55:
d3:e3:2f:f8:c6:28:7c:65:04:1f:17:6f:81:a6:29:00:d5:00:
33:e8:da:e5:df:8c:96:e8:50:24:73:37:3c:33:d2:f4:48:44:
79:c8:a6:a3:7e:77:c4:37:db:6a:47:ad:9f:29:9e:ea:76:f8:
44:10:ea:3d:84:6e:2e:cd:f9:c8:3d:4f:fd:f1:92:c0:e6:a8:
6c:02:7c:71:3c:1a:ac:69:53:48:e7:81:2c:f2:62:fa:b5:f4:
5d:a5:b8:6f:03:38:77:60:1e:f6:5b:b6:c9:a8:c4:3e:5a:34:
0e:6c:37:c9:9e:dc:b5:fe:70:ab:f5:60:c1:c8:ec:59:f7:f9:
0e:ef:58:97:48:4c:1a:69:1c:3d:c4:73:d3:c1:eb:5e:f4:87:
a6:db:4c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:11:56 2026 by rpki-client