Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft
File: sSUy4p8i-iMdxvyOUw77HHYRngo.mft (raw, json)
Hash identifier: /4QCUyy2RFYoeAzkeAyIXAuDCYfxZrqJRwa0tw9a9GI=
Subject key identifier: 97:B4:4D:1F:E0:18:2A:9C:E2:77:17:D3:F8:E0:49:37:9C:56:D8:49
Authority key identifier: B1:25:32:E2:9F:22:FA:23:1D:C6:FC:8E:53:0E:FB:1C:76:11:9E:0A
Certificate issuer: /CN=b12532e29f22fa231dc6fc8e530efb1c76119e0a
Certificate serial: 01A17D05650ABA9B2FD34781EF4D993999F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sSUy4p8i-iMdxvyOUw77HHYRngo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft
Manifest number: 036C
Signing time: Tue 27 Oct 2026 11:01:07 +0000
Manifest this update: Tue 27 Oct 2026 11:01:07 +0000
Manifest next update: Wed 28 Oct 2026 11:01:07 +0000
Files and hashes: 1: 25Etx6_KQUT1qjkjo3vSdgOyHEA.asa (hash: GYD2auqrIWxCAdXwTRlw0CXeGugYstxuAXqctHif/nI=)
2: sSUy4p8i-iMdxvyOUw77HHYRngo.crl (hash: yY1PQe1h1XiIgVztGy1cTV6rHEArwk9tID8MxOgZhp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft
rsync://rpki.ripe.net/repository/DEFAULT/sSUy4p8i-iMdxvyOUw77HHYRngo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:05:65:0a:ba:9b:2f:d3:47:81:ef:4d:99:39:99:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b12532e29f22fa231dc6fc8e530efb1c76119e0a
Validity
Not Before: Oct 27 11:01:07 2026 GMT
Not After : Oct 28 11:01:07 2026 GMT
Subject: CN=97b44d1fe0182a9ce27717d3f8e049379c56d849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:2d:54:62:96:96:1f:96:2e:8c:42:89:db:40:
d7:b2:ed:c3:3d:f5:9f:65:5d:43:87:57:f9:fd:f6:
07:05:09:dc:ce:6d:8d:92:c1:ef:94:b0:79:55:c6:
25:f6:a7:20:97:1a:1c:92:b3:e5:32:80:27:5d:c7:
8c:44:d5:18:0b:fd:6c:49:59:5c:91:45:74:89:e3:
85:7f:93:85:97:bb:3b:eb:af:bb:c3:66:7c:8d:d8:
5a:45:6f:8a:87:3c:32:49:1d:e2:c5:57:14:8e:41:
47:fb:69:37:89:ee:36:df:02:95:19:2a:fa:05:39:
43:bc:13:b3:b7:04:9e:83:ac:a4:94:f4:d0:36:e3:
b8:46:0e:95:8f:e0:3f:27:a3:89:0a:de:c4:1e:91:
e2:3a:e5:9c:76:55:5c:5c:19:cd:9b:9a:de:a7:44:
c9:a2:63:95:b0:8f:0b:f7:23:3b:29:f6:ad:b9:44:
1c:d1:64:78:e3:07:26:4d:53:a4:47:5b:18:a5:0d:
76:14:93:40:4e:b0:d0:3d:2f:43:07:64:61:b0:e1:
51:d5:f5:8a:d4:35:9a:37:05:b7:46:23:87:bb:33:
a2:d3:16:28:65:ff:b4:39:90:87:84:b8:b7:34:01:
44:3b:2a:50:fe:74:5b:b0:1f:c3:f0:4a:56:ff:e7:
e6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B4:4D:1F:E0:18:2A:9C:E2:77:17:D3:F8:E0:49:37:9C:56:D8:49
X509v3 Authority Key Identifier:
keyid:B1:25:32:E2:9F:22:FA:23:1D:C6:FC:8E:53:0E:FB:1C:76:11:9E:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sSUy4p8i-iMdxvyOUw77HHYRngo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:05:89:86:88:92:d6:05:63:4a:41:a0:c5:ee:d7:eb:17:9e:
31:b1:68:62:42:09:5a:1c:60:46:60:f4:83:ed:02:aa:4a:30:
9a:af:29:d0:bf:c7:53:3c:b8:b7:e0:d7:a9:37:42:4e:8a:9d:
fd:51:b7:a0:02:30:36:f6:04:c9:0e:24:5c:18:34:74:b8:b7:
41:6c:be:9c:da:95:70:da:8a:88:9a:b3:c9:db:61:6d:03:10:
b9:09:7e:8d:6e:d2:54:08:c0:55:cb:e0:18:7b:19:00:10:f9:
d2:22:ff:df:fa:af:6a:e1:2d:e5:4a:03:a1:b2:c9:0b:96:32:
bd:98:18:b4:a5:9a:36:4f:46:ef:76:c5:40:82:29:a8:b9:89:
75:bb:9e:26:c3:8f:61:99:66:ab:93:9d:42:5f:1f:ad:43:7f:
cc:1b:ce:d7:62:f3:9a:2e:ce:64:90:49:48:de:e4:59:db:85:
a3:d7:c0:16:2d:37:fc:56:b4:08:d0:c4:b4:cf:6a:a5:5d:4e:
ae:ec:54:f4:de:07:29:c1:b7:bf:a4:78:b6:aa:58:2c:7b:52:
c5:f6:ce:a1:86:67:09:a5:e7:f0:f4:f4:59:12:3c:f9:ac:1d:
40:0c:01:36:5b:3b:a3:68:54:dc:6c:30:6b:00:64:a7:4f:68:
de:26:27:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:42:10 2026 by rpki-client