Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft
File: sSUy4p8i-iMdxvyOUw77HHYRngo.mft (raw, json)
Hash identifier: c1Q82PCux0lCpoSYwa7rxcwhWxKXCOp7mUtiYZEP4ns=
Subject key identifier: 0B:21:08:1A:3D:13:E2:30:49:2D:4C:44:35:0C:6A:80:AF:99:1F:04
Authority key identifier: B1:25:32:E2:9F:22:FA:23:1D:C6:FC:8E:53:0E:FB:1C:76:11:9E:0A
Certificate issuer: /CN=b12532e29f22fa231dc6fc8e530efb1c76119e0a
Certificate serial: 019DCFE39DAE8133A0A16C7A99EBFB883668
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sSUy4p8i-iMdxvyOUw77HHYRngo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft
Manifest number: 0184
Signing time: Mon 27 Apr 2026 17:01:33 +0000
Manifest this update: Mon 27 Apr 2026 17:01:33 +0000
Manifest next update: Tue 28 Apr 2026 17:01:33 +0000
Files and hashes: 1: FRuPa3TQLmOFKS43Th1eCNTwaoI.asa (hash: 27T9GCi2bfzmEH7qtY+uT56lMZiqysQt1tGrtXQaUjY=)
2: sSUy4p8i-iMdxvyOUw77HHYRngo.crl (hash: qwaIRuo0T1w8vvbY9dCv3Ya41GDM3dYfRBiQ1iJZl1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft
rsync://rpki.ripe.net/repository/DEFAULT/sSUy4p8i-iMdxvyOUw77HHYRngo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:27:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:e3:9d:ae:81:33:a0:a1:6c:7a:99:eb:fb:88:36:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b12532e29f22fa231dc6fc8e530efb1c76119e0a
Validity
Not Before: Apr 27 17:01:33 2026 GMT
Not After : Apr 28 17:01:33 2026 GMT
Subject: CN=0b21081a3d13e230492d4c44350c6a80af991f04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:11:34:97:54:43:72:6b:6d:eb:c2:f3:91:37:
59:aa:b7:8e:ce:ac:3b:a8:75:2b:60:43:f8:c5:ba:
5f:cd:59:92:05:20:3d:1a:84:11:e2:8b:de:d6:f0:
ff:6e:27:a9:80:8f:b8:68:0c:ec:71:df:14:9a:72:
3c:63:e2:d5:63:4f:b0:44:b8:cb:b5:45:3c:80:15:
44:7e:da:57:14:1b:46:43:9d:3b:38:ca:d6:62:04:
c2:87:84:41:ab:98:ea:84:02:eb:6a:4c:54:9f:39:
7d:6f:e2:80:d1:f1:ba:2f:5e:1b:09:e0:19:ee:68:
b9:61:3a:93:ce:81:c9:03:d5:c3:b6:99:d4:64:f4:
c0:bb:bb:a7:68:5d:6f:17:0a:17:b7:40:ba:a6:72:
03:9c:1f:34:63:f8:4b:88:c5:e4:ff:12:07:93:64:
1d:fc:dd:07:6c:58:31:46:fc:cb:2a:0e:23:6f:92:
7e:76:ba:f7:11:67:fe:c0:87:89:6e:08:8b:96:dc:
57:2e:a4:c8:7d:a9:19:e8:11:66:91:8d:f7:4e:d4:
cb:a2:8d:23:34:bf:ee:e0:b7:38:9d:59:d5:ae:9a:
ff:04:03:d2:13:27:ef:e5:22:25:44:0a:45:a1:71:
a5:7b:76:32:e2:59:d2:0e:c0:39:ea:57:a8:85:6f:
e3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:21:08:1A:3D:13:E2:30:49:2D:4C:44:35:0C:6A:80:AF:99:1F:04
X509v3 Authority Key Identifier:
keyid:B1:25:32:E2:9F:22:FA:23:1D:C6:FC:8E:53:0E:FB:1C:76:11:9E:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sSUy4p8i-iMdxvyOUw77HHYRngo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:a0:2c:54:6b:41:10:c2:c0:03:9e:97:db:c3:21:71:40:b4:
df:d2:20:51:7e:9b:59:86:91:6e:4c:dd:7e:24:ef:39:e0:09:
ee:0b:27:d3:e7:67:2f:9e:37:ed:6d:1a:a8:10:94:80:72:f9:
e0:e4:29:9a:3c:1b:aa:cb:f1:59:4d:0d:54:40:23:a3:18:3e:
73:98:71:3d:88:3a:dd:05:27:62:cf:d3:97:8d:98:33:95:ec:
b3:d9:ce:a5:d0:99:eb:a7:8f:12:d2:f2:f2:e9:aa:b2:59:7b:
14:db:ee:65:ff:cf:7b:d8:7d:70:f6:00:2d:ec:a4:df:02:5d:
b1:ed:ef:a7:46:a3:50:20:ec:62:a4:28:7b:cf:a8:1b:30:e0:
d6:70:6f:d4:eb:d5:48:e9:97:b6:f2:3f:ce:b3:30:1f:f0:05:
9e:12:43:24:db:6a:19:49:ad:e9:87:5d:f0:4f:f8:ee:58:29:
b4:50:ad:6f:f8:9d:01:6b:b1:88:f5:d3:d7:3a:83:2f:9d:6f:
37:35:62:74:4d:f9:11:3b:1a:64:54:51:f3:d2:37:77:1c:7f:
3f:a3:b5:84:ac:22:82:af:10:1f:1f:e6:e2:c2:b3:d8:bf:e5:
bb:b3:64:8f:9b:21:85:30:73:f5:d0:a8:ff:1e:92:67:ed:69:
b7:01:ef:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:07:25 2026 by rpki-client