Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft
File: sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft (raw, json)
Hash identifier: uesia+eFMfK/risAdMzEm0seuAOrwMZpMGfnX8fsFTU=
Subject key identifier: DD:37:47:94:20:FA:21:FF:6A:2C:B6:8B:75:0C:4E:52:28:CD:94:E5
Authority key identifier: B0:D6:2D:16:66:C5:C4:D1:92:18:35:31:58:4A:FD:72:BE:D0:84:85
Certificate issuer: /CN=b0d62d1666c5c4d192183531584afd72bed08485
Certificate serial: 01A0035D90CF64DE344E56B24B415FEA56C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sNYtFmbFxNGSGDUxWEr9cr7QhIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft
Manifest number: 1A04
Signing time: Sat 15 Aug 2026 03:00:58 +0000
Manifest this update: Sat 15 Aug 2026 03:00:58 +0000
Manifest next update: Sun 16 Aug 2026 03:00:58 +0000
Files and hashes: 1: 6Ie5sPRwouKDZ63tHw4hyjJqq10.roa (hash: XieQfcrAZvNQQrTrpSeqvq6G/q8IwApTZ6vvc3HLXb0=)
2: sNYtFmbFxNGSGDUxWEr9cr7QhIU.crl (hash: trIK9x0TeVSnohws+MQKiO0Zho4w39CtwJaX6hS1CM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sNYtFmbFxNGSGDUxWEr9cr7QhIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:5d:90:cf:64:de:34:4e:56:b2:4b:41:5f:ea:56:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0d62d1666c5c4d192183531584afd72bed08485
Validity
Not Before: Aug 15 03:00:58 2026 GMT
Not After : Aug 16 03:00:58 2026 GMT
Subject: CN=dd37479420fa21ff6a2cb68b750c4e5228cd94e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:47:37:2b:3a:7b:51:00:83:a3:80:60:d4:28:
ff:59:e0:fb:bb:66:c9:de:82:20:f9:aa:15:27:41:
b1:9f:86:be:fe:dc:80:48:11:f9:8c:5e:ba:7d:4f:
06:06:74:44:3e:b5:d4:05:08:37:40:8e:0b:95:f7:
88:85:5b:92:99:84:39:6e:74:60:f0:fd:89:85:f4:
ca:c8:58:87:50:59:fe:8e:3f:6f:15:5a:ea:51:70:
57:75:8d:93:a8:ab:d5:99:0c:b7:14:92:e8:f1:8b:
5d:21:ad:94:83:73:4a:1f:e3:9a:9f:84:ec:d5:61:
a2:b7:bb:2f:38:60:6f:ce:7f:53:29:76:bf:c6:43:
0c:5b:03:38:18:7a:dc:4a:91:c3:e3:00:21:31:68:
99:ac:04:2b:62:95:a7:95:b8:db:fb:40:83:7f:da:
67:0d:d9:26:90:08:d4:67:11:7f:e2:2f:43:b7:b9:
2d:c9:f4:a8:6a:ec:5d:77:b9:68:af:12:7b:1e:5e:
98:d6:40:8a:69:5c:16:10:06:e2:9e:85:e2:cd:ef:
1f:ef:66:ea:ff:f9:f8:cb:8f:e7:1d:ab:11:88:6f:
0f:62:da:fc:59:57:62:79:6d:b7:9c:a5:2b:d5:c9:
0f:a2:11:9b:0e:e3:d9:da:09:63:74:78:42:14:f7:
29:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:37:47:94:20:FA:21:FF:6A:2C:B6:8B:75:0C:4E:52:28:CD:94:E5
X509v3 Authority Key Identifier:
keyid:B0:D6:2D:16:66:C5:C4:D1:92:18:35:31:58:4A:FD:72:BE:D0:84:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sNYtFmbFxNGSGDUxWEr9cr7QhIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:90:89:cc:24:b1:30:c3:27:0d:c6:36:f2:f2:5e:7c:d3:01:
22:06:5c:17:fe:4e:1f:b8:dc:22:c9:2d:62:66:f7:8a:e6:53:
bc:fe:6b:35:10:0b:f8:9a:81:35:73:4e:c9:2f:0f:12:54:1a:
2e:31:db:2d:00:a8:91:22:44:04:7f:33:45:43:2e:80:9c:7c:
00:a5:97:d3:60:d1:b7:5d:96:fe:15:43:2b:84:26:cf:55:2d:
0c:11:32:d1:35:85:63:1b:5c:a2:be:08:5f:20:13:fa:12:e1:
5b:3f:04:59:89:bc:f8:7f:36:9d:a3:7a:66:8d:65:aa:c1:3d:
88:d4:bf:05:d8:c2:59:b5:c9:fc:47:19:3e:41:cb:8b:f9:a8:
14:56:26:b8:8c:03:81:0d:82:bc:f0:66:26:a8:be:e5:54:75:
79:c0:fc:53:c3:2e:97:28:18:8c:f9:56:fb:42:c6:b4:b8:70:
c0:0f:c3:a2:e1:e4:bc:22:24:d3:6a:d1:94:e6:7d:e8:9a:b5:
11:f1:49:25:d6:ce:5d:c1:ef:a2:c5:23:89:d6:62:37:a9:b1:
67:ff:65:bd:a6:7e:b1:d5:0b:e2:7d:00:99:73:91:fe:5f:f4:
9a:4d:af:dc:15:b6:22:58:f7:a4:4b:50:c8:7d:8d:1e:10:7f:
52:ab:0e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 08:43:53 2026 by rpki-client