Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
File: sUYBAoOoIC7qo_7zJTTj6X4EB54.mft (raw, json)
Hash identifier: +dOY2Nst9yCrUv3sIiFwNcszBjz+9owclGsehJSnf2o=
Subject key identifier: 31:D2:3C:15:EC:C3:18:37:5F:64:BE:FD:DE:BF:27:31:5C:92:2D:ED
Authority key identifier: B1:46:01:02:83:A8:20:2E:EA:A3:FE:F3:25:34:E3:E9:7E:04:07:9E
Certificate issuer: /CN=b146010283a8202eeaa3fef32534e3e97e04079e
Certificate serial: 01A00326A3AE1FC3AE047CB51BB782BE6B9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
Manifest number: 19FF
Signing time: Sat 15 Aug 2026 02:00:58 +0000
Manifest this update: Sat 15 Aug 2026 02:00:58 +0000
Manifest next update: Sun 16 Aug 2026 02:00:58 +0000
Files and hashes: 1: Y8yMvjdM8WzBnbLjMBe-EIHd6sY.roa (hash: EcntA0METUox1iYBkhoXa3famNCFNSmSo3ZvzLXW5TQ=)
2: sUYBAoOoIC7qo_7zJTTj6X4EB54.crl (hash: /3dpsj3MK8ZouK99xNUw+HUTEiQQLd4YShqmdRg3WGs=)
3: spIlTecfIOkshZMwK9KtOYZfUkI.roa (hash: F/eeG2fLu4g1L7wn7uLLQklSodsS5/Mx2XBm7dOwxcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:26:a3:ae:1f:c3:ae:04:7c:b5:1b:b7:82:be:6b:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b146010283a8202eeaa3fef32534e3e97e04079e
Validity
Not Before: Aug 15 02:00:58 2026 GMT
Not After : Aug 16 02:00:58 2026 GMT
Subject: CN=31d23c15ecc318375f64befddebf27315c922ded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cd:f4:9b:cc:15:b1:b3:47:67:30:b8:f8:50:
b4:12:36:c2:da:aa:f7:42:a9:ae:29:b7:c5:d1:6f:
1d:e0:23:9b:22:6b:66:15:cc:09:05:59:fe:0a:cb:
94:08:de:75:ad:14:a4:49:e8:11:ab:36:67:64:c5:
6a:a1:41:58:8e:4a:02:69:60:6a:70:00:cc:f9:9d:
af:4a:c1:0c:5b:f6:9c:50:a1:5a:8a:9a:47:a0:d6:
3a:12:db:56:a3:09:1f:50:ac:9d:79:05:59:ab:df:
f0:c0:de:57:b7:c1:af:7e:bd:0b:36:d2:b8:c0:51:
d6:1b:af:56:0b:8c:61:8a:3e:62:02:c7:a5:32:26:
7c:eb:7d:f5:e5:20:21:86:b0:66:7f:32:ae:3c:b1:
b4:47:3e:ce:cc:1c:2b:85:44:63:a7:e2:a0:3c:18:
fb:dd:75:54:67:95:68:eb:a2:01:49:22:85:cd:01:
70:6f:f3:ec:64:cf:c3:2f:32:c3:25:64:2b:75:bb:
ef:72:ad:85:bf:72:9c:57:e7:4a:a0:81:0d:19:5a:
5a:36:53:4b:1b:14:44:76:06:dc:7b:c4:06:5a:6b:
c1:aa:c6:25:aa:37:57:90:a6:2f:e5:b5:1c:83:bd:
85:81:08:30:0b:a0:15:cf:88:ba:37:1e:18:90:bd:
7e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:D2:3C:15:EC:C3:18:37:5F:64:BE:FD:DE:BF:27:31:5C:92:2D:ED
X509v3 Authority Key Identifier:
keyid:B1:46:01:02:83:A8:20:2E:EA:A3:FE:F3:25:34:E3:E9:7E:04:07:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:29:fe:a6:cb:38:89:ff:44:27:7b:57:29:eb:39:6e:aa:d9:
83:0a:3b:d4:db:ef:11:54:32:5c:41:f8:88:66:98:65:39:80:
b7:b7:94:61:99:18:5c:20:1e:2e:e1:aa:55:27:42:7a:33:9f:
52:de:17:b0:d6:d9:91:38:e1:f7:2c:5a:68:92:f5:3c:8d:ed:
af:02:41:44:f1:05:0d:ce:13:3a:d6:4e:ec:85:d5:49:f2:82:
9b:1e:a9:7f:02:5f:81:77:22:29:e3:2d:ad:57:f4:b1:91:99:
e7:02:91:d7:9d:d0:e4:0d:ce:cd:a1:78:b5:7c:e7:ee:82:1b:
07:e9:44:20:7b:cc:b9:0c:88:41:43:a1:b5:cb:07:f6:22:57:
ab:af:09:76:ad:c6:7d:12:f0:90:b1:0a:f1:05:72:6f:be:a2:
ec:75:3f:26:30:4e:62:9d:5d:38:e8:6f:de:ba:b4:e2:d9:03:
0c:6e:21:b7:20:d7:e6:d2:ba:48:fb:00:22:c0:2c:40:68:01:
48:b8:75:2b:9b:e3:28:82:a9:94:ce:17:29:8a:f7:e7:66:82:
df:a3:6d:28:95:b0:d1:cf:83:10:78:84:ed:5b:30:f3:20:de:
21:77:d0:2b:47:d9:43:3a:df:bd:27:a4:9b:9e:46:9b:06:db:
ca:40:29:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:22:52 2026 by rpki-client