Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
File: sUYBAoOoIC7qo_7zJTTj6X4EB54.mft (raw, json)
Hash identifier: McnI2CPYmNTPFt7FhH7by1HQCDoRSdXb8Hkt81hg6eM=
Subject key identifier: B5:CD:16:EA:B7:7D:A4:E7:38:05:12:09:FB:2A:48:97:81:44:46:2A
Authority key identifier: B1:46:01:02:83:A8:20:2E:EA:A3:FE:F3:25:34:E3:E9:7E:04:07:9E
Certificate issuer: /CN=b146010283a8202eeaa3fef32534e3e97e04079e
Certificate serial: 019D389C2168D93BF69311E178916D025377
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 08:00:49 +0000
Manifest this update: Sun 29 Mar 2026 08:00:49 +0000
Manifest next update: Mon 30 Mar 2026 08:00:49 +0000
Files and hashes: 1: Y8yMvjdM8WzBnbLjMBe-EIHd6sY.roa (hash: EcntA0METUox1iYBkhoXa3famNCFNSmSo3ZvzLXW5TQ=)
2: sUYBAoOoIC7qo_7zJTTj6X4EB54.crl (hash: co1gfjnY7b4clgidEH/Zdz91a7MnuoLkziaPVuJAtAo=)
3: spIlTecfIOkshZMwK9KtOYZfUkI.roa (hash: F/eeG2fLu4g1L7wn7uLLQklSodsS5/Mx2XBm7dOwxcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:21:68:d9:3b:f6:93:11:e1:78:91:6d:02:53:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b146010283a8202eeaa3fef32534e3e97e04079e
Validity
Not Before: Mar 29 08:00:49 2026 GMT
Not After : Mar 30 08:00:49 2026 GMT
Subject: CN=b5cd16eab77da4e738051209fb2a48978144462a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:50:21:38:08:d7:d2:49:30:7b:c2:5f:d2:8f:
72:0c:77:e4:9b:ed:db:a6:99:51:85:04:8b:54:4f:
aa:bb:51:2d:3a:b1:ff:95:7d:62:0e:60:29:e5:a2:
94:16:cb:e8:cb:28:59:47:e8:a3:e8:a0:42:92:38:
de:b0:fe:75:0f:2e:8b:da:15:36:21:78:71:ce:a8:
43:64:1b:06:a6:46:85:11:b3:88:cf:6a:52:64:fe:
45:d4:96:35:45:ad:ad:85:2e:eb:6e:6c:c1:0c:35:
93:91:f5:11:78:7a:e8:e9:6b:8e:9f:c1:85:dd:31:
e1:f6:5b:3e:90:19:5f:30:dd:4b:75:97:72:da:a1:
7c:c9:8d:ce:79:e0:be:33:f5:09:82:3f:a3:35:62:
bc:b0:32:91:db:53:c6:75:cc:77:1d:42:0d:5f:a2:
b8:d4:2a:10:b5:e0:b4:6c:da:c1:e7:cd:b5:94:19:
37:3a:b6:11:41:72:b5:de:89:57:94:e3:7b:84:43:
51:57:c4:68:c4:1c:b8:7e:10:b8:ba:33:3f:25:f9:
55:ac:a1:6b:2f:dc:23:7c:30:6b:5a:e1:f2:ef:6d:
f2:4d:b7:83:3a:8a:92:a5:ba:d1:fa:9b:88:3b:94:
3f:cd:97:a6:57:6c:47:aa:50:99:89:fb:68:00:04:
fb:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:CD:16:EA:B7:7D:A4:E7:38:05:12:09:FB:2A:48:97:81:44:46:2A
X509v3 Authority Key Identifier:
keyid:B1:46:01:02:83:A8:20:2E:EA:A3:FE:F3:25:34:E3:E9:7E:04:07:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:67:45:45:64:ac:1f:8d:81:d2:35:63:89:5c:31:f1:4c:3a:
0e:6f:56:3c:60:e5:04:60:cc:cf:d8:73:97:c2:82:1c:3d:43:
5f:47:6d:40:a4:cf:64:b0:5c:17:1c:9b:4c:e7:4b:9e:60:3f:
ab:a4:20:47:93:45:ab:25:0a:68:bb:3c:d0:f0:8c:f6:4c:e7:
ba:d3:fd:17:71:fe:ff:39:f9:c7:1f:14:fa:f4:b8:4d:57:10:
1d:88:da:c5:c9:9d:16:b0:63:0e:c3:a6:84:11:49:8a:4e:21:
33:f8:50:10:46:36:4f:2e:d7:4a:a6:b3:0b:5b:cf:99:e3:9d:
e5:84:7c:d3:2e:db:f3:54:43:5d:f8:e7:c1:93:15:ec:65:29:
65:23:83:f6:29:85:6d:67:9f:86:3a:fd:c3:a9:82:6c:2a:da:
3c:40:77:c4:cc:c4:cc:42:10:9e:5a:fd:bf:20:eb:b0:47:3e:
3f:62:f0:0f:8a:9e:82:33:ac:7a:44:e6:25:6d:39:e8:82:52:
7c:cb:f3:2d:1b:6f:93:5d:11:de:fa:b3:5c:a3:aa:7f:e2:a4:
64:6b:f7:ca:13:8d:f6:f8:0c:4f:8d:a0:b3:ea:5f:ef:00:da:
cd:54:42:c6:61:b1:f8:83:08:70:18:ab:d4:41:64:0b:42:eb:
b1:c1:60:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:15 2026 by rpki-client