Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
File: sUYBAoOoIC7qo_7zJTTj6X4EB54.mft (raw, json)
Hash identifier: k0UVLnAWWC1+vTeCKP+wJweVtQcItW3os+p0qN3plbQ=
Subject key identifier: 45:A8:6D:B9:68:33:D5:DA:D5:8C:B6:05:29:81:30:06:92:A2:3B:E5
Authority key identifier: B1:46:01:02:83:A8:20:2E:EA:A3:FE:F3:25:34:E3:E9:7E:04:07:9E
Certificate issuer: /CN=b146010283a8202eeaa3fef32534e3e97e04079e
Certificate serial: 01A12C8DF7E2BF1E05D094DEAB59833FCAB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
Manifest number: 1A99
Signing time: Sun 11 Oct 2026 20:01:03 +0000
Manifest this update: Sun 11 Oct 2026 20:01:03 +0000
Manifest next update: Mon 12 Oct 2026 20:01:03 +0000
Files and hashes: 1: Y8yMvjdM8WzBnbLjMBe-EIHd6sY.roa (hash: EcntA0METUox1iYBkhoXa3famNCFNSmSo3ZvzLXW5TQ=)
2: sUYBAoOoIC7qo_7zJTTj6X4EB54.crl (hash: 14VWS1570SJJI3hbLG0SrxcjIvWKdS9OQ2XLCQELRy0=)
3: spIlTecfIOkshZMwK9KtOYZfUkI.roa (hash: F/eeG2fLu4g1L7wn7uLLQklSodsS5/Mx2XBm7dOwxcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 20:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:8d:f7:e2:bf:1e:05:d0:94:de:ab:59:83:3f:ca:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b146010283a8202eeaa3fef32534e3e97e04079e
Validity
Not Before: Oct 11 20:01:03 2026 GMT
Not After : Oct 12 20:01:03 2026 GMT
Subject: CN=45a86db96833d5dad58cb6052981300692a23be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:43:62:ce:a5:30:b0:8c:1c:2c:9b:a4:5a:79:
ed:83:51:fc:10:14:c8:12:0d:e2:5e:ef:fc:16:e4:
93:ba:9a:50:b0:b5:c7:d6:eb:ff:24:a5:3b:7c:90:
91:6c:e4:5e:6a:31:c9:47:41:43:72:0e:b9:fe:35:
b2:1f:3b:8b:1b:6d:1b:41:f8:d2:26:b3:f5:c0:ec:
39:29:ca:89:8f:c8:5e:4c:24:1f:e1:c3:ea:8b:09:
eb:12:a5:2b:e4:18:76:32:f5:40:85:f6:12:45:47:
e5:34:d3:b9:0f:7c:28:d4:66:d7:44:3e:83:39:15:
2c:c4:21:36:ed:3c:07:36:5b:6f:63:d8:f1:a2:87:
66:bf:fd:e7:dd:fe:7a:1f:a6:5b:dc:37:c2:fe:f8:
5a:cf:9e:86:8a:dc:a7:a1:a6:6d:6b:bd:27:58:43:
47:38:a0:a5:61:4c:83:51:4a:a4:33:9e:dd:b1:29:
20:1b:8b:f7:3d:69:6f:8c:50:32:da:0b:f6:9a:4f:
20:da:7c:10:f1:4a:15:e1:5c:f0:70:6d:48:46:aa:
3d:36:6c:67:50:f5:b2:85:39:b8:92:fd:da:6c:07:
cd:86:83:7e:20:1b:8c:67:89:29:bd:c0:d5:7c:d2:
c8:38:a4:61:a5:5c:10:9c:3a:a4:ab:8a:89:ab:b1:
50:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A8:6D:B9:68:33:D5:DA:D5:8C:B6:05:29:81:30:06:92:A2:3B:E5
X509v3 Authority Key Identifier:
keyid:B1:46:01:02:83:A8:20:2E:EA:A3:FE:F3:25:34:E3:E9:7E:04:07:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:9a:a2:66:1d:2d:0f:da:fc:fb:be:e5:81:39:6f:fe:47:35:
60:20:60:48:b9:4f:83:1a:28:5f:4a:f9:c6:1c:45:53:81:53:
74:ab:52:93:c1:01:65:6c:55:82:ae:a4:65:56:77:eb:bb:9c:
d8:9f:92:e7:d9:c3:16:09:c3:4e:58:48:6d:37:0a:2a:cd:8e:
b1:53:dd:98:85:bb:33:b6:06:34:db:46:dc:b6:0a:75:95:d8:
c4:ed:ae:8f:eb:35:98:7d:1a:24:5b:a5:90:49:bf:11:93:e3:
48:8f:d5:1f:47:af:8a:23:c8:e4:8b:37:cd:f5:ce:f9:d0:0a:
46:79:d0:5f:79:c5:c9:b6:51:15:08:59:40:50:a3:1b:b0:51:
53:41:6e:85:6c:87:3f:4b:11:d7:52:76:96:eb:75:7d:14:7a:
f6:ac:71:8b:8a:1c:16:cf:19:cb:5d:52:b8:6c:76:35:2b:d4:
83:b1:76:fd:52:30:d2:37:5c:a3:de:fc:cb:d8:c8:ba:8d:ac:
93:2b:17:64:01:99:7b:95:86:f3:33:e5:02:3b:d5:a3:2e:47:
26:f1:6c:ae:25:bf:0a:d5:c1:01:db:0e:b6:56:a7:09:92:72:
00:b3:45:60:e6:e2:3d:95:09:84:62:9c:ee:2b:6a:bc:a5:4c:
28:20:9c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:23:11 2026 by rpki-client