Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
File: _sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft (raw, json)
Hash identifier: 2aPTiwdS5/vn8n6UmUUy+cbn+ZE683WFTuACmsd0O4E=
Subject key identifier: 95:D2:9A:D6:A5:F3:52:C6:52:E6:D8:DC:FB:5A:CC:13:C7:E9:70:FC
Authority key identifier: FE:C3:5D:4F:2F:2D:24:7E:A0:8C:4A:01:17:D3:28:E4:E8:ED:F1:52
Certificate issuer: /CN=fec35d4f2f2d247ea08c4a0117d328e4e8edf152
Certificate serial: 01A03C3AA3AF61CE2141210F0792943635C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
Manifest number: 1A23
Signing time: Wed 26 Aug 2026 04:01:10 +0000
Manifest this update: Wed 26 Aug 2026 04:01:10 +0000
Manifest next update: Thu 27 Aug 2026 04:01:10 +0000
Files and hashes: 1: B-jaTDzXYnAiep0dkM4HKHAtDtc.asa (hash: 6/cBN/kOMU8ZsZKSZ6ypt6jtXqwALKvq4t6gWl3kd0k=)
2: _sNdTy8tJH6gjEoBF9Mo5Ojt8VI.crl (hash: 4xKP5X+bnRVguB+YWuml1FiJUgAqzd6bRXVp3V4SU+s=)
3: ffUc8_MFuN5GuGa6IoP-AwjDMng.roa (hash: KNgb7b/tPa4J6bvxUtY9aR+BXwQn3PEB0DvOOi2I63k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3c:3a:a3:af:61:ce:21:41:21:0f:07:92:94:36:35:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fec35d4f2f2d247ea08c4a0117d328e4e8edf152
Validity
Not Before: Aug 26 04:01:10 2026 GMT
Not After : Aug 27 04:01:10 2026 GMT
Subject: CN=95d29ad6a5f352c652e6d8dcfb5acc13c7e970fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7f:01:bf:cb:91:23:d6:4c:23:35:3a:d4:31:
b6:7c:dd:5c:37:d4:46:31:01:96:2e:f4:92:e4:cc:
ca:aa:f2:cf:7b:60:ee:60:b1:0b:e8:a8:d6:76:6b:
af:26:82:78:82:e8:ee:87:29:51:bc:9a:53:fe:04:
ce:84:e3:36:35:01:51:da:dc:0e:10:0f:e5:fe:c2:
9e:21:77:47:75:f2:52:2a:dc:aa:59:39:90:9d:5e:
80:42:b3:c4:11:08:0a:f7:a0:2b:ee:6a:98:52:e8:
80:bb:6f:ea:05:99:39:b9:3f:5a:5b:21:25:88:5e:
7e:db:60:21:61:d3:88:e0:74:f3:6a:96:ff:28:d4:
cf:27:e2:3b:4e:b0:1e:c0:b2:1d:90:41:4c:38:5a:
09:6d:3a:5e:e9:20:6d:85:89:bc:fa:63:0c:52:2d:
57:e3:29:4d:10:01:8d:43:9c:90:cc:df:bf:eb:80:
05:6e:76:4e:45:19:b9:92:40:a4:c6:8a:f6:07:5c:
20:2b:67:fe:a4:93:1c:ac:9f:76:b7:f0:f5:13:3b:
f3:aa:38:27:f3:38:eb:74:5a:74:a8:0e:34:df:2a:
1f:e0:82:8b:14:92:32:10:36:93:aa:74:12:3f:3c:
bf:2f:1b:7e:4e:3d:e3:3b:ec:5a:e3:9e:8d:3c:46:
58:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D2:9A:D6:A5:F3:52:C6:52:E6:D8:DC:FB:5A:CC:13:C7:E9:70:FC
X509v3 Authority Key Identifier:
keyid:FE:C3:5D:4F:2F:2D:24:7E:A0:8C:4A:01:17:D3:28:E4:E8:ED:F1:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:b0:cc:5d:ce:6a:21:40:13:85:72:d2:db:7c:d3:58:30:8c:
26:01:5d:b5:e2:96:c1:76:71:17:73:ff:b8:42:7e:74:b5:de:
da:30:5b:fc:a7:b2:e3:46:36:fe:f4:25:47:b3:aa:88:8b:08:
14:0c:7a:9a:3b:13:2d:8a:ee:3e:c3:85:36:3f:6b:f3:e1:ef:
54:39:00:28:b3:6f:01:fa:c6:57:48:7f:b7:49:e8:d7:d6:52:
76:5e:b1:97:ad:38:34:9f:55:01:96:79:bc:e7:24:42:bc:a4:
82:d9:86:41:f9:78:4c:aa:58:30:a9:b2:93:61:66:09:26:2d:
c3:ca:62:f8:ee:c0:e4:54:a5:50:4d:ea:52:1c:73:1c:a2:cc:
09:f1:94:ec:a2:38:f0:67:de:22:d8:7a:c0:d1:dc:c7:fe:97:
2c:4a:3f:62:37:54:69:48:df:23:80:b6:47:10:77:e1:75:60:
da:6a:17:76:2c:60:76:1e:06:4c:23:77:fb:65:fb:a5:c3:06:
73:2e:89:97:92:88:df:8a:7b:53:5f:ef:83:2e:a0:1f:bf:47:
ee:9f:dc:e6:64:1b:f9:e6:cc:c3:e2:68:fa:dd:0b:82:d7:e6:
74:37:fd:dd:95:49:17:7b:f5:36:83:4f:fd:33:f7:e4:35:81:
f8:ac:9b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 08:09:40 2026 by rpki-client