Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft
File: sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft (raw, json)
Hash identifier: 1bagi0+sQSValhSFlI0RsxdeAh3Z7T0J/Dm+69Gh22U=
Subject key identifier: 11:5D:10:6B:7C:FB:EA:98:11:F0:B2:53:DA:18:B3:9D:24:01:B7:8B
Authority key identifier: B1:85:9F:3D:2C:D2:83:E7:DB:90:F0:2F:E1:B0:D4:F6:15:60:59:47
Certificate issuer: /CN=b1859f3d2cd283e7db90f02fe1b0d4f615605947
Certificate serial: 019E1ED99CE4BDB55D7B13A3E8AB511D32CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sYWfPSzSg-fbkPAv4bDU9hVgWUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft
Manifest number: 0C27
Signing time: Wed 13 May 2026 01:00:38 +0000
Manifest this update: Wed 13 May 2026 01:00:38 +0000
Manifest next update: Thu 14 May 2026 01:00:38 +0000
Files and hashes: 1: 6tRNFOHlYPyCYFIHgatSgb5gCeA.roa (hash: E6/vpznSWjmg4YEWxQ9xApX1IggzL3noXqAm0pLp65E=)
2: sYWfPSzSg-fbkPAv4bDU9hVgWUc.crl (hash: A9duE+97t8lI+nFlsiNJeOYaApC/88cBhnjOSxBYcV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sYWfPSzSg-fbkPAv4bDU9hVgWUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:9c:e4:bd:b5:5d:7b:13:a3:e8:ab:51:1d:32:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1859f3d2cd283e7db90f02fe1b0d4f615605947
Validity
Not Before: May 13 01:00:38 2026 GMT
Not After : May 14 01:00:38 2026 GMT
Subject: CN=115d106b7cfbea9811f0b253da18b39d2401b78b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:b2:62:b0:87:b0:e6:e6:a6:e2:90:32:82:5c:
42:9d:b3:03:dd:0b:e0:f7:00:52:f1:02:36:d9:b0:
3d:b9:a7:b8:2e:63:2f:22:ab:c9:d2:c2:c0:a3:1b:
89:62:fa:6c:9d:44:cb:82:86:5c:e6:0e:b1:19:f3:
87:95:c9:7e:b8:67:73:60:5d:50:db:85:8b:f5:08:
54:f7:c5:a7:43:4b:fa:11:41:eb:ba:2e:44:97:c0:
ae:57:60:04:e5:48:5b:14:5f:de:0f:64:12:ba:9a:
85:ea:e2:0a:e7:51:fe:4b:99:4e:26:27:e4:43:77:
1d:4e:37:8c:71:d1:2b:16:85:82:50:bc:1d:b8:18:
8a:fb:e5:f1:ec:c6:db:6c:bd:5c:9e:d3:62:f3:61:
26:2b:b7:38:57:26:b8:f9:e1:7d:5d:44:cf:fb:bc:
6e:62:6f:f3:99:f1:6b:9c:f4:38:04:6b:7d:4c:a1:
25:26:ad:6a:aa:83:85:1a:cb:53:fe:6a:17:6b:76:
6e:9a:17:d7:85:a1:87:4e:c4:60:5a:1c:3b:8a:e8:
2c:17:c0:98:6a:3a:58:f1:c2:ba:a1:b3:5c:77:23:
6c:31:12:d1:53:45:a7:8f:fd:ca:0c:e0:a4:11:28:
ec:49:82:1b:40:58:04:7d:27:8a:c8:3d:0b:b1:0d:
96:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:5D:10:6B:7C:FB:EA:98:11:F0:B2:53:DA:18:B3:9D:24:01:B7:8B
X509v3 Authority Key Identifier:
keyid:B1:85:9F:3D:2C:D2:83:E7:DB:90:F0:2F:E1:B0:D4:F6:15:60:59:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYWfPSzSg-fbkPAv4bDU9hVgWUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:da:d9:30:e8:18:56:6d:73:ca:d1:3c:5b:16:ea:47:0e:d8:
d3:7a:d1:6f:04:9f:0a:cd:33:d4:ee:46:99:ea:0e:8b:79:37:
78:36:fe:69:65:77:c5:90:a4:37:91:15:46:91:c5:5d:2f:95:
aa:4f:19:31:d2:ff:ca:47:c6:37:d1:bd:e8:50:28:ea:1e:00:
ac:02:eb:7d:f0:ed:99:20:ba:d5:71:ef:b5:d9:d9:a4:3c:4c:
f3:4b:90:6b:10:f9:27:ae:2c:a8:e8:af:cd:28:7f:c7:d1:a9:
bc:95:66:2f:1e:b4:ab:37:30:fc:ad:99:dc:ac:94:07:8a:63:
9a:1e:f8:8b:ae:c3:ff:21:ec:68:8e:e4:19:b2:ca:f0:b9:49:
bd:0c:57:e0:1d:cb:14:fc:19:31:f0:55:25:eb:e0:09:52:9c:
c9:d3:32:cd:5b:91:16:c6:23:ab:1f:3d:0a:f5:5f:60:3f:17:
75:aa:1f:a1:65:96:32:69:43:30:af:35:dc:19:f9:7f:1d:2d:
54:17:c5:b6:1c:8b:15:14:b6:32:f4:31:5a:43:0f:84:3d:6a:
51:11:3f:2f:30:9f:1b:40:05:be:c7:8d:09:f7:8c:ac:a3:73:
88:1c:29:11:89:7a:b4:46:ab:fa:bf:1b:ba:06:cf:01:47:3f:
84:d8:34:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:36:15 2026 by rpki-client