Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft
File: sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft (raw, json)
Hash identifier: yqnCdwygUDD+zHafsq2bdyYqg50CCVsUEyCpwbG+bDI=
Subject key identifier: 57:4C:5A:EB:21:9A:BC:16:1E:F7:6A:42:33:A0:80:A7:56:F5:C0:3E
Authority key identifier: B1:85:9F:3D:2C:D2:83:E7:DB:90:F0:2F:E1:B0:D4:F6:15:60:59:47
Certificate issuer: /CN=b1859f3d2cd283e7db90f02fe1b0d4f615605947
Certificate serial: 019D28BBF08C3A0DB48CC2F675F7B2B2393C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sYWfPSzSg-fbkPAv4bDU9hVgWUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft
Manifest number: 0BA7
Signing time: Thu 26 Mar 2026 06:01:38 +0000
Manifest this update: Thu 26 Mar 2026 06:01:38 +0000
Manifest next update: Fri 27 Mar 2026 06:01:38 +0000
Files and hashes: 1: fwlXtqb10A-wV_bek-0TtXLyN60.roa (hash: EBH4JtRrxBkeHaZ/uJMc1tdnxhG7UT1SgBTpReFISGs=)
2: sYWfPSzSg-fbkPAv4bDU9hVgWUc.crl (hash: u1pfF6Ji1ZCOjTIlFAg8SMcc7cHHNfTwUCcIkxFu0cs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sYWfPSzSg-fbkPAv4bDU9hVgWUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:f0:8c:3a:0d:b4:8c:c2:f6:75:f7:b2:b2:39:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1859f3d2cd283e7db90f02fe1b0d4f615605947
Validity
Not Before: Mar 26 06:01:38 2026 GMT
Not After : Mar 27 06:01:38 2026 GMT
Subject: CN=574c5aeb219abc161ef76a4233a080a756f5c03e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:eb:5d:1f:f6:24:f4:d7:06:2e:d6:e2:67:28:
0e:0a:eb:2c:0b:d4:c6:a6:36:a3:a9:1a:c5:fd:85:
9e:8a:de:e8:db:c6:94:36:15:aa:17:9f:c2:d3:35:
28:85:7d:b5:87:37:98:20:e6:00:e9:12:4f:95:61:
94:ab:f4:18:c7:fb:7d:d0:f8:fe:c5:e2:02:dc:90:
ed:45:0d:92:00:ba:13:12:b4:2c:f1:cb:ca:35:3d:
b1:69:72:26:87:ec:e6:c2:04:dc:e8:0d:de:0c:92:
d9:9e:60:fc:3d:d2:ba:d0:4a:71:21:d5:7b:28:09:
c2:26:ee:e1:56:ed:2d:9c:fc:20:22:88:3e:81:a5:
e7:80:06:47:01:68:77:b7:f3:c3:c8:8a:87:ac:5e:
85:9c:35:4b:69:35:ef:87:32:7b:56:32:54:ac:6c:
56:b3:e0:35:41:ac:3e:85:a5:8e:3a:5c:b5:e4:91:
2b:d9:69:f6:dd:c3:24:c3:d2:d1:05:33:63:95:cf:
99:4c:f6:7b:78:14:51:c5:28:4a:09:a9:73:aa:7e:
dc:c5:7a:fc:ee:4d:17:2a:d0:c8:ab:b4:08:af:fb:
17:12:9c:4b:28:fb:d9:32:e6:0e:05:4f:2c:4b:92:
f2:f7:ca:b0:45:c2:69:1f:1b:11:5a:67:5a:1a:14:
88:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:4C:5A:EB:21:9A:BC:16:1E:F7:6A:42:33:A0:80:A7:56:F5:C0:3E
X509v3 Authority Key Identifier:
keyid:B1:85:9F:3D:2C:D2:83:E7:DB:90:F0:2F:E1:B0:D4:F6:15:60:59:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYWfPSzSg-fbkPAv4bDU9hVgWUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:96:79:58:e5:0a:f5:77:c6:7a:e3:74:30:65:6a:af:3c:85:
1b:1f:2f:32:62:98:b8:dd:6e:10:57:42:cd:cc:79:08:62:b0:
11:0f:28:00:3d:bc:8b:86:fb:e0:17:73:04:df:af:17:73:00:
a3:aa:ee:af:b2:1c:56:79:59:a4:f3:51:10:6e:7d:37:46:f9:
e8:b5:c8:9c:41:68:83:76:1d:35:0d:c1:27:ac:7b:ca:55:45:
a9:01:b0:cc:35:20:bc:c5:23:13:3a:dd:92:46:66:c8:92:2c:
8a:8c:bf:49:f3:32:69:1c:51:cb:45:30:78:1f:d2:f2:29:f0:
19:c9:51:e2:b2:85:36:fc:f1:8b:ca:7a:b2:bc:8e:0a:dd:91:
32:77:5e:97:3a:f3:e7:9e:e5:f5:a6:75:0a:77:ca:a0:87:c4:
77:e9:c5:2f:f0:c0:51:73:bf:e9:8b:fa:ce:fe:96:0c:e8:ab:
2d:f2:0c:14:9e:2d:f3:03:95:b1:94:42:56:1e:35:55:99:17:
4b:9d:0a:e9:dd:43:4c:29:61:cf:04:76:2e:9c:0f:59:10:cb:
72:b4:9b:9f:f7:de:f1:df:a1:53:75:e8:90:5b:9d:3d:bc:fb:
2b:2f:a4:aa:90:80:64:4f:e8:b1:99:ca:51:2c:63:0f:91:4d:
c3:43:20:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:56:52 2026 by rpki-client