Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
File: sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft (raw, json)
Hash identifier: hmKtdCSIgLG2Pgs7/SAT9zJpt2u7NglBNJWTBnOiF/4=
Subject key identifier: AD:F0:4D:FA:8F:F0:3C:40:A1:22:6E:25:3A:10:76:A3:3F:D1:AC:BB
Authority key identifier: B1:70:6F:CD:B7:EF:05:80:F4:FF:20:32:CE:EF:FD:29:B7:0A:B6:39
Certificate issuer: /CN=b1706fcdb7ef0580f4ff2032ceeffd29b70ab639
Certificate serial: 019D284D77BA0044259DCED93EF1F78C05A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
Manifest number: 0657
Signing time: Thu 26 Mar 2026 04:00:58 +0000
Manifest this update: Thu 26 Mar 2026 04:00:58 +0000
Manifest next update: Fri 27 Mar 2026 04:00:58 +0000
Files and hashes: 1: oowSifZpNNKYzrjcaNUZJWL3m3Y.roa (hash: uwi3PfId3re9pl7ftEeebbIx30aPGmKfgvOr1N4WMJM=)
2: sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl (hash: N959q67Po8nRlaAXoZWlDjc1cHI9EuFheUec4lc+88M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:77:ba:00:44:25:9d:ce:d9:3e:f1:f7:8c:05:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1706fcdb7ef0580f4ff2032ceeffd29b70ab639
Validity
Not Before: Mar 26 04:00:58 2026 GMT
Not After : Mar 27 04:00:58 2026 GMT
Subject: CN=adf04dfa8ff03c40a1226e253a1076a33fd1acbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:41:9f:94:2d:9e:39:33:6b:2d:b1:f8:41:70:
9a:51:83:a4:14:c7:24:43:bc:c1:07:c3:fe:97:c9:
e8:e0:63:bb:58:7f:4b:da:14:11:bd:05:b1:f9:4b:
f3:0e:45:29:e9:06:7c:8a:a8:70:d2:fb:4c:b1:63:
33:2d:fa:12:9f:ef:af:7d:14:2d:39:99:b3:03:5d:
84:31:12:6e:18:1e:26:42:af:24:67:dd:5a:d9:bc:
52:42:ea:b5:12:0f:f5:1d:56:74:cf:0d:1b:bd:44:
2c:c3:8a:4e:e2:9a:fe:c2:eb:f5:fd:79:01:f9:f3:
b2:e1:f8:f4:79:bd:00:dd:10:52:60:d3:a4:63:00:
2d:c1:42:0e:8d:df:ba:ea:58:e2:b6:36:e5:d9:18:
c1:94:df:cc:31:dc:be:4b:03:59:6e:c0:d9:5d:00:
67:4f:9e:02:41:98:bc:fb:a2:e3:35:54:e5:c8:99:
19:39:6e:d5:0d:33:d6:45:3f:e4:1d:e6:79:67:3b:
bc:42:9f:17:44:39:8a:ba:69:ee:92:6b:f3:0a:1c:
cc:62:e0:a1:26:55:ad:43:a6:74:70:90:65:6d:ee:
32:cf:d7:26:4f:ad:0b:ec:06:22:b3:0b:65:f1:0b:
b1:9d:36:81:5a:bf:1e:97:8f:10:1b:de:60:c5:fc:
1b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:F0:4D:FA:8F:F0:3C:40:A1:22:6E:25:3A:10:76:A3:3F:D1:AC:BB
X509v3 Authority Key Identifier:
keyid:B1:70:6F:CD:B7:EF:05:80:F4:FF:20:32:CE:EF:FD:29:B7:0A:B6:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:7d:ed:02:00:64:bc:46:73:cf:4a:a9:84:9e:49:35:fb:2a:
ec:63:45:dc:7b:b9:33:56:c3:66:2b:26:15:57:0c:a3:55:46:
e0:fd:89:0d:a3:ed:a9:2a:d1:05:2e:aa:25:64:19:18:cf:d0:
9e:03:de:3d:24:f7:5f:ef:38:5b:b3:ad:66:15:d1:43:58:db:
d2:49:5b:43:cf:ad:82:7e:68:41:c3:f6:8f:9d:13:47:43:6a:
4d:07:c2:81:1a:9c:8c:5f:c1:9b:ed:a1:ee:46:bf:29:9f:9b:
c5:3f:1a:06:e1:a9:c1:0c:8b:2a:aa:b7:42:d2:c2:81:d3:78:
e2:e5:cb:b7:3f:52:25:28:29:52:ee:16:c7:f7:a9:ff:68:57:
e3:29:6e:0b:2f:03:17:dc:1f:4c:c2:a8:68:5f:d9:5c:7d:ba:
ec:58:c6:0a:29:ef:fd:b7:29:b5:fa:94:66:67:e2:70:15:05:
ba:ed:55:45:a4:6c:cf:80:08:17:8e:00:ee:46:25:82:86:c5:
e8:de:df:67:c0:93:a8:bb:8a:5c:be:8e:ba:29:e8:2a:b0:83:
13:4a:d9:a9:3d:49:ea:c3:3e:02:fe:e3:c9:f5:36:9f:92:f2:
d3:43:36:43:d9:60:73:de:1d:2b:17:1a:1f:72:47:b3:5a:60:
12:d7:2c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:56:44 2026 by rpki-client