Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
File: sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft (raw, json)
Hash identifier: Wf1p4zAkZ2clHrwhDw201hKUDa2LdpT6bcjFQ70sobY=
Subject key identifier: AD:5A:40:40:8A:19:4D:E5:9E:FE:AB:07:39:41:2A:55:40:ED:3A:A2
Authority key identifier: B1:70:6F:CD:B7:EF:05:80:F4:FF:20:32:CE:EF:FD:29:B7:0A:B6:39
Certificate issuer: /CN=b1706fcdb7ef0580f4ff2032ceeffd29b70ab639
Certificate serial: 01A0D45DECBDCE839B955D7906540CEE19D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
Manifest number: 0840
Signing time: Thu 24 Sep 2026 17:02:00 +0000
Manifest this update: Thu 24 Sep 2026 17:02:00 +0000
Manifest next update: Fri 25 Sep 2026 17:02:00 +0000
Files and hashes: 1: 7vR5Q4m_T61PHPMKP_nErvCFyBE.roa (hash: gq1L8G0x7ivAnw58QCU9tDfYfjdILP3qn6SNIqxyess=)
2: 8FU176wvyGzu3qZRWgZp007b1qg.asa (hash: x8k6LNUsfOGRKHX9gJ4g2GjQMcqtY9wp9At0D9QB+yM=)
3: sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl (hash: zWB5g4cljaYmzJLeLWS8efT/n9zC2gBe/PzOWzfsXGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:5d:ec:bd:ce:83:9b:95:5d:79:06:54:0c:ee:19:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1706fcdb7ef0580f4ff2032ceeffd29b70ab639
Validity
Not Before: Sep 24 17:02:00 2026 GMT
Not After : Sep 25 17:02:00 2026 GMT
Subject: CN=ad5a40408a194de59efeab0739412a5540ed3aa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:b4:d1:15:b8:ff:7f:d2:1b:3d:9a:15:4b:15:
57:71:61:4c:31:84:e1:e5:2e:24:45:c2:cd:66:f6:
a7:3a:38:3c:2a:77:64:9d:c6:df:35:6c:e7:80:a5:
78:d2:67:7d:c7:01:95:6d:09:93:fd:07:98:c0:96:
f9:25:99:53:1b:da:2e:0f:81:5e:c0:a4:92:e9:ea:
cb:ed:ca:0e:4e:89:c0:b7:80:83:7f:80:9a:d4:64:
69:b7:97:04:89:e5:26:cf:f1:5b:25:17:e8:c9:45:
29:e6:65:ae:8d:e6:82:88:59:f6:17:63:e8:42:61:
06:f8:c8:18:01:9a:51:60:a4:32:c2:c4:84:b2:f0:
eb:13:18:8c:1b:af:37:36:d5:80:48:7e:1a:cc:1e:
f1:4c:58:d9:ed:0a:6c:aa:50:8f:fc:43:cc:40:52:
73:14:fa:8c:cf:06:fa:a9:f6:56:6b:f4:c9:ed:68:
12:01:90:6a:ed:d3:2e:48:b7:3c:ae:3c:19:ba:7d:
62:69:11:8f:26:bc:75:65:cc:40:aa:ca:c2:a0:a6:
a9:d9:12:41:2b:c9:86:4a:6b:f5:46:30:0a:5b:3f:
2a:9f:c4:1d:17:66:82:83:36:7e:97:f2:95:05:7a:
6b:05:4b:3f:87:19:c5:9e:cd:d4:d8:5e:fa:91:6e:
13:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:5A:40:40:8A:19:4D:E5:9E:FE:AB:07:39:41:2A:55:40:ED:3A:A2
X509v3 Authority Key Identifier:
keyid:B1:70:6F:CD:B7:EF:05:80:F4:FF:20:32:CE:EF:FD:29:B7:0A:B6:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:68:fc:97:9c:3e:f3:01:b8:f0:b8:46:1f:71:b4:b6:9d:b7:
2d:52:1f:c9:9e:2e:d5:de:b9:5c:92:8c:88:ff:80:d6:3a:58:
19:fb:ea:db:d9:5a:dc:e9:d8:1d:d3:75:15:27:de:58:7f:34:
95:0a:8b:7f:e2:20:db:20:a2:c7:16:b1:9e:83:d8:93:3e:2b:
bb:4c:4a:3c:df:d5:75:7e:b3:ef:47:5b:82:ef:ba:dd:a5:18:
b9:bb:8e:da:c1:6d:59:70:24:ce:45:f2:65:1c:4b:69:3b:c8:
ba:96:5f:21:70:64:45:0e:45:e7:0a:97:3f:46:5c:7e:41:05:
0f:7e:60:55:d7:5a:f4:08:cc:8d:e7:b4:91:b7:db:05:80:d0:
65:0c:d9:c3:ce:c7:88:8f:45:c6:0d:0d:68:9c:d1:b4:88:be:
87:3c:a0:7f:d0:bc:04:86:7b:ec:e0:ad:54:60:86:ec:23:a4:
2b:2f:e0:50:be:b3:de:e6:34:3e:64:12:66:86:cc:21:d8:3f:
9a:54:a1:0a:1d:84:a6:f5:f3:fe:c8:f3:81:34:7b:f8:be:5e:
f6:4a:5d:4d:21:36:70:e8:30:96:a5:7f:10:a9:4e:a8:76:fe:
5f:ce:51:bf:db:4f:11:5a:9b:13:7c:58:dc:82:2e:56:2d:fa:
1b:49:96:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:25:57 2026 by rpki-client