Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
File: sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft (raw, json)
Hash identifier: 8tFeFI9t70etZigCnK2kaTlTRDtlhC7+hD8FZ4d9/4g=
Subject key identifier: DD:FA:E1:BC:7A:21:61:E6:41:42:AA:EE:2E:F0:B7:F6:93:95:1F:F6
Authority key identifier: B1:70:6F:CD:B7:EF:05:80:F4:FF:20:32:CE:EF:FD:29:B7:0A:B6:39
Certificate issuer: /CN=b1706fcdb7ef0580f4ff2032ceeffd29b70ab639
Certificate serial: 019F8ED9D594EFC7B8DA296228994BBFFBF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
Manifest number: 0797
Signing time: Thu 23 Jul 2026 12:01:08 +0000
Manifest this update: Thu 23 Jul 2026 12:01:08 +0000
Manifest next update: Fri 24 Jul 2026 12:01:08 +0000
Files and hashes: 1: 7vR5Q4m_T61PHPMKP_nErvCFyBE.roa (hash: gq1L8G0x7ivAnw58QCU9tDfYfjdILP3qn6SNIqxyess=)
2: sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl (hash: QaCP0sSuIWpMasFdnafCOaDbHzSRlSIXv6wy0fEB5dk=)
3: viGbixW9Ey-H17FuZSo2Lp3uGUw.asa (hash: E6TsHnwWV1QVDbu4pe9aJsjOLMMqrUzZTM18kgvJ3l8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 12:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:d9:d5:94:ef:c7:b8:da:29:62:28:99:4b:bf:fb:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1706fcdb7ef0580f4ff2032ceeffd29b70ab639
Validity
Not Before: Jul 23 12:01:08 2026 GMT
Not After : Jul 24 12:01:08 2026 GMT
Subject: CN=ddfae1bc7a2161e64142aaee2ef0b7f693951ff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e1:e9:52:60:d1:d6:13:e3:e8:23:5c:1f:ef:
35:e5:44:64:6f:af:7b:26:a0:f7:44:f2:2c:6d:76:
86:59:f6:8f:0c:12:f7:49:fb:99:2d:f6:03:a7:b0:
48:1f:69:9a:f2:a6:2d:e5:26:9b:f9:eb:17:ad:19:
7c:bd:ce:43:0e:95:99:f8:7f:13:b2:32:5e:6c:f8:
2e:21:35:b6:5e:c7:cd:a8:ae:09:90:5b:dd:72:4e:
b7:38:a8:08:58:23:fc:1a:51:da:13:1c:db:43:44:
2f:ee:cd:14:bd:2b:d7:33:5c:02:39:92:98:7c:f3:
76:90:dd:16:52:cc:2f:89:9d:de:9a:37:35:50:79:
0c:5a:08:63:b0:14:af:2a:bd:e6:4d:c9:f2:9b:2a:
c1:1b:dc:1b:63:5b:ca:05:90:c7:e2:2b:d0:80:83:
03:59:41:95:fa:c1:6a:bd:32:f1:56:b0:44:5d:69:
d4:42:21:8b:7e:81:91:c9:9c:af:3e:55:11:70:cb:
da:38:08:d2:43:19:8d:40:17:6b:84:83:24:55:70:
5b:f5:32:af:ec:5c:80:55:b6:54:e5:ed:3f:53:ab:
e5:20:79:a4:37:2b:5f:5c:b4:31:86:8a:16:1f:23:
a7:20:d2:e5:54:58:f4:14:f5:7b:d0:7c:15:cd:11:
e5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:FA:E1:BC:7A:21:61:E6:41:42:AA:EE:2E:F0:B7:F6:93:95:1F:F6
X509v3 Authority Key Identifier:
keyid:B1:70:6F:CD:B7:EF:05:80:F4:FF:20:32:CE:EF:FD:29:B7:0A:B6:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:29:d7:82:39:0e:9b:52:ec:af:69:a8:b4:28:84:41:0c:70:
8a:35:e1:6c:18:62:bb:8d:f1:29:9c:32:0f:0c:95:de:f8:b6:
b6:9f:8d:05:fb:96:95:d3:3c:4c:10:d8:08:e5:50:7c:92:71:
6c:64:3a:95:12:8f:e6:72:ad:90:fb:a9:3d:25:8d:1c:e9:45:
4b:c1:3e:39:12:af:3e:6f:2d:1f:a1:4f:e4:d6:6a:97:f9:54:
6e:6f:60:9d:0f:e0:a7:66:4e:80:ed:cc:14:86:23:6e:6a:a8:
c1:47:97:42:b7:16:17:fd:bb:b1:cc:1f:a8:54:6a:1e:d6:ef:
49:d7:7c:d4:61:3c:d5:20:6c:02:d4:3b:f6:db:13:8e:01:7d:
40:0d:30:76:33:51:4d:13:b8:7e:55:58:b4:48:0f:ae:97:cc:
f7:1e:d4:18:a5:4d:e0:c4:6c:58:91:15:d5:81:b1:8d:69:60:
02:6c:a9:d5:ed:dc:ab:8f:a3:76:5b:8f:5e:53:27:fc:67:f8:
9e:f1:e6:cb:80:20:93:b6:82:0c:0b:c9:0b:d3:c4:de:72:c5:
ac:60:11:81:18:bd:1b:f9:63:e8:97:a7:66:22:6f:df:82:06:
8e:8c:95:c7:c8:10:9d:1d:e4:f1:f0:96:a8:64:1a:75:22:45:
c4:f8:a1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:27 2026 by rpki-client