Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft
File: svJ5U61GkMBo-0D581YAM3m7Y_g.mft (raw, json)
Hash identifier: KCcAJbawDy16i2G872739xzQX9Ys3mP0IXN3iayaggg=
Subject key identifier: 3F:41:9F:25:B9:4A:DB:38:91:EE:3E:57:3E:9B:FF:1B:B7:D2:96:81
Authority key identifier: B2:F2:79:53:AD:46:90:C0:68:FB:40:F9:F3:56:00:33:79:BB:63:F8
Certificate issuer: /CN=b2f27953ad4690c068fb40f9f356003379bb63f8
Certificate serial: 01A0D5A7243E69AA7D107EDF4B3B7535B023
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/svJ5U61GkMBo-0D581YAM3m7Y_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft
Manifest number: 13FF
Signing time: Thu 24 Sep 2026 23:01:35 +0000
Manifest this update: Thu 24 Sep 2026 23:01:35 +0000
Manifest next update: Fri 25 Sep 2026 23:01:35 +0000
Files and hashes: 1: ObNZb8WcPYnp4vym-GNDnVBbhRc.roa (hash: cB7fQ1+Il9kNcY3mzLGz4gNtT9PoEWbZCafUMp1Ym5Y=)
2: svJ5U61GkMBo-0D581YAM3m7Y_g.crl (hash: UiThB/QnEQc07nFJ4s7RxJ76Lm834RmR5Sp7oiMHVqU=)
3: uTt1-O7JdcMd5DNwFU1zr-UOPQE.roa (hash: Zjr4fujCXBRskWeIesCak3mrz6dTWdtu0/f99U78B+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/svJ5U61GkMBo-0D581YAM3m7Y_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:a7:24:3e:69:aa:7d:10:7e:df:4b:3b:75:35:b0:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f27953ad4690c068fb40f9f356003379bb63f8
Validity
Not Before: Sep 24 23:01:35 2026 GMT
Not After : Sep 25 23:01:35 2026 GMT
Subject: CN=3f419f25b94adb3891ee3e573e9bff1bb7d29681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:15:c3:16:5c:86:09:75:53:ab:1b:fd:b3:f8:
b1:90:c8:9c:3d:96:c5:c9:cf:e0:68:76:8e:15:de:
d8:cd:61:ef:af:23:cf:f4:94:8a:ce:09:e4:df:d4:
12:d7:02:b3:1b:a7:98:f7:20:d3:b3:c3:44:5e:db:
6e:13:32:88:0a:14:16:68:f2:d3:8e:e5:98:a1:ed:
60:55:dc:be:11:21:d6:d8:5e:60:c7:cf:c9:6f:b3:
d7:be:eb:41:23:11:79:37:f2:f3:1b:86:43:99:91:
5f:24:e5:bb:05:44:c5:a3:1a:63:7f:61:9a:fe:08:
85:d7:f0:f4:f0:f2:a9:f5:82:b1:55:30:8d:71:19:
ad:69:13:df:43:f5:69:f0:5e:31:18:d3:47:79:53:
e6:17:04:87:d0:20:7a:a2:5e:6b:c2:18:21:8d:40:
34:2b:4e:b4:1e:4c:f9:29:a2:2c:94:e0:a6:33:8c:
6a:6a:f3:14:f9:8b:10:d0:46:bb:99:95:32:08:9c:
0d:c6:b7:2f:e5:15:d7:d4:4e:87:dd:36:1f:af:12:
ec:b8:91:a5:37:6f:5a:68:70:3b:43:a2:56:d2:27:
7a:13:f8:53:d9:46:9b:fb:25:fa:5c:6b:c3:1a:eb:
ca:38:d4:18:45:c7:ab:e8:9b:2a:1e:1b:e7:fc:91:
b7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:41:9F:25:B9:4A:DB:38:91:EE:3E:57:3E:9B:FF:1B:B7:D2:96:81
X509v3 Authority Key Identifier:
keyid:B2:F2:79:53:AD:46:90:C0:68:FB:40:F9:F3:56:00:33:79:BB:63:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/svJ5U61GkMBo-0D581YAM3m7Y_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:6c:5a:fa:0c:84:19:be:18:ec:23:c5:d7:a3:48:7a:b4:a1:
a4:51:f8:50:6f:d3:82:f2:05:31:21:bc:65:b7:5e:34:67:a0:
9f:77:ea:5a:91:5a:b1:92:e8:29:d0:f5:f1:75:7c:12:db:ce:
09:79:72:d0:61:bb:9d:65:5d:81:e0:9c:2b:28:18:ed:bb:5d:
26:3a:1a:12:42:3b:e7:d9:d8:c2:65:59:53:c9:88:67:60:1d:
8a:cd:c2:db:8e:a6:b5:dc:22:d5:84:bc:50:d0:29:18:24:88:
28:14:3e:9b:be:51:16:26:92:20:38:63:da:6a:1b:73:2c:e7:
12:47:32:25:4a:8e:9c:73:63:84:1e:20:b4:d5:0c:2d:70:17:
e6:62:89:d9:f9:87:90:00:b3:36:18:92:b0:97:ec:df:ed:76:
1d:91:88:92:e9:67:89:1c:5b:d2:0f:f1:a9:34:6f:39:97:f0:
51:80:d8:b3:7b:20:4a:df:01:ef:db:27:73:c2:f9:27:66:2d:
91:e1:48:19:f4:bb:e3:1e:78:8c:0b:2b:90:b9:f1:b7:97:ac:
97:6b:91:e5:cf:2d:80:cf:cc:48:cb:3e:9e:6c:ac:91:ea:5f:
a4:28:93:fb:a5:7d:b9:8d:d0:51:e1:0d:c3:07:d1:32:bc:54:
9c:21:26:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:45:54 2026 by rpki-client