Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/72281a-d688-415d-a2c6-17f4e0f6cdeb/1/sYfM7EmqX2aqAmSNkbSi7o_3veY.mft
File: sYfM7EmqX2aqAmSNkbSi7o_3veY.mft (raw, json)
Hash identifier: eqg7drNWHuIpNhqP7mRvEPIPhFmihnD+Ih0Ltrlg2Ws=
Subject key identifier: 0B:52:0B:21:B2:02:0B:FD:6A:3D:FD:DA:54:06:DF:44:DD:62:65:23
Authority key identifier: B1:87:CC:EC:49:AA:5F:66:AA:02:64:8D:91:B4:A2:EE:8F:F7:BD:E6
Certificate issuer: /CN=b187ccec49aa5f66aa02648d91b4a2ee8ff7bde6
Certificate serial: 019D333F07BF8CB7849C21E04375090D40CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sYfM7EmqX2aqAmSNkbSi7o_3veY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/72281a-d688-415d-a2c6-17f4e0f6cdeb/1/sYfM7EmqX2aqAmSNkbSi7o_3veY.mft
Manifest number: 05BB
Signing time: Sat 28 Mar 2026 07:01:01 +0000
Manifest this update: Sat 28 Mar 2026 07:01:01 +0000
Manifest next update: Sun 29 Mar 2026 07:01:01 +0000
Files and hashes: 1: sYfM7EmqX2aqAmSNkbSi7o_3veY.crl (hash: ZsYeLxRHP6Ld1FmErFuEUbWzSXv4oKdV858xCgjx/bo=)
2: vtk0NYL8kgLZ9pXjVTmANhtyXlc.roa (hash: ASiU/VZxh3GZFZYmlNltFl5dj/W+E1FulQvZXR6ONjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/72281a-d688-415d-a2c6-17f4e0f6cdeb/1/sYfM7EmqX2aqAmSNkbSi7o_3veY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/72281a-d688-415d-a2c6-17f4e0f6cdeb/1/sYfM7EmqX2aqAmSNkbSi7o_3veY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sYfM7EmqX2aqAmSNkbSi7o_3veY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:3f:07:bf:8c:b7:84:9c:21:e0:43:75:09:0d:40:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b187ccec49aa5f66aa02648d91b4a2ee8ff7bde6
Validity
Not Before: Mar 28 07:01:01 2026 GMT
Not After : Mar 29 07:01:01 2026 GMT
Subject: CN=0b520b21b2020bfd6a3dfdda5406df44dd626523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:18:52:45:34:9b:a9:db:ce:9d:a1:5b:9d:5e:
b8:dd:f6:ac:8b:66:5d:92:9d:b5:2a:6b:9d:1f:7e:
f6:65:b9:b9:e6:9e:2b:92:28:7f:e8:a4:b2:21:82:
d2:c6:7f:98:97:07:cc:74:d7:61:ac:56:16:e3:9f:
1c:75:92:4c:c5:e1:c0:7a:0a:26:0d:e9:cd:9a:2d:
61:3f:89:85:39:da:e3:c7:73:89:9c:03:cb:3e:f2:
0d:fb:5a:a6:10:8c:6a:65:7c:51:e8:8a:56:5f:8b:
bb:cc:42:3e:e8:70:21:11:c1:83:ab:7b:ab:a8:17:
58:e9:9b:c2:ce:d7:f3:1f:93:70:b8:30:58:bd:46:
74:a3:46:32:06:72:8c:53:f9:82:af:d2:35:3b:b1:
c0:57:50:07:67:93:3b:b7:83:98:bf:e7:4d:9f:37:
36:46:c0:6b:3f:d9:6d:16:83:3f:eb:5d:e8:58:2b:
a2:21:b7:91:28:b0:53:d4:6e:5c:38:0c:93:51:c6:
00:58:d8:bf:f1:9f:a9:9a:af:2b:fa:3b:a7:64:52:
f9:65:20:cf:66:6e:5d:6a:1c:6a:2d:6d:5e:02:00:
45:10:c6:a5:7f:07:34:25:d4:d4:1c:7d:27:e4:8d:
12:58:69:3a:b0:6a:08:5d:6a:f1:6e:a8:8c:ad:d5:
86:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:52:0B:21:B2:02:0B:FD:6A:3D:FD:DA:54:06:DF:44:DD:62:65:23
X509v3 Authority Key Identifier:
keyid:B1:87:CC:EC:49:AA:5F:66:AA:02:64:8D:91:B4:A2:EE:8F:F7:BD:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYfM7EmqX2aqAmSNkbSi7o_3veY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/72281a-d688-415d-a2c6-17f4e0f6cdeb/1/sYfM7EmqX2aqAmSNkbSi7o_3veY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/72281a-d688-415d-a2c6-17f4e0f6cdeb/1/sYfM7EmqX2aqAmSNkbSi7o_3veY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:b5:41:27:1d:57:4e:4b:47:65:01:e5:64:86:52:d9:82:da:
1c:e9:8c:9a:e0:9a:89:80:15:3c:01:0f:91:c6:dc:fa:4f:31:
f1:3d:fb:c1:ff:e6:8a:c9:73:c7:08:ab:14:60:18:38:b5:f8:
ff:a3:30:29:08:6d:15:a2:7d:d1:78:8d:1e:5e:15:85:a7:00:
80:3d:3e:27:7a:54:0d:a1:b6:ca:57:e2:27:26:46:9e:fe:94:
b6:80:31:47:a4:c1:12:df:ab:f5:28:bc:d9:63:dd:9d:2b:f9:
d2:6b:d0:bd:f6:ca:92:78:39:d5:a3:cc:6f:fd:aa:95:65:c1:
8f:52:02:88:4b:09:1a:84:a9:77:17:29:e1:ce:7b:a7:06:e9:
c8:44:8e:9f:ae:63:e2:df:05:16:83:66:14:b3:ae:5d:c5:0a:
d0:ff:ad:91:13:7f:2c:24:3b:0c:b6:81:7f:59:37:dd:1c:6d:
7d:4b:a6:0d:68:12:ad:33:b9:a5:53:53:61:98:ff:7b:0b:ca:
30:95:3d:4d:dc:5c:7e:cf:0f:12:d1:36:07:5d:8b:5a:ca:d1:
c6:4c:ab:bd:16:11:1b:e0:81:17:f3:68:9f:ae:9d:1f:61:04:
c1:f3:5c:f6:aa:e1:91:e3:2a:7f:27:09:75:9e:df:a7:34:9f:
8c:71:b0:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:33:51 2026 by rpki-client