Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft
File: sSUy4p8i-iMdxvyOUw77HHYRngo.mft (raw, json)
Hash identifier: 43NJy3d6773EcG0z1A2aqTU9GAFQnsuw3z0lvs06Dbw=
Subject key identifier: 27:BF:A1:DA:0E:92:5E:28:DD:4D:9C:7C:6B:CB:9A:32:01:BD:F8:B2
Authority key identifier: B1:25:32:E2:9F:22:FA:23:1D:C6:FC:8E:53:0E:FB:1C:76:11:9E:0A
Certificate issuer: /CN=b12532e29f22fa231dc6fc8e530efb1c76119e0a
Certificate serial: 01A0D3151578C7935288E16E277C225F7CE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sSUy4p8i-iMdxvyOUw77HHYRngo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft
Manifest number: 0314
Signing time: Thu 24 Sep 2026 11:02:49 +0000
Manifest this update: Thu 24 Sep 2026 11:02:49 +0000
Manifest next update: Fri 25 Sep 2026 11:02:49 +0000
Files and hashes: 1: 25Etx6_KQUT1qjkjo3vSdgOyHEA.asa (hash: GYD2auqrIWxCAdXwTRlw0CXeGugYstxuAXqctHif/nI=)
2: sSUy4p8i-iMdxvyOUw77HHYRngo.crl (hash: QZIZtTpvrAwdRZGEv9OAUwkxaX3CycjSFzF6CxCBXQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft
rsync://rpki.ripe.net/repository/DEFAULT/sSUy4p8i-iMdxvyOUw77HHYRngo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:15:15:78:c7:93:52:88:e1:6e:27:7c:22:5f:7c:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b12532e29f22fa231dc6fc8e530efb1c76119e0a
Validity
Not Before: Sep 24 11:02:49 2026 GMT
Not After : Sep 25 11:02:49 2026 GMT
Subject: CN=27bfa1da0e925e28dd4d9c7c6bcb9a3201bdf8b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:92:59:b6:2b:ec:78:8b:47:4a:07:7b:a0:a5:
13:4e:c1:86:bd:e4:37:77:05:5b:22:d6:4a:58:44:
e0:33:19:7b:88:7b:bb:5e:0a:c5:37:00:0e:56:86:
02:47:76:41:76:2b:d1:72:4b:35:86:e5:39:94:2d:
89:12:19:0a:41:79:03:1d:39:92:1c:a9:2d:5f:46:
32:c4:62:44:9a:6d:b1:13:fa:0d:f5:bc:28:07:13:
41:fc:04:b6:e3:e2:13:d7:9e:5c:14:11:69:f2:9b:
28:26:1d:4b:85:db:22:8b:3e:cf:f6:9b:3a:d7:45:
ec:be:36:f6:e8:67:3b:aa:2a:a8:86:fd:0a:55:44:
1e:67:c1:c9:bb:09:64:c3:cd:8f:99:74:64:29:86:
8d:70:d9:b4:5c:e4:0c:4e:ea:d2:bb:10:7b:bc:da:
21:16:b5:7b:ff:c9:20:e4:a0:fa:d2:14:09:12:b2:
a1:d6:5a:a2:53:96:3a:46:da:ab:70:d6:09:42:b3:
2b:20:3d:72:0c:19:a0:8b:f4:51:0e:38:e2:69:8a:
b4:16:1e:d6:0e:e7:bb:25:87:77:6c:57:a0:bb:27:
e0:d1:2a:86:f9:c6:6d:dc:79:0e:b1:60:63:66:0c:
a3:f5:c8:c1:3b:20:3f:c0:4b:c8:85:aa:c6:54:f0:
1a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:BF:A1:DA:0E:92:5E:28:DD:4D:9C:7C:6B:CB:9A:32:01:BD:F8:B2
X509v3 Authority Key Identifier:
keyid:B1:25:32:E2:9F:22:FA:23:1D:C6:FC:8E:53:0E:FB:1C:76:11:9E:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sSUy4p8i-iMdxvyOUw77HHYRngo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:eb:aa:6a:4d:2b:2f:cc:6e:7d:fa:4e:b3:cf:9e:d9:e4:f6:
a0:ef:84:3a:87:41:40:e8:91:49:4f:c6:0a:a8:9d:48:7d:6d:
c2:5d:a0:2f:d9:cf:3d:0b:3a:3d:3e:e5:74:e2:85:6f:41:57:
f2:48:89:b6:84:0d:f4:d0:a6:96:6f:8e:dd:e3:7d:e3:91:04:
89:4e:4c:92:26:08:f7:b7:ee:0f:b7:1a:18:b0:bc:dd:e2:66:
ee:65:88:a0:e3:5c:8d:58:2d:37:f6:ce:2b:b7:97:b8:34:74:
0c:86:9f:30:ba:a1:ab:77:36:86:ec:32:b2:13:27:c0:24:8b:
7d:c2:df:2c:d8:da:a2:ed:6d:42:49:49:15:95:d5:95:1f:8a:
82:5a:fe:fe:2d:0c:a3:68:c5:8e:f1:c6:51:94:64:f7:fc:bb:
1d:b3:31:a4:78:06:aa:1b:6c:ed:9c:e8:70:c5:6e:18:6c:da:
8b:fe:15:34:02:db:d6:46:0e:90:46:e6:a6:42:e4:08:25:d0:
24:0e:6e:f8:3f:c8:5d:d9:16:9d:8d:02:e6:18:d2:ed:0a:ca:
87:53:8c:97:ea:66:7a:54:4f:61:4f:f0:c6:9d:1a:93:b9:6e:
c9:04:55:31:e8:70:43:b9:77:d5:29:21:f6:01:70:1a:f2:69:
8c:0c:6f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:10:30 2026 by rpki-client