Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft
File: sSUy4p8i-iMdxvyOUw77HHYRngo.mft (raw, json)
Hash identifier: XR9rLIxY3BaBlluhWpfBcM02rJZ+gE9fAh0GFTpayeE=
Subject key identifier: B7:26:82:08:0F:31:21:76:4B:46:7D:24:E0:4F:41:3B:E3:BB:47:8B
Authority key identifier: B1:25:32:E2:9F:22:FA:23:1D:C6:FC:8E:53:0E:FB:1C:76:11:9E:0A
Certificate issuer: /CN=b12532e29f22fa231dc6fc8e530efb1c76119e0a
Certificate serial: 019E1D22E2A0D1F9D5FCA0DFC0B79D6DA31B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sSUy4p8i-iMdxvyOUw77HHYRngo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft
Manifest number: 01AC
Signing time: Tue 12 May 2026 17:01:25 +0000
Manifest this update: Tue 12 May 2026 17:01:25 +0000
Manifest next update: Wed 13 May 2026 17:01:25 +0000
Files and hashes: 1: FRuPa3TQLmOFKS43Th1eCNTwaoI.asa (hash: 27T9GCi2bfzmEH7qtY+uT56lMZiqysQt1tGrtXQaUjY=)
2: sSUy4p8i-iMdxvyOUw77HHYRngo.crl (hash: vvsL7bIFJmdvg2XSwx9ZNFDTPsVdpfyRSBRiHJfRYhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft
rsync://rpki.ripe.net/repository/DEFAULT/sSUy4p8i-iMdxvyOUw77HHYRngo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:e2:a0:d1:f9:d5:fc:a0:df:c0:b7:9d:6d:a3:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b12532e29f22fa231dc6fc8e530efb1c76119e0a
Validity
Not Before: May 12 17:01:25 2026 GMT
Not After : May 13 17:01:25 2026 GMT
Subject: CN=b72682080f3121764b467d24e04f413be3bb478b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:af:1a:ac:f0:87:3a:e7:8f:69:3e:48:46:4a:
e9:04:aa:76:78:59:e1:04:3b:1b:59:ee:15:b5:7f:
b6:42:b0:3f:ba:d3:ca:88:68:16:6e:6b:aa:07:86:
77:7e:98:39:51:25:f0:92:07:29:a2:55:f9:e8:53:
4b:fc:39:0e:0d:51:e4:d1:ac:26:50:5f:b5:65:c3:
9e:b9:a8:d5:fc:51:a4:23:45:34:9a:08:a5:e3:e7:
62:f7:65:b7:6c:18:ee:01:1a:51:bf:b0:29:b9:fc:
f6:df:35:a6:d8:5e:b8:57:7b:d5:60:69:98:5e:14:
33:6b:89:da:d6:76:33:83:ac:bf:59:e8:d4:83:20:
de:3e:e6:03:2f:ae:0f:40:f3:78:74:99:ce:09:20:
54:bc:bd:fb:5a:f6:01:fb:70:1f:71:88:53:42:f2:
65:88:72:61:f9:f9:0f:4a:fa:87:1e:66:06:bb:ad:
36:9d:dd:16:b8:fa:ea:20:85:98:25:9f:66:91:9a:
5d:43:5f:e7:55:39:27:09:dd:ba:6e:3c:ea:fe:48:
ac:8b:2b:61:51:b2:c7:cb:44:7e:3b:2a:68:a3:4a:
05:ce:2a:0a:8c:38:9e:31:65:48:8d:53:2c:9a:7b:
52:6b:81:d5:99:fc:4a:3e:ba:3d:38:5f:f1:d2:d9:
4c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:26:82:08:0F:31:21:76:4B:46:7D:24:E0:4F:41:3B:E3:BB:47:8B
X509v3 Authority Key Identifier:
keyid:B1:25:32:E2:9F:22:FA:23:1D:C6:FC:8E:53:0E:FB:1C:76:11:9E:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sSUy4p8i-iMdxvyOUw77HHYRngo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:c7:87:f9:42:1c:70:4c:11:c6:bf:e0:38:34:94:c7:b6:a9:
c1:69:8f:1e:f4:d1:69:ac:98:bf:04:2f:cf:7e:8c:96:8c:d3:
f9:ff:33:a2:b0:c3:67:10:48:ed:14:0c:f8:e3:c8:12:d8:09:
85:e9:db:0d:ee:15:04:15:a6:c7:8d:97:e9:57:fd:34:c8:48:
87:ae:a6:80:d1:8a:94:e8:21:a4:f0:86:f6:d8:a8:3b:db:33:
1d:f3:e9:73:27:9b:2d:28:81:e3:de:4b:26:da:cb:13:26:34:
90:20:da:df:67:10:64:83:2a:2e:b2:9c:62:c2:0f:55:1f:81:
01:b8:55:8d:ff:76:d7:fb:cd:54:1a:00:ef:64:75:e7:44:b2:
75:81:91:07:bc:f0:e6:16:46:11:8c:6f:02:a7:f8:63:6d:4d:
59:de:bc:3f:d1:fa:ae:b7:22:5c:51:8a:18:8b:47:b2:57:71:
27:df:cd:94:41:02:65:35:6c:e7:0e:49:f2:0a:7f:6c:a0:4b:
86:8b:e9:17:d0:51:5c:d3:e6:b9:8d:b0:4e:15:67:8f:49:6f:
10:90:a1:38:10:db:ce:e5:7e:9f:e0:d7:6f:07:6d:04:1e:c2:
47:f2:46:07:74:5e:bc:83:20:a4:a0:5c:da:e3:1c:bc:26:29:
36:4b:72:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:37:59 2026 by rpki-client