Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft
File: sSUy4p8i-iMdxvyOUw77HHYRngo.mft (raw, json)
Hash identifier: jejD6vmQU8Cn/TGw7S+inpULynpZbMgHTBLfJvWnBbA=
Subject key identifier: 6D:83:0E:22:25:F1:8B:A6:F7:E0:10:93:4B:2B:38:9B:9E:FA:50:23
Authority key identifier: B1:25:32:E2:9F:22:FA:23:1D:C6:FC:8E:53:0E:FB:1C:76:11:9E:0A
Certificate issuer: /CN=b12532e29f22fa231dc6fc8e530efb1c76119e0a
Certificate serial: 019D25F1C40995D1B8C65752AC660A0E12C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sSUy4p8i-iMdxvyOUw77HHYRngo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft
Manifest number: 012C
Signing time: Wed 25 Mar 2026 17:01:34 +0000
Manifest this update: Wed 25 Mar 2026 17:01:34 +0000
Manifest next update: Thu 26 Mar 2026 17:01:34 +0000
Files and hashes: 1: FRuPa3TQLmOFKS43Th1eCNTwaoI.asa (hash: 27T9GCi2bfzmEH7qtY+uT56lMZiqysQt1tGrtXQaUjY=)
2: sSUy4p8i-iMdxvyOUw77HHYRngo.crl (hash: /DEPB6/3YCpyiWeikjLAtBYGrKCb9ewvNp4JfyyT2WU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft
rsync://rpki.ripe.net/repository/DEFAULT/sSUy4p8i-iMdxvyOUw77HHYRngo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:c4:09:95:d1:b8:c6:57:52:ac:66:0a:0e:12:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b12532e29f22fa231dc6fc8e530efb1c76119e0a
Validity
Not Before: Mar 25 17:01:34 2026 GMT
Not After : Mar 26 17:01:34 2026 GMT
Subject: CN=6d830e2225f18ba6f7e010934b2b389b9efa5023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:22:d0:e1:8e:45:ee:c8:87:41:d9:40:ad:c0:
66:b6:82:2c:c7:66:63:e6:eb:f6:8e:b6:d9:12:b1:
51:42:65:75:7b:93:3c:52:4d:27:c9:f6:5d:7a:c6:
d9:b3:b7:10:c4:10:e1:96:cf:16:d9:a9:67:33:cf:
4b:f8:8a:8a:13:92:06:41:cc:d5:b7:ca:04:f1:39:
b0:13:f6:4f:1c:62:81:84:68:f0:f9:cf:49:56:97:
b2:e2:02:dd:5c:79:f1:5b:a2:a9:78:cd:1a:6f:4f:
4f:cf:26:a9:e4:53:4f:dc:1e:bb:88:09:c6:5c:dd:
f8:13:d1:04:55:89:0e:65:8e:a6:a6:a0:de:50:30:
12:eb:f3:f0:b7:42:ee:b0:a3:74:2d:4e:3b:f6:26:
58:99:ef:fc:ea:9e:8c:79:31:64:9f:79:62:db:21:
79:56:86:49:02:ef:b6:89:d5:7d:0f:e3:3e:aa:27:
16:be:13:8f:cb:9a:ce:7a:0a:71:a6:3f:68:b0:91:
88:af:10:76:88:74:82:ee:4a:81:0f:dc:2a:f8:c2:
64:44:83:9b:da:65:dc:1c:db:3f:e3:c6:62:f4:cc:
03:86:d0:ed:da:1a:b6:2a:7a:6f:2e:3c:24:7f:17:
50:18:87:3b:55:c7:54:ee:ed:cf:3c:ad:04:ee:0c:
a4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:83:0E:22:25:F1:8B:A6:F7:E0:10:93:4B:2B:38:9B:9E:FA:50:23
X509v3 Authority Key Identifier:
keyid:B1:25:32:E2:9F:22:FA:23:1D:C6:FC:8E:53:0E:FB:1C:76:11:9E:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sSUy4p8i-iMdxvyOUw77HHYRngo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:a5:bb:25:c7:0e:e3:92:fa:fc:e1:5f:3f:bb:6a:51:6b:91:
59:87:9d:76:a1:36:16:62:14:db:8f:7a:d0:ae:d2:03:1b:fb:
8b:61:d5:df:d4:be:3f:3a:cc:80:90:05:cd:d0:d5:ee:3a:2d:
b8:77:b3:33:ec:f1:06:dd:6e:18:7f:7c:c3:e8:43:ba:72:ce:
6f:86:b5:2b:d5:5f:e7:7f:a4:af:7b:b9:6d:5c:dd:a2:69:52:
dd:3f:25:af:f5:f5:09:95:9f:59:43:18:46:fb:c7:5a:1c:d2:
0a:26:0b:4a:64:d5:7b:7e:a1:d7:5f:3a:4b:a1:50:79:8b:1e:
cc:04:de:22:ec:9b:ce:c2:43:1e:6d:1e:6e:e8:7f:a3:dd:08:
74:b6:87:41:8f:bc:65:0f:52:10:8d:32:8c:ee:4d:6f:7c:76:
ef:f0:6b:62:e7:a6:d3:09:47:cd:b2:9e:28:db:52:35:fc:45:
21:20:fe:7e:e9:97:02:95:f7:54:8b:64:56:9b:1f:be:eb:13:
76:73:4f:dc:4a:34:84:dc:89:26:24:53:2f:0b:1b:11:20:69:
39:bb:97:b7:2e:de:73:f4:d1:a4:a3:99:cb:90:c5:05:41:5e:
b8:2c:e4:11:1a:96:8b:f9:f8:4e:ec:7c:9f:9d:bb:4c:99:ee:
88:dc:b1:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:16:08 2026 by rpki-client