Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft
File: sSUy4p8i-iMdxvyOUw77HHYRngo.mft (raw, json)
Hash identifier: 8D2W3+r7AzMCzzd1zZ2sRgZM2+BC0JlkOFcpbyByfOY=
Subject key identifier: 0B:66:DA:EA:4A:31:A1:81:0A:56:03:76:BD:CC:E3:AD:48:64:E8:7A
Authority key identifier: B1:25:32:E2:9F:22:FA:23:1D:C6:FC:8E:53:0E:FB:1C:76:11:9E:0A
Certificate issuer: /CN=b12532e29f22fa231dc6fc8e530efb1c76119e0a
Certificate serial: 019F8EA22453786CAF1DABB1A3291B80D763
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sSUy4p8i-iMdxvyOUw77HHYRngo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft
Manifest number: 026C
Signing time: Thu 23 Jul 2026 11:00:18 +0000
Manifest this update: Thu 23 Jul 2026 11:00:18 +0000
Manifest next update: Fri 24 Jul 2026 11:00:18 +0000
Files and hashes: 1: 25Etx6_KQUT1qjkjo3vSdgOyHEA.asa (hash: GYD2auqrIWxCAdXwTRlw0CXeGugYstxuAXqctHif/nI=)
2: sSUy4p8i-iMdxvyOUw77HHYRngo.crl (hash: gUEjhNrDqhG6Eg5edDMnk4BnW0RKykxMnMXQJpknuRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft
rsync://rpki.ripe.net/repository/DEFAULT/sSUy4p8i-iMdxvyOUw77HHYRngo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:24:53:78:6c:af:1d:ab:b1:a3:29:1b:80:d7:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b12532e29f22fa231dc6fc8e530efb1c76119e0a
Validity
Not Before: Jul 23 11:00:18 2026 GMT
Not After : Jul 24 11:00:18 2026 GMT
Subject: CN=0b66daea4a31a1810a560376bdcce3ad4864e87a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ac:b8:80:fb:20:58:22:fe:50:26:9e:d8:df:
ab:d4:c1:a6:c4:3e:66:13:b6:77:10:99:9d:e0:19:
20:34:f8:60:80:1d:80:a4:16:b1:ca:82:70:47:49:
7a:86:63:ac:6d:30:c3:46:fe:5d:59:06:46:e3:1a:
76:d4:f1:80:49:c0:74:b5:b5:ec:58:82:59:49:0c:
24:be:19:c3:53:8d:b9:01:54:a0:0b:1f:a7:75:7d:
04:3f:1f:85:2c:cc:74:21:b6:8e:2f:9c:48:ab:7f:
8d:ec:88:dc:d7:3b:4f:62:7f:c1:db:d4:d5:2b:3d:
db:9e:16:84:78:09:1b:99:48:13:3d:0c:4f:9b:fc:
95:89:df:a4:3e:a4:4f:fd:4e:f4:4b:85:6e:a1:a8:
92:82:89:6d:b5:2e:ef:b2:50:9d:a7:5e:20:29:a8:
28:7a:f4:2e:36:6d:83:76:4a:f1:b4:62:20:52:24:
2e:a9:eb:a7:f2:30:a2:a7:3c:e3:30:e9:bc:f6:1b:
79:e4:0a:9a:8b:ba:45:09:56:6b:c0:bd:41:a2:4b:
f3:27:28:1a:d5:80:83:e9:3e:b5:18:9d:09:06:82:
45:97:80:f4:9b:36:66:7a:af:85:3e:04:9e:60:3f:
76:78:96:23:dd:99:1d:51:27:a7:3a:ca:43:2a:00:
71:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:66:DA:EA:4A:31:A1:81:0A:56:03:76:BD:CC:E3:AD:48:64:E8:7A
X509v3 Authority Key Identifier:
keyid:B1:25:32:E2:9F:22:FA:23:1D:C6:FC:8E:53:0E:FB:1C:76:11:9E:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sSUy4p8i-iMdxvyOUw77HHYRngo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:24:93:81:38:86:61:10:6b:81:77:e5:f0:5f:c0:1f:7a:20:
53:9d:d0:ce:08:d7:b8:6f:5b:9b:c9:f6:65:eb:e8:f7:48:28:
e3:82:33:ce:fb:00:e0:da:0d:e0:b5:01:51:dc:21:32:5c:1c:
bc:d4:97:c4:2a:0a:c9:13:3a:ab:ec:be:d9:10:28:2c:df:46:
ad:89:62:ec:a1:0d:4e:cb:f2:15:42:41:d7:f7:08:80:b5:d6:
69:2b:5e:b7:78:c3:b4:5d:1a:a9:c9:ea:06:e4:56:7c:a5:d5:
9d:47:a3:fa:bf:47:d1:e6:82:0b:66:d0:c3:8d:30:ed:2a:af:
f9:e4:e6:8b:a6:c3:83:be:1d:13:f6:c6:ad:84:69:3e:8f:31:
96:37:8a:16:85:21:1e:e8:55:af:bd:48:d5:77:cc:06:46:1d:
01:de:cf:1b:69:1b:90:28:b5:77:f3:e5:0c:18:a6:22:e9:db:
3f:25:d4:98:25:a5:db:b6:87:fb:65:d4:dc:c6:0b:fb:79:4c:
0b:aa:2c:65:bf:a6:a9:72:51:c0:3e:09:6d:0d:28:15:85:bc:
92:ad:72:66:7a:4d:4e:ca:e5:c8:e5:c2:17:b3:7c:07:86:1b:
0b:31:b5:95:40:d5:f3:cf:62:6f:cb:f4:ad:6d:5d:91:23:ef:
6b:2f:a1:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+OoiRTeGyvHauxoykbgNdjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxMjUzMmUyOWYyMmZhMjMxZGM2ZmM4ZTUzMGVmYjFjNzYx
MTllMGEwHhcNMjYwNzIzMTEwMDE4WhcNMjYwNzI0MTEwMDE4WjAzMTEwLwYDVQQD
EygwYjY2ZGFlYTRhMzFhMTgxMGE1NjAzNzZiZGNjZTNhZDQ4NjRlODdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnay4gPsgWCL+UCae2N+r1MGmxD5m
E7Z3EJmd4BkgNPhggB2ApBaxyoJwR0l6hmOsbTDDRv5dWQZG4xp21PGAScB0tbXs
WIJZSQwkvhnDU425AVSgCx+ndX0EPx+FLMx0IbaOL5xIq3+N7Ijc1ztPYn/B29TV
Kz3bnhaEeAkbmUgTPQxPm/yVid+kPqRP/U70S4VuoaiSgolttS7vslCdp14gKago
evQuNm2DdkrxtGIgUiQuqeun8jCipzzjMOm89ht55Aqai7pFCVZrwL1BokvzJyga
1YCD6T61GJ0JBoJFl4D0mzZmeq+FPgSeYD92eJYj3ZkdUSenOspDKgBxAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAtm2upKMaGBClYDdr3M461IZOh6MB8GA1UdIwQY
MBaAFLElMuKfIvojHcb8jlMO+xx2EZ4KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1NVeTRwOGktaU1keHZ5T1V3NzdISFlSbmdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS80NzJkZDQtMTlhNi00NDBmLWE4N2Qt
OTMzZWZiZDc3ZjViLzEvc1NVeTRwOGktaU1keHZ5T1V3NzdISFlSbmdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS80NzJkZDQtMTlhNi00NDBmLWE4N2QtOTMzZWZiZDc3ZjVi
LzEvc1NVeTRwOGktaU1keHZ5T1V3NzdISFlSbmdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFySTgTiG
YRBrgXfl8F/AH3ogU53QzgjXuG9bm8n2Zevo90go44IzzvsA4NoN4LUBUdwhMlwc
vNSXxCoKyRM6q+y+2RAoLN9GrYli7KENTsvyFUJB1/cIgLXWaStet3jDtF0aqcnq
BuRWfKXVnUej+r9H0eaCC2bQw40w7Sqv+eTmi6bDg74dE/bGrYRpPo8xljeKFoUh
HuhVr71I1XfMBkYdAd7PG2kbkCi1d/PlDBimIunbPyXUmCWl27aH+2XU3MYL+3lM
C6osZb+mqXJRwD4JbQ0oFYW8kq1yZnpNTsrlyOXCF7N8B4YbCzG1lUDV889ib8v0
rW1dkSPvay+hQg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:24 2026 by rpki-client