Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/566532-b077-4889-9fe6-6576c6d9aa69/1/sYFWgYZC3I8E5A-Gd1aNZjzPSxs.mft
File: sYFWgYZC3I8E5A-Gd1aNZjzPSxs.mft (raw, json)
Hash identifier: 5qGZXzz13NTgn0lk039JbDsXtkJekIAlLdVXM/Jlk20=
Subject key identifier: F8:14:D6:43:23:D7:A7:5E:17:7C:C7:33:18:D5:5D:2D:59:6A:E1:8A
Authority key identifier: B1:81:56:81:86:42:DC:8F:04:E4:0F:86:77:56:8D:66:3C:CF:4B:1B
Certificate issuer: /CN=b18156818642dc8f04e40f8677568d663ccf4b1b
Certificate serial: 019D25F0F6403802528B3E075E40D6AE8943
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sYFWgYZC3I8E5A-Gd1aNZjzPSxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/566532-b077-4889-9fe6-6576c6d9aa69/1/sYFWgYZC3I8E5A-Gd1aNZjzPSxs.mft
Manifest number: 0278
Signing time: Wed 25 Mar 2026 17:00:41 +0000
Manifest this update: Wed 25 Mar 2026 17:00:41 +0000
Manifest next update: Thu 26 Mar 2026 17:00:41 +0000
Files and hashes: 1: qJPr5FWDClx-5QPYN1YF97DQrSk.roa (hash: KvT5oKXk2KycBv8riPWP86JI847k87GD38dyIt4mKbo=)
2: sYFWgYZC3I8E5A-Gd1aNZjzPSxs.crl (hash: mR5HWJclfICqr32pvcHG/dAabLyutJzMxRMqW9YLWt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/566532-b077-4889-9fe6-6576c6d9aa69/1/sYFWgYZC3I8E5A-Gd1aNZjzPSxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/566532-b077-4889-9fe6-6576c6d9aa69/1/sYFWgYZC3I8E5A-Gd1aNZjzPSxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sYFWgYZC3I8E5A-Gd1aNZjzPSxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f0:f6:40:38:02:52:8b:3e:07:5e:40:d6:ae:89:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b18156818642dc8f04e40f8677568d663ccf4b1b
Validity
Not Before: Mar 25 17:00:41 2026 GMT
Not After : Mar 26 17:00:41 2026 GMT
Subject: CN=f814d64323d7a75e177cc73318d55d2d596ae18a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:08:6d:c7:00:9c:cb:c4:47:56:00:47:d7:4c:
5a:77:ff:d5:ea:8c:2b:e4:5b:18:a2:84:cb:31:09:
9f:5d:4e:b8:af:ed:4b:a9:1e:2a:48:88:9a:86:9e:
a3:76:76:84:99:e8:58:4d:73:c8:a8:2b:88:fb:1e:
78:87:ed:9b:70:99:50:35:d5:95:47:cf:2a:9d:15:
07:9b:a6:05:5f:e4:c5:e3:89:26:60:37:ec:f9:90:
e5:bb:07:ca:9d:83:96:a6:9d:b3:6f:80:27:c0:24:
d4:f2:b2:48:bc:72:75:49:2a:71:4d:ac:f3:6a:99:
fc:a9:e9:b6:bb:19:47:67:98:72:21:56:57:72:52:
8e:86:98:3d:ad:5f:bd:16:38:d5:17:56:12:56:82:
d6:87:d9:d3:b7:49:aa:a9:02:34:a7:f5:17:c7:b2:
76:d9:17:02:56:61:2f:c4:98:f5:c5:a3:71:48:74:
07:28:94:0e:b5:8e:0d:d7:94:95:58:54:86:48:21:
75:dd:bb:d8:5b:69:88:96:ab:62:ad:0d:21:6b:53:
f0:96:a8:46:43:9e:fd:28:4c:42:59:eb:ca:d5:87:
c6:21:e2:73:b9:73:da:c4:a5:9b:7c:1f:e5:94:66:
8b:a0:74:c1:24:da:b4:b4:9a:d1:a6:a6:43:8e:a6:
7f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:14:D6:43:23:D7:A7:5E:17:7C:C7:33:18:D5:5D:2D:59:6A:E1:8A
X509v3 Authority Key Identifier:
keyid:B1:81:56:81:86:42:DC:8F:04:E4:0F:86:77:56:8D:66:3C:CF:4B:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYFWgYZC3I8E5A-Gd1aNZjzPSxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/566532-b077-4889-9fe6-6576c6d9aa69/1/sYFWgYZC3I8E5A-Gd1aNZjzPSxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/566532-b077-4889-9fe6-6576c6d9aa69/1/sYFWgYZC3I8E5A-Gd1aNZjzPSxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:5e:e0:75:a6:7b:d8:23:06:0e:df:fd:52:55:f6:fc:ca:76:
25:ef:64:6c:1a:7f:57:76:1f:12:c7:ae:79:48:fe:df:e5:87:
7d:4e:a5:a5:37:e7:89:26:a7:06:52:d2:0c:ed:bb:10:2e:c5:
b9:f3:ce:a8:c3:70:22:f9:31:d7:3e:07:70:d0:af:9b:29:a0:
d2:39:ad:db:7e:66:a5:3e:8d:39:c1:46:0d:6e:93:68:6a:18:
2c:4e:d5:ab:ca:e0:b4:33:c7:56:e0:3d:9b:af:05:b6:14:86:
06:9b:b1:aa:3f:d4:7d:2f:9c:4f:18:d7:72:57:8c:b6:7e:ed:
32:d7:77:6f:ab:73:9e:13:be:18:6f:72:b5:14:51:37:f5:2e:
bf:e2:1e:59:98:fd:a8:ef:e7:96:f1:fa:b1:fe:d8:ec:7d:97:
0c:05:5d:70:1f:11:31:47:1a:80:32:29:58:c6:3e:45:b4:32:
5c:11:d8:96:36:fd:d8:48:d1:64:2e:76:c0:79:d2:90:68:82:
b8:f0:de:72:90:ae:ad:45:f8:58:db:7b:cc:a5:a5:ca:d0:56:
71:93:13:62:32:29:16:f5:ac:d1:aa:ab:3c:a9:a3:66:82:2c:
9a:1b:9f:28:ec:e0:52:49:42:a0:99:c0:ef:72:34:09:8f:d6:
e8:e1:3a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:50:44 2026 by rpki-client