Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
File: sUYBAoOoIC7qo_7zJTTj6X4EB54.mft (raw, json)
Hash identifier: 7fy+/6bivhqR6W9MXWqharmon2uMRsO8vrh7JNEmsN8=
Subject key identifier: 39:ED:AC:1E:9E:3E:7D:55:29:9D:16:3B:E7:C8:80:90:D3:9F:2F:C4
Authority key identifier: B1:46:01:02:83:A8:20:2E:EA:A3:FE:F3:25:34:E3:E9:7E:04:07:9E
Certificate issuer: /CN=b146010283a8202eeaa3fef32534e3e97e04079e
Certificate serial: 019D273ACA521CFD68FD40ABD3510D08F0EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
Manifest number: 1884
Signing time: Wed 25 Mar 2026 23:00:57 +0000
Manifest this update: Wed 25 Mar 2026 23:00:57 +0000
Manifest next update: Thu 26 Mar 2026 23:00:57 +0000
Files and hashes: 1: Y8yMvjdM8WzBnbLjMBe-EIHd6sY.roa (hash: EcntA0METUox1iYBkhoXa3famNCFNSmSo3ZvzLXW5TQ=)
2: sUYBAoOoIC7qo_7zJTTj6X4EB54.crl (hash: s7ksYtEkfD4OWG7ydfRy7WDh3zuuR/QoDC7662K5U7A=)
3: spIlTecfIOkshZMwK9KtOYZfUkI.roa (hash: F/eeG2fLu4g1L7wn7uLLQklSodsS5/Mx2XBm7dOwxcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:ca:52:1c:fd:68:fd:40:ab:d3:51:0d:08:f0:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b146010283a8202eeaa3fef32534e3e97e04079e
Validity
Not Before: Mar 25 23:00:57 2026 GMT
Not After : Mar 26 23:00:57 2026 GMT
Subject: CN=39edac1e9e3e7d55299d163be7c88090d39f2fc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:84:fb:b2:f8:29:35:dd:41:eb:2e:44:aa:0b:
0c:8e:fe:54:9d:d2:e3:fd:18:7a:93:61:81:02:ab:
0f:f0:5f:bc:29:f1:ab:9b:f7:c9:e3:ae:56:35:f9:
1a:42:04:b2:1c:0c:2c:c9:46:8a:0f:d0:1c:90:6f:
f4:31:11:6a:a1:c0:79:dc:b6:e8:d3:2f:7f:ac:17:
91:b2:40:fa:6f:a3:03:8e:33:4f:8f:f4:c3:ed:23:
05:1b:3f:67:e7:f4:a2:68:77:11:04:d5:8c:1e:2f:
da:3d:40:81:c9:b0:67:6c:e0:74:87:77:56:e1:22:
00:6d:e3:5c:bf:3e:1b:6f:59:3c:74:93:85:14:1e:
cd:ed:c9:10:78:29:70:b4:9a:5c:d1:84:5f:1d:bb:
26:77:e3:da:60:60:36:9f:db:ba:f1:83:e9:50:ec:
37:60:31:68:b0:0a:04:d8:44:11:aa:b7:91:d2:cf:
8f:df:f8:f0:59:59:fe:6b:00:1b:c3:32:fa:77:5d:
3d:58:3e:e2:97:11:e7:8d:f2:8c:6c:a9:2d:18:53:
98:9b:6f:ea:8f:fd:7a:62:60:ef:b7:64:06:7a:8f:
bd:0e:a3:8c:67:1d:d2:07:78:0f:c5:38:0a:b9:c0:
eb:42:ac:22:cd:51:be:aa:e0:2d:be:86:8c:06:5d:
5d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:ED:AC:1E:9E:3E:7D:55:29:9D:16:3B:E7:C8:80:90:D3:9F:2F:C4
X509v3 Authority Key Identifier:
keyid:B1:46:01:02:83:A8:20:2E:EA:A3:FE:F3:25:34:E3:E9:7E:04:07:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:01:e6:1d:c1:a6:8f:99:14:18:14:dc:cf:39:ce:12:c1:bf:
df:40:be:24:d7:07:71:64:b9:aa:3f:d8:73:6a:b8:24:59:3a:
c8:b0:bc:6b:cb:11:1f:fe:3b:51:3f:4f:25:70:0b:b2:b2:e6:
bf:e8:1d:8a:52:69:a8:04:6c:ec:85:a0:5c:60:41:36:a6:6c:
d6:f2:d8:06:d3:4f:48:c3:fe:10:6d:9d:39:fe:3e:0c:c8:9f:
6d:01:c4:a7:75:6c:1d:28:cf:fb:b1:ed:c0:18:03:95:8c:8a:
16:65:e2:f4:f2:b3:f1:ed:06:73:24:b1:da:70:83:21:95:bc:
b8:6b:99:6f:ce:68:0e:a0:16:19:92:ae:53:f0:7b:98:93:51:
21:97:8f:96:aa:6a:d4:29:91:f8:68:5d:c0:04:60:45:dd:2d:
b1:7d:5f:22:35:fc:a4:93:22:cb:ec:32:71:53:9e:9b:f1:ef:
51:63:80:8c:75:7f:82:1f:97:5c:4b:55:67:e9:81:90:07:37:
38:30:74:02:6b:fd:4c:f2:f8:b7:16:fb:04:ed:40:ae:5d:c8:
e0:e7:b2:b7:14:bb:ce:43:a6:d3:ca:ed:bd:ff:b0:2a:0d:19:
f6:18:f1:92:be:7c:80:4b:55:0f:8e:9e:dd:29:77:4d:d5:e8:
5b:3a:5b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:01:51 2026 by rpki-client