Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
File: sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft (raw, json)
Hash identifier: ZercfVP8dRYnE0kDAP5VH8n5iuxXtimNmzq6aZH0Qwc=
Subject key identifier: 4C:41:12:64:6C:8D:F4:2E:1C:81:33:3E:8C:A1:18:D3:4C:0D:FA:04
Authority key identifier: B1:11:57:C9:8F:26:27:9F:C3:EE:D2:DA:B3:CF:11:83:72:BD:BE:1B
Certificate issuer: /CN=b11157c98f26279fc3eed2dab3cf118372bdbe1b
Certificate serial: 019FAB6350B7C55A5212AF085DAB2E96991F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRFXyY8mJ5_D7tLas88Rg3K9vhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
Manifest number: 06CE
Signing time: Wed 29 Jul 2026 01:00:40 +0000
Manifest this update: Wed 29 Jul 2026 01:00:40 +0000
Manifest next update: Thu 30 Jul 2026 01:00:40 +0000
Files and hashes: 1: KfYGsusnHllzc3HN92AAdqUVjQo.roa (hash: gW3c/fjZpWHlQkkjPS1/2ufW3e6QoYfqV4VH4SK5fWk=)
2: sRFXyY8mJ5_D7tLas88Rg3K9vhs.crl (hash: JtUl98i/bUvKrfRgulI8YVP0a3CCZwc++mtZHKZ9RR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sRFXyY8mJ5_D7tLas88Rg3K9vhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:50:b7:c5:5a:52:12:af:08:5d:ab:2e:96:99:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b11157c98f26279fc3eed2dab3cf118372bdbe1b
Validity
Not Before: Jul 29 01:00:40 2026 GMT
Not After : Jul 30 01:00:40 2026 GMT
Subject: CN=4c4112646c8df42e1c81333e8ca118d34c0dfa04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:18:9e:b4:c7:97:d6:39:85:96:da:e0:3f:71:
c5:75:51:36:4c:a1:e8:59:ed:ff:65:4d:e0:e6:0c:
76:ce:22:4d:2c:c8:9f:62:f0:d2:3b:68:cc:0f:2c:
ff:6b:e1:35:59:a7:17:90:94:d8:da:67:93:11:7b:
40:f8:63:25:54:36:af:a5:3e:eb:83:84:0e:84:62:
ff:90:7f:bd:47:20:e4:0d:f9:ed:f6:80:bb:7d:8c:
68:70:0b:5a:4f:43:11:6b:7d:5a:12:a3:a5:d0:a8:
c8:32:a8:0a:ab:0e:7a:5b:05:d7:64:ae:2f:58:bb:
12:80:65:97:7b:28:40:dd:52:e2:f0:3b:5c:70:e4:
22:f3:1f:06:11:57:99:d7:b6:af:58:15:0a:47:cd:
c4:43:92:43:fc:4e:9e:1a:9f:c9:1f:f2:9b:dc:e7:
f7:3d:cc:2b:0d:95:8f:87:7c:ab:75:5b:e2:91:42:
8e:fb:6b:58:21:e3:d5:ae:66:50:de:85:02:e3:77:
24:b2:15:8a:88:29:5f:bc:a2:d6:5b:4d:36:de:b6:
ac:8e:cb:b9:2a:c3:3a:cc:79:67:ac:e8:72:d5:bb:
bd:a2:40:80:48:f7:90:65:c5:06:47:a8:99:aa:f9:
b9:21:65:2f:ea:30:b3:81:e6:18:c9:74:43:46:61:
72:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:41:12:64:6C:8D:F4:2E:1C:81:33:3E:8C:A1:18:D3:4C:0D:FA:04
X509v3 Authority Key Identifier:
keyid:B1:11:57:C9:8F:26:27:9F:C3:EE:D2:DA:B3:CF:11:83:72:BD:BE:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRFXyY8mJ5_D7tLas88Rg3K9vhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:13:12:ea:3b:0a:32:ea:fa:7c:24:11:54:ee:06:fb:8b:8f:
59:e8:67:b6:a8:be:6f:7d:c6:51:94:53:c3:2f:49:5e:c2:a7:
12:48:de:df:04:8b:21:03:b4:4d:3b:e1:06:af:d6:d0:45:b5:
10:c1:25:ff:7a:2c:cd:e5:9c:3f:6a:58:93:04:bc:5a:96:83:
5f:8e:8d:bf:7b:18:e0:29:30:26:4c:f8:99:e0:2a:f4:fc:2a:
1e:e1:f6:0a:84:49:e2:9a:56:bb:ea:a9:cd:b9:66:7b:7d:19:
84:42:58:a8:2d:e5:dc:cb:9d:c4:d5:4d:e5:57:2a:c5:f6:fc:
7c:90:1a:d7:01:74:b0:31:10:5d:85:ce:e9:46:ed:96:12:32:
ee:b0:37:ed:4c:86:b0:49:17:8d:8f:db:33:46:1d:dc:90:ef:
e4:21:b9:7b:2c:0c:ce:00:d6:a3:da:2e:8a:b0:14:41:15:f5:
5e:4c:2d:f2:a5:8e:3b:3a:8f:95:48:a3:c2:dd:6d:69:e7:a4:
a7:93:22:8c:5d:1a:ad:5d:6a:14:e9:b1:5a:13:22:18:c6:e3:
a0:22:2d:63:47:3e:0c:24:66:15:66:e3:6a:6a:6f:d6:15:19:
42:be:0d:c9:4e:bc:7d:6f:fb:de:fa:c0:5e:8b:45:e3:00:d5:
a9:1b:d2:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:49:22 2026 by rpki-client