Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
File: sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft (raw, json)
Hash identifier: xbig15wgV8KS2FucIDHNHsZc1WGzrZiw+qpb2zpDJNc=
Subject key identifier: EE:2C:01:20:35:58:5E:DC:C8:A8:8C:F3:3B:55:E2:32:B9:65:C6:03
Authority key identifier: B1:11:57:C9:8F:26:27:9F:C3:EE:D2:DA:B3:CF:11:83:72:BD:BE:1B
Certificate issuer: /CN=b11157c98f26279fc3eed2dab3cf118372bdbe1b
Certificate serial: 01A0D6BA0065DF489274171DD99A198B7CA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRFXyY8mJ5_D7tLas88Rg3K9vhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
Manifest number: 0769
Signing time: Fri 25 Sep 2026 04:01:48 +0000
Manifest this update: Fri 25 Sep 2026 04:01:48 +0000
Manifest next update: Sat 26 Sep 2026 04:01:48 +0000
Files and hashes: 1: KfYGsusnHllzc3HN92AAdqUVjQo.roa (hash: gW3c/fjZpWHlQkkjPS1/2ufW3e6QoYfqV4VH4SK5fWk=)
2: sRFXyY8mJ5_D7tLas88Rg3K9vhs.crl (hash: ljjyNhqGmCdMYP6eIHA8ZeL9ZxUf+oMGx7DNM31AOVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sRFXyY8mJ5_D7tLas88Rg3K9vhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 04:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:ba:00:65:df:48:92:74:17:1d:d9:9a:19:8b:7c:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b11157c98f26279fc3eed2dab3cf118372bdbe1b
Validity
Not Before: Sep 25 04:01:48 2026 GMT
Not After : Sep 26 04:01:48 2026 GMT
Subject: CN=ee2c012035585edcc8a88cf33b55e232b965c603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:61:12:09:03:4f:05:01:86:bc:18:77:d4:c7:
7b:1b:4f:91:77:f2:df:3a:5d:89:92:a9:98:d9:96:
71:0c:fe:de:2c:16:4d:68:8b:4b:c3:9f:6f:59:32:
40:c4:df:e8:36:80:b7:03:e6:80:97:4f:61:f4:52:
58:d1:51:54:87:a2:5e:3d:67:62:ea:8d:57:0b:df:
6a:1a:aa:a4:d4:cd:64:26:c7:a1:36:fa:7c:71:34:
9f:87:64:cb:1d:72:d8:ef:e6:5f:d8:8a:95:30:f1:
d8:21:74:79:06:a0:fa:94:a0:cf:9f:e5:b3:fd:bf:
57:64:4d:a3:97:05:24:15:ef:b1:7d:bf:83:dc:53:
14:6d:6a:5f:de:7b:e4:83:40:f5:8f:ac:c1:ef:8f:
b5:a7:0d:59:a7:83:44:a7:71:77:f3:7c:0d:a1:d6:
2f:4b:2c:a8:9e:30:dc:37:11:d5:ed:9f:0f:54:2c:
e9:e1:f8:9d:52:bb:2c:db:d4:b9:23:27:4c:45:db:
4e:1f:71:db:1e:eb:ef:7c:d2:a9:0a:b1:68:a9:da:
34:63:92:d1:aa:7d:6c:4e:4d:a2:dc:47:3c:2a:b4:
90:47:ca:ef:3e:cb:33:0e:f4:0c:60:fa:20:c4:23:
de:20:b3:ae:9d:60:a1:dc:63:87:41:29:70:02:0e:
32:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:2C:01:20:35:58:5E:DC:C8:A8:8C:F3:3B:55:E2:32:B9:65:C6:03
X509v3 Authority Key Identifier:
keyid:B1:11:57:C9:8F:26:27:9F:C3:EE:D2:DA:B3:CF:11:83:72:BD:BE:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRFXyY8mJ5_D7tLas88Rg3K9vhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:9d:f4:26:39:fc:2d:78:48:cb:5c:a8:cb:e0:40:95:48:68:
17:df:19:81:9f:aa:0b:b9:10:67:30:15:53:6c:41:2b:ee:e3:
ee:0b:11:15:a3:e8:d0:c3:bf:74:21:7d:2e:cb:ed:38:f3:e9:
28:24:02:7f:a4:4b:e6:38:31:48:25:91:81:1f:4d:0a:ad:16:
92:3f:e3:54:0b:09:cb:dd:44:b3:70:5e:2f:39:2a:94:68:bc:
df:f7:f3:56:86:4c:d6:60:d2:ff:cc:95:fc:f8:27:cc:51:86:
23:6d:37:41:54:82:e9:f3:1b:f4:cf:d7:57:de:40:77:04:0c:
10:c0:1a:dc:96:10:4b:21:07:d1:dd:12:66:f2:08:7f:c7:00:
27:9a:b1:51:a7:7e:e1:9c:84:5a:97:30:19:9a:51:4d:9f:28:
23:13:e2:ef:73:f3:dc:a2:60:94:7c:9d:de:83:5d:65:0e:ef:
5f:ac:31:55:40:29:96:18:de:a1:b4:e4:47:be:90:48:2a:91:
1a:9f:20:75:bc:b3:22:46:db:3f:41:f3:6a:05:fe:6a:23:bc:
6c:3f:3d:9c:d3:2b:c0:5c:3c:39:4f:01:39:e8:c8:1e:ee:c0:
1f:24:07:ca:30:91:87:74:37:87:f7:67:2c:49:60:e9:1f:6b:
27:68:23:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:18:08 2026 by rpki-client