Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.mft
File: sPiohfd3bSq5m7TyDoTTBuA5SqM.mft (raw, json)
Hash identifier: gi9x5xaRG5jwDEkFZWW79VTTrdMqfarP4kqh+6tk6M8=
Subject key identifier: CD:43:50:4C:63:8A:24:5D:25:04:C2:61:C7:3B:34:BF:FB:B3:11:CE
Authority key identifier: B0:F8:A8:85:F7:77:6D:2A:B9:9B:B4:F2:0E:84:D3:06:E0:39:4A:A3
Certificate issuer: /CN=b0f8a885f7776d2ab99bb4f20e84d306e0394aa3
Certificate serial: 019D98BD4DF0F2B065769A9A971F092A7FA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sPiohfd3bSq5m7TyDoTTBuA5SqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.mft
Manifest number: 1655
Signing time: Fri 17 Apr 2026 00:00:36 +0000
Manifest this update: Fri 17 Apr 2026 00:00:36 +0000
Manifest next update: Sat 18 Apr 2026 00:00:36 +0000
Files and hashes: 1: 05WyMyWcwnVDoZCr0BbmBiMaPoc.roa (hash: ZxXNQ2QkuA/tbUaOYs+oznQKVfcUfC5jKVIgdvSVmnk=)
2: sPiohfd3bSq5m7TyDoTTBuA5SqM.crl (hash: nm0uZG35sJhVXMKk0CxRvq6laiTm9VerHNSMO51vnaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/sPiohfd3bSq5m7TyDoTTBuA5SqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:4d:f0:f2:b0:65:76:9a:9a:97:1f:09:2a:7f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0f8a885f7776d2ab99bb4f20e84d306e0394aa3
Validity
Not Before: Apr 17 00:00:36 2026 GMT
Not After : Apr 18 00:00:36 2026 GMT
Subject: CN=cd43504c638a245d2504c261c73b34bffbb311ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:41:73:d0:78:ba:48:d6:09:cb:83:89:f0:46:
b5:06:78:bf:61:a6:57:4a:9e:41:2c:77:a0:20:54:
46:7d:18:3d:a8:2d:c9:8c:1f:4d:3e:8c:28:12:fb:
b7:99:6b:b5:4e:9c:13:c4:6f:c9:af:26:fa:e5:1e:
60:22:2a:f0:de:69:d4:21:62:77:17:45:02:fe:13:
0b:30:a4:59:34:93:3f:c6:61:53:8f:4a:c6:0f:36:
ad:90:bd:fb:93:9e:3d:a9:a6:23:6c:7a:60:09:c4:
c7:75:7e:a2:ba:3d:14:1a:e6:5c:99:62:e5:a8:08:
8b:b1:f2:5f:37:51:b7:02:51:ed:bb:58:28:1e:a2:
31:61:91:98:38:0f:b7:03:b6:ae:37:74:af:6c:05:
49:b1:bf:45:5c:fb:32:6c:f5:df:c9:34:c1:6b:9c:
23:c9:bb:3e:de:05:85:5f:46:a8:ed:44:62:60:34:
22:67:b5:bf:2a:23:7c:4b:20:a1:06:66:f5:88:6a:
52:55:37:e4:41:0d:0c:72:af:b0:f8:43:75:a6:f5:
04:6d:46:78:bf:96:f1:f5:79:7f:93:28:1a:f5:88:
6b:d8:5e:ba:83:fc:9a:66:1d:b5:5d:78:ca:dc:bd:
3b:02:83:bf:5d:3c:64:f1:76:1b:b9:6b:42:78:ea:
e7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:43:50:4C:63:8A:24:5D:25:04:C2:61:C7:3B:34:BF:FB:B3:11:CE
X509v3 Authority Key Identifier:
keyid:B0:F8:A8:85:F7:77:6D:2A:B9:9B:B4:F2:0E:84:D3:06:E0:39:4A:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sPiohfd3bSq5m7TyDoTTBuA5SqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:c8:c9:26:30:b9:05:8c:1d:4e:f7:9a:e2:0a:9e:77:69:41:
b8:b2:35:1d:14:1f:a3:aa:81:a0:6d:d4:6d:aa:7d:71:10:c2:
c7:ad:48:76:95:fe:4b:80:b3:93:94:95:8c:5e:dd:6c:37:0e:
c4:fa:05:b9:1d:f6:e2:c4:58:d5:44:7e:53:f9:14:df:fe:e2:
f9:82:a8:7e:04:39:20:b9:86:9b:e6:e2:50:85:fe:58:4f:e5:
73:d0:a6:93:00:7c:d9:06:6a:cf:da:3e:d2:33:a5:68:f8:50:
31:e6:25:b9:dc:74:77:6c:89:dc:f1:be:93:04:85:1b:1b:dc:
84:b1:f5:e3:5e:0c:b9:aa:8c:b0:08:61:21:69:05:f1:d1:77:
b9:84:42:56:3d:27:c8:1e:f4:a8:34:21:fa:7a:a7:aa:c4:51:
e0:8f:24:9d:be:32:56:60:25:42:a7:41:4d:73:97:7b:e4:d0:
46:6f:c0:11:93:43:fa:8b:29:01:8a:8c:37:86:eb:00:dc:5d:
18:3d:31:9d:a8:b6:72:3d:7f:bf:d9:2c:a2:98:47:b2:13:e5:
ce:97:f5:db:77:f7:9b:60:fc:b5:37:18:43:d2:5f:a6:36:10:
d4:69:62:c5:0e:4a:09:b7:45:4d:bc:09:13:08:cb:8c:e0:63:
ed:d7:1e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:08:36 2026 by rpki-client