Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft
File: sRofl3C6sHdRW3cSy41JVQsxOKE.mft (raw, json)
Hash identifier: N1+9hjLI5Ug34AD9Tliz32pFylIz9JsS0jn5t2pq1NI=
Subject key identifier: AA:C4:FA:46:E7:DB:03:77:8C:9F:08:93:9A:35:AF:79:2E:8A:AA:50
Authority key identifier: B1:1A:1F:97:70:BA:B0:77:51:5B:77:12:CB:8D:49:55:0B:31:38:A1
Certificate issuer: /CN=b11a1f9770bab077515b7712cb8d49550b3138a1
Certificate serial: 019FACACC017380613D1B3B9779FD6A2C795
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRofl3C6sHdRW3cSy41JVQsxOKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft
Manifest number: 0F29
Signing time: Wed 29 Jul 2026 07:00:30 +0000
Manifest this update: Wed 29 Jul 2026 07:00:30 +0000
Manifest next update: Thu 30 Jul 2026 07:00:30 +0000
Files and hashes: 1: IHeSpn9zzFGkB0I3Aq-TbT_Yi_M.roa (hash: I4iH62Xbpv9TcN2x5dZKrT7UkMHzqfLA1ys5Hw46kzg=)
2: WCA0B9M68iSK-689JNNQ3x_gaaQ.roa (hash: mIL2rvF2fj48OLmmFlBKTID0LzN8VFC9HV5FYjZjf+Q=)
3: sRofl3C6sHdRW3cSy41JVQsxOKE.crl (hash: 6AYkw2X2XOVx0Ex6v2jMSZe5kqDMmIPsComjfL6ZntA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sRofl3C6sHdRW3cSy41JVQsxOKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ac:c0:17:38:06:13:d1:b3:b9:77:9f:d6:a2:c7:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b11a1f9770bab077515b7712cb8d49550b3138a1
Validity
Not Before: Jul 29 07:00:30 2026 GMT
Not After : Jul 30 07:00:30 2026 GMT
Subject: CN=aac4fa46e7db03778c9f08939a35af792e8aaa50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ef:c6:5c:df:5c:0d:0c:41:4c:75:b3:06:ce:
4b:a9:1d:ba:50:40:30:b0:88:4b:f3:99:0b:05:f0:
5b:2a:dc:28:6b:31:a4:14:5f:79:da:2a:0f:3e:22:
6e:b3:1d:b8:c0:bb:8d:63:64:6b:fc:99:58:20:35:
06:5e:ec:f9:b6:80:47:16:37:2f:b2:50:8a:57:46:
20:1c:92:e2:19:d5:7d:c9:80:91:e3:31:25:d5:9c:
6c:d5:e4:7b:ae:32:47:65:64:8c:c2:a1:91:5f:33:
1d:47:d7:6d:60:ef:46:c4:73:72:07:e3:68:db:42:
b3:76:fa:69:fc:cd:b9:f3:e3:34:16:7a:09:7f:21:
f5:5d:8c:10:15:ca:f5:4e:ad:96:05:22:fe:2e:d3:
de:4f:80:cd:e3:e5:bc:41:be:1f:08:40:a2:76:c3:
fb:09:dc:e8:f0:2b:fc:6e:c2:2c:d8:0a:12:07:5c:
53:c4:f3:b2:a5:32:ec:b4:6c:5a:a6:f8:02:24:d7:
55:97:b4:f3:4c:9d:56:66:3d:30:2d:6d:ac:e4:15:
ef:20:5e:90:cb:85:80:23:cc:5f:29:7b:06:dc:cd:
31:bc:34:8d:81:8c:70:08:1f:a1:09:d0:04:3e:a5:
24:e4:5b:51:0a:ff:6d:e0:ef:ae:df:d6:10:44:cd:
7b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C4:FA:46:E7:DB:03:77:8C:9F:08:93:9A:35:AF:79:2E:8A:AA:50
X509v3 Authority Key Identifier:
keyid:B1:1A:1F:97:70:BA:B0:77:51:5B:77:12:CB:8D:49:55:0B:31:38:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRofl3C6sHdRW3cSy41JVQsxOKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:a1:08:5e:95:d2:a1:13:e9:cb:7b:bd:2e:57:a2:dc:9a:b9:
67:b1:25:c1:47:f3:af:aa:ed:a4:60:02:b0:8b:f7:f0:34:45:
31:ae:55:3d:49:51:a5:b1:a1:3d:74:1d:75:97:a1:4d:d3:df:
79:59:4f:87:f8:64:06:14:41:f8:3b:41:ca:41:dc:93:e0:dc:
75:53:d2:64:45:46:ee:4a:85:8b:5b:c6:ad:db:73:62:6b:88:
08:5c:2a:2a:5a:6a:42:84:05:2b:88:27:9d:de:c9:d7:56:1e:
93:49:4e:85:44:ef:ce:b4:de:a3:4b:bb:18:48:c2:a8:e9:44:
6c:25:d1:78:3d:97:94:96:0e:0c:3d:6d:d0:f5:2c:42:f2:4a:
c3:92:24:dc:ea:18:9a:f5:bd:43:da:0b:03:cf:df:5c:f9:1e:
83:20:16:c9:fb:7f:bc:79:45:c9:93:6f:09:af:6d:72:19:97:
15:31:e3:1a:85:85:7d:f1:14:ae:2d:a8:d4:b9:be:45:9e:a8:
1e:e5:a4:82:1c:bc:eb:05:a8:48:74:35:82:96:12:77:67:5e:
8d:30:4c:e5:37:ef:24:d0:a4:6d:27:a5:f9:61:70:9c:ab:f6:
02:c8:ce:f5:67:a7:1e:d3:fe:0e:99:f7:29:41:3e:72:7c:fa:
12:1c:5b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:58:28 2026 by rpki-client