Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft
File: sRofl3C6sHdRW3cSy41JVQsxOKE.mft (raw, json)
Hash identifier: UNXF4OzRdNIaI2ae1BtfFMZ8Ff0j87D5CdHYT69+s7M=
Subject key identifier: 70:9B:CE:B4:C2:B9:93:0F:D4:62:D9:45:5E:EB:00:A3:EF:B7:BF:24
Authority key identifier: B1:1A:1F:97:70:BA:B0:77:51:5B:77:12:CB:8D:49:55:0B:31:38:A1
Certificate issuer: /CN=b11a1f9770bab077515b7712cb8d49550b3138a1
Certificate serial: 019D999920E0F9B5D432C3962609F9B80764
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRofl3C6sHdRW3cSy41JVQsxOKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft
Manifest number: 0E16
Signing time: Fri 17 Apr 2026 04:00:42 +0000
Manifest this update: Fri 17 Apr 2026 04:00:42 +0000
Manifest next update: Sat 18 Apr 2026 04:00:42 +0000
Files and hashes: 1: IHeSpn9zzFGkB0I3Aq-TbT_Yi_M.roa (hash: I4iH62Xbpv9TcN2x5dZKrT7UkMHzqfLA1ys5Hw46kzg=)
2: WCA0B9M68iSK-689JNNQ3x_gaaQ.roa (hash: mIL2rvF2fj48OLmmFlBKTID0LzN8VFC9HV5FYjZjf+Q=)
3: sRofl3C6sHdRW3cSy41JVQsxOKE.crl (hash: JnGr+tdb1UccnhTLqjnLpYwBwSikWkQAL9zlnw+LCeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sRofl3C6sHdRW3cSy41JVQsxOKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:20:e0:f9:b5:d4:32:c3:96:26:09:f9:b8:07:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b11a1f9770bab077515b7712cb8d49550b3138a1
Validity
Not Before: Apr 17 04:00:42 2026 GMT
Not After : Apr 18 04:00:42 2026 GMT
Subject: CN=709bceb4c2b9930fd462d9455eeb00a3efb7bf24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:49:5e:8e:e5:2c:cc:54:fd:67:15:07:58:be:
7d:19:4a:7a:ad:1f:6a:8b:ce:b9:d5:cc:b2:37:44:
04:23:51:09:fb:3f:4b:43:16:08:b4:dd:8d:1e:a5:
56:76:5f:9c:39:52:ac:e2:17:47:0f:fc:7e:0d:51:
15:f2:34:cf:8e:31:1f:48:9b:1b:fa:c5:3b:de:cb:
c4:25:f1:23:7c:65:68:e2:b7:e5:ed:43:f7:bc:e7:
93:92:db:58:d5:cf:4e:66:01:a9:56:90:e6:9d:6f:
6c:2b:34:b6:32:d6:64:77:f9:ee:46:62:ce:2e:b3:
cd:7b:ef:8d:f8:ca:01:31:33:14:84:88:59:11:c5:
a9:95:db:71:9d:9f:89:5e:36:c8:3a:5b:25:83:32:
2f:81:ef:ee:d6:10:9c:5b:d4:c1:f2:85:b6:b7:5d:
d5:b4:87:07:6f:a0:6b:65:0f:1b:09:84:d8:4d:78:
01:b3:2e:56:10:6a:1d:75:0c:5d:12:db:eb:e0:54:
cf:0a:45:30:bf:4a:48:7d:8f:cb:41:1a:83:0e:cd:
3a:35:96:03:91:59:db:76:b6:c5:e8:38:1a:3b:32:
8d:1f:bf:1d:5a:2a:01:be:60:87:26:ac:f9:0e:c8:
19:6b:16:55:be:a3:4d:0d:73:98:6b:0b:d7:48:8d:
02:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:9B:CE:B4:C2:B9:93:0F:D4:62:D9:45:5E:EB:00:A3:EF:B7:BF:24
X509v3 Authority Key Identifier:
keyid:B1:1A:1F:97:70:BA:B0:77:51:5B:77:12:CB:8D:49:55:0B:31:38:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRofl3C6sHdRW3cSy41JVQsxOKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:f4:93:fe:a9:23:8b:b7:91:0b:3d:fe:e5:04:46:ff:77:fb:
cd:ee:5e:7c:02:8f:b2:5c:b3:04:f7:6b:37:b4:59:6d:f5:23:
9c:b7:94:aa:08:1a:a6:ce:f0:8a:13:9d:15:31:e6:0b:50:18:
e4:23:a2:4a:ed:5b:37:af:f8:5e:7f:43:82:a9:50:f1:b9:87:
a7:4d:0b:92:95:b1:86:82:46:74:05:85:17:c8:b1:af:f7:3a:
96:64:90:5d:f2:34:18:32:09:09:40:1a:dd:fa:61:29:74:77:
aa:86:c9:37:40:63:37:e6:45:0c:b0:4d:bf:fd:82:65:4a:cc:
fa:e6:c4:06:55:ec:4a:b7:e4:45:f7:a6:22:58:4f:66:8c:3d:
c4:9c:71:fa:d7:c4:19:26:a2:ad:45:f5:ff:e2:01:a1:10:15:
af:7c:99:69:f3:eb:7f:94:19:fb:46:a5:f7:9f:ec:68:f6:6f:
54:da:be:df:53:76:b5:a4:b8:33:f1:70:ca:c7:b9:dc:0e:a9:
09:5d:b0:24:c8:75:94:8a:c8:db:cd:c6:ac:a7:1f:f3:49:71:
0e:57:58:2a:52:cf:6b:89:cd:7d:14:cb:a8:d3:d2:b6:ec:40:
40:31:1b:3f:bf:ea:9e:1d:fc:9a:5e:b4:d0:d8:9f:cd:9d:24:
cc:98:22:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:52:46 2026 by rpki-client