Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft
File: sRofl3C6sHdRW3cSy41JVQsxOKE.mft (raw, json)
Hash identifier: kOxXkcI88mm1+8rcxCfLO0YzILHqmbFhRt8B4JNTheI=
Subject key identifier: E9:87:FD:91:1D:A2:3E:A7:D3:EF:2E:1F:D4:35:B2:B3:B2:28:A6:89
Authority key identifier: B1:1A:1F:97:70:BA:B0:77:51:5B:77:12:CB:8D:49:55:0B:31:38:A1
Certificate issuer: /CN=b11a1f9770bab077515b7712cb8d49550b3138a1
Certificate serial: 01A0D2375670A5E9BA00AB17A8C77D95CF26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRofl3C6sHdRW3cSy41JVQsxOKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft
Manifest number: 0FC1
Signing time: Thu 24 Sep 2026 07:00:36 +0000
Manifest this update: Thu 24 Sep 2026 07:00:36 +0000
Manifest next update: Fri 25 Sep 2026 07:00:36 +0000
Files and hashes: 1: IHeSpn9zzFGkB0I3Aq-TbT_Yi_M.roa (hash: I4iH62Xbpv9TcN2x5dZKrT7UkMHzqfLA1ys5Hw46kzg=)
2: WCA0B9M68iSK-689JNNQ3x_gaaQ.roa (hash: mIL2rvF2fj48OLmmFlBKTID0LzN8VFC9HV5FYjZjf+Q=)
3: sRofl3C6sHdRW3cSy41JVQsxOKE.crl (hash: y6BO/SaFb5oG5ClzNE/u9i/U21pLuH3jzkiiCUSws68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sRofl3C6sHdRW3cSy41JVQsxOKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:37:56:70:a5:e9:ba:00:ab:17:a8:c7:7d:95:cf:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b11a1f9770bab077515b7712cb8d49550b3138a1
Validity
Not Before: Sep 24 07:00:36 2026 GMT
Not After : Sep 25 07:00:36 2026 GMT
Subject: CN=e987fd911da23ea7d3ef2e1fd435b2b3b228a689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ff:d6:0d:ca:18:b2:40:27:cb:3c:70:fd:82:
bb:d8:46:24:12:09:eb:c4:ec:50:a3:ef:3b:75:e2:
dc:83:fd:31:ba:31:b3:ee:b8:b6:0a:1e:59:1e:c8:
03:2f:7e:7b:13:f8:b3:9d:db:a6:7d:a5:92:5a:92:
9c:15:25:ea:d4:ac:8f:7b:1e:36:94:37:3a:01:ca:
1b:8a:2d:b5:ae:90:b0:70:88:72:9c:54:af:28:93:
eb:36:88:fb:27:a6:c7:46:70:b1:a5:7a:a9:ef:6e:
0c:8a:2a:86:b3:7c:3e:0d:38:c8:22:bc:33:62:d7:
1d:ce:9b:ad:7d:ae:9f:72:5c:70:11:be:b4:f4:5d:
02:74:d4:5e:62:de:a8:55:30:4e:ca:7b:ec:b7:3a:
1b:97:c8:8f:5b:c2:f1:6f:aa:66:96:e3:ac:20:18:
71:39:33:da:c3:b4:30:a6:cc:b7:43:cc:46:4f:ff:
9c:53:7d:8c:d6:21:68:9a:6d:7e:e4:78:8d:48:8e:
f7:48:4b:50:f1:d1:8b:7f:03:86:e1:ce:91:11:33:
79:41:aa:5f:cf:d7:08:8e:cc:34:57:ea:79:6b:7f:
a7:e2:b6:b1:62:9b:21:d0:df:fe:85:8e:77:29:76:
b5:9c:7e:83:b0:64:69:78:0e:e5:e2:99:0f:15:75:
2b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:87:FD:91:1D:A2:3E:A7:D3:EF:2E:1F:D4:35:B2:B3:B2:28:A6:89
X509v3 Authority Key Identifier:
keyid:B1:1A:1F:97:70:BA:B0:77:51:5B:77:12:CB:8D:49:55:0B:31:38:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRofl3C6sHdRW3cSy41JVQsxOKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:c7:a1:6f:ef:d1:3f:3e:33:55:0f:37:ed:78:00:5a:d3:3e:
7d:e3:61:87:6f:42:51:35:33:d7:29:7a:db:78:24:91:3c:9b:
d7:0c:a4:24:0e:1e:1e:b0:ea:0f:a1:fe:60:3a:7b:bc:fc:f0:
fa:16:e4:75:ae:60:55:85:c7:84:0f:0f:80:3f:80:06:91:c4:
30:d2:76:34:78:ac:cb:dd:69:6a:b3:4e:25:f3:cb:86:c8:82:
eb:58:c0:b7:36:36:a4:04:8c:64:1f:c0:6f:fb:28:66:f2:43:
bd:e3:9e:5c:82:a7:ee:8a:f1:9c:c3:72:ec:1f:7c:35:99:64:
de:03:a3:90:03:bd:a0:6e:c4:59:34:c3:b6:8c:04:f7:69:09:
2e:a0:1f:71:01:09:da:e3:23:07:2f:0b:9a:cc:35:fc:bf:3d:
ce:42:b1:84:bd:a6:7b:d2:d8:e9:d4:06:50:3a:31:b5:5a:fa:
9b:ed:97:38:ae:30:7f:8d:28:e0:10:ae:7a:02:81:97:33:f0:
47:6a:f0:76:cc:dc:69:1b:fc:1a:27:32:f8:15:5e:aa:56:6f:
93:3c:38:27:13:33:97:80:9c:c0:b0:4e:03:01:50:af:37:49:
de:68:9d:be:54:d9:74:19:b2:97:c7:2b:55:d7:2b:85:69:0a:
56:e2:03:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:00:38 2026 by rpki-client