Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft
File: svJ5U61GkMBo-0D581YAM3m7Y_g.mft (raw, json)
Hash identifier: xux5rwq/MEcecnA8OswDZtFivUfEl41DaATYqmDV00M=
Subject key identifier: 89:E3:58:D0:45:9F:EF:0A:86:A6:D0:73:D2:2C:30:CC:4B:AF:9B:0C
Authority key identifier: B2:F2:79:53:AD:46:90:C0:68:FB:40:F9:F3:56:00:33:79:BB:63:F8
Certificate issuer: /CN=b2f27953ad4690c068fb40f9f356003379bb63f8
Certificate serial: 019CAAFD8CB04B7B52A65D57CDE9FF5F4BA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/svJ5U61GkMBo-0D581YAM3m7Y_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft
Manifest number: 11D6
Signing time: Sun 01 Mar 2026 20:01:08 +0000
Manifest this update: Sun 01 Mar 2026 20:01:08 +0000
Manifest next update: Mon 02 Mar 2026 20:01:08 +0000
Files and hashes: 1: ObNZb8WcPYnp4vym-GNDnVBbhRc.roa (hash: cB7fQ1+Il9kNcY3mzLGz4gNtT9PoEWbZCafUMp1Ym5Y=)
2: WSWSZ5HnExf16ja-7wBmWbN2JQM.roa (hash: N8qjQNMkd309dGRmp5jGiVmond6LS7+l8O8FW5pyrZw=)
3: svJ5U61GkMBo-0D581YAM3m7Y_g.crl (hash: Njl8eQcni01Ubs01Oh/F3jn1GxszoEZM14jyfrtNTw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/svJ5U61GkMBo-0D581YAM3m7Y_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:8c:b0:4b:7b:52:a6:5d:57:cd:e9:ff:5f:4b:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f27953ad4690c068fb40f9f356003379bb63f8
Validity
Not Before: Mar 1 20:01:08 2026 GMT
Not After : Mar 2 20:01:08 2026 GMT
Subject: CN=89e358d0459fef0a86a6d073d22c30cc4baf9b0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ed:f9:89:b9:0e:7c:12:2f:33:8d:44:50:17:
57:53:63:97:12:a6:6f:25:08:0f:4a:1c:a9:cf:e5:
a9:6a:91:65:05:43:e6:d7:27:bc:cc:74:4c:61:6d:
f7:ab:b7:d3:38:03:f9:15:13:57:7b:ff:c7:c5:af:
ed:98:bf:3a:5c:dd:d2:33:01:e2:c9:fc:be:97:a1:
03:ee:c6:11:8b:0c:77:73:75:0e:80:12:e8:48:31:
11:01:5d:e3:cd:26:46:84:02:ad:4d:96:44:7b:22:
97:6e:c8:73:d7:61:58:9e:eb:55:5a:40:ee:33:c7:
b5:52:e4:ee:47:c7:99:cb:ad:ec:f3:97:ff:46:85:
2e:05:29:5e:fd:de:50:86:0b:61:11:6c:e7:17:4e:
59:65:e2:2f:a4:55:0e:12:47:3c:78:19:38:16:0e:
c6:21:b3:db:22:83:ef:01:a9:0f:89:6b:c8:48:cb:
a9:1e:fc:48:d6:ca:11:22:4a:7e:c3:73:17:34:ae:
d8:34:fc:2f:c6:fd:00:bf:18:fd:12:d8:56:77:b2:
aa:5d:b1:b8:83:d0:af:7c:72:2f:c3:ce:49:e3:c3:
13:74:d2:d6:16:dd:fc:0a:4b:29:55:f9:60:31:16:
a0:f6:01:6d:91:cd:98:d7:8c:eb:50:b6:a7:a6:20:
d6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E3:58:D0:45:9F:EF:0A:86:A6:D0:73:D2:2C:30:CC:4B:AF:9B:0C
X509v3 Authority Key Identifier:
keyid:B2:F2:79:53:AD:46:90:C0:68:FB:40:F9:F3:56:00:33:79:BB:63:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/svJ5U61GkMBo-0D581YAM3m7Y_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:15:46:7e:8e:4b:b1:fc:8f:a1:26:17:63:a2:3c:31:96:6a:
26:05:6e:bf:28:3f:9f:a2:81:93:0e:93:33:69:ed:17:6b:a6:
aa:cf:e0:6b:7b:51:bf:f9:10:79:2b:68:bb:0c:f7:cf:a5:ad:
a2:dd:33:04:0b:b6:9d:dd:9f:3e:22:90:0e:44:52:cc:a9:fa:
a4:2e:0b:ca:16:07:94:a2:69:f8:26:b9:ea:b6:e4:7b:d7:98:
d4:79:af:23:c5:ad:b6:c0:ba:a7:7e:49:da:e7:df:72:af:fa:
bc:04:20:e8:cc:59:4d:67:a3:df:ee:93:a6:de:ee:70:1c:c1:
ea:3a:05:81:e5:b3:17:a6:6a:08:82:07:82:3d:f8:7b:87:bf:
e3:d4:1c:af:62:ec:0c:a9:85:6b:d5:f8:96:02:27:9a:fb:26:
a2:00:76:f7:6b:dd:0d:9b:ac:be:d7:57:47:84:f3:51:18:19:
9a:0c:b3:b5:a8:d0:01:07:67:cb:9f:28:4d:a2:21:84:7a:41:
e0:c9:91:f4:56:7e:e0:a9:b9:14:1a:3a:23:98:19:5a:be:a2:
34:64:9c:33:19:55:68:0c:0b:88:84:4d:7d:b7:6b:a2:31:f7:
1e:15:51:8f:3d:a7:b8:be:1c:5b:63:47:61:8f:ff:c1:b0:b7:
73:ee:47:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:02 2026 by rpki-client