Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
File: sFf1RPU_NdjS5zyylltPTX0CKVk.mft (raw, json)
Hash identifier: 3MtaGdL8LhIx/r3Gy/EqEfopbhSFFBkX+NFafqSdUAc=
Subject key identifier: D9:26:69:FD:1F:5D:96:34:D3:43:D1:0D:66:1D:05:B3:CF:E9:C0:16
Authority key identifier: B0:57:F5:44:F5:3F:35:D8:D2:E7:3C:B2:96:5B:4F:4D:7D:02:29:59
Certificate issuer: /CN=b057f544f53f35d8d2e73cb2965b4f4d7d022959
Certificate serial: 019D9AAB989BBACBEEAE8E9A7A5A0BD7A2B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
Manifest number: 1857
Signing time: Fri 17 Apr 2026 09:00:29 +0000
Manifest this update: Fri 17 Apr 2026 09:00:29 +0000
Manifest next update: Sat 18 Apr 2026 09:00:29 +0000
Files and hashes: 1: 1-LQW0hELrOlw1d0vdgbz08TyBgo.roa (hash: B2ILvHFw8ZMKCLvJqBB9DL0g8zmbsD02oH7FPgU93Nk=)
2: sFf1RPU_NdjS5zyylltPTX0CKVk.crl (hash: SXeCTALhw0HdSiCrStRcdEueilBAiZnFgd/hkXhte4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:98:9b:ba:cb:ee:ae:8e:9a:7a:5a:0b:d7:a2:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b057f544f53f35d8d2e73cb2965b4f4d7d022959
Validity
Not Before: Apr 17 09:00:29 2026 GMT
Not After : Apr 18 09:00:29 2026 GMT
Subject: CN=d92669fd1f5d9634d343d10d661d05b3cfe9c016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:de:e4:6f:05:74:e3:12:15:50:42:6b:6d:e5:
f6:ee:79:f3:f5:49:86:18:be:13:c6:32:53:85:56:
29:f6:09:4d:d4:b8:17:75:b8:e2:e6:16:8c:b4:1a:
c4:60:93:51:1b:44:4d:c0:9e:b2:10:19:ce:18:32:
ae:b5:39:89:64:87:43:f6:61:db:60:d3:7e:31:00:
a2:eb:86:13:a9:c5:c6:07:07:46:6f:97:a5:41:e6:
10:fb:07:12:3d:83:f3:4b:b1:9e:c8:5c:bc:1d:57:
a2:b2:d2:dc:4f:fb:2c:a8:53:77:14:62:4d:18:d5:
4b:44:83:8c:05:37:1c:e8:2c:5d:15:62:e5:31:60:
9a:72:ea:50:ad:64:ae:93:8b:f9:0b:bd:70:fb:c4:
93:1f:32:a1:77:39:2f:71:4e:b9:d5:07:ca:d0:99:
91:29:d7:8c:8f:71:a5:8a:c4:29:76:51:48:76:7a:
1f:bf:de:f4:b2:e8:f3:af:64:f2:e2:1a:0c:d0:56:
9d:f6:96:71:bc:3c:25:18:50:11:a5:fa:28:70:d6:
4c:bb:b6:1b:e3:40:c8:d2:1b:ce:8d:c4:a1:aa:2a:
f9:00:08:98:6e:2d:d1:af:fc:75:ec:10:81:cf:99:
62:4e:ce:38:64:02:ae:fe:99:62:03:bd:86:42:58:
88:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:26:69:FD:1F:5D:96:34:D3:43:D1:0D:66:1D:05:B3:CF:E9:C0:16
X509v3 Authority Key Identifier:
keyid:B0:57:F5:44:F5:3F:35:D8:D2:E7:3C:B2:96:5B:4F:4D:7D:02:29:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:64:59:0c:29:28:b9:26:bb:05:06:19:0b:01:1c:d0:82:95:
1c:c2:d5:91:04:ae:1d:83:7a:7d:68:61:8a:d0:b5:c2:8e:92:
d2:83:6f:a6:92:88:29:80:d3:2a:d6:dc:22:3f:7f:32:ca:a9:
be:75:70:51:1b:5e:77:2c:b7:19:32:34:fb:68:6c:a5:25:9f:
f8:ce:ee:72:66:14:65:3e:f4:74:c0:9a:c1:83:c9:9e:26:51:
d2:ca:41:c0:bc:11:d7:12:bd:61:3a:e6:63:7a:d4:45:a8:68:
64:9b:4b:53:a3:a9:c6:a3:46:e9:a2:84:a3:51:5c:f9:7c:74:
68:7b:26:7e:c6:80:0c:06:c3:e9:43:85:7e:6c:0e:71:a6:9a:
1e:df:b7:ab:4a:22:d0:56:28:30:fc:70:40:96:f5:1e:66:4d:
09:23:b7:f1:9f:58:57:7d:c4:9d:5a:27:df:32:a4:91:c7:8e:
b5:b2:81:66:11:b2:00:6b:f2:80:f6:88:35:9d:ea:02:8a:91:
a5:e4:41:2a:cd:fc:8e:97:48:64:37:69:c5:f9:5c:f8:5b:a1:
3c:80:41:b9:f4:3c:31:a2:97:37:58:a6:a3:2a:e8:84:fb:64:
95:4a:c4:b5:f5:8a:a0:1f:0a:96:bf:d9:bd:85:52:cf:d6:e6:
2b:4c:a3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:57:49 2026 by rpki-client