Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
File: sFf1RPU_NdjS5zyylltPTX0CKVk.mft (raw, json)
Hash identifier: Q50j1T7fcLQOZh/qARnWSjte4+jDZqj339iI+8KLpLE=
Subject key identifier: 99:03:44:41:93:F6:9F:02:03:84:95:E6:03:AA:41:ED:18:94:F4:95
Authority key identifier: B0:57:F5:44:F5:3F:35:D8:D2:E7:3C:B2:96:5B:4F:4D:7D:02:29:59
Certificate issuer: /CN=b057f544f53f35d8d2e73cb2965b4f4d7d022959
Certificate serial: 019EBE4872CD7A1E37E362EC0EDB577C5DD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
Manifest number: 18EE
Signing time: Sat 13 Jun 2026 00:01:19 +0000
Manifest this update: Sat 13 Jun 2026 00:01:19 +0000
Manifest next update: Sun 14 Jun 2026 00:01:19 +0000
Files and hashes: 1: 1-LQW0hELrOlw1d0vdgbz08TyBgo.roa (hash: B2ILvHFw8ZMKCLvJqBB9DL0g8zmbsD02oH7FPgU93Nk=)
2: sFf1RPU_NdjS5zyylltPTX0CKVk.crl (hash: Fuwp9FdsDPueNfZ4qgPfBJtSZyxzaytHUEpzKiTlI7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:48:72:cd:7a:1e:37:e3:62:ec:0e:db:57:7c:5d:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b057f544f53f35d8d2e73cb2965b4f4d7d022959
Validity
Not Before: Jun 13 00:01:19 2026 GMT
Not After : Jun 14 00:01:19 2026 GMT
Subject: CN=9903444193f69f02038495e603aa41ed1894f495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:95:8a:b0:8d:40:c7:e3:88:86:ef:ec:fd:9a:
38:46:56:37:6f:86:8b:4e:66:7f:df:ac:a9:aa:a8:
a9:da:29:93:f5:ee:a5:bc:ca:22:5c:98:ba:80:1e:
83:bd:77:d6:89:6b:18:2d:79:eb:dc:59:95:b0:3b:
09:b8:7d:72:21:6a:ba:f2:5c:e6:fd:ab:84:3a:e2:
13:f3:13:bc:5e:ba:92:3f:bb:8a:40:1f:61:d4:7c:
60:de:86:e0:ea:14:4e:4c:ed:12:90:7f:2f:91:f6:
97:62:68:9d:ad:cc:48:99:ea:26:cd:60:2f:b9:1a:
ff:8f:e1:02:12:ff:4c:39:1e:5e:74:52:82:79:8d:
ef:6b:d2:7e:7a:19:5c:0d:89:7d:d8:f4:ab:9a:2f:
03:b2:bb:dc:cc:fa:1c:7b:99:4f:c2:ea:b9:ae:7e:
6d:9b:7f:74:c1:d6:09:49:91:33:57:80:0e:c6:2f:
72:e3:a8:e0:30:5d:9e:f9:48:33:a8:b2:46:43:dc:
5b:a3:2b:13:8c:59:11:21:72:3a:9a:85:e2:0b:21:
f3:c9:18:84:e8:09:f8:01:de:64:52:34:28:a8:3f:
94:14:95:6d:31:62:9a:27:6e:09:46:58:38:cf:1c:
b8:15:cf:9c:86:03:70:c4:cf:86:91:38:cb:b5:7f:
a2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:03:44:41:93:F6:9F:02:03:84:95:E6:03:AA:41:ED:18:94:F4:95
X509v3 Authority Key Identifier:
keyid:B0:57:F5:44:F5:3F:35:D8:D2:E7:3C:B2:96:5B:4F:4D:7D:02:29:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:c7:7f:77:1a:40:5c:6e:e3:aa:78:f1:b4:d9:37:48:1b:b0:
30:0d:45:38:54:d0:3e:43:10:5d:da:65:01:63:37:f3:83:7b:
a7:bf:07:ab:5c:8d:9b:f8:0f:d9:33:16:01:32:d7:86:33:cb:
24:44:16:3c:18:6e:13:79:16:1c:23:63:1c:f1:57:28:b0:dd:
f0:ed:54:f7:13:be:ab:b5:09:26:d4:8d:99:13:e9:32:9b:34:
00:47:1e:34:24:18:af:36:9a:6b:da:15:62:58:64:83:48:00:
d9:12:de:d0:7e:6e:c5:6e:41:3e:4b:4e:ba:f6:6f:37:bf:16:
5d:0f:26:fe:f4:39:a1:88:7d:76:8c:1a:d7:3e:d4:9d:14:50:
af:c6:b3:b1:ce:f4:ab:f9:8c:fa:7f:5b:ab:1e:e0:11:f5:16:
c2:84:b1:21:e6:bb:60:13:bf:ff:12:04:5c:c5:06:1f:90:71:
3d:be:a2:fd:ea:86:7f:80:bf:c3:01:c6:af:82:55:4a:d0:45:
e1:3e:04:05:f2:2e:b1:8a:80:32:a8:18:94:a0:64:5c:b6:2b:
86:21:7e:fd:2e:65:b4:d1:10:8d:0c:b3:ef:9b:59:44:c4:73:
be:64:e6:71:7b:ae:64:30:79:d4:6b:81:1b:24:4f:bf:1c:f9:
9c:1d:6e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:07:34 2026 by rpki-client