Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
File: sFf1RPU_NdjS5zyylltPTX0CKVk.mft (raw, json)
Hash identifier: Yd79BKahav7DlV20CEoaM2lu1u1/mKp//l1imZTVE48=
Subject key identifier: 0A:20:11:82:FD:59:A9:C6:DD:B0:F5:14:06:75:0A:EF:D2:82:6D:E5
Authority key identifier: B0:57:F5:44:F5:3F:35:D8:D2:E7:3C:B2:96:5B:4F:4D:7D:02:29:59
Certificate issuer: /CN=b057f544f53f35d8d2e73cb2965b4f4d7d022959
Certificate serial: 019CAB3483C1042C125FFAE8DA28CCAE7A24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
Manifest number: 17DB
Signing time: Sun 01 Mar 2026 21:01:11 +0000
Manifest this update: Sun 01 Mar 2026 21:01:11 +0000
Manifest next update: Mon 02 Mar 2026 21:01:11 +0000
Files and hashes: 1: 1-LQW0hELrOlw1d0vdgbz08TyBgo.roa (hash: B2ILvHFw8ZMKCLvJqBB9DL0g8zmbsD02oH7FPgU93Nk=)
2: sFf1RPU_NdjS5zyylltPTX0CKVk.crl (hash: ORjpadRUyxSNGxwqhuz5yTJ6D76NnxO7DGC4g4Z031g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:83:c1:04:2c:12:5f:fa:e8:da:28:cc:ae:7a:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b057f544f53f35d8d2e73cb2965b4f4d7d022959
Validity
Not Before: Mar 1 21:01:11 2026 GMT
Not After : Mar 2 21:01:11 2026 GMT
Subject: CN=0a201182fd59a9c6ddb0f51406750aefd2826de5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:57:ba:3e:5e:ec:7d:06:31:9d:3a:66:33:b1:
02:2f:42:1b:0f:8f:b4:e5:cb:83:8d:45:f9:ee:e6:
37:e0:49:6f:e2:37:70:7f:37:15:cb:68:ca:de:38:
2c:bc:47:5f:de:73:6e:b7:8e:e4:6e:3c:ae:1a:7c:
b0:e4:2c:b8:ec:ba:a8:88:f9:95:4e:8c:a1:f1:6e:
6e:97:27:2c:b0:66:aa:ec:7a:39:9b:a5:ad:1c:22:
b6:b8:f2:ba:0f:92:ff:65:f0:73:9b:35:79:ff:13:
e8:eb:e0:dc:72:3a:24:89:ff:4d:af:25:36:fa:e4:
9e:40:1c:52:60:4b:4f:46:e9:38:aa:bc:01:e3:00:
1c:4e:06:b9:13:f9:64:54:94:a4:f0:a9:7f:1b:5a:
7f:d9:c4:22:4e:43:8a:aa:83:36:09:5e:8c:1c:38:
04:a6:38:af:fc:59:86:7b:8e:f1:2c:0d:f4:a0:93:
f4:22:66:56:b2:6a:e5:2f:29:05:c9:f5:e6:f1:9c:
82:5e:08:ee:90:9e:da:dd:38:73:35:65:f4:27:cf:
7f:74:5d:d9:bd:56:db:3d:97:3b:99:6b:ae:12:36:
18:fe:16:4b:97:aa:b7:ed:b1:41:9c:07:95:9d:24:
2a:47:ef:6a:4d:3f:e1:9f:fc:de:28:c8:77:2c:14:
58:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:20:11:82:FD:59:A9:C6:DD:B0:F5:14:06:75:0A:EF:D2:82:6D:E5
X509v3 Authority Key Identifier:
keyid:B0:57:F5:44:F5:3F:35:D8:D2:E7:3C:B2:96:5B:4F:4D:7D:02:29:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:fb:f4:b0:5b:69:71:c1:b7:a7:ac:9a:bf:3c:bc:a0:6b:bb:
df:e5:97:fd:e0:59:56:ae:1b:ae:d5:1d:93:54:6a:59:6d:07:
2c:40:72:be:d1:49:c2:b5:b1:23:31:7e:5a:d1:6d:7e:56:e2:
f1:e5:5e:2e:9d:a0:79:be:87:cc:35:b8:01:9a:59:81:0b:1e:
8b:ec:a1:8a:e7:e8:1d:79:b1:a2:f2:0d:0c:99:3e:97:6a:85:
1f:de:73:8d:fb:98:fd:e2:3a:b4:b9:f7:6f:d3:b9:40:af:d6:
d0:1c:6b:da:33:2d:8b:03:cd:c8:04:02:94:0b:dd:7b:8c:19:
c8:36:f9:af:70:c6:7f:b5:d2:10:e9:bc:4b:57:33:15:ab:84:
11:ba:08:29:24:1d:9a:eb:4a:66:d0:bc:a7:ed:25:b4:e0:8e:
ea:40:56:d5:49:21:11:cf:32:96:4b:e2:5d:4b:c7:d6:7b:2f:
b0:4b:ec:22:62:8c:1a:b5:4c:6d:a3:b3:b4:35:f6:ee:df:91:
95:b9:ba:fd:ac:5d:6d:fc:b7:ac:20:aa:a2:da:cd:92:00:c7:
67:d0:6c:cf:85:c8:82:63:db:7d:72:71:91:c9:4e:dd:82:1f:
72:97:c3:5a:6b:e7:18:18:21:b7:f5:3c:4e:c2:d7:da:0f:04:
6d:62:8e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:41:02 2026 by rpki-client