Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/1e7c48-f8c2-4679-b771-46ca26aff545/1/sFcIRcI56ZkcibxcUEMekIeGDE0.mft
File: sFcIRcI56ZkcibxcUEMekIeGDE0.mft (raw, json)
Hash identifier: amD/dwK8CQm0/P+QeU+tVxF5OQv28jvJKmgGdLUYuio=
Subject key identifier: 5D:02:FE:7E:56:F9:61:9F:07:7E:5F:CE:C2:AA:90:49:F3:25:82:48
Authority key identifier: B0:57:08:45:C2:39:E9:99:1C:89:BC:5C:50:43:1E:90:87:86:0C:4D
Certificate issuer: /CN=b0570845c239e9991c89bc5c50431e9087860c4d
Certificate serial: 019EBF5AC4E9EC76BE8E45E29AC8700709AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFcIRcI56ZkcibxcUEMekIeGDE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/1e7c48-f8c2-4679-b771-46ca26aff545/1/sFcIRcI56ZkcibxcUEMekIeGDE0.mft
Manifest number: 03E2
Signing time: Sat 13 Jun 2026 05:00:57 +0000
Manifest this update: Sat 13 Jun 2026 05:00:57 +0000
Manifest next update: Sun 14 Jun 2026 05:00:57 +0000
Files and hashes: 1: FkN5wCpqf47xHpP2qPmsCVpZA5A.roa (hash: 6NsTbMJNSxy3emhsWHcWB2UjLqNQnQDr6NiMOXPxTg4=)
2: InFnBGmGL8Q0FS0kuwygTEx8_Lw.asa (hash: zLqLkWTB98DOsRwXQTGdXmZzjw6dskDN5dpYGFPv88s=)
3: sFcIRcI56ZkcibxcUEMekIeGDE0.crl (hash: xjisCVT++o/II+u7p1l42dAHVztP9CVUtn+B9Z33m9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/1e7c48-f8c2-4679-b771-46ca26aff545/1/sFcIRcI56ZkcibxcUEMekIeGDE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/1e7c48-f8c2-4679-b771-46ca26aff545/1/sFcIRcI56ZkcibxcUEMekIeGDE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sFcIRcI56ZkcibxcUEMekIeGDE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 05:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:c4:e9:ec:76:be:8e:45:e2:9a:c8:70:07:09:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0570845c239e9991c89bc5c50431e9087860c4d
Validity
Not Before: Jun 13 05:00:57 2026 GMT
Not After : Jun 14 05:00:57 2026 GMT
Subject: CN=5d02fe7e56f9619f077e5fcec2aa9049f3258248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:69:4a:c0:af:18:5d:f7:0f:26:9a:51:6c:38:
ca:37:f6:5e:6a:f7:06:17:72:ac:4d:0e:64:4b:0d:
08:25:77:92:c5:02:14:54:7b:2b:26:82:39:07:d0:
d6:fd:c9:1f:29:42:69:30:67:ab:84:ff:c9:e6:4d:
9c:28:46:b0:aa:23:c7:86:36:54:d9:86:d0:62:3e:
70:a9:5c:1c:af:c7:d6:cb:3a:93:4f:bc:d1:7d:f8:
9a:62:90:1f:c3:b4:92:4a:d8:5c:a7:28:b5:43:e8:
06:b2:ed:86:1e:2d:45:4d:e0:9b:0f:89:98:b0:28:
9f:85:d5:fa:91:7c:2d:3f:91:fa:46:ea:a4:6e:a8:
61:98:c5:34:1e:0b:be:fb:aa:82:b7:71:44:60:9e:
04:04:e2:0e:fb:89:e4:59:cc:ae:d4:fb:ae:13:7b:
64:01:cf:d5:ce:8e:61:48:46:54:87:18:bf:ac:f8:
26:11:8e:08:d5:5b:a7:48:f0:ec:87:7e:b5:a5:93:
21:0b:a1:8e:67:7b:40:22:74:7c:11:93:f6:00:41:
56:8b:73:ec:d6:f1:51:39:e7:6f:b0:6e:b2:50:29:
7b:86:da:fa:61:cf:67:ea:db:62:04:97:1d:7c:6c:
fa:1f:09:39:73:08:d4:23:b9:33:f8:a9:df:93:41:
d9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:02:FE:7E:56:F9:61:9F:07:7E:5F:CE:C2:AA:90:49:F3:25:82:48
X509v3 Authority Key Identifier:
keyid:B0:57:08:45:C2:39:E9:99:1C:89:BC:5C:50:43:1E:90:87:86:0C:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFcIRcI56ZkcibxcUEMekIeGDE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1e7c48-f8c2-4679-b771-46ca26aff545/1/sFcIRcI56ZkcibxcUEMekIeGDE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1e7c48-f8c2-4679-b771-46ca26aff545/1/sFcIRcI56ZkcibxcUEMekIeGDE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:5f:bf:89:44:64:f8:b4:b2:cb:64:eb:0f:1d:45:ed:0b:f6:
71:5b:70:9d:9b:ab:6a:2f:45:18:ba:ca:ea:76:d4:b7:9f:6a:
c8:22:7f:85:e9:eb:b0:92:42:7b:a0:85:d8:50:32:c5:b9:9a:
33:80:cb:e9:65:47:76:68:93:6d:e0:72:dc:b1:4e:5e:31:d0:
c3:9d:db:95:56:58:2e:16:2a:b5:a2:cc:70:8a:73:b0:a9:76:
34:78:4e:ec:24:31:8c:be:8c:03:d2:5d:f1:09:7b:19:e9:80:
f7:47:d1:fb:6b:49:04:e8:08:09:29:2c:fb:81:d8:b8:1a:c6:
86:3b:0e:43:22:f0:80:12:e3:c7:d1:3c:13:ca:3f:90:83:de:
fc:c8:b5:bd:31:41:f9:e9:0a:a0:9e:8e:8e:a0:ff:3e:c1:15:
0b:ea:e8:74:98:71:8e:68:94:07:db:02:d4:00:d1:b6:11:6e:
1e:f1:6d:ab:9c:7a:92:56:80:3f:4a:f9:8a:a5:42:e1:53:6d:
ce:1a:20:59:ea:c8:29:65:6d:a4:ad:77:96:d2:9f:da:ba:e1:
f5:08:20:ec:ea:19:c8:b1:6e:dc:31:c0:ea:cf:f2:3e:96:76:
f0:83:d1:a3:9b:c2:e3:2a:c6:1f:db:04:dc:79:73:77:db:4a:
c0:ce:18:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:09:46 2026 by rpki-client