Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/1e7c48-f8c2-4679-b771-46ca26aff545/1/sFcIRcI56ZkcibxcUEMekIeGDE0.mft
File: sFcIRcI56ZkcibxcUEMekIeGDE0.mft (raw, json)
Hash identifier: gxdGDFKTGxgse3pt5Ke29liDi4zVDvNxx1t2rLHfFas=
Subject key identifier: DD:99:20:39:7B:FE:E8:AA:0B:B6:0A:8C:31:60:46:96:81:48:3A:B1
Authority key identifier: B0:57:08:45:C2:39:E9:99:1C:89:BC:5C:50:43:1E:90:87:86:0C:4D
Certificate issuer: /CN=b0570845c239e9991c89bc5c50431e9087860c4d
Certificate serial: 019FA906B3FB771EE23CF66AB01830DF2FA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFcIRcI56ZkcibxcUEMekIeGDE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/1e7c48-f8c2-4679-b771-46ca26aff545/1/sFcIRcI56ZkcibxcUEMekIeGDE0.mft
Manifest number: 045B
Signing time: Tue 28 Jul 2026 14:00:16 +0000
Manifest this update: Tue 28 Jul 2026 14:00:16 +0000
Manifest next update: Wed 29 Jul 2026 14:00:16 +0000
Files and hashes: 1: FkN5wCpqf47xHpP2qPmsCVpZA5A.roa (hash: 6NsTbMJNSxy3emhsWHcWB2UjLqNQnQDr6NiMOXPxTg4=)
2: InFnBGmGL8Q0FS0kuwygTEx8_Lw.asa (hash: zLqLkWTB98DOsRwXQTGdXmZzjw6dskDN5dpYGFPv88s=)
3: sFcIRcI56ZkcibxcUEMekIeGDE0.crl (hash: GIiheixxCI5JFRY8ZpSl9MLS9XhrnddgBsriWgDzImA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/1e7c48-f8c2-4679-b771-46ca26aff545/1/sFcIRcI56ZkcibxcUEMekIeGDE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/1e7c48-f8c2-4679-b771-46ca26aff545/1/sFcIRcI56ZkcibxcUEMekIeGDE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sFcIRcI56ZkcibxcUEMekIeGDE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:06:b3:fb:77:1e:e2:3c:f6:6a:b0:18:30:df:2f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0570845c239e9991c89bc5c50431e9087860c4d
Validity
Not Before: Jul 28 14:00:16 2026 GMT
Not After : Jul 29 14:00:16 2026 GMT
Subject: CN=dd9920397bfee8aa0bb60a8c3160469681483ab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bc:bc:e3:97:f1:79:6b:ae:11:f7:cd:c4:83:
14:c4:f3:3e:18:2b:fb:c2:fc:4a:ee:b0:9c:8e:a6:
5f:49:46:ab:36:5e:6e:0c:4e:dc:92:fd:78:ac:eb:
c2:44:d7:ab:53:a8:e8:05:08:ec:12:7e:c8:24:be:
00:73:fb:95:b4:a4:09:dc:10:67:47:62:3e:49:a9:
e8:fd:ba:3d:e2:36:93:93:b7:fc:52:60:a2:e3:51:
75:7c:36:7f:66:2e:48:be:49:20:83:d0:b4:59:07:
c4:66:39:b2:d2:1a:a4:73:99:5e:d9:f8:b2:db:da:
ab:c0:80:8b:3f:67:51:ed:59:c1:4d:bf:e4:9f:e9:
50:ba:04:ef:a2:67:e1:cc:b4:51:63:06:5c:14:d9:
72:bc:93:85:eb:e1:f2:d6:56:85:b4:27:a9:df:4d:
8b:3e:9c:48:14:de:05:6c:24:8d:6f:97:0e:86:e5:
ca:43:1c:83:e7:6e:6e:b9:9d:61:21:e4:52:4b:d2:
40:60:63:93:7a:ac:59:b3:79:a6:b8:ba:3c:e8:bc:
24:8f:c9:ff:68:fe:24:b4:45:85:11:44:04:21:7c:
ac:7d:8f:b8:2e:20:29:eb:d2:6e:2c:dd:b0:e7:50:
3b:ac:67:b4:16:a8:ae:41:78:53:2f:cb:86:20:63:
5c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:99:20:39:7B:FE:E8:AA:0B:B6:0A:8C:31:60:46:96:81:48:3A:B1
X509v3 Authority Key Identifier:
keyid:B0:57:08:45:C2:39:E9:99:1C:89:BC:5C:50:43:1E:90:87:86:0C:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFcIRcI56ZkcibxcUEMekIeGDE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1e7c48-f8c2-4679-b771-46ca26aff545/1/sFcIRcI56ZkcibxcUEMekIeGDE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1e7c48-f8c2-4679-b771-46ca26aff545/1/sFcIRcI56ZkcibxcUEMekIeGDE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:72:ef:39:f6:fd:e5:6a:59:33:86:78:9a:cb:72:be:c8:06:
1b:f4:ba:4a:79:a2:a2:5f:0b:5f:7d:ea:f4:6f:7c:89:71:a0:
04:5c:33:dc:14:2d:d0:32:e3:be:bf:af:ad:30:38:37:33:70:
3b:d3:df:3c:63:88:ec:81:35:6e:e3:7b:b9:d6:09:c4:db:e3:
03:20:3b:fd:11:a8:e2:6d:65:1c:52:be:19:75:61:16:fe:f8:
40:fb:1f:23:29:73:f2:64:f5:50:1f:4b:e0:bc:6a:06:25:51:
09:db:7f:61:e6:11:5d:d4:88:a9:47:36:06:a5:a4:ec:65:c2:
72:7c:c4:9e:6d:dd:a2:b7:1c:b5:cd:2a:57:80:fa:8f:b7:66:
4b:c5:a8:f2:0d:d6:9d:81:6b:75:e7:18:89:0b:48:cf:0d:22:
8a:44:85:a2:5f:a6:bf:f7:79:5e:42:ba:e1:05:a0:d9:51:30:
81:b9:0c:95:68:5b:1a:6e:fc:36:42:fd:a5:e8:cf:10:4c:44:
79:01:e4:5d:59:bf:ce:0a:8a:46:2a:2d:63:e6:29:98:1b:a5:
50:4f:42:a2:3d:7a:b1:74:35:d0:b5:19:9f:97:6f:29:c6:79:
be:09:a3:b7:c9:3e:de:09:fe:2c:ee:a6:85:e9:3c:47:53:c4:
8c:1a:77:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:35:04 2026 by rpki-client