Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.mft
File: sIRyULOncSfffDx7je-MnZGdxLk.mft (raw, json)
Hash identifier: rJBo2FFzBlQG/8Bhtrtm5QoEty+TWm2wBXckgs7wpIo=
Subject key identifier: 59:98:8A:B2:B2:84:46:5B:45:AD:F6:3B:05:D9:AC:07:FE:6A:E3:20
Authority key identifier: B0:84:72:50:B3:A7:71:27:DF:7C:3C:7B:8D:EF:8C:9D:91:9D:C4:B9
Certificate issuer: /CN=b0847250b3a77127df7c3c7b8def8c9d919dc4b9
Certificate serial: 019CAAC6FFDC107AA31F2929A8068752E124
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sIRyULOncSfffDx7je-MnZGdxLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.mft
Manifest number: 0AAA
Signing time: Sun 01 Mar 2026 19:01:34 +0000
Manifest this update: Sun 01 Mar 2026 19:01:34 +0000
Manifest next update: Mon 02 Mar 2026 19:01:34 +0000
Files and hashes: 1: SyjKeUnbRSDs4kNGNlsLLfS--v4.roa (hash: FpkjhgAtv2x7Z5TEduGx1C16Z0THVbd0mVvuXtouz6k=)
2: sIRyULOncSfffDx7je-MnZGdxLk.crl (hash: RFT+6vNTkZ8FEHihZWnQ/crc4Wr3Jw4jNbTOYXg8OKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sIRyULOncSfffDx7je-MnZGdxLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:ff:dc:10:7a:a3:1f:29:29:a8:06:87:52:e1:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0847250b3a77127df7c3c7b8def8c9d919dc4b9
Validity
Not Before: Mar 1 19:01:34 2026 GMT
Not After : Mar 2 19:01:34 2026 GMT
Subject: CN=59988ab2b284465b45adf63b05d9ac07fe6ae320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4a:7a:74:77:17:4e:4c:37:7b:05:e7:6e:5f:
1d:de:b2:20:d6:c3:1a:11:54:4a:9c:df:14:a6:0a:
d3:cd:11:16:2f:21:e9:30:b4:9e:96:7f:45:4b:cb:
4f:bb:f8:7b:71:fb:81:36:fe:90:d3:f6:68:33:a6:
3c:35:0b:0a:a3:7c:de:84:ea:32:d9:42:47:28:3b:
bf:48:c9:e8:f0:af:ee:05:37:64:cf:c9:5f:6a:a1:
16:57:bc:86:53:2d:09:b6:73:80:24:5d:04:e4:78:
b6:0b:df:1e:e1:63:11:7b:3a:73:03:29:d4:cf:66:
78:a8:3a:9d:5a:21:17:4d:a2:b4:85:b4:c6:2d:c7:
61:bc:b1:e5:39:8f:67:a9:c8:ac:f2:f6:de:35:17:
f0:1e:63:64:5d:51:de:bc:f4:17:5a:8f:21:c5:4a:
51:b9:dd:83:9b:f9:1e:b7:58:0c:8c:38:c4:09:53:
18:59:c9:e1:af:cf:ff:81:23:1e:1d:18:ac:ed:58:
c5:f1:43:53:1d:58:a9:31:85:3c:a3:16:9d:79:c2:
54:ab:48:2a:3e:2c:e3:6c:99:7f:90:8c:4a:ce:bc:
35:76:58:9a:93:90:34:b1:4f:04:f1:7b:9d:66:83:
bb:df:e2:be:dd:c6:4e:17:d3:88:dc:be:7a:3f:7a:
46:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:98:8A:B2:B2:84:46:5B:45:AD:F6:3B:05:D9:AC:07:FE:6A:E3:20
X509v3 Authority Key Identifier:
keyid:B0:84:72:50:B3:A7:71:27:DF:7C:3C:7B:8D:EF:8C:9D:91:9D:C4:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sIRyULOncSfffDx7je-MnZGdxLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:9a:a9:74:21:af:10:c6:b1:e6:44:7a:e5:20:64:45:91:36:
2a:df:ff:8c:74:97:f1:b5:65:70:f6:cf:16:52:e1:3b:3e:9a:
eb:25:19:d0:6d:c5:c1:91:d7:85:01:30:90:01:ca:aa:c5:6f:
d2:44:f8:29:29:50:cb:9e:fb:6f:fe:7d:03:83:69:d2:85:e1:
dc:0e:f0:79:53:a7:45:de:1d:24:b0:08:90:23:f6:7e:ef:8a:
90:45:8f:43:16:c4:31:1d:79:69:32:a9:74:d7:b0:96:c9:de:
37:35:67:5b:9a:5c:0c:ab:a3:85:f6:34:b2:63:81:41:1b:53:
4f:19:46:3d:fb:82:83:57:6a:fc:c5:ed:92:12:2d:c1:31:50:
f5:d1:da:ee:8b:89:01:c5:7b:d1:7e:3f:ec:e9:0f:91:77:59:
b2:69:be:35:54:b2:08:dc:d4:2e:a6:17:3e:d5:dc:d1:43:37:
01:57:26:ae:7a:17:22:2b:50:2d:b7:df:5d:24:dc:d7:d4:2a:
66:97:12:22:a0:a4:ea:d3:5e:f2:8f:e8:63:90:5c:ed:5b:9f:
3e:d8:82:e3:af:43:d1:9a:f7:d7:4d:8b:02:4c:1c:68:3c:df:
8f:1f:eb:08:7e:d4:76:12:a9:31:c4:4e:e4:02:24:e1:1c:f9:
c4:5f:06:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:57:54 2026 by rpki-client