Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.mft
File: sSQfEp2_xKFlH-zboDEI_NLMHfI.mft (raw, json)
Hash identifier: yJs5DNz/DCzB0/smrstt5/MIfmAi/UNQcIUYKDnAy5w=
Subject key identifier: C2:0B:BC:5C:33:88:AF:FB:5C:9E:41:3C:87:6E:95:2C:77:BF:39:6B
Authority key identifier: B1:24:1F:12:9D:BF:C4:A1:65:1F:EC:DB:A0:31:08:FC:D2:CC:1D:F2
Certificate issuer: /CN=b1241f129dbfc4a1651fecdba03108fcd2cc1df2
Certificate serial: 019CADC762CC83AF9E2EAA913000D4BBBAF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sSQfEp2_xKFlH-zboDEI_NLMHfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.mft
Manifest number: 0BF2
Signing time: Mon 02 Mar 2026 09:00:51 +0000
Manifest this update: Mon 02 Mar 2026 09:00:51 +0000
Manifest next update: Tue 03 Mar 2026 09:00:51 +0000
Files and hashes: 1: WVWzNQBj7seo8FjvmhSj1kI6sP0.roa (hash: LoWAtshb113BC94Wt1I33mRTXma6WTQ9kgqJ5YaRPcM=)
2: imh_l3g4l-v4ARvrB47zBr6npYc.roa (hash: +4LHZfbwAtdvhA+phsNIwxwF9nTHU9oJ87vaM1DwuoA=)
3: sSQfEp2_xKFlH-zboDEI_NLMHfI.crl (hash: QWHSJOzIhGkpQNEYYzvE1cAK/S/Q8YvgyW1xGG8v1rI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sSQfEp2_xKFlH-zboDEI_NLMHfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:62:cc:83:af:9e:2e:aa:91:30:00:d4:bb:ba:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1241f129dbfc4a1651fecdba03108fcd2cc1df2
Validity
Not Before: Mar 2 09:00:51 2026 GMT
Not After : Mar 3 09:00:51 2026 GMT
Subject: CN=c20bbc5c3388affb5c9e413c876e952c77bf396b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:44:95:3c:6a:ad:91:75:99:9a:14:82:4c:d2:
38:4d:1c:24:0a:95:60:21:38:17:31:79:39:73:26:
c9:a2:64:37:c0:7d:a3:b9:f0:35:c3:d8:a4:20:e0:
97:0a:4c:c7:f8:82:63:da:95:2b:25:73:9e:8b:4a:
66:11:83:f1:09:18:fd:69:c0:d9:cd:83:16:3f:2e:
43:ca:89:f9:5e:44:b3:9a:64:50:6e:4b:48:0a:58:
9a:64:4a:13:f7:f2:93:32:2d:45:dc:d0:a4:50:2b:
61:1f:8d:50:47:b6:c5:ac:fe:44:ba:fe:a0:49:bf:
d7:73:6b:6b:63:49:f4:42:6f:90:af:81:ac:3a:3e:
ae:13:c9:08:54:71:2e:ab:9f:22:fe:0e:c7:eb:74:
ce:e4:6c:a3:d4:e4:76:6c:a0:5a:7b:b5:b1:cf:47:
b1:c9:4d:00:5c:a0:c6:ac:29:60:eb:ac:e0:52:df:
8a:15:b3:0c:14:f5:96:e6:b7:6f:88:42:e4:e7:01:
73:66:b2:0b:14:91:57:37:e1:ac:b5:9f:2d:e8:28:
c6:6a:b5:bb:16:ec:bf:81:91:f5:84:98:34:f6:1c:
97:f0:65:c5:bc:b5:2f:34:1e:93:f4:5d:e7:11:9f:
39:8e:0d:fc:16:5a:c0:17:ca:69:04:e4:cb:34:c6:
ec:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:0B:BC:5C:33:88:AF:FB:5C:9E:41:3C:87:6E:95:2C:77:BF:39:6B
X509v3 Authority Key Identifier:
keyid:B1:24:1F:12:9D:BF:C4:A1:65:1F:EC:DB:A0:31:08:FC:D2:CC:1D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sSQfEp2_xKFlH-zboDEI_NLMHfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:d0:be:f1:ba:d4:e4:b2:84:2c:a6:72:69:e7:d5:3f:80:bc:
b5:78:ec:ae:50:3a:5b:7d:c1:45:1e:1e:04:76:c1:b6:96:02:
30:d9:c6:67:c5:b3:b3:cb:f0:5a:4b:73:b4:4f:09:aa:35:50:
e1:6a:4c:da:98:ea:bc:0b:f4:94:81:33:96:61:fe:71:56:18:
7e:e3:c7:ee:bc:2c:e7:c8:24:24:3d:1f:45:45:52:c4:b0:95:
ba:e4:eb:1d:55:df:6f:17:0c:5b:d0:60:53:84:aa:b4:e1:09:
7c:c4:8b:11:2a:79:d7:86:16:1a:8f:f7:8e:13:40:fe:56:22:
b8:f5:f1:0d:9d:25:59:7e:b0:78:8f:71:ea:22:d5:0e:56:1b:
0f:ec:3f:0e:cb:f2:43:48:d3:7a:57:c0:72:e1:bb:a8:da:69:
7d:ca:97:9f:80:c4:b2:08:e7:de:19:a3:79:b7:c1:17:f0:e9:
89:99:c8:59:90:a7:db:d9:30:e7:25:5d:8f:b7:c5:06:ca:12:
36:ed:e7:0f:6d:e8:2c:86:af:38:88:d2:7d:9c:b2:36:d6:82:
f7:eb:c9:ed:2b:7f:5a:ea:fa:6a:47:fe:1a:33:da:81:f3:36:
fa:28:0e:ba:7e:03:67:a0:0c:e1:8a:6e:3e:1b:b2:17:dd:66:
ee:84:c4:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:02:14 2026 by rpki-client