Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft
File: SReefPYEiMPvW3cNIa6xR9pMfO4.mft (raw, json)
Hash identifier: ixj0vP8cEpPEuw55BThH/5uADr3vtUKv7ldAb0ppuPg=
Subject key identifier: 0B:C8:9C:C7:03:73:42:99:8F:C8:65:3E:A8:E7:06:AA:C9:3D:24:64
Authority key identifier: 49:17:9E:7C:F6:04:88:C3:EF:5B:77:0D:21:AE:B1:47:DA:4C:7C:EE
Certificate issuer: /CN=49179e7cf60488c3ef5b770d21aeb147da4c7cee
Certificate serial: 019D98BDDD5B0029DA06A3957BCFCABC661E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SReefPYEiMPvW3cNIa6xR9pMfO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft
Manifest number: 15A7
Signing time: Fri 17 Apr 2026 00:01:12 +0000
Manifest this update: Fri 17 Apr 2026 00:01:12 +0000
Manifest next update: Sat 18 Apr 2026 00:01:12 +0000
Files and hashes: 1: Ep5ktzb7jazkCqqKIA1eaooWA3A.roa (hash: V0HuBh1yvdXINaO+p6RF/CkRfffpWDmrMD6p3MKWJhs=)
2: SReefPYEiMPvW3cNIa6xR9pMfO4.crl (hash: MxTe8yTwGG/Y+DH7P8sfIW56q6l/c8KE7xxYbbCeMC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SReefPYEiMPvW3cNIa6xR9pMfO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:dd:5b:00:29:da:06:a3:95:7b:cf:ca:bc:66:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49179e7cf60488c3ef5b770d21aeb147da4c7cee
Validity
Not Before: Apr 17 00:01:12 2026 GMT
Not After : Apr 18 00:01:12 2026 GMT
Subject: CN=0bc89cc7037342998fc8653ea8e706aac93d2464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b9:35:81:c3:9a:16:60:1b:b1:d4:84:c9:17:
7b:d6:5a:bc:34:39:46:0b:2f:8b:94:22:ca:f5:5d:
a2:e0:30:8e:33:be:bf:4f:15:7e:55:0b:82:60:89:
5c:87:50:8e:4a:c6:61:04:24:56:6d:18:53:0c:4b:
58:05:ee:ec:02:b5:1e:d6:13:3d:a3:9c:2e:01:16:
e5:d5:82:b5:69:d8:06:b6:ee:e6:a6:0d:ac:a3:fe:
27:7e:a7:0b:3d:3f:17:13:ce:89:d3:36:9b:a3:bc:
8b:e4:d5:56:a3:67:40:b2:70:09:b6:e6:88:47:30:
19:8c:1e:b7:0e:e5:a2:b7:46:81:ee:f7:c4:6f:78:
7c:04:3b:9f:81:62:48:b4:86:c4:86:e8:19:41:45:
fb:63:66:62:31:68:77:5f:ef:e6:c4:f7:21:2a:82:
85:96:87:b2:25:92:01:85:b7:81:1f:42:41:91:b3:
c1:65:ea:6f:60:84:a4:40:ed:8f:b9:f2:c0:62:c4:
2c:80:52:db:74:f8:bd:53:67:27:10:5e:a8:c5:a7:
9e:17:2f:e9:10:27:41:3b:4e:c4:f9:1f:d5:54:63:
b9:5d:45:78:d3:2f:06:67:aa:bb:03:75:cb:c7:2a:
bb:48:77:6c:ea:cc:06:1a:8d:0a:db:97:06:be:dd:
e8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:C8:9C:C7:03:73:42:99:8F:C8:65:3E:A8:E7:06:AA:C9:3D:24:64
X509v3 Authority Key Identifier:
keyid:49:17:9E:7C:F6:04:88:C3:EF:5B:77:0D:21:AE:B1:47:DA:4C:7C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SReefPYEiMPvW3cNIa6xR9pMfO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:68:8a:f6:e4:b5:77:57:f5:75:4f:61:91:82:21:06:b0:9d:
fb:82:4c:2c:7b:2c:7d:6b:f3:3e:db:68:8b:b7:47:5c:0c:7f:
51:ed:44:0b:d5:3e:36:f8:22:2a:8d:a4:7d:41:1c:d7:22:37:
12:e9:12:08:c8:b2:1f:9e:73:66:c1:b5:54:1d:89:ea:c1:e6:
3a:45:cb:ad:d0:88:32:93:12:e3:59:60:ee:19:6e:04:08:a0:
f3:de:a3:ef:05:3a:6f:21:84:61:db:b9:6b:d2:0a:ad:72:32:
df:4a:8b:fa:a2:4b:a5:7a:52:71:57:26:89:75:4e:71:4e:16:
12:0e:70:e7:4b:78:02:a2:9f:3d:66:ed:0d:15:d9:7a:f8:54:
67:59:92:7d:46:77:14:0c:25:e7:18:4a:d9:79:d5:d3:a8:6e:
14:c6:84:89:d4:f5:50:6a:47:e6:e1:5e:2a:71:26:8e:ae:98:
10:a8:cb:8e:a4:48:fa:26:5b:56:9d:2b:5c:43:a1:07:31:52:
17:9c:2f:34:b6:9e:02:38:bb:6b:1f:d8:fb:63:ee:75:2e:8b:
7b:98:b1:f3:c6:92:26:46:2b:d9:08:da:a6:40:62:c5:d8:15:
d0:89:8b:71:d9:76:ed:f0:24:31:48:03:de:6e:26:14:8b:cc:
88:fd:81:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Yvd1bACnaBqOVe8/KvGYeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5MTc5ZTdjZjYwNDg4YzNlZjViNzcwZDIxYWViMTQ3ZGE0
YzdjZWUwHhcNMjYwNDE3MDAwMTEyWhcNMjYwNDE4MDAwMTEyWjAzMTEwLwYDVQQD
EygwYmM4OWNjNzAzNzM0Mjk5OGZjODY1M2VhOGU3MDZhYWM5M2QyNDY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbk1gcOaFmAbsdSEyRd71lq8NDlG
Cy+LlCLK9V2i4DCOM76/TxV+VQuCYIlch1COSsZhBCRWbRhTDEtYBe7sArUe1hM9
o5wuARbl1YK1adgGtu7mpg2so/4nfqcLPT8XE86J0zabo7yL5NVWo2dAsnAJtuaI
RzAZjB63DuWit0aB7vfEb3h8BDufgWJItIbEhugZQUX7Y2ZiMWh3X+/mxPchKoKF
loeyJZIBhbeBH0JBkbPBZepvYISkQO2PufLAYsQsgFLbdPi9U2cnEF6oxaeeFy/p
ECdBO07E+R/VVGO5XUV40y8GZ6q7A3XLxyq7SHds6swGGo0K25cGvt3oawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAvInMcDc0KZj8hlPqjnBqrJPSRkMB8GA1UdIwQY
MBaAFEkXnnz2BIjD71t3DSGusUfaTHzuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1JlZWZQWUVpTVB2VzNjTklhNnhSOXBNZk80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kNTJlYWMtYzdlMi00ODgxLTg4ZTMt
NDcxZDQyYzJkODA2LzEvU1JlZWZQWUVpTVB2VzNjTklhNnhSOXBNZk80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9kNTJlYWMtYzdlMi00ODgxLTg4ZTMtNDcxZDQyYzJkODA2
LzEvU1JlZWZQWUVpTVB2VzNjTklhNnhSOXBNZk80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARmiK9uS1
d1f1dU9hkYIhBrCd+4JMLHssfWvzPttoi7dHXAx/Ue1EC9U+NvgiKo2kfUEc1yI3
EukSCMiyH55zZsG1VB2J6sHmOkXLrdCIMpMS41lg7hluBAig896j7wU6byGEYdu5
a9IKrXIy30qL+qJLpXpScVcmiXVOcU4WEg5w50t4AqKfPWbtDRXZevhUZ1mSfUZ3
FAwl5xhK2XnV06huFMaEidT1UGpH5uFeKnEmjq6YEKjLjqRI+iZbVp0rXEOhBzFS
F5wvNLaeAji7ax/Y+2PudS6Le5ix88aSJkYr2QjapkBixdgV0ImLcdl27fAkMUgD
3m4mFIvMiP2BsA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:43:28 2026 by rpki-client