Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/a905e9-f93b-4d60-8108-810b9f5cc415/1/S11Foqu5YNK851js5zOxJtyn5xs.mft
File: S11Foqu5YNK851js5zOxJtyn5xs.mft (raw, json)
Hash identifier: PdfRNN9ln2O1N1CsDr+XN40+mJKhh30Dm5O0z8J7nPQ=
Subject key identifier: 21:F3:E4:FF:2D:13:5C:04:63:EF:C2:59:44:53:6A:84:EB:58:C8:BD
Authority key identifier: 4B:5D:45:A2:AB:B9:60:D2:BC:E7:58:EC:E7:33:B1:26:DC:A7:E7:1B
Certificate issuer: /CN=4b5d45a2abb960d2bce758ece733b126dca7e71b
Certificate serial: 019CAB340F80A87EB6E328F30E3321CCE45D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S11Foqu5YNK851js5zOxJtyn5xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/a905e9-f93b-4d60-8108-810b9f5cc415/1/S11Foqu5YNK851js5zOxJtyn5xs.mft
Manifest number: 1710
Signing time: Sun 01 Mar 2026 21:00:41 +0000
Manifest this update: Sun 01 Mar 2026 21:00:41 +0000
Manifest next update: Mon 02 Mar 2026 21:00:41 +0000
Files and hashes: 1: MGecWndx1rC8r0_cF__XvWTIdhY.roa (hash: xMJtrWi1rZ3GmoFWTN/zEzHLjFTmPRigqDi25vDVZzk=)
2: S11Foqu5YNK851js5zOxJtyn5xs.crl (hash: mk4LJ/yRmb//456gYXoiIt5W+Krp/UlcyCX41sM8mFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/a905e9-f93b-4d60-8108-810b9f5cc415/1/S11Foqu5YNK851js5zOxJtyn5xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/a905e9-f93b-4d60-8108-810b9f5cc415/1/S11Foqu5YNK851js5zOxJtyn5xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/S11Foqu5YNK851js5zOxJtyn5xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:0f:80:a8:7e:b6:e3:28:f3:0e:33:21:cc:e4:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b5d45a2abb960d2bce758ece733b126dca7e71b
Validity
Not Before: Mar 1 21:00:41 2026 GMT
Not After : Mar 2 21:00:41 2026 GMT
Subject: CN=21f3e4ff2d135c0463efc25944536a84eb58c8bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a7:c8:3f:59:25:2f:50:e0:e0:c6:5b:d3:be:
d6:5e:72:25:9c:d2:65:c7:5a:f1:77:52:b3:fa:f1:
c3:3a:16:8e:fd:cf:95:2e:e6:55:d3:66:16:69:2e:
dd:07:73:f3:d6:de:eb:35:ff:d4:59:85:3d:fe:72:
05:7d:13:f6:7e:ae:17:49:69:1d:14:6f:45:57:1c:
f4:2c:7a:65:aa:5a:d4:c4:b8:c8:85:34:b4:d9:e5:
6b:03:90:5b:ce:1b:e5:f9:b1:9a:06:3e:cd:60:b7:
25:69:69:c7:03:27:19:87:27:b7:ba:9f:52:1f:c0:
b1:24:6c:c9:64:01:1b:0c:41:91:3b:07:96:f7:53:
ae:f3:f1:af:c5:d2:5d:a1:e8:48:ec:b9:6d:5d:49:
f6:98:bd:5c:c8:74:4f:8c:ae:99:51:c3:c7:c0:bb:
de:3f:6d:03:87:6f:49:0f:c0:2f:5d:32:ea:af:bd:
62:9b:ac:77:a3:97:f7:d1:e0:22:54:b3:b3:7e:9b:
4d:ce:3a:b9:a8:7a:bd:ae:a5:99:72:8d:50:61:0b:
51:a4:9a:48:b2:16:3f:2b:39:60:e8:57:1d:63:18:
81:43:12:1d:ff:72:7d:10:b3:10:ac:65:c7:5f:5d:
6f:48:f7:97:d5:f7:4c:71:c7:8a:75:68:dd:28:bb:
d0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F3:E4:FF:2D:13:5C:04:63:EF:C2:59:44:53:6A:84:EB:58:C8:BD
X509v3 Authority Key Identifier:
keyid:4B:5D:45:A2:AB:B9:60:D2:BC:E7:58:EC:E7:33:B1:26:DC:A7:E7:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S11Foqu5YNK851js5zOxJtyn5xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a905e9-f93b-4d60-8108-810b9f5cc415/1/S11Foqu5YNK851js5zOxJtyn5xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a905e9-f93b-4d60-8108-810b9f5cc415/1/S11Foqu5YNK851js5zOxJtyn5xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:2c:98:57:b3:9a:e5:b6:94:06:d8:f1:74:6f:3f:8e:89:d1:
98:26:1e:84:e3:76:e2:4e:2b:dc:6e:45:70:3f:6e:43:96:6a:
c6:72:d7:d5:60:6a:37:aa:a7:a6:42:97:b9:53:ad:3a:73:d6:
1e:13:a8:dd:1f:66:ed:b0:98:3e:ed:aa:02:9b:30:3b:99:b2:
41:6d:eb:92:d2:14:2b:73:e1:44:61:16:98:57:fc:f2:54:57:
d1:22:12:fd:9a:cd:8c:4d:65:91:fb:1b:fd:54:48:ee:0c:02:
cf:dc:f5:11:f3:f6:f4:2e:31:18:fd:58:25:57:a4:a5:85:33:
b7:4a:84:75:d1:cc:9f:0a:a5:fd:fc:8c:dc:04:ab:a3:5f:0d:
87:db:1b:af:86:53:fa:64:a6:73:87:fc:d1:fa:52:9b:78:d1:
3f:a4:1d:24:33:9a:46:2d:5b:78:41:32:56:0c:ec:b2:25:70:
3e:e2:65:a5:1c:65:15:b0:05:cf:2f:c8:a4:1b:19:55:a5:d6:
29:01:2f:00:b1:78:23:51:70:d2:24:28:30:56:41:3f:05:cb:
a9:3e:0d:53:c7:84:d9:d1:0a:05:9a:8b:fa:54:81:17:b7:95:
28:21:a2:c0:51:67:58:be:30:c5:16:38:9f:ca:41:a1:f0:f5:
74:f3:3c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:39:55 2026 by rpki-client