Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
File: SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft (raw, json)
Hash identifier: UT38MhTU79jTz205pRLA++mvt9o6sZFzcjmGEHKVA34=
Subject key identifier: D1:22:82:7D:B2:7B:D5:F7:76:45:C5:58:31:D8:B1:3F:9C:B7:DB:D8
Authority key identifier: 48:5D:DB:67:8C:4C:0D:0C:48:8E:FD:3B:83:67:14:21:89:F3:35:8A
Certificate issuer: /CN=485ddb678c4c0d0c488efd3b8367142189f3358a
Certificate serial: 019FA89969197395B9BEB43AC4BE41359F36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
Manifest number: 09B2
Signing time: Tue 28 Jul 2026 12:00:53 +0000
Manifest this update: Tue 28 Jul 2026 12:00:53 +0000
Manifest next update: Wed 29 Jul 2026 12:00:53 +0000
Files and hashes: 1: 3jYKnkkcPN6zosdPDC704_TH7Vg.roa (hash: kX0KO9Whng4G4PQyxbPg/tClDSCWlQb64Svmgd3bElg=)
2: SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl (hash: mHA0D6nubHgGGWl7m2QZytx4Pi9TLf49Ph6djDJeDhA=)
3: d7BNBvtBybD-ouMBr6YNcUi45jE.roa (hash: z33gEnZ5ORYGaYJCcJZ5qtqJlEn1QrL+f98X4D8eWjU=)
4: r_AxxcY8QiH2nWS9CL04AgPUmsY.roa (hash: l8fqDJAdHfTIgiiJd3kewidzUv4M6LymruB3QWo/rdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:69:19:73:95:b9:be:b4:3a:c4:be:41:35:9f:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485ddb678c4c0d0c488efd3b8367142189f3358a
Validity
Not Before: Jul 28 12:00:53 2026 GMT
Not After : Jul 29 12:00:53 2026 GMT
Subject: CN=d122827db27bd5f77645c55831d8b13f9cb7dbd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:19:25:1a:2f:d1:b1:1f:96:44:b5:7a:ed:43:
82:7e:bf:d0:dd:ed:df:9a:74:51:f0:eb:ce:6d:c2:
9f:9a:41:e9:71:90:57:77:17:05:52:cd:5c:91:5b:
c9:fb:ae:42:fc:8a:a1:c1:f8:89:ee:b6:3c:94:91:
b2:d2:77:86:1a:d2:d4:82:eb:78:79:c9:fe:74:c8:
a8:8e:32:41:ee:05:bc:b5:ff:dd:d6:db:b8:e7:e7:
28:c0:41:d0:fe:49:9f:2f:13:d3:53:2a:78:c3:bf:
d6:79:ee:0f:95:2e:c3:96:16:42:e7:e0:e1:a3:17:
2f:29:58:8f:b9:8c:8f:2e:a9:90:c7:3e:41:d3:e1:
de:9e:15:97:34:1d:b0:e1:ca:93:db:16:86:92:a9:
02:b7:f1:9d:88:45:ac:4e:60:cc:12:ba:d9:df:5d:
f5:b1:98:2c:06:b6:8a:1a:00:8f:e6:d6:f9:9b:9a:
f5:21:6d:67:fc:0e:9d:72:25:d1:58:cc:41:a4:dd:
93:0b:54:84:c7:ee:92:0e:98:f7:55:f4:35:e8:57:
39:91:ab:26:92:17:ac:53:a9:cb:78:d5:7a:7f:fe:
5d:68:55:29:8b:11:a7:ee:55:20:e8:84:8d:5e:28:
22:f8:f3:b2:61:3f:f9:55:dc:15:26:7f:c8:2f:60:
b7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:22:82:7D:B2:7B:D5:F7:76:45:C5:58:31:D8:B1:3F:9C:B7:DB:D8
X509v3 Authority Key Identifier:
keyid:48:5D:DB:67:8C:4C:0D:0C:48:8E:FD:3B:83:67:14:21:89:F3:35:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:8c:a9:30:2c:86:8a:14:9e:3d:bf:3d:a4:a4:41:0a:86:7b:
23:d9:41:a9:25:79:8e:97:5c:e4:19:0c:62:4e:6c:5a:a2:76:
a3:ea:e0:e0:a6:2a:1e:1f:72:56:cf:21:89:bf:fc:31:9c:cf:
eb:c6:b2:cf:c6:5a:08:1a:2f:b3:a2:9f:8f:f3:c6:94:6e:3d:
42:21:8a:25:49:a7:b3:86:ca:9d:a2:14:75:bd:33:c8:4f:24:
97:10:67:13:8a:b1:55:1e:4a:eb:b6:44:a3:bb:51:15:a2:5b:
fe:1c:b3:c3:ef:f9:10:75:76:e0:46:83:bf:b8:f1:32:b7:37:
dc:b3:e8:e1:e3:49:ac:2f:ef:f3:fd:46:1f:bc:b7:da:74:9f:
16:6e:d0:d9:5a:a9:54:60:1c:43:57:aa:30:75:06:9c:4e:3b:
ab:b5:ae:37:aa:a1:d6:73:fe:23:95:89:23:a8:c4:33:07:a0:
48:49:14:35:3f:d7:96:2b:a9:99:f4:c1:fe:44:62:6c:b6:29:
c6:ee:43:d8:78:33:2b:bc:e2:10:a8:cc:c9:db:68:0b:73:3e:
89:d6:3f:71:24:68:20:6e:2d:4c:f3:1f:1a:aa:1c:c0:a4:f4:
e3:4f:a5:e8:1b:2f:12:49:11:9a:f3:c8:81:7e:5d:43:11:0d:
36:40:92:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:50:28 2026 by rpki-client