Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
File: SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft (raw, json)
Hash identifier: rATDd1HzJ24mDEqHC3uw52OuBJFn5WZD5jQahIIdzSY=
Subject key identifier: 76:20:35:D5:65:2F:E9:77:D8:CB:49:CA:7D:01:40:98:4D:B3:E4:5D
Authority key identifier: 48:5D:DB:67:8C:4C:0D:0C:48:8E:FD:3B:83:67:14:21:89:F3:35:8A
Certificate issuer: /CN=485ddb678c4c0d0c488efd3b8367142189f3358a
Certificate serial: 019CA9EAB18DF853C74CADD0F85BCAC4E3D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
Manifest number: 0825
Signing time: Sun 01 Mar 2026 15:00:56 +0000
Manifest this update: Sun 01 Mar 2026 15:00:56 +0000
Manifest next update: Mon 02 Mar 2026 15:00:56 +0000
Files and hashes: 1: 3jYKnkkcPN6zosdPDC704_TH7Vg.roa (hash: kX0KO9Whng4G4PQyxbPg/tClDSCWlQb64Svmgd3bElg=)
2: SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl (hash: 4ZuQTtH9kyL6CTqTu7G0zGO7MiXnm5eg7HNxi03EN+8=)
3: d7BNBvtBybD-ouMBr6YNcUi45jE.roa (hash: z33gEnZ5ORYGaYJCcJZ5qtqJlEn1QrL+f98X4D8eWjU=)
4: r_AxxcY8QiH2nWS9CL04AgPUmsY.roa (hash: l8fqDJAdHfTIgiiJd3kewidzUv4M6LymruB3QWo/rdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:b1:8d:f8:53:c7:4c:ad:d0:f8:5b:ca:c4:e3:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485ddb678c4c0d0c488efd3b8367142189f3358a
Validity
Not Before: Mar 1 15:00:56 2026 GMT
Not After : Mar 2 15:00:56 2026 GMT
Subject: CN=762035d5652fe977d8cb49ca7d0140984db3e45d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6a:c6:85:ac:e8:64:df:e3:62:46:53:18:a9:
bb:59:4c:cf:46:4e:d3:88:ce:96:9c:5b:90:07:46:
04:31:c2:94:6c:87:3c:c2:a9:93:05:97:37:e9:ca:
02:01:a3:b9:84:d8:a9:dc:ce:04:de:0d:68:23:53:
66:6f:e3:f1:46:da:34:62:18:ba:3d:cb:31:57:d3:
2e:9d:5f:95:84:a5:86:4f:2c:aa:85:55:6e:38:9b:
52:38:3e:4b:f7:3c:bc:e9:3d:1a:61:47:6e:99:41:
00:39:09:ff:13:5d:99:d8:73:38:29:e0:2d:95:10:
d3:4c:2c:07:5c:24:8c:45:1b:83:ac:a1:21:53:83:
48:30:c2:81:33:4a:92:03:68:1c:0b:f7:c2:f2:8a:
76:e6:20:26:ab:86:cc:7a:ab:1d:54:23:e7:21:63:
aa:39:21:34:55:ee:7d:b0:cd:f3:38:1a:09:19:de:
be:84:8c:bf:a5:bb:6b:92:1b:f3:49:eb:39:12:dc:
65:06:2e:73:bb:47:e3:78:70:c4:32:88:0f:2b:d6:
59:c0:6b:f5:58:c6:4a:5d:4c:51:58:6f:6b:fb:e1:
9f:39:5e:08:1f:5f:60:3a:7a:6e:7a:7a:aa:d2:c3:
9b:12:3f:61:f8:2f:99:d0:fa:3e:cd:e3:02:86:a4:
e9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:20:35:D5:65:2F:E9:77:D8:CB:49:CA:7D:01:40:98:4D:B3:E4:5D
X509v3 Authority Key Identifier:
keyid:48:5D:DB:67:8C:4C:0D:0C:48:8E:FD:3B:83:67:14:21:89:F3:35:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:f8:18:06:cd:eb:f8:b5:3b:a7:1c:cd:f1:34:a0:c6:7c:79:
55:f7:e3:ac:d1:10:3d:df:49:f1:7e:ed:d7:46:8d:2b:4c:a7:
e5:47:14:15:45:41:f1:91:94:a9:04:22:5a:08:87:30:a0:33:
ad:e9:ab:4d:0c:8a:d4:d6:19:68:30:8b:08:d1:a3:3e:c9:a9:
79:bb:82:d7:29:98:f3:ee:c6:1d:e6:7c:94:b5:ef:65:66:74:
a7:a6:57:e2:45:1e:71:60:13:1f:ea:6b:e6:08:47:2b:fa:87:
b7:a9:3f:9d:02:2e:31:48:c7:77:25:52:29:3f:f0:ce:c1:5b:
5f:c6:93:e9:2b:4b:4d:22:25:93:4d:5a:75:b1:e7:7b:38:98:
3f:32:ef:5b:83:22:6e:7a:a6:03:98:07:65:da:cd:58:19:70:
60:36:a1:15:f7:4e:25:8a:b3:f9:18:e1:2e:40:4f:45:45:30:
26:db:1b:6b:56:f3:08:19:92:5d:54:73:22:0a:67:b3:bf:af:
70:84:b6:a7:ab:be:c2:4a:52:6e:23:4f:f2:c2:2d:1a:43:b9:
71:8e:b3:8c:35:b5:a1:da:2d:23:84:cc:a1:92:06:41:70:86:
e9:b4:cc:62:e3:c9:eb:0d:1a:3e:f1:59:34:50:28:27:73:a1:
bf:9d:12:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:17:12 2026 by rpki-client