Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/20b2c7-9009-45a0-899d-9c40ef69155b/1/SRodzN7JXOWDRq33ARJj1k6TtNE.mft
File: SRodzN7JXOWDRq33ARJj1k6TtNE.mft (raw, json)
Hash identifier: /czuAsk/8bbNE7rhbkm+sFDEZ1AY8YvFAfF1usHUYZw=
Subject key identifier: 08:B0:25:21:32:87:B6:29:D0:7F:91:56:5A:73:9A:75:F2:9B:47:2F
Authority key identifier: 49:1A:1D:CC:DE:C9:5C:E5:83:46:AD:F7:01:12:63:D6:4E:93:B4:D1
Certificate issuer: /CN=491a1dccdec95ce58346adf7011263d64e93b4d1
Certificate serial: 019D28842FF49639411442ABED7FB40622F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SRodzN7JXOWDRq33ARJj1k6TtNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/20b2c7-9009-45a0-899d-9c40ef69155b/1/SRodzN7JXOWDRq33ARJj1k6TtNE.mft
Manifest number: 01FA
Signing time: Thu 26 Mar 2026 05:00:44 +0000
Manifest this update: Thu 26 Mar 2026 05:00:44 +0000
Manifest next update: Fri 27 Mar 2026 05:00:44 +0000
Files and hashes: 1: SRodzN7JXOWDRq33ARJj1k6TtNE.crl (hash: 8RSSfsT9nX1baMU1Rda4GmpmqHtTNyKqQXS2c2c72HA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/20b2c7-9009-45a0-899d-9c40ef69155b/1/SRodzN7JXOWDRq33ARJj1k6TtNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/20b2c7-9009-45a0-899d-9c40ef69155b/1/SRodzN7JXOWDRq33ARJj1k6TtNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SRodzN7JXOWDRq33ARJj1k6TtNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:2f:f4:96:39:41:14:42:ab:ed:7f:b4:06:22:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=491a1dccdec95ce58346adf7011263d64e93b4d1
Validity
Not Before: Mar 26 05:00:44 2026 GMT
Not After : Mar 27 05:00:44 2026 GMT
Subject: CN=08b025213287b629d07f91565a739a75f29b472f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:e9:27:69:f4:72:46:9c:d9:c5:bb:cc:8d:54:
67:f1:6f:ea:26:3d:51:7f:92:f7:57:4c:cc:62:b0:
5d:3b:e0:0d:86:d9:31:da:5a:2c:51:1b:99:14:25:
25:b8:1a:b9:61:b9:bd:9d:b7:40:6c:f1:b7:72:f0:
0e:39:c2:70:b4:a1:aa:3a:28:be:e9:e7:59:67:78:
6e:5c:24:ec:c0:df:5b:1a:9e:47:73:bf:01:18:25:
50:e1:40:9e:e2:a5:ea:b8:64:88:0c:63:ce:33:86:
5d:66:cc:f5:c9:fb:95:b7:6a:8f:88:14:d5:7b:6f:
3b:59:dc:ee:7e:17:4d:c7:eb:82:07:a3:7a:ae:42:
f6:ec:52:8c:af:6e:c4:64:c0:e8:d2:98:12:ce:19:
51:cf:01:f9:af:44:eb:35:63:f2:a9:b3:a0:33:1d:
d9:f8:2b:50:8f:d8:2a:a5:88:65:8d:03:3b:f3:9a:
9f:af:86:cf:73:e7:89:6b:83:15:b2:f9:03:28:55:
9f:fb:66:22:61:30:1d:9a:81:f7:ba:af:bf:3f:61:
da:46:3f:13:e4:f6:75:0f:8e:3d:14:a1:d3:d8:60:
13:63:54:d5:a1:89:91:23:8d:cf:36:e8:34:01:f5:
25:1a:22:8c:e3:b8:4e:2b:2d:e0:72:86:43:58:53:
4f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B0:25:21:32:87:B6:29:D0:7F:91:56:5A:73:9A:75:F2:9B:47:2F
X509v3 Authority Key Identifier:
keyid:49:1A:1D:CC:DE:C9:5C:E5:83:46:AD:F7:01:12:63:D6:4E:93:B4:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SRodzN7JXOWDRq33ARJj1k6TtNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/20b2c7-9009-45a0-899d-9c40ef69155b/1/SRodzN7JXOWDRq33ARJj1k6TtNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/20b2c7-9009-45a0-899d-9c40ef69155b/1/SRodzN7JXOWDRq33ARJj1k6TtNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:3c:fb:fc:75:6b:74:76:5f:62:16:8a:7a:53:14:9c:0b:08:
8d:e6:3b:a8:96:22:31:30:cf:9e:23:5c:8e:0e:93:61:9d:d8:
41:5e:3d:f1:15:64:a0:9c:34:02:88:c7:ac:3f:51:b4:ca:ea:
45:8b:e1:17:db:42:d9:50:ea:b0:2e:ee:68:28:78:12:ef:b5:
5a:0d:f9:95:4c:36:84:e2:f1:05:88:c9:ee:44:f3:72:44:bb:
7a:23:23:90:a2:7f:37:46:a0:6c:a0:06:fa:8a:4c:3c:59:00:
de:ba:a0:7c:16:13:7a:bb:c7:be:39:a0:ed:62:b4:ef:69:b2:
f7:bd:28:14:f6:60:b0:ba:2d:c5:6f:e9:92:31:88:3c:50:a4:
43:18:ee:4b:3c:c9:f8:13:6a:95:48:d9:e7:aa:53:2c:0c:09:
65:41:c7:42:70:27:c3:64:ff:10:59:21:5d:e2:49:aa:c4:bf:
c6:b0:83:2f:17:71:1a:49:f9:4f:28:23:54:a3:7f:53:8a:76:
f2:bc:77:55:ad:89:4b:6a:93:79:9a:52:af:b9:4c:18:1d:6b:
fc:3a:53:27:f0:9f:9e:3b:55:94:94:89:d8:59:b5:88:55:21:
ad:5e:25:55:12:44:64:c0:ed:8c:00:80:2e:67:48:d6:d8:ac:
ff:1e:42:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:10:19 2026 by rpki-client