Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.mft
File: Sf6Mcqoy3pV7JM-fc_in-xrPC3E.mft (raw, json)
Hash identifier: NFtqsvJQjlv83j3ckIo8mD8+6Ula2D3yH38AwXriY10=
Subject key identifier: 9F:27:FB:BF:F5:18:69:82:C6:1C:B2:43:24:25:35:87:1D:AA:EA:25
Authority key identifier: 49:FE:8C:72:AA:32:DE:95:7B:24:CF:9F:73:F8:A7:FB:1A:CF:0B:71
Certificate issuer: /CN=49fe8c72aa32de957b24cf9f73f8a7fb1acf0b71
Certificate serial: 019D2A72519F3D9742C917474BAD622F3C37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.mft
Manifest number: 10BF
Signing time: Thu 26 Mar 2026 14:00:28 +0000
Manifest this update: Thu 26 Mar 2026 14:00:28 +0000
Manifest next update: Fri 27 Mar 2026 14:00:28 +0000
Files and hashes: 1: Sf6Mcqoy3pV7JM-fc_in-xrPC3E.crl (hash: eu8j9DqzOZSjx7ymFF9UDCjOLXczEfLNATJZGyWTcDw=)
2: zuvfz_qQwxwSkAdtG0Js-khyYL4.roa (hash: xagvaZCpPwHCxyMBtZK7vMyfxxV2ODbD7qNizvfSRvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 14:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:51:9f:3d:97:42:c9:17:47:4b:ad:62:2f:3c:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49fe8c72aa32de957b24cf9f73f8a7fb1acf0b71
Validity
Not Before: Mar 26 14:00:28 2026 GMT
Not After : Mar 27 14:00:28 2026 GMT
Subject: CN=9f27fbbff5186982c61cb243242535871daaea25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:46:e8:2e:70:91:72:8d:3d:7d:8e:1c:c6:0b:
51:9d:33:be:15:63:fe:a5:79:70:0d:b8:ef:99:cb:
07:28:22:a7:ce:75:95:1d:e1:68:87:cf:c1:f2:39:
97:6d:2e:6e:7a:82:68:34:2c:7b:43:57:21:dc:b8:
2f:ad:83:3a:5d:58:db:82:ea:d5:d4:cd:7a:f6:38:
6f:8a:b9:bb:bd:cb:b8:8e:d2:c3:17:7b:9a:8e:b5:
c2:73:19:43:1c:52:0c:22:56:03:90:e9:c2:96:40:
4b:d7:38:aa:a5:03:7b:4f:ad:9d:93:26:bb:84:c5:
db:da:b4:fe:0f:cd:a9:d3:1e:5d:c7:78:dd:87:0e:
66:3a:52:f0:5c:7c:44:3d:34:ee:fd:d5:8a:a3:17:
71:26:1e:35:98:52:90:ff:e6:ca:bc:8d:d6:7b:d0:
01:9a:d2:a9:c6:fe:ad:59:16:5a:fd:5b:6b:8d:34:
60:e4:6d:c0:09:e6:fc:25:f1:ed:96:7b:55:01:ef:
36:4d:f7:0d:fa:85:28:f2:40:65:15:9c:3e:18:a5:
ca:bc:00:c0:e6:a1:f2:b0:4c:15:2d:dd:6a:18:04:
65:c8:a3:67:1c:13:63:07:b9:66:7b:72:91:25:21:
30:37:b1:f4:ee:83:c8:72:f6:73:f2:68:5d:9f:95:
aa:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:27:FB:BF:F5:18:69:82:C6:1C:B2:43:24:25:35:87:1D:AA:EA:25
X509v3 Authority Key Identifier:
keyid:49:FE:8C:72:AA:32:DE:95:7B:24:CF:9F:73:F8:A7:FB:1A:CF:0B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4114a7-3122-4864-85ae-4297e572617e/1/Sf6Mcqoy3pV7JM-fc_in-xrPC3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:16:c5:cb:9c:9a:1a:f3:71:49:80:2b:ec:c7:29:5e:be:12:
78:af:0e:08:00:13:39:0e:4b:d7:93:4b:66:84:b0:dc:d0:ce:
ef:3a:bc:93:b3:e7:67:b1:7e:23:68:c2:d3:f0:7e:df:83:d9:
a7:79:aa:47:c4:51:b6:7e:c1:8d:4f:dd:8d:47:28:88:f7:32:
82:2d:f2:db:e6:c1:e8:80:bf:30:33:4b:54:d2:b9:4c:f2:6f:
15:3e:aa:08:7e:0b:71:bd:e5:c5:6e:9a:9e:6d:9b:de:2a:72:
cc:19:0b:b5:f8:cd:a5:4b:b2:7e:7a:10:77:53:1b:e6:21:cb:
39:69:b0:3d:14:af:e2:9d:90:f9:59:f2:c7:7a:5b:84:51:87:
50:ff:ef:0d:ad:44:4e:b1:d1:81:df:64:4e:84:6a:40:8b:20:
50:00:59:c0:e7:a2:69:e4:ab:3a:fb:e1:6f:82:b8:1d:c5:bd:
19:1a:48:a3:cd:41:1d:d6:63:14:a3:f2:04:7a:cb:d1:29:d9:
fc:9d:1b:cb:54:6f:9c:b1:a5:c8:f4:0b:20:a6:5c:f6:df:56:
22:82:2e:c9:47:6e:d3:dd:8c:24:21:88:77:73:ab:c5:07:94:
00:36:ca:42:e8:81:9a:34:31:75:af:73:3d:90:78:a4:0e:b3:
4f:00:e6:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:56:14 2026 by rpki-client