Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.mft
File: SF92J0yAXSWxFaOtuh0uoVTe6tc.mft (raw, json)
Hash identifier: MLEfb+mR9NyojJSjOX2mIhTl6TbRM2JZm74MGr8buQk=
Subject key identifier: 52:9F:34:39:D7:CF:7A:81:38:EB:4A:46:27:36:F6:DE:AC:54:F1:C9
Authority key identifier: 48:5F:76:27:4C:80:5D:25:B1:15:A3:AD:BA:1D:2E:A1:54:DE:EA:D7
Certificate issuer: /CN=485f76274c805d25b115a3adba1d2ea154deead7
Certificate serial: 019D3262FC3060C4C33EBC49336E4A8BCCD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SF92J0yAXSWxFaOtuh0uoVTe6tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.mft
Manifest number: 1285
Signing time: Sat 28 Mar 2026 03:00:40 +0000
Manifest this update: Sat 28 Mar 2026 03:00:40 +0000
Manifest next update: Sun 29 Mar 2026 03:00:40 +0000
Files and hashes: 1: Oya_7CTNloqoLGAwE4lej4v0gVU.roa (hash: pi6Tio3aUQA0JE16nMLeotjfbha9a+YODpOnjWqpmKM=)
2: SF92J0yAXSWxFaOtuh0uoVTe6tc.crl (hash: Bu7+q2Z0QeDsNUVAe70eLZiJn5qSeadDZkWB4W9ls2o=)
3: VMZQ9NDd56nkh5RyTCLwouklkcA.roa (hash: uqsQckCvVpROGzhWbi/+xNcAtRw003GCNfZZ7Nd36Js=)
4: bOCkd18Ayb5bcI8G6YVBq7PIUcw.roa (hash: uKcVytuQYuouml3wIVfkbst8oBdAm0iOGlIFW2AnouI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SF92J0yAXSWxFaOtuh0uoVTe6tc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:62:fc:30:60:c4:c3:3e:bc:49:33:6e:4a:8b:cc:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485f76274c805d25b115a3adba1d2ea154deead7
Validity
Not Before: Mar 28 03:00:40 2026 GMT
Not After : Mar 29 03:00:40 2026 GMT
Subject: CN=529f3439d7cf7a8138eb4a462736f6deac54f1c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:db:46:80:40:82:b9:10:fa:e9:27:1c:4f:4d:
17:10:3b:9e:ea:f3:37:8e:3b:9c:c6:4e:4c:5b:0a:
95:e1:ff:6d:a5:d1:40:7a:ba:df:da:f7:f8:f9:6a:
b7:5c:1b:cd:86:23:f6:7d:a6:5f:09:87:ee:4b:39:
b1:10:02:83:86:29:97:ee:c1:44:fc:2f:bf:0c:c2:
7d:ca:fa:b4:90:82:8f:f3:77:69:1a:02:c0:9c:bd:
27:69:b0:49:a6:84:8d:56:25:a7:44:54:f3:90:e2:
4c:23:08:34:72:d6:56:bf:55:3f:b7:90:36:2c:6b:
35:c8:d1:84:d2:36:e2:7f:a3:85:c2:4a:98:ca:13:
8a:1d:89:64:5c:3e:5c:0f:dd:3f:0e:8d:d2:c6:55:
4d:79:34:f2:e1:b1:0c:13:96:c2:4d:d5:1d:67:cc:
70:28:dd:f6:31:70:61:af:bb:e2:e3:56:b4:2e:a6:
56:62:69:21:3f:33:95:5a:5a:fa:fe:7f:c5:e0:e1:
31:0e:35:c7:ff:55:82:02:07:5e:77:9f:f3:f9:1b:
c3:65:7a:f9:49:08:67:4a:04:3d:d5:59:7f:01:e0:
d8:77:09:ea:ca:5c:e3:09:3d:55:e7:57:26:2b:7b:
19:1f:4c:b6:40:30:a9:e4:f7:a3:ad:8b:96:f9:90:
9d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:9F:34:39:D7:CF:7A:81:38:EB:4A:46:27:36:F6:DE:AC:54:F1:C9
X509v3 Authority Key Identifier:
keyid:48:5F:76:27:4C:80:5D:25:B1:15:A3:AD:BA:1D:2E:A1:54:DE:EA:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF92J0yAXSWxFaOtuh0uoVTe6tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:0f:b1:a0:b1:a4:f1:90:6b:84:b4:d3:f7:91:a7:41:2e:ba:
ff:f2:ba:0c:a3:81:96:52:10:0e:66:be:29:43:d9:81:06:ed:
db:ed:f6:6c:5f:ad:55:fd:bd:af:5d:4d:67:6a:bd:bf:af:4b:
df:98:28:97:a5:16:1c:a3:84:43:0f:7a:d1:76:91:eb:fa:19:
97:cf:98:cf:9c:b5:2a:0a:31:f6:9d:60:bb:cf:ab:84:bb:94:
8e:06:29:f0:8c:13:de:18:fd:33:c4:2e:90:63:c3:a3:d5:e4:
7b:8d:e8:2f:9e:72:6a:8a:a0:33:2d:1d:4a:24:5f:71:05:0a:
46:e5:6e:c9:5d:d6:2a:42:48:17:88:58:bb:87:5f:ae:aa:69:
b0:8b:7e:1e:ec:86:20:18:85:50:0b:6b:58:21:36:81:d7:03:
ce:7f:13:b8:3b:89:c3:40:33:2d:c0:c2:1a:5a:88:93:5f:73:
3e:f9:ad:be:4a:fe:f0:09:e1:2c:81:20:19:06:43:9c:9d:23:
7a:f4:b2:b0:30:6f:6b:35:af:e3:57:7f:13:d2:2c:c1:4c:bd:
5c:9b:d7:50:90:33:7c:a4:9c:76:80:10:b5:0a:36:e7:e8:7a:
73:b4:c4:8d:3e:8a:af:d4:15:93:95:b7:67:86:d8:72:78:59:
4e:6d:c7:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:38:47 2026 by rpki-client