Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.mft
File: SF92J0yAXSWxFaOtuh0uoVTe6tc.mft (raw, json)
Hash identifier: 2i6V43mrMx3GDVkt763K5rTQ5LFGBSuurX5XLZLzAsM=
Subject key identifier: 88:90:87:4A:C9:FA:23:D9:00:B1:EB:18:01:3D:DC:B2:06:DA:5F:62
Authority key identifier: 48:5F:76:27:4C:80:5D:25:B1:15:A3:AD:BA:1D:2E:A1:54:DE:EA:D7
Certificate issuer: /CN=485f76274c805d25b115a3adba1d2ea154deead7
Certificate serial: 019E1DFE7AF93425FCBE8E0341DEEF4A3FB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SF92J0yAXSWxFaOtuh0uoVTe6tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.mft
Manifest number: 12FF
Signing time: Tue 12 May 2026 21:01:17 +0000
Manifest this update: Tue 12 May 2026 21:01:17 +0000
Manifest next update: Wed 13 May 2026 21:01:17 +0000
Files and hashes: 1: Oya_7CTNloqoLGAwE4lej4v0gVU.roa (hash: pi6Tio3aUQA0JE16nMLeotjfbha9a+YODpOnjWqpmKM=)
2: SF92J0yAXSWxFaOtuh0uoVTe6tc.crl (hash: yzl2HJQV4pr5e/Vu9dRf52ebmDorP8IG3GVp/CzoJG8=)
3: VMZQ9NDd56nkh5RyTCLwouklkcA.roa (hash: uqsQckCvVpROGzhWbi/+xNcAtRw003GCNfZZ7Nd36Js=)
4: bOCkd18Ayb5bcI8G6YVBq7PIUcw.roa (hash: uKcVytuQYuouml3wIVfkbst8oBdAm0iOGlIFW2AnouI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SF92J0yAXSWxFaOtuh0uoVTe6tc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:7a:f9:34:25:fc:be:8e:03:41:de:ef:4a:3f:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485f76274c805d25b115a3adba1d2ea154deead7
Validity
Not Before: May 12 21:01:17 2026 GMT
Not After : May 13 21:01:17 2026 GMT
Subject: CN=8890874ac9fa23d900b1eb18013ddcb206da5f62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0f:fa:c5:ea:12:5b:35:1b:d1:5e:b9:2a:ea:
e3:e6:72:e5:4e:13:34:f0:6e:88:0b:eb:5a:68:21:
90:44:21:d2:97:22:c6:f5:fe:38:c0:53:9b:70:2d:
c0:b9:1c:5d:12:b0:d5:15:ad:68:d2:4d:0e:69:30:
3c:32:d4:ff:6b:7c:5c:8c:e4:3f:f1:7e:13:3c:9f:
a7:d7:7c:09:c2:db:2c:eb:a1:dc:a6:9d:e0:dc:a1:
55:96:3c:98:2a:98:27:e3:13:32:65:17:bb:ab:00:
03:ae:b1:39:39:f6:06:74:47:9b:74:f6:04:be:41:
e6:f8:a6:6a:34:e5:b8:43:f5:25:1c:8e:95:a5:ac:
ad:2f:47:04:6c:ce:63:99:4d:91:bd:45:eb:b5:e6:
9d:8c:20:70:c4:8d:e4:17:17:65:48:5c:2f:6f:23:
23:b3:bc:7c:14:7d:16:08:cf:f4:a0:67:ca:38:fe:
5a:17:6a:cb:0d:af:e6:0a:4e:d4:39:94:8f:c0:62:
7a:d0:44:81:20:e4:ff:5b:7a:b4:e8:f1:58:2c:85:
f5:e5:19:ff:d0:c8:05:f9:98:1c:58:16:30:f1:b7:
c6:3c:4d:f5:04:24:da:d9:aa:b2:ad:32:c5:31:65:
32:0d:97:91:ba:52:e2:be:03:49:5e:85:e3:7e:28:
5b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:90:87:4A:C9:FA:23:D9:00:B1:EB:18:01:3D:DC:B2:06:DA:5F:62
X509v3 Authority Key Identifier:
keyid:48:5F:76:27:4C:80:5D:25:B1:15:A3:AD:BA:1D:2E:A1:54:DE:EA:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF92J0yAXSWxFaOtuh0uoVTe6tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:2c:b5:c4:22:9f:03:bd:e2:69:b3:5e:a4:21:8c:32:50:57:
05:a9:9f:11:dc:40:4a:59:74:9d:13:ff:39:44:f8:aa:b8:e4:
0b:51:11:44:a8:95:92:7c:df:ed:e4:40:83:48:76:4b:64:c8:
f9:93:bd:16:d8:38:79:5f:e9:d1:9e:a1:6e:82:3a:8c:54:aa:
e6:ec:c0:0f:69:bf:7e:4c:ee:8e:e9:47:a0:0a:7a:67:09:19:
e2:d2:e4:ac:e1:79:11:dd:6d:c7:ce:63:cd:a7:6d:4c:14:63:
7d:5b:69:d7:a4:cc:c8:b7:d1:6b:b9:a9:3f:bd:24:72:d3:a8:
d2:44:27:82:78:f8:03:0a:b6:73:1f:ba:f9:e8:16:ca:f1:94:
4f:b1:86:c9:4a:66:95:56:c1:10:e7:8c:9f:fb:f3:5f:61:27:
12:b0:1d:2d:f6:e2:c4:d8:ce:56:7f:4a:56:ac:66:7d:29:50:
c1:de:20:dc:63:9d:bc:8d:3f:97:1a:16:2d:6d:7e:08:45:3b:
cb:79:56:c2:50:34:34:ea:1b:88:b4:9e:8f:d7:b3:43:6e:78:
2a:58:29:65:1c:d9:9e:f2:aa:9b:4e:b1:c9:ae:96:78:f5:8e:
57:ec:ff:07:47:66:82:70:ad:0e:29:14:26:b9:44:54:5a:d3:
7b:33:5b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:01:36 2026 by rpki-client