Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
File: sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft (raw, json)
Hash identifier: Q+iCU+BpKeDRy/nZ50u9le1dEKRkDGCwZd9jC22XKxk=
Subject key identifier: 9F:4D:1C:44:1D:2A:88:E1:27:E9:7E:C4:FE:64:97:8B:35:E5:4B:89
Authority key identifier: B1:11:57:C9:8F:26:27:9F:C3:EE:D2:DA:B3:CF:11:83:72:BD:BE:1B
Certificate issuer: /CN=b11157c98f26279fc3eed2dab3cf118372bdbe1b
Certificate serial: 019D265F86181B13F29A7C67C539BEA15419
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRFXyY8mJ5_D7tLas88Rg3K9vhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
Manifest number: 0580
Signing time: Wed 25 Mar 2026 19:01:27 +0000
Manifest this update: Wed 25 Mar 2026 19:01:27 +0000
Manifest next update: Thu 26 Mar 2026 19:01:27 +0000
Files and hashes: 1: KfYGsusnHllzc3HN92AAdqUVjQo.roa (hash: gW3c/fjZpWHlQkkjPS1/2ufW3e6QoYfqV4VH4SK5fWk=)
2: sRFXyY8mJ5_D7tLas88Rg3K9vhs.crl (hash: 4YNK2N9YWh2Lx3+Rz0lYVWRQKswzSYoQ7Y6X9BNphIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sRFXyY8mJ5_D7tLas88Rg3K9vhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:86:18:1b:13:f2:9a:7c:67:c5:39:be:a1:54:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b11157c98f26279fc3eed2dab3cf118372bdbe1b
Validity
Not Before: Mar 25 19:01:27 2026 GMT
Not After : Mar 26 19:01:27 2026 GMT
Subject: CN=9f4d1c441d2a88e127e97ec4fe64978b35e54b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:96:95:24:dd:a3:51:a6:09:61:93:dd:88:75:
0f:48:70:80:3c:39:4d:d9:c2:7d:0e:24:07:ac:d9:
dc:77:dd:ca:f0:44:54:21:9b:f9:b2:16:e2:ad:66:
14:33:fe:6a:44:1f:f4:47:e5:c9:16:6a:46:8a:75:
af:80:2d:5f:a5:bc:69:2d:76:bc:d4:03:56:97:54:
5d:97:b3:6b:48:e8:e5:93:f2:84:74:16:e3:e9:b4:
ef:b6:18:ee:9b:01:2a:18:ca:8c:8c:12:08:ff:bd:
88:91:61:9b:0a:1f:0c:24:ac:aa:b1:b5:2c:4f:68:
f6:1c:dc:af:f5:a3:90:fb:5e:e9:ef:28:1c:3f:bb:
78:24:29:58:74:0b:56:85:0e:a6:b1:04:66:4c:8e:
55:02:cc:4f:c1:ba:26:5a:e9:6b:de:7d:a2:78:16:
17:8b:5e:62:d9:ee:6a:de:f6:aa:8b:1e:2c:b0:79:
a1:57:62:45:88:76:67:6d:5d:db:0c:13:70:24:2e:
74:9d:e7:0f:fb:48:9c:f3:70:64:b1:d5:6d:08:ce:
3a:a3:fd:82:1f:e9:36:d8:2c:36:33:2b:0a:fc:d7:
3f:b1:dd:1c:bd:43:68:14:be:90:31:7a:bf:d8:b6:
70:fa:f8:71:81:b8:e1:ee:c4:f7:ad:df:3a:2a:a7:
36:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:4D:1C:44:1D:2A:88:E1:27:E9:7E:C4:FE:64:97:8B:35:E5:4B:89
X509v3 Authority Key Identifier:
keyid:B1:11:57:C9:8F:26:27:9F:C3:EE:D2:DA:B3:CF:11:83:72:BD:BE:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRFXyY8mJ5_D7tLas88Rg3K9vhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:5a:cc:f6:44:89:62:57:15:07:39:48:a6:38:0b:8b:a0:ea:
9b:2e:68:19:50:30:eb:ce:ff:f5:82:88:bc:8f:3c:78:75:2d:
c1:29:2c:4e:89:92:2c:4f:cc:f9:b2:7c:60:b1:52:4b:b0:16:
5c:58:cc:d8:be:2c:c5:f5:b4:3f:d5:c3:13:79:8d:a6:89:80:
b1:d5:10:97:29:4d:40:94:43:5c:02:73:d9:5a:e5:9c:2a:05:
84:15:0b:fa:2f:20:4b:40:84:66:a8:b4:8b:92:7f:1f:d7:29:
88:c5:cd:68:d4:de:d4:07:7a:56:0a:57:f8:6f:3d:9d:99:4b:
46:08:ac:a2:59:2a:56:d0:a1:2f:63:cc:f6:ed:7e:bb:78:45:
4d:7c:7e:bc:bb:3a:7d:0c:b6:ea:f0:5a:45:76:f9:5b:7d:e0:
e3:b9:b6:d8:76:07:1d:75:33:cd:e6:44:3a:70:3c:8f:68:6e:
c3:74:c3:c5:ec:33:8a:bc:15:7b:8b:cf:d7:a9:70:43:25:07:
18:2b:93:73:1d:f2:fb:dc:af:0a:87:46:70:3d:74:1b:74:2e:
61:aa:6f:c5:13:2f:54:bc:98:76:1b:46:4d:4c:dc:fe:0b:14:
53:14:be:9d:1d:f8:e2:01:f6:73:84:b1:e9:ec:4c:d1:40:1d:
6b:e4:8b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:31 2026 by rpki-client