Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
File: sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft (raw, json)
Hash identifier: qBPq88ptWd/8dWDcKc8oAuOETx8RWTG2uan0s7lZ3h0=
Subject key identifier: 16:5F:FA:DE:1D:B3:8F:E4:64:BE:6F:D9:40:0D:2F:89:A0:A6:02:C8
Authority key identifier: B1:11:57:C9:8F:26:27:9F:C3:EE:D2:DA:B3:CF:11:83:72:BD:BE:1B
Certificate issuer: /CN=b11157c98f26279fc3eed2dab3cf118372bdbe1b
Certificate serial: 019F943748DD30119C8F3DE199B1DDE65EEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRFXyY8mJ5_D7tLas88Rg3K9vhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
Manifest number: 06C2
Signing time: Fri 24 Jul 2026 13:01:18 +0000
Manifest this update: Fri 24 Jul 2026 13:01:18 +0000
Manifest next update: Sat 25 Jul 2026 13:01:18 +0000
Files and hashes: 1: KfYGsusnHllzc3HN92AAdqUVjQo.roa (hash: gW3c/fjZpWHlQkkjPS1/2ufW3e6QoYfqV4VH4SK5fWk=)
2: sRFXyY8mJ5_D7tLas88Rg3K9vhs.crl (hash: 9rWdFjebXD4kaZFUoKucabWtNRUpMAJvzJ0MX9zLrOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sRFXyY8mJ5_D7tLas88Rg3K9vhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:37:48:dd:30:11:9c:8f:3d:e1:99:b1:dd:e6:5e:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b11157c98f26279fc3eed2dab3cf118372bdbe1b
Validity
Not Before: Jul 24 13:01:18 2026 GMT
Not After : Jul 25 13:01:18 2026 GMT
Subject: CN=165ffade1db38fe464be6fd9400d2f89a0a602c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:58:b5:7c:4c:72:f6:2c:ba:cf:bd:d7:8e:8c:
ed:f9:34:1a:72:63:1e:dd:e5:41:30:92:5e:39:0f:
a2:aa:6b:42:8c:08:55:c4:93:de:0f:b7:6a:08:4e:
23:dd:06:a1:a0:36:cc:4c:65:17:55:8f:d9:46:96:
cf:49:50:82:3d:f3:c3:9e:e7:cf:3e:c9:ff:10:c5:
3f:a3:10:cc:00:d7:11:25:e3:03:59:af:d7:19:82:
ea:12:4e:35:e2:18:4b:19:c6:f5:de:c5:e7:7f:06:
4c:66:53:5d:32:c7:07:20:a9:92:30:5d:18:6a:03:
6d:0e:85:c7:46:e7:6d:b3:c0:13:1c:5b:61:b9:ec:
1b:28:24:5b:be:60:8a:39:a7:c6:62:2c:03:18:e1:
d8:35:c1:3b:f8:85:2a:46:68:1c:ed:d8:ea:f9:74:
7d:0c:fc:ac:2a:a6:83:6b:a0:8a:b9:3a:1d:af:61:
32:c9:e3:c4:28:c2:87:23:b0:95:24:79:80:91:ce:
7a:6e:54:ab:0c:c8:be:de:e8:45:87:b6:c1:af:c7:
96:31:5b:9f:39:fc:1c:9e:05:9e:c2:e7:b7:b2:67:
47:bd:da:b1:60:42:7a:59:53:ea:34:08:02:5f:4e:
0b:6b:f1:2c:98:62:81:50:6e:ea:52:d4:0f:5d:84:
b2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:5F:FA:DE:1D:B3:8F:E4:64:BE:6F:D9:40:0D:2F:89:A0:A6:02:C8
X509v3 Authority Key Identifier:
keyid:B1:11:57:C9:8F:26:27:9F:C3:EE:D2:DA:B3:CF:11:83:72:BD:BE:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRFXyY8mJ5_D7tLas88Rg3K9vhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:df:34:d3:67:21:e4:79:80:0c:f0:7d:a5:32:a3:ff:58:c3:
4a:e1:0d:3a:0d:04:e6:a6:25:84:d3:0f:19:bb:05:41:cc:a9:
fe:bf:75:35:d6:dc:5f:e3:eb:3a:61:fe:46:63:e5:81:a5:32:
f2:21:02:ec:83:18:8b:23:30:e1:55:8c:79:5a:33:b2:e3:ce:
2b:77:c9:63:3d:31:ee:5e:ac:f0:f1:fe:58:f9:02:38:d3:bb:
ff:24:40:33:ec:03:5b:c1:e0:29:ea:5b:fb:ef:3c:72:8a:a5:
5c:fc:4d:b9:48:5b:dd:af:ac:13:59:14:45:90:ab:c0:fa:33:
2b:64:3e:71:6a:9a:df:75:e9:7b:43:ad:8c:15:10:93:c7:06:
b3:6c:bf:c4:40:1f:e1:71:86:4f:0e:29:86:9f:03:77:0a:80:
41:86:b9:88:3d:75:ba:d7:15:3b:fb:d1:19:f0:15:94:f4:99:
60:e2:b1:ec:84:42:2b:5a:1c:d0:49:f9:98:d5:61:f9:c4:fa:
a5:00:2d:29:00:1e:17:15:72:d4:c2:cb:a8:f2:0c:7e:7f:2e:
a3:3a:bf:20:c4:55:a1:a5:f3:9a:af:21:d6:47:0a:fe:78:c6:
9e:c3:74:f4:20:13:a0:e9:13:bf:73:93:fe:06:f2:32:5d:50:
ed:03:42:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:18:43 2026 by rpki-client