Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
File: sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft (raw, json)
Hash identifier: 20eoayggJE5f5KiKS+5hZn3oW+VyQem6L4JR6hniOgY=
Subject key identifier: DD:68:29:F4:88:0D:87:67:88:60:09:F7:2B:87:7A:35:5C:4A:29:3A
Authority key identifier: B1:11:57:C9:8F:26:27:9F:C3:EE:D2:DA:B3:CF:11:83:72:BD:BE:1B
Certificate issuer: /CN=b11157c98f26279fc3eed2dab3cf118372bdbe1b
Certificate serial: 01A0DA96FE70966676A970B236261D8FEC80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRFXyY8mJ5_D7tLas88Rg3K9vhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
Manifest number: 076B
Signing time: Fri 25 Sep 2026 22:02:03 +0000
Manifest this update: Fri 25 Sep 2026 22:02:03 +0000
Manifest next update: Sat 26 Sep 2026 22:02:03 +0000
Files and hashes: 1: KfYGsusnHllzc3HN92AAdqUVjQo.roa (hash: gW3c/fjZpWHlQkkjPS1/2ufW3e6QoYfqV4VH4SK5fWk=)
2: sRFXyY8mJ5_D7tLas88Rg3K9vhs.crl (hash: yFGuot3howUxvkrfd5VDYQ+Uj7LJyq9CN695tKgaJPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sRFXyY8mJ5_D7tLas88Rg3K9vhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:96:fe:70:96:66:76:a9:70:b2:36:26:1d:8f:ec:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b11157c98f26279fc3eed2dab3cf118372bdbe1b
Validity
Not Before: Sep 25 22:02:03 2026 GMT
Not After : Sep 26 22:02:03 2026 GMT
Subject: CN=dd6829f4880d8767886009f72b877a355c4a293a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:78:e2:c3:98:0d:9b:56:aa:ac:22:12:56:1e:
a6:e1:63:b3:80:9b:f2:4c:31:bf:42:13:46:9b:b3:
6e:29:6d:c7:fe:7e:40:41:07:16:7f:8a:be:71:0d:
72:87:79:72:0a:ad:53:73:4e:9a:c5:e2:b4:10:ac:
90:91:1e:d2:2a:6a:f2:31:5d:f4:74:d2:8a:07:37:
a7:f9:60:6b:65:bf:ce:30:49:c0:63:1f:e2:1e:38:
a9:fe:0f:22:a0:48:3c:59:df:19:5c:fe:6a:76:d2:
a7:f9:3b:25:77:46:df:30:b3:0f:48:7e:fa:ad:5c:
35:79:fc:ab:40:e3:3f:fa:a2:13:57:32:4b:44:51:
e8:74:8c:80:94:47:47:2d:68:2f:b0:d5:e9:46:df:
79:c3:5c:80:c0:a3:39:e8:c7:e9:6e:e5:95:ea:92:
26:6f:e6:97:ed:0f:36:0e:64:95:41:6c:6c:34:cf:
b0:fb:be:e1:60:19:32:ba:0a:29:43:68:7e:96:02:
2b:a6:6d:b3:57:0f:34:0b:c8:bf:88:19:8b:fc:75:
a2:83:22:39:22:bd:12:ab:11:3f:56:60:cb:8d:34:
fc:e4:55:b2:71:63:a6:a2:66:89:66:5c:fe:37:2a:
28:d0:34:58:7f:e9:c8:bc:26:ba:2e:10:b4:72:ce:
0d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:68:29:F4:88:0D:87:67:88:60:09:F7:2B:87:7A:35:5C:4A:29:3A
X509v3 Authority Key Identifier:
keyid:B1:11:57:C9:8F:26:27:9F:C3:EE:D2:DA:B3:CF:11:83:72:BD:BE:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRFXyY8mJ5_D7tLas88Rg3K9vhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:1e:f1:b0:0c:0b:e5:cf:e8:3a:f3:ec:32:3e:d5:70:38:d2:
4a:1c:0e:98:c9:f2:e0:49:0e:f3:6e:9e:e0:54:fc:fb:e3:62:
c1:bc:cb:aa:d2:51:f3:23:9e:19:dd:0d:d3:e0:fe:89:97:9c:
4b:88:61:51:2f:ed:f3:5b:5b:57:5c:ad:0c:a8:f7:39:76:ac:
ce:78:85:5f:3c:05:13:6e:d9:ee:53:20:6e:e9:c7:21:bb:2a:
f8:f1:2e:1b:4d:5c:a3:26:d0:57:38:88:fb:d8:fb:4a:1b:56:
5a:4f:b7:73:21:de:e6:60:cd:f0:1c:96:7f:12:ee:0a:49:2f:
70:aa:2e:60:a0:bd:f1:2c:e3:3e:3e:5a:09:cb:83:06:a9:62:
c8:89:02:14:20:83:f3:bf:90:5a:58:e2:ce:16:75:5a:2e:39:
48:a4:07:50:8c:21:ff:6f:52:ad:45:f5:84:ba:bc:a3:5b:06:
08:a9:86:8a:ba:f2:24:ab:dd:85:bf:46:74:d5:a3:d2:88:92:
aa:39:0a:d3:be:96:36:58:ee:ee:0b:eb:93:c7:6d:6a:ff:6a:
dd:de:6b:6d:c5:d9:50:0e:83:2d:39:b8:ce:bb:9d:45:b6:20:
c4:51:ef:10:29:03:7d:01:35:39:5b:e4:ed:f2:69:06:2c:d1:
73:96:f2:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:12:43 2026 by rpki-client