Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
File: sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft (raw, json)
Hash identifier: M+gN/yb5Rll3IL3MxhX3aJFjOoLciTt1K7cgLFs06VU=
Subject key identifier: 8B:27:75:F1:E6:04:A0:DE:AB:6F:B6:C0:F7:D7:B9:A8:00:5D:0B:03
Authority key identifier: B1:11:57:C9:8F:26:27:9F:C3:EE:D2:DA:B3:CF:11:83:72:BD:BE:1B
Certificate issuer: /CN=b11157c98f26279fc3eed2dab3cf118372bdbe1b
Certificate serial: 019E1D90E05EC0FBDC202C6F505150157686
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRFXyY8mJ5_D7tLas88Rg3K9vhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
Manifest number: 0600
Signing time: Tue 12 May 2026 19:01:34 +0000
Manifest this update: Tue 12 May 2026 19:01:34 +0000
Manifest next update: Wed 13 May 2026 19:01:34 +0000
Files and hashes: 1: KfYGsusnHllzc3HN92AAdqUVjQo.roa (hash: gW3c/fjZpWHlQkkjPS1/2ufW3e6QoYfqV4VH4SK5fWk=)
2: sRFXyY8mJ5_D7tLas88Rg3K9vhs.crl (hash: rqCEjAXrKC4fUE0GCOZkhPor2wO5hoOJG1I4R77sl9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sRFXyY8mJ5_D7tLas88Rg3K9vhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:e0:5e:c0:fb:dc:20:2c:6f:50:51:50:15:76:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b11157c98f26279fc3eed2dab3cf118372bdbe1b
Validity
Not Before: May 12 19:01:34 2026 GMT
Not After : May 13 19:01:34 2026 GMT
Subject: CN=8b2775f1e604a0deab6fb6c0f7d7b9a8005d0b03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a2:22:68:8e:b6:55:24:f8:31:f7:61:67:32:
0b:bf:6e:35:c5:20:fd:b4:f2:ad:22:6b:69:31:d0:
50:82:d9:69:ff:42:fd:05:47:d0:09:5e:1e:35:11:
03:ad:ad:07:25:d2:c1:54:60:2b:c4:72:39:23:52:
35:73:be:40:2f:ae:b3:58:e5:5d:fe:df:09:dc:c4:
c9:b3:83:e0:8d:b0:11:35:f4:0c:3f:18:fe:a4:24:
cd:7d:fa:9e:99:88:08:6f:70:0c:1f:30:11:2e:da:
cf:02:4b:0d:0d:1a:96:68:fe:f6:98:87:42:0c:a4:
05:ba:8e:d6:f3:c7:a5:a8:5e:8e:42:1c:65:59:57:
2f:7c:80:1f:28:cc:34:df:ff:ec:05:03:93:fb:e0:
c9:bc:43:61:8b:fe:ef:28:ee:a4:0a:e3:a3:cd:c1:
9a:6d:58:ed:26:0c:bd:ab:a8:a6:f2:48:06:09:8a:
b7:af:43:ff:5d:2b:6c:6b:b4:f1:71:58:83:c5:87:
e3:f9:79:cc:22:c6:06:f5:61:ad:78:fa:90:a7:6f:
43:65:e9:df:be:e9:46:3a:77:cb:68:0e:f3:a4:e9:
92:02:39:dd:26:50:21:b1:a5:32:e6:dd:2d:c4:ce:
3b:fe:e7:29:19:d0:a5:30:68:d2:0d:67:92:be:34:
68:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:27:75:F1:E6:04:A0:DE:AB:6F:B6:C0:F7:D7:B9:A8:00:5D:0B:03
X509v3 Authority Key Identifier:
keyid:B1:11:57:C9:8F:26:27:9F:C3:EE:D2:DA:B3:CF:11:83:72:BD:BE:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRFXyY8mJ5_D7tLas88Rg3K9vhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:0b:e3:cb:25:cb:96:f6:cc:38:cd:3e:90:b5:8d:0b:fd:2b:
b0:79:34:8d:c8:9c:71:04:fe:ce:58:74:9b:64:b0:4e:46:32:
29:9a:35:da:98:f7:1f:4c:86:cf:66:11:77:53:04:21:8e:96:
c7:bc:b5:fc:d9:e6:b0:02:27:9c:7f:87:b1:9b:5a:6e:de:d7:
e4:1d:31:fd:63:77:c6:a3:5d:a0:fa:2a:50:b1:c8:a8:a8:a7:
ab:9c:0b:83:69:6e:97:a6:cd:51:9f:3e:08:7b:b6:3c:64:af:
06:5c:e9:df:f1:b9:92:b8:f5:e9:c4:59:6d:d1:70:58:2d:ad:
22:a2:8e:cb:84:90:64:0f:62:bd:ef:ec:3c:6d:a4:60:9d:a7:
e2:de:0c:ee:f1:e4:66:66:0d:bb:84:9e:d8:d0:f1:14:d5:8d:
86:66:2d:94:5a:e8:12:a0:df:05:8f:dd:3d:80:10:15:02:17:
87:cd:ec:4e:9a:3a:78:1a:96:8e:b5:0f:c9:e2:27:32:2e:c5:
fe:76:4e:2e:b4:b5:ae:f2:c9:30:3f:cb:67:d3:a7:89:ec:f8:
b0:88:90:eb:f2:cc:a6:4c:89:92:4d:16:96:0f:5c:ac:9f:28:
fd:74:65:61:17:09:12:37:08:a4:15:9b:15:6c:8c:e3:c8:63:
0e:4c:c7:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:00:48 2026 by rpki-client