Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.mft
File: sPiohfd3bSq5m7TyDoTTBuA5SqM.mft (raw, json)
Hash identifier: mOVURHMD2deS57UiSND5VHR97sDlDh0aSX0kPoIT8yw=
Subject key identifier: 30:65:22:29:65:68:BC:E0:6C:D0:04:7B:B5:77:29:7D:D7:C5:10:AD
Authority key identifier: B0:F8:A8:85:F7:77:6D:2A:B9:9B:B4:F2:0E:84:D3:06:E0:39:4A:A3
Certificate issuer: /CN=b0f8a885f7776d2ab99bb4f20e84d306e0394aa3
Certificate serial: 019D26CCCAE85A664F0DFA7790BEA814527D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sPiohfd3bSq5m7TyDoTTBuA5SqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.mft
Manifest number: 161A
Signing time: Wed 25 Mar 2026 21:00:48 +0000
Manifest this update: Wed 25 Mar 2026 21:00:48 +0000
Manifest next update: Thu 26 Mar 2026 21:00:48 +0000
Files and hashes: 1: 05WyMyWcwnVDoZCr0BbmBiMaPoc.roa (hash: ZxXNQ2QkuA/tbUaOYs+oznQKVfcUfC5jKVIgdvSVmnk=)
2: sPiohfd3bSq5m7TyDoTTBuA5SqM.crl (hash: 23YYU3Uul0NYG1wUWvJk+gAMKHInsn+IV3RxLQuaL0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/sPiohfd3bSq5m7TyDoTTBuA5SqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:ca:e8:5a:66:4f:0d:fa:77:90:be:a8:14:52:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0f8a885f7776d2ab99bb4f20e84d306e0394aa3
Validity
Not Before: Mar 25 21:00:48 2026 GMT
Not After : Mar 26 21:00:48 2026 GMT
Subject: CN=306522296568bce06cd0047bb577297dd7c510ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4e:54:38:4f:ad:96:cc:cf:86:02:c9:61:d2:
83:d1:94:86:52:97:c2:63:d2:67:ce:9d:1e:8a:1a:
6d:15:14:23:b8:87:73:94:15:74:16:f1:0d:d2:9f:
36:c2:0a:93:0d:2b:15:8e:be:d9:99:4c:fd:c7:12:
f1:4e:88:ed:d6:1e:c5:a6:1e:b4:e2:ce:98:c7:54:
7a:f3:a6:c9:d2:9b:ed:12:ee:1c:79:05:b6:97:82:
8c:3d:35:96:e0:09:c8:a6:a9:35:98:b4:ea:f5:6e:
f2:ee:c5:21:41:4f:24:a5:98:71:c0:81:05:43:a4:
1e:a2:7a:e5:24:86:59:0f:43:f3:05:a4:7e:12:38:
4b:af:4d:b5:ea:fd:73:9c:b6:c4:b7:bb:67:56:d8:
98:65:14:29:e4:53:aa:ee:87:17:26:6e:df:13:e4:
f9:a5:fe:82:b3:e0:d1:2b:af:fc:12:71:5b:61:4c:
09:e1:37:a7:15:14:54:88:0c:0a:0e:30:50:eb:c4:
80:37:39:04:87:1e:d9:87:39:91:61:38:c7:2a:72:
9c:5e:96:13:8d:43:1a:2b:8a:81:56:48:0c:86:74:
cb:89:25:05:2b:c8:f3:3a:c8:ff:9c:14:7d:5e:9f:
7c:da:3e:32:fc:3e:07:9d:00:65:10:2a:07:9a:7b:
4b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:65:22:29:65:68:BC:E0:6C:D0:04:7B:B5:77:29:7D:D7:C5:10:AD
X509v3 Authority Key Identifier:
keyid:B0:F8:A8:85:F7:77:6D:2A:B9:9B:B4:F2:0E:84:D3:06:E0:39:4A:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sPiohfd3bSq5m7TyDoTTBuA5SqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:8f:9e:a3:32:9e:df:31:6a:e8:3b:79:f8:c5:3b:3e:23:85:
04:f8:04:f0:93:94:b7:53:03:f9:23:77:cb:6a:fe:ed:af:18:
bb:c3:83:54:5d:56:19:97:3e:6c:81:0e:6b:5f:45:4f:a7:4b:
7b:87:cd:67:4b:4a:ea:b0:45:3b:36:ce:64:20:24:38:87:99:
3f:6f:5c:07:8e:2b:a7:df:50:82:41:f1:71:26:13:52:d2:15:
68:a1:39:7c:3d:78:5e:5f:40:4f:96:e8:53:b6:ad:6f:69:67:
6d:2c:27:e0:9e:e0:67:de:84:d3:be:0c:b9:bb:f6:e1:47:22:
43:f8:2a:01:65:e9:ac:06:bd:fa:01:f2:fd:ac:0d:6e:c4:c2:
e8:e0:65:70:a7:f1:4e:3e:51:52:b7:93:46:73:aa:5b:1b:69:
7b:7b:b7:93:48:10:b1:b6:1d:99:6f:69:ab:30:15:ab:49:20:
ef:4a:e7:d7:59:0f:86:cb:5e:20:7c:3e:19:64:69:40:1d:6c:
09:0f:ff:af:42:42:02:3f:3d:d0:ba:9b:99:89:fc:2d:6e:6f:
b6:a8:6d:28:77:e3:10:9a:77:56:31:ee:00:ec:7a:bc:25:5d:
f5:92:6b:d1:52:04:25:54:25:4e:fe:f2:f6:89:3c:2a:4f:69:
db:9a:6d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:57:39 2026 by rpki-client