Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6c7dab-3c1b-4d50-9ffd-ab1ea4353b7f/1/Sn94dtTFVUt3Klfn8cTO03-14Z4.mft
File: Sn94dtTFVUt3Klfn8cTO03-14Z4.mft (raw, json)
Hash identifier: Cn/vtoPuWaPb5hIwinLyyQL5NEdd+CzppyP98n94tdY=
Subject key identifier: 8F:C2:36:16:C2:3D:94:0D:E5:11:C0:E3:F8:F6:64:F7:7D:6F:4F:08
Authority key identifier: 4A:7F:78:76:D4:C5:55:4B:77:2A:57:E7:F1:C4:CE:D3:7F:B5:E1:9E
Certificate issuer: /CN=4a7f7876d4c5554b772a57e7f1c4ced37fb5e19e
Certificate serial: 019D33086459369243D6A865FD4A2C4F7738
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sn94dtTFVUt3Klfn8cTO03-14Z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6c7dab-3c1b-4d50-9ffd-ab1ea4353b7f/1/Sn94dtTFVUt3Klfn8cTO03-14Z4.mft
Manifest number: 0B08
Signing time: Sat 28 Mar 2026 06:01:21 +0000
Manifest this update: Sat 28 Mar 2026 06:01:21 +0000
Manifest next update: Sun 29 Mar 2026 06:01:21 +0000
Files and hashes: 1: BmeWkQ2qsdxjGzo0GXTJOh2jlRc.roa (hash: BpAZQxUpOARnv01FH0kV+NBxmmSBpk1Oz9AcYOSnpdI=)
2: Sn94dtTFVUt3Klfn8cTO03-14Z4.crl (hash: TaDnJZbJpDH+j41B0aeJ6FQsQEhF91YAs9UiYGEAuG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6c7dab-3c1b-4d50-9ffd-ab1ea4353b7f/1/Sn94dtTFVUt3Klfn8cTO03-14Z4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/6c7dab-3c1b-4d50-9ffd-ab1ea4353b7f/1/Sn94dtTFVUt3Klfn8cTO03-14Z4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sn94dtTFVUt3Klfn8cTO03-14Z4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:08:64:59:36:92:43:d6:a8:65:fd:4a:2c:4f:77:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a7f7876d4c5554b772a57e7f1c4ced37fb5e19e
Validity
Not Before: Mar 28 06:01:21 2026 GMT
Not After : Mar 29 06:01:21 2026 GMT
Subject: CN=8fc23616c23d940de511c0e3f8f664f77d6f4f08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ba:5d:c7:55:84:dd:6c:ff:73:ec:c0:99:f5:
f0:35:b6:93:84:dd:75:04:69:77:c5:34:6b:e3:0c:
e9:0a:f0:22:aa:8b:45:81:6a:30:61:5e:e8:c7:72:
34:68:13:02:bb:b3:80:6e:2a:16:5a:46:78:8e:f3:
6c:cd:33:63:9f:94:c3:b0:dd:14:0b:62:a3:19:62:
4f:a2:28:75:a2:63:5d:69:34:07:26:19:40:17:7e:
12:76:1f:13:14:f8:98:95:40:93:c5:b0:0c:7b:18:
53:79:d1:8f:a6:19:44:cc:8f:b3:e4:6d:c0:15:16:
2a:35:10:56:67:66:7f:13:6f:aa:e9:71:67:ad:c2:
6e:f6:74:a4:44:f8:fd:56:c5:f7:e7:e4:8e:90:91:
22:18:ad:5a:30:e9:90:81:24:51:0e:86:a2:75:cc:
13:16:2f:1b:79:30:cb:1c:5f:46:05:85:40:06:a0:
cd:7e:0a:ad:45:62:1f:92:58:d7:d5:3f:e4:81:02:
86:02:71:32:a7:09:55:41:c0:04:bd:6a:10:86:52:
70:37:30:18:3b:6a:23:e7:b2:b9:0d:2d:9f:49:11:
9a:79:b9:9a:ab:54:c7:8e:7e:62:62:23:74:15:01:
10:f1:44:70:07:d6:41:ba:f3:de:02:ca:af:9d:9c:
fa:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:C2:36:16:C2:3D:94:0D:E5:11:C0:E3:F8:F6:64:F7:7D:6F:4F:08
X509v3 Authority Key Identifier:
keyid:4A:7F:78:76:D4:C5:55:4B:77:2A:57:E7:F1:C4:CE:D3:7F:B5:E1:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sn94dtTFVUt3Klfn8cTO03-14Z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6c7dab-3c1b-4d50-9ffd-ab1ea4353b7f/1/Sn94dtTFVUt3Klfn8cTO03-14Z4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6c7dab-3c1b-4d50-9ffd-ab1ea4353b7f/1/Sn94dtTFVUt3Klfn8cTO03-14Z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:61:26:f2:f0:b1:95:64:35:f8:1e:da:e4:bd:7a:01:99:65:
8f:b9:04:e7:ab:38:06:51:3f:ff:8f:18:4a:70:85:bc:ff:ac:
92:12:99:b7:b7:d3:bb:27:3d:be:e6:10:59:e3:33:d5:d1:da:
97:70:b8:89:55:45:b9:7d:50:1c:64:eb:02:f1:3d:24:9a:8b:
04:ef:4b:3b:a5:6f:2c:2e:97:15:e1:23:2d:00:60:1d:fc:81:
26:b3:54:46:dd:34:66:2e:50:ec:84:f1:22:f4:64:e9:b5:c0:
ca:51:1a:66:3e:3e:0a:5d:00:b2:17:6c:f2:76:e1:b9:ab:3c:
a1:51:02:df:79:90:ce:59:f2:cb:b9:fc:a5:88:38:2b:b4:e3:
ea:dc:11:f6:a6:6c:b1:23:79:e9:1f:db:4c:79:a4:47:f2:1c:
77:f5:f6:72:cc:33:81:ca:51:4c:5b:f8:f3:96:ba:e8:b4:11:
1a:d6:56:a8:3e:05:82:26:87:ba:f6:bd:9a:0a:f7:38:24:17:
a2:d1:88:12:11:53:d2:50:b1:dc:ca:06:7a:d9:7e:62:85:3e:
a5:51:b5:8f:fc:f9:b8:c4:bd:6b:da:60:84:93:92:68:e3:61:
7b:37:01:cf:e4:0b:b9:0f:dc:b1:29:41:df:2a:0e:74:1a:66:
07:a0:ce:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:22:45 2026 by rpki-client