Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft
File: sRofl3C6sHdRW3cSy41JVQsxOKE.mft (raw, json)
Hash identifier: +rLNq6Ayq/B+I3uz9xyWuspaDJucAkMzERbvhijA9y4=
Subject key identifier: 4A:1F:A8:43:80:77:35:7B:7A:7E:03:9D:97:F0:E7:7D:B9:5F:63:86
Authority key identifier: B1:1A:1F:97:70:BA:B0:77:51:5B:77:12:CB:8D:49:55:0B:31:38:A1
Certificate issuer: /CN=b11a1f9770bab077515b7712cb8d49550b3138a1
Certificate serial: 019D333E605D8D64265F9B2FBF93175634DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRofl3C6sHdRW3cSy41JVQsxOKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft
Manifest number: 0DE1
Signing time: Sat 28 Mar 2026 07:00:19 +0000
Manifest this update: Sat 28 Mar 2026 07:00:19 +0000
Manifest next update: Sun 29 Mar 2026 07:00:19 +0000
Files and hashes: 1: IHeSpn9zzFGkB0I3Aq-TbT_Yi_M.roa (hash: I4iH62Xbpv9TcN2x5dZKrT7UkMHzqfLA1ys5Hw46kzg=)
2: WCA0B9M68iSK-689JNNQ3x_gaaQ.roa (hash: mIL2rvF2fj48OLmmFlBKTID0LzN8VFC9HV5FYjZjf+Q=)
3: sRofl3C6sHdRW3cSy41JVQsxOKE.crl (hash: UpebqDp2+rGk+gF1SRKm3fCN04wQh93JulzzqPNsEbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sRofl3C6sHdRW3cSy41JVQsxOKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:3e:60:5d:8d:64:26:5f:9b:2f:bf:93:17:56:34:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b11a1f9770bab077515b7712cb8d49550b3138a1
Validity
Not Before: Mar 28 07:00:19 2026 GMT
Not After : Mar 29 07:00:19 2026 GMT
Subject: CN=4a1fa8438077357b7a7e039d97f0e77db95f6386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:cb:88:65:3f:c0:9e:d0:2d:d5:38:9e:4e:92:
e6:46:61:1c:87:3b:b7:95:00:bd:a6:dc:ab:e5:a5:
2d:70:6a:f2:44:17:6e:80:65:f1:8b:b0:e7:e1:86:
05:78:4a:85:49:fd:0a:98:50:4a:13:88:9a:f0:29:
3e:5b:a9:8a:19:75:3e:89:ca:18:5d:5b:1c:2d:81:
89:d0:33:ae:ec:76:46:d9:ee:86:49:20:bb:88:6b:
96:a1:1b:b5:3b:75:20:fc:d8:4b:29:01:3b:50:07:
f5:c4:9d:d2:ea:2b:60:30:2f:5d:44:f9:14:91:2a:
c4:d4:a2:fa:ad:21:39:d8:69:0b:ff:9a:d0:2b:98:
9c:2c:bd:22:64:0f:e6:93:62:a4:6d:9e:5c:32:99:
89:87:ce:26:6b:77:71:b8:63:82:e4:7a:b7:43:ca:
3d:61:e3:8b:be:b1:87:6b:4a:ed:a7:03:cb:ff:4f:
0a:82:1d:a0:c7:6a:be:fc:4b:c1:8a:a2:22:07:9f:
6d:10:2c:2b:0c:be:97:ab:58:20:c4:02:9a:f5:88:
9f:49:78:94:60:2d:6a:b4:44:24:60:f1:2e:81:87:
6c:54:e8:3c:7b:22:05:6d:79:fe:69:74:dc:19:dc:
8b:c1:13:a9:b5:40:64:4e:72:4b:8f:c5:0c:d9:82:
f0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:1F:A8:43:80:77:35:7B:7A:7E:03:9D:97:F0:E7:7D:B9:5F:63:86
X509v3 Authority Key Identifier:
keyid:B1:1A:1F:97:70:BA:B0:77:51:5B:77:12:CB:8D:49:55:0B:31:38:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRofl3C6sHdRW3cSy41JVQsxOKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:3b:60:d2:80:63:a4:32:7f:e8:f9:c0:be:ba:7a:62:b6:7c:
05:27:8f:c9:5d:a8:22:34:0c:58:58:86:d4:14:25:7f:53:88:
f8:f4:8a:c2:ec:1d:bd:a5:a5:5e:c1:83:18:e8:5f:84:41:f0:
56:fe:05:61:b9:db:48:27:c2:47:7b:00:55:65:93:e0:97:f7:
99:50:f2:a2:14:c7:01:16:45:16:3a:5b:f9:cf:c1:fb:f4:cd:
ef:38:46:c9:d9:63:43:0f:87:30:e9:55:5e:11:97:f3:1f:fe:
87:f0:d9:c8:00:2f:18:b8:1e:a8:4b:18:23:51:a4:f6:41:33:
a7:24:81:10:c5:2d:9a:05:a9:b5:10:22:30:09:81:93:2a:3c:
d2:f5:d0:00:04:8e:31:37:47:cc:db:ad:a6:01:2e:63:cd:3b:
1f:c6:e3:40:e8:9e:43:32:20:3f:d6:d4:a0:ab:1e:eb:cb:59:
66:ec:b2:0b:71:3e:0c:ed:a2:ee:4f:e1:38:06:bd:27:82:06:
aa:35:ac:aa:eb:e4:c7:90:db:e9:99:47:54:07:fe:24:e8:47:
a9:59:88:7f:d2:56:d4:c3:95:f4:7a:30:f2:5a:b2:40:a1:02:
fd:ee:08:d3:00:a5:9e:a1:ab:21:92:40:10:93:f2:a0:ca:21:
60:85:36:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:33:22 2026 by rpki-client