Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft
File: sRofl3C6sHdRW3cSy41JVQsxOKE.mft (raw, json)
Hash identifier: M8+Mu6nb+SHzZ4RuVRTsa5XZ2Mxkt3WbjtLbClqparw=
Subject key identifier: 3E:A4:A1:22:35:3E:15:48:98:81:CE:E1:05:F7:30:25:B2:43:FE:48
Authority key identifier: B1:1A:1F:97:70:BA:B0:77:51:5B:77:12:CB:8D:49:55:0B:31:38:A1
Certificate issuer: /CN=b11a1f9770bab077515b7712cb8d49550b3138a1
Certificate serial: 019E1ED9A0F3AC32D797A98C840490E44714
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRofl3C6sHdRW3cSy41JVQsxOKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft
Manifest number: 0E5B
Signing time: Wed 13 May 2026 01:00:39 +0000
Manifest this update: Wed 13 May 2026 01:00:39 +0000
Manifest next update: Thu 14 May 2026 01:00:39 +0000
Files and hashes: 1: IHeSpn9zzFGkB0I3Aq-TbT_Yi_M.roa (hash: I4iH62Xbpv9TcN2x5dZKrT7UkMHzqfLA1ys5Hw46kzg=)
2: WCA0B9M68iSK-689JNNQ3x_gaaQ.roa (hash: mIL2rvF2fj48OLmmFlBKTID0LzN8VFC9HV5FYjZjf+Q=)
3: sRofl3C6sHdRW3cSy41JVQsxOKE.crl (hash: jt9EpOenUOFI4GZBVbOFVwPeb/XN0oha6/tQgYxXGps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sRofl3C6sHdRW3cSy41JVQsxOKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:a0:f3:ac:32:d7:97:a9:8c:84:04:90:e4:47:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b11a1f9770bab077515b7712cb8d49550b3138a1
Validity
Not Before: May 13 01:00:39 2026 GMT
Not After : May 14 01:00:39 2026 GMT
Subject: CN=3ea4a122353e15489881cee105f73025b243fe48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:27:57:2f:11:f9:b8:b5:8c:f0:93:ba:5e:90:
be:9b:51:72:6d:2d:1f:3e:d6:24:89:7d:fd:7b:7a:
3d:3c:91:b8:05:44:60:97:4f:5c:7f:0c:40:3a:f3:
07:e9:81:51:32:6d:06:4f:13:1e:9e:75:58:91:de:
0e:a7:7b:e1:eb:15:44:ad:6f:f6:37:45:ec:12:65:
83:63:28:5b:de:63:8b:9e:9c:fb:14:14:5f:3f:9a:
08:37:71:2c:d0:69:17:37:be:93:ac:c0:eb:38:25:
f3:5b:25:0a:31:9c:ed:50:ee:15:bb:4e:dc:9d:73:
34:c7:b8:75:10:4d:d1:99:1b:41:17:38:83:06:93:
e0:c4:70:e7:ab:08:1e:4a:ca:cd:d8:68:6a:ce:f1:
a2:b3:7f:15:ef:06:ba:0b:48:0b:19:f9:98:da:7d:
c7:b8:ac:51:82:44:e8:48:de:1b:9b:d9:e4:f5:e4:
69:f7:20:4a:9d:d0:e3:01:57:40:9e:97:8e:f4:a7:
6b:e5:c5:08:29:65:6e:31:0c:88:a5:c9:0e:ef:72:
eb:4b:d4:b8:f0:31:ce:fa:26:5b:75:3c:c8:ec:03:
e0:c5:fc:eb:4b:29:93:f7:dc:3c:ac:9a:ed:a8:6c:
73:79:5b:16:77:3a:dd:08:f3:3f:e9:fd:f5:67:b2:
62:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A4:A1:22:35:3E:15:48:98:81:CE:E1:05:F7:30:25:B2:43:FE:48
X509v3 Authority Key Identifier:
keyid:B1:1A:1F:97:70:BA:B0:77:51:5B:77:12:CB:8D:49:55:0B:31:38:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRofl3C6sHdRW3cSy41JVQsxOKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:ba:df:28:cd:6f:36:66:2a:01:69:10:a1:37:6b:78:84:b6:
f0:e3:be:a4:91:ed:61:b6:ee:c6:4f:86:cf:63:54:83:5c:9d:
ef:4d:5b:9b:11:a5:27:ad:b8:fe:66:3a:04:61:3e:90:ba:83:
c4:66:37:fd:db:fb:a1:52:b9:6a:07:66:bf:4f:cc:20:34:20:
47:49:04:79:51:07:be:5d:2d:b9:17:fe:53:e6:74:ea:b0:81:
b5:3e:4a:d2:98:0e:23:52:72:50:e6:4f:83:62:e5:6e:74:3e:
73:8e:fd:ed:36:50:4f:77:d1:73:05:8d:99:7f:1b:66:ac:63:
f1:d8:ff:0b:fe:8c:90:3e:ff:c1:30:d3:0c:53:72:39:4b:31:
c8:04:03:e7:40:33:2c:c8:89:d4:aa:25:55:95:c8:40:12:46:
9c:03:fb:e1:ba:4f:f8:2d:f3:78:d9:d4:40:fb:0f:ad:29:1b:
19:9f:54:6b:c4:7e:4e:bf:16:b7:9c:6e:fc:d9:e1:49:54:c0:
33:10:30:38:e2:56:84:49:0c:42:88:42:b7:ff:fc:dd:47:2b:
a8:01:a7:13:f3:f0:88:f7:80:5d:a1:aa:8a:88:2e:f2:51:1d:
75:9c:de:87:a7:8e:c6:46:f1:82:08:b9:78:b4:0f:5d:19:41:
0a:ab:83:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:16:36 2026 by rpki-client