Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.mft
File: sfcTzyBVLWxcI_CeezdmmEb5ylA.mft (raw, json)
Hash identifier: mKs1IIuxJpZT9icBEEyBrWiSwHeYBAASIEoA7aYgG9A=
Subject key identifier: DC:E2:55:32:EC:B1:75:24:1B:24:13:BE:D8:63:ED:CC:32:4E:7E:26
Authority key identifier: B1:F7:13:CF:20:55:2D:6C:5C:23:F0:9E:7B:37:66:98:46:F9:CA:50
Certificate issuer: /CN=b1f713cf20552d6c5c23f09e7b37669846f9ca50
Certificate serial: 019D2470EABA248ACA4992FB7A9FF4E68DE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sfcTzyBVLWxcI_CeezdmmEb5ylA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.mft
Manifest number: 188A
Signing time: Wed 25 Mar 2026 10:01:13 +0000
Manifest this update: Wed 25 Mar 2026 10:01:13 +0000
Manifest next update: Thu 26 Mar 2026 10:01:13 +0000
Files and hashes: 1: 9TOqGu4162v0qWS1r5J3RslyKWk.asa (hash: blkV+1hYOV+uGdGMlHV2otVp88CM6pTuGTFsjZqUK1U=)
2: msFdZet1jGf9Pxj7w6VmCeW1jMQ.roa (hash: fyqpHHLV2QyOw8iBPdNynqjL383PMJfcyHqqNVPJBtE=)
3: sfcTzyBVLWxcI_CeezdmmEb5ylA.crl (hash: y2SfmFasEwqsMTD24+ZDFIAwdMFp24c9khXt43hP1Rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sfcTzyBVLWxcI_CeezdmmEb5ylA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 10:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:70:ea:ba:24:8a:ca:49:92:fb:7a:9f:f4:e6:8d:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1f713cf20552d6c5c23f09e7b37669846f9ca50
Validity
Not Before: Mar 25 10:01:13 2026 GMT
Not After : Mar 26 10:01:13 2026 GMT
Subject: CN=dce25532ecb175241b2413bed863edcc324e7e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:72:71:90:66:31:b2:97:05:11:3f:73:50:e2:
35:e5:6d:f8:6e:cd:19:5c:68:00:70:52:66:75:d7:
9e:5f:ae:3d:b9:ec:cf:62:f9:9c:f8:38:bb:9d:41:
9b:87:b7:fc:56:ea:46:ad:b1:19:29:61:99:9e:71:
66:f9:6e:3b:ac:d6:5e:a1:3d:ed:64:3f:63:b6:d4:
fd:a1:7f:b8:db:00:1a:c2:c7:21:71:6a:30:79:10:
ab:5d:2b:ea:b7:53:8d:69:3c:4f:a9:30:f3:94:0b:
9a:1b:8a:8d:e7:4a:a3:1f:87:53:23:12:23:c2:84:
9b:b8:b9:09:b0:bb:ce:65:7b:b6:5b:42:c9:da:e9:
d8:c9:5f:70:12:8e:ee:14:f5:5f:4e:16:68:47:56:
fe:eb:29:22:3a:dc:97:0b:57:61:95:98:1d:66:e5:
77:57:28:53:62:bb:51:6a:4f:3e:9c:a9:00:b6:45:
ad:34:e6:7f:4f:6c:df:14:bd:a5:02:95:f2:f5:ac:
bf:7b:83:03:76:06:85:4a:d3:e8:4b:86:73:97:26:
52:49:5d:7a:7e:08:d5:ed:6d:91:42:6f:b7:d9:c7:
99:58:ba:0e:0b:01:98:1d:03:a9:df:98:92:a8:05:
2a:12:b8:67:3a:9f:c8:cd:19:92:0a:b0:f3:c3:40:
32:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E2:55:32:EC:B1:75:24:1B:24:13:BE:D8:63:ED:CC:32:4E:7E:26
X509v3 Authority Key Identifier:
keyid:B1:F7:13:CF:20:55:2D:6C:5C:23:F0:9E:7B:37:66:98:46:F9:CA:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sfcTzyBVLWxcI_CeezdmmEb5ylA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:ee:6a:7e:2d:5e:62:3d:52:52:d8:a7:d9:a9:a3:e1:98:c6:
91:95:5b:10:71:e2:38:96:6b:b5:de:5f:28:2d:1d:1e:bf:b1:
bd:8a:52:93:bf:c8:4b:52:67:8e:17:ea:05:81:c2:60:db:57:
33:fd:2e:e9:95:d1:68:e8:76:06:1b:6c:6a:1f:4c:d0:6b:fe:
5c:42:ae:af:dc:7c:e1:1d:f7:68:02:4f:b0:74:d5:95:90:73:
4f:15:ec:2d:8e:4e:f8:a0:bd:bd:ad:89:a4:72:08:0a:20:8d:
76:c9:b2:41:e7:cb:b3:b4:e8:ff:4d:7d:41:0e:e0:b3:19:7e:
75:74:9f:ca:4b:b3:41:84:af:8e:cf:34:fa:c6:4b:75:1c:6a:
bc:7f:59:46:b5:b6:6d:40:77:6e:7f:41:12:f3:9b:71:c0:c9:
0b:f0:a2:21:e8:cd:6d:a6:a1:c7:8d:9e:1e:9c:e9:2f:c1:01:
03:7a:63:e4:2a:87:93:ee:0b:a1:36:f9:b6:a6:c0:5c:ba:d4:
72:21:23:f2:c6:05:67:e4:1a:1a:1e:c7:f9:e9:be:47:ed:d9:
72:68:47:2d:23:2b:54:9b:eb:f6:6b:c5:ce:a4:fb:be:24:65:
a9:7b:de:e5:be:f4:d5:92:60:a3:51:45:d3:1f:a7:80:45:51:
a0:b1:2f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:21:58 2026 by rpki-client