Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft
File: sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft (raw, json)
Hash identifier: ySiSIV5xPo0dm9ZGgri9GGkRvNZVikD0KlxC7GOYyO8=
Subject key identifier: 15:8A:91:9E:C2:E0:BF:45:19:9F:6D:E0:C2:AB:5F:07:26:A4:85:EE
Authority key identifier: B1:F5:BB:AA:05:19:80:BD:48:11:B6:65:5A:0F:95:DB:36:12:78:09
Certificate issuer: /CN=b1f5bbaa051980bd4811b6655a0f95db36127809
Certificate serial: 019E1DFE85374FF4F137A66A3F129594730B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sfW7qgUZgL1IEbZlWg-V2zYSeAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft
Manifest number: 1297
Signing time: Tue 12 May 2026 21:01:19 +0000
Manifest this update: Tue 12 May 2026 21:01:19 +0000
Manifest next update: Wed 13 May 2026 21:01:19 +0000
Files and hashes: 1: H1ayDIygYNIOiS92j6cNtqBQm1c.roa (hash: zAMEhxkwZgHjIWB7MVVQZowg1h/HvADUtVLj69PryUA=)
2: sfW7qgUZgL1IEbZlWg-V2zYSeAk.crl (hash: VSz46uLK4L7B4Q0JMqAX1vYmxSquN8HaywrVuOjavrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sfW7qgUZgL1IEbZlWg-V2zYSeAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:85:37:4f:f4:f1:37:a6:6a:3f:12:95:94:73:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1f5bbaa051980bd4811b6655a0f95db36127809
Validity
Not Before: May 12 21:01:19 2026 GMT
Not After : May 13 21:01:19 2026 GMT
Subject: CN=158a919ec2e0bf45199f6de0c2ab5f0726a485ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a0:01:4b:16:16:9e:db:ea:94:35:c9:41:e4:
a9:36:3c:c5:6b:14:b0:a9:00:b6:bb:90:be:8e:80:
e6:5c:90:98:12:72:8d:cf:e3:6d:3b:db:df:ce:85:
ca:24:66:2a:12:8f:27:1d:d2:39:f5:25:64:65:29:
c9:2b:bb:c4:26:9e:22:b8:6a:c0:8c:d4:65:bc:72:
8a:66:bc:a5:55:62:e3:5a:21:08:e9:40:bc:a6:12:
7f:a0:b9:0f:e1:68:dd:97:d6:ee:cc:9c:f3:a0:58:
95:3b:30:10:f9:e2:44:22:ac:44:5b:70:60:a1:4b:
c4:9e:6e:1b:cf:e5:27:ad:9e:28:21:3c:32:9f:f2:
e2:49:76:dc:70:86:15:72:3a:20:65:68:53:39:08:
9e:70:cd:5b:6d:ee:8e:cc:08:a2:c5:f1:41:a5:b4:
f0:19:66:ba:53:4a:34:c4:3a:c7:03:f4:9e:c2:73:
c1:2f:e7:62:d1:a4:3e:87:68:2d:99:31:90:85:49:
b3:d1:ed:2e:51:58:cc:97:db:0c:36:43:9e:ce:26:
c6:e5:27:8f:14:10:c2:e0:8b:a2:73:a3:e0:b4:a3:
b4:6c:c0:a1:05:fe:57:20:51:de:32:ad:72:fe:21:
e2:04:5c:d0:83:5c:dd:69:74:2a:a1:36:e4:ce:da:
04:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:8A:91:9E:C2:E0:BF:45:19:9F:6D:E0:C2:AB:5F:07:26:A4:85:EE
X509v3 Authority Key Identifier:
keyid:B1:F5:BB:AA:05:19:80:BD:48:11:B6:65:5A:0F:95:DB:36:12:78:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sfW7qgUZgL1IEbZlWg-V2zYSeAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:f8:20:85:28:2c:0d:17:b8:be:4c:14:d3:37:89:b4:75:f7:
f8:64:66:28:e2:6a:72:87:34:0f:78:09:9e:95:2e:26:fb:0c:
18:38:00:a4:8d:8f:03:98:e3:d5:46:b6:f9:81:85:c0:33:0b:
4a:92:5a:b9:78:da:36:1f:16:93:a1:ed:1c:55:62:66:1f:ac:
69:ec:5c:d3:02:78:f5:0e:62:d1:e5:07:ab:83:2e:92:41:12:
25:35:15:fb:01:ed:4e:59:01:26:5d:ad:f4:b3:d9:ba:3f:e6:
ce:56:08:d6:d1:42:b8:19:a4:76:02:f2:3a:10:ea:95:52:55:
29:0f:a4:64:e5:75:6e:5d:70:de:8c:95:6f:4a:f1:05:a6:e6:
95:d3:0f:4e:46:86:1b:ee:82:95:ac:d5:ac:ed:e4:ca:01:42:
77:de:10:08:09:11:30:5e:28:74:0d:4b:ca:c8:80:e8:64:c7:
0b:af:54:be:4b:bc:30:d7:d0:0d:31:1b:1d:29:61:dd:f2:24:
95:91:9f:5d:30:da:06:04:64:b7:89:93:76:20:5e:7e:8a:20:
de:e5:9d:14:df:b0:7c:a5:6d:f0:cc:df:e9:54:8e:1f:57:84:
2f:b0:ea:c5:04:30:1f:fe:55:ee:e9:5b:a8:59:be:c8:1a:48:
c7:11:0b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:08:00 2026 by rpki-client