Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
File: sFf1RPU_NdjS5zyylltPTX0CKVk.mft (raw, json)
Hash identifier: gAfrPFStgW8dLTZGv/yLAZiNFtzc6vlangyOha33aSg=
Subject key identifier: 08:A3:F7:4D:87:9E:21:E7:CB:C0:2C:29:47:50:9C:DC:5F:2C:C5:60
Authority key identifier: B0:57:F5:44:F5:3F:35:D8:D2:E7:3C:B2:96:5B:4F:4D:7D:02:29:59
Certificate issuer: /CN=b057f544f53f35d8d2e73cb2965b4f4d7d022959
Certificate serial: 019D2AA9548BF5C5754218231BC87916E82E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
Manifest number: 181D
Signing time: Thu 26 Mar 2026 15:00:33 +0000
Manifest this update: Thu 26 Mar 2026 15:00:33 +0000
Manifest next update: Fri 27 Mar 2026 15:00:33 +0000
Files and hashes: 1: 1-LQW0hELrOlw1d0vdgbz08TyBgo.roa (hash: B2ILvHFw8ZMKCLvJqBB9DL0g8zmbsD02oH7FPgU93Nk=)
2: sFf1RPU_NdjS5zyylltPTX0CKVk.crl (hash: uyOBeqjlZtgPXfVzhTaB5d7Qpe0NWOzYxgj9Ul6IGqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:54:8b:f5:c5:75:42:18:23:1b:c8:79:16:e8:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b057f544f53f35d8d2e73cb2965b4f4d7d022959
Validity
Not Before: Mar 26 15:00:33 2026 GMT
Not After : Mar 27 15:00:33 2026 GMT
Subject: CN=08a3f74d879e21e7cbc02c2947509cdc5f2cc560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:55:08:85:42:17:79:57:9e:2c:97:4b:89:5f:
a7:9c:f5:46:74:76:5d:45:07:ca:3b:00:9b:01:c7:
96:77:f0:05:d3:1e:2e:6a:ca:bd:58:d2:38:bf:b0:
56:c0:c3:93:59:f3:b0:7a:28:1f:ce:f2:40:0b:f9:
c9:73:bf:e2:6d:62:03:d6:5d:78:f7:c1:05:b3:5f:
10:f4:da:36:d6:7c:42:d0:cc:e8:e2:77:0f:20:e2:
5a:50:78:18:6f:af:99:43:ba:c1:6d:58:50:38:4d:
74:c2:72:f8:63:7c:66:13:d2:1b:bc:b7:d0:88:d3:
2a:7e:0d:39:9f:b3:3f:a1:88:87:bd:ca:21:31:3a:
5b:87:64:d0:63:a5:2e:85:f2:3e:14:77:33:92:bb:
25:65:89:6d:4a:54:d9:b3:eb:3e:0c:4c:bf:26:f3:
56:cc:de:61:25:42:91:35:45:4c:a1:3c:51:98:42:
e3:f3:45:fa:b6:70:28:58:25:9c:5b:aa:7d:a2:6f:
61:ca:70:bb:7d:42:ed:86:25:a6:1c:a9:46:d5:25:
22:c7:01:6a:9e:f8:94:aa:fd:19:19:a0:8c:58:42:
01:6b:36:c5:71:1a:4b:e0:61:84:93:77:1e:a2:63:
60:7f:cf:cc:20:a6:bb:80:93:75:90:61:e0:0c:61:
38:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A3:F7:4D:87:9E:21:E7:CB:C0:2C:29:47:50:9C:DC:5F:2C:C5:60
X509v3 Authority Key Identifier:
keyid:B0:57:F5:44:F5:3F:35:D8:D2:E7:3C:B2:96:5B:4F:4D:7D:02:29:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:39:18:15:af:1b:d5:34:e7:46:fa:8a:73:4c:e4:d4:84:59:
a7:8e:8e:8b:aa:f3:eb:15:f6:6c:db:32:9d:05:e9:c2:67:8e:
2a:e4:1d:fb:55:c2:5a:b0:09:a8:6e:11:27:fa:18:7b:ca:6b:
51:d2:5d:d9:19:c9:51:d2:1f:d6:f6:7f:61:db:18:c7:0a:a2:
c8:57:29:98:0a:3f:a9:26:44:dc:79:7d:39:82:45:d3:e1:48:
b6:cf:01:f0:49:b0:0f:20:cd:7d:ea:33:c3:eb:48:6a:b7:95:
f3:a0:63:33:89:8f:d2:97:5b:73:5e:7d:8d:6b:fa:0f:c7:52:
8e:27:6d:f4:c3:ea:38:ff:f4:c2:a0:fb:f7:09:dd:78:e7:42:
06:9d:e0:2d:ad:04:f7:9f:5a:2d:04:27:52:21:2b:f0:ee:37:
68:2d:6f:5e:68:1c:11:6b:83:71:51:1a:7c:29:03:41:96:f1:
bf:03:43:dc:95:ba:c9:b6:17:25:fa:e3:40:e2:cc:91:e0:94:
52:1b:84:18:78:97:fc:49:ca:f0:b9:bd:e7:92:e6:b2:89:77:
9d:29:97:5a:0c:ad:09:29:23:ad:6c:da:eb:d3:a0:19:6c:71:
57:71:e6:55:47:eb:7f:94:c8:a2:2c:5f:05:3c:34:a7:d3:9b:
09:12:6f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:15:08 2026 by rpki-client