Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
File: sFf1RPU_NdjS5zyylltPTX0CKVk.mft (raw, json)
Hash identifier: GpuBLL87wdrUX274gOym7d4BJ3AaoGTHcmCLUY9J2+c=
Subject key identifier: E1:00:79:1C:AF:32:EB:4A:A2:C3:52:4A:75:5B:E8:D7:0D:46:43:59
Authority key identifier: B0:57:F5:44:F5:3F:35:D8:D2:E7:3C:B2:96:5B:4F:4D:7D:02:29:59
Certificate issuer: /CN=b057f544f53f35d8d2e73cb2965b4f4d7d022959
Certificate serial: 019E1DFDFB2A323EEFE87A0B44A28B1868FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
Manifest number: 189B
Signing time: Tue 12 May 2026 21:00:44 +0000
Manifest this update: Tue 12 May 2026 21:00:44 +0000
Manifest next update: Wed 13 May 2026 21:00:44 +0000
Files and hashes: 1: 1-LQW0hELrOlw1d0vdgbz08TyBgo.roa (hash: B2ILvHFw8ZMKCLvJqBB9DL0g8zmbsD02oH7FPgU93Nk=)
2: sFf1RPU_NdjS5zyylltPTX0CKVk.crl (hash: js++OaECKggiv8Toqt1xYSVvEq/fjMj2b4IvBjDnKz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fd:fb:2a:32:3e:ef:e8:7a:0b:44:a2:8b:18:68:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b057f544f53f35d8d2e73cb2965b4f4d7d022959
Validity
Not Before: May 12 21:00:44 2026 GMT
Not After : May 13 21:00:44 2026 GMT
Subject: CN=e100791caf32eb4aa2c3524a755be8d70d464359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0a:91:f4:8e:31:48:88:89:21:1e:3c:1a:45:
ea:94:3a:20:3f:40:2a:bf:87:d4:71:73:4d:1b:2b:
3e:4c:ee:cc:60:67:e6:67:c1:f7:e7:39:cc:7b:65:
93:8f:cc:2c:62:76:d3:ad:f7:02:c8:66:59:5c:88:
f6:79:ec:8a:9d:b7:d2:ea:03:b9:61:40:ac:4a:82:
fa:a3:e1:e9:31:72:db:db:b4:2d:60:a8:31:2c:44:
3d:22:02:45:5c:69:23:67:e7:71:87:3c:d2:5c:75:
cc:fb:87:df:42:09:d6:0c:59:f2:33:75:ae:53:3a:
d8:c9:fb:8b:c0:52:0b:53:32:f5:86:d9:41:e6:c2:
9e:95:e9:86:31:2a:31:db:dd:67:da:29:26:26:14:
17:de:76:93:01:f0:3f:8a:0c:de:04:e8:c1:9c:5c:
d3:0d:d8:49:1b:28:4d:95:d7:94:7b:92:52:e8:e4:
c1:64:47:84:71:12:3a:69:67:d1:69:e4:34:eb:16:
74:17:b0:9f:4f:f1:68:88:5d:65:9a:cb:c2:af:d8:
96:90:45:b5:29:ae:09:7e:e4:8d:b1:dc:28:57:e3:
28:e2:9c:0d:38:95:ca:80:9f:34:ff:c5:06:21:a1:
e7:82:a7:bd:5b:e5:3c:31:77:56:57:ad:d7:7c:8a:
6b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:00:79:1C:AF:32:EB:4A:A2:C3:52:4A:75:5B:E8:D7:0D:46:43:59
X509v3 Authority Key Identifier:
keyid:B0:57:F5:44:F5:3F:35:D8:D2:E7:3C:B2:96:5B:4F:4D:7D:02:29:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:7c:dc:53:54:bb:7b:42:9b:7e:45:81:e4:6e:40:e7:f7:2a:
16:47:54:30:f6:96:7b:8a:58:d0:4f:d7:69:04:c8:e2:cc:2e:
bb:10:c1:33:37:dd:46:cf:08:0c:33:8f:b1:03:33:70:56:a9:
d6:88:ae:79:57:0c:82:32:6e:1a:4e:ed:53:a1:b2:59:a3:0f:
f4:81:29:3e:e7:80:81:46:38:ce:7e:7d:a0:4c:a9:09:8e:98:
77:73:d3:fe:6e:a7:97:a4:57:ed:c6:8e:f6:2c:4d:24:0f:dc:
a1:a8:0b:b0:96:d9:9f:bc:90:b7:34:23:c3:b9:ae:bb:60:d0:
ac:0f:c7:21:86:b0:de:55:05:bc:5a:a5:4d:50:3f:8d:8c:62:
4d:22:40:95:12:e7:66:bf:e4:a3:fc:11:34:fc:d7:86:c1:1a:
51:24:b5:06:b2:fa:06:8f:c6:8a:ad:e0:dc:e2:e3:50:f5:b9:
8b:26:7b:dd:2f:db:d3:88:d4:d7:aa:7e:f8:9b:b3:70:b6:e7:
47:ec:43:7a:e6:c4:c3:0e:a4:1e:16:8c:65:57:f2:a7:e5:ef:
82:08:90:ce:9c:1c:ab:a4:b9:54:6e:08:00:1d:a7:9d:b3:84:
ae:f3:3e:14:03:33:79:2d:35:eb:d3:2c:5d:97:ed:50:3a:4b:
44:4d:0d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:19:59 2026 by rpki-client