Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.mft
File: sIRyULOncSfffDx7je-MnZGdxLk.mft (raw, json)
Hash identifier: fjBoT0JxI/Uvx0l/csVcocDZ0FzbMhmkyz6tE69k+Kk=
Subject key identifier: 88:3F:B6:58:CD:3A:63:6F:88:C8:FE:9F:5D:58:72:F4:12:24:84:C0
Authority key identifier: B0:84:72:50:B3:A7:71:27:DF:7C:3C:7B:8D:EF:8C:9D:91:9D:C4:B9
Certificate issuer: /CN=b0847250b3a77127df7c3c7b8def8c9d919dc4b9
Certificate serial: 019D265FAF6DD014AAFF00FC6853CE37A803
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sIRyULOncSfffDx7je-MnZGdxLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.mft
Manifest number: 0AEA
Signing time: Wed 25 Mar 2026 19:01:38 +0000
Manifest this update: Wed 25 Mar 2026 19:01:38 +0000
Manifest next update: Thu 26 Mar 2026 19:01:38 +0000
Files and hashes: 1: SyjKeUnbRSDs4kNGNlsLLfS--v4.roa (hash: FpkjhgAtv2x7Z5TEduGx1C16Z0THVbd0mVvuXtouz6k=)
2: sIRyULOncSfffDx7je-MnZGdxLk.crl (hash: Zd4zouxi0WcEBFrAkdPkmXoz62wx99EHakiBBoi/808=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sIRyULOncSfffDx7je-MnZGdxLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:af:6d:d0:14:aa:ff:00:fc:68:53:ce:37:a8:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0847250b3a77127df7c3c7b8def8c9d919dc4b9
Validity
Not Before: Mar 25 19:01:38 2026 GMT
Not After : Mar 26 19:01:38 2026 GMT
Subject: CN=883fb658cd3a636f88c8fe9f5d5872f4122484c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:17:63:a9:15:88:d4:b5:aa:72:67:9b:ec:7f:
25:4e:a8:7e:97:78:ae:10:79:3c:d7:6b:cf:0c:07:
9d:7d:2b:f2:cc:9a:a0:c9:b6:11:28:d4:e4:49:50:
81:0c:ba:01:58:25:ac:69:91:9b:31:04:1c:2b:76:
76:57:8d:82:96:3c:5f:8a:a0:da:bc:b2:33:79:ff:
2a:bc:0c:f2:48:22:44:f7:5c:f2:02:3b:aa:b6:a8:
a9:07:13:eb:6e:51:40:39:49:b0:eb:3d:f6:55:e3:
e8:01:a0:6f:bd:02:ba:01:bb:34:48:8f:26:3d:90:
09:e3:50:f5:8b:4a:51:27:4a:c0:e8:82:a4:90:0c:
9f:9f:4a:b4:4b:98:4c:01:14:1b:93:1a:87:20:4e:
4a:f7:f3:3d:9d:da:06:fd:57:00:ee:7c:ce:e4:74:
7c:f5:2c:bf:7a:ec:c6:66:b0:21:a0:5c:97:d2:cd:
22:f3:11:47:d2:69:14:8f:32:81:92:03:58:41:d6:
35:44:e1:0b:a4:65:7d:6d:04:d6:fc:b0:44:26:55:
43:15:f7:1a:13:77:51:df:6e:07:08:35:8e:4f:62:
dc:16:47:6a:c3:f3:17:4b:70:5a:ac:ee:f1:da:04:
13:34:05:17:9e:bf:52:12:d4:a3:3e:7b:74:0f:4c:
80:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:3F:B6:58:CD:3A:63:6F:88:C8:FE:9F:5D:58:72:F4:12:24:84:C0
X509v3 Authority Key Identifier:
keyid:B0:84:72:50:B3:A7:71:27:DF:7C:3C:7B:8D:EF:8C:9D:91:9D:C4:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sIRyULOncSfffDx7je-MnZGdxLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:fb:cf:d2:1d:e5:3b:d9:23:4a:0f:20:c1:0f:af:71:80:50:
10:7a:61:10:8a:c0:4f:1c:9f:5e:cd:cb:8d:b0:ce:b1:9c:c9:
e4:ff:c8:b4:46:d3:86:af:b9:d1:00:3c:39:60:05:d0:7d:73:
a9:c5:53:cd:26:bc:38:3f:d1:5f:ec:99:e7:49:b3:d6:fa:e8:
08:14:61:ce:25:99:bc:b9:a9:bd:e1:d3:ba:58:73:de:22:63:
73:b2:20:40:99:6c:49:f8:e4:79:49:42:80:ca:b1:45:f2:d3:
d0:55:8b:cf:e5:57:97:a9:9b:f5:56:c6:b2:cb:fa:7e:01:a7:
4b:f1:d6:ab:b5:b2:ed:63:e6:8e:a4:27:a5:5c:cb:51:44:bf:
07:a1:43:d8:5b:5c:ca:0e:6a:05:3e:c6:a8:b8:4d:fd:eb:97:
9a:f5:00:2c:2a:d3:f8:a4:d1:12:74:76:b4:ce:b1:56:76:d8:
a4:b8:fd:c1:f2:7f:47:57:4d:ae:7d:00:58:e4:fa:7b:d2:69:
30:1d:ef:7e:11:49:f6:27:1d:79:4b:46:56:09:d6:72:a4:81:
de:45:d7:b9:ff:87:d6:04:49:a2:e1:7e:71:ea:f3:39:21:4c:
b0:83:8c:56:f2:05:7a:b3:d6:b2:73:fd:e0:f0:13:82:c9:46:
0e:a5:29:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:23 2026 by rpki-client