Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft
File: SReefPYEiMPvW3cNIa6xR9pMfO4.mft (raw, json)
Hash identifier: X8cs0Io9ThzGAXJYtNePmO0PeCsGCzNvo6A5/Bh+l0A=
Subject key identifier: 62:07:E0:1E:24:7C:84:B7:C0:C1:F1:6D:DC:AC:99:D4:45:F1:C1:3A
Authority key identifier: 49:17:9E:7C:F6:04:88:C3:EF:5B:77:0D:21:AE:B1:47:DA:4C:7C:EE
Certificate issuer: /CN=49179e7cf60488c3ef5b770d21aeb147da4c7cee
Certificate serial: 019D26CCDABF506F90A2F8B1568DA818B0A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SReefPYEiMPvW3cNIa6xR9pMfO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft
Manifest number: 156C
Signing time: Wed 25 Mar 2026 21:00:52 +0000
Manifest this update: Wed 25 Mar 2026 21:00:52 +0000
Manifest next update: Thu 26 Mar 2026 21:00:52 +0000
Files and hashes: 1: Ep5ktzb7jazkCqqKIA1eaooWA3A.roa (hash: V0HuBh1yvdXINaO+p6RF/CkRfffpWDmrMD6p3MKWJhs=)
2: SReefPYEiMPvW3cNIa6xR9pMfO4.crl (hash: VjsT3PRnqTw6F24/LMeocrw1rhhf4pWGqxDmlV2MeSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SReefPYEiMPvW3cNIa6xR9pMfO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:da:bf:50:6f:90:a2:f8:b1:56:8d:a8:18:b0:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49179e7cf60488c3ef5b770d21aeb147da4c7cee
Validity
Not Before: Mar 25 21:00:52 2026 GMT
Not After : Mar 26 21:00:52 2026 GMT
Subject: CN=6207e01e247c84b7c0c1f16ddcac99d445f1c13a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:aa:51:85:51:a5:0f:df:14:69:a9:81:8f:08:
8c:8d:d5:2a:1e:14:6b:17:17:89:49:dc:58:a1:1b:
0a:c7:c1:34:1e:9b:02:9a:38:9f:73:71:7f:18:3d:
a4:69:1e:3a:77:e7:21:89:72:3b:48:7c:67:4e:ce:
12:fc:10:e4:69:9c:8b:19:16:85:26:01:69:a3:f9:
ec:62:76:61:d2:09:95:bd:68:e9:30:ee:f3:03:7d:
ab:19:90:33:26:fa:0a:f6:d0:35:c0:b2:91:78:b4:
72:7e:b0:60:b4:0a:f4:e5:b6:5d:a2:fe:e4:d9:84:
12:62:f3:02:8d:5f:5f:4b:54:02:a4:92:72:cb:88:
72:06:16:8a:64:11:99:a2:9a:d9:88:a5:de:28:2c:
df:4e:00:c2:2e:fa:a3:81:95:31:18:46:1a:be:09:
c2:0d:82:ed:3c:37:aa:44:d9:98:c6:5a:b7:b3:b1:
e1:83:97:4a:da:8f:9d:4d:c6:ac:95:93:59:17:e2:
ff:ef:0d:3a:61:48:67:a2:95:fa:b4:fe:5f:b5:82:
b6:d0:91:16:47:cb:8b:d9:aa:37:e7:b0:17:b6:8a:
ae:e2:32:ed:e1:dc:63:f3:5e:47:3f:8c:e5:18:4b:
01:56:7b:86:e0:a4:46:dc:90:72:23:3f:95:7b:33:
80:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:07:E0:1E:24:7C:84:B7:C0:C1:F1:6D:DC:AC:99:D4:45:F1:C1:3A
X509v3 Authority Key Identifier:
keyid:49:17:9E:7C:F6:04:88:C3:EF:5B:77:0D:21:AE:B1:47:DA:4C:7C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SReefPYEiMPvW3cNIa6xR9pMfO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:e0:c9:06:78:17:22:29:85:22:92:36:5c:35:c9:b5:f6:63:
33:1f:03:dd:30:8a:c9:03:5d:1b:f8:f7:7e:38:d2:bc:8e:ca:
bd:8a:89:4e:3e:57:cb:7c:63:c2:01:50:cf:36:f5:e2:69:ae:
69:e4:1a:1d:a4:f1:e7:e2:99:c3:4b:42:8b:b0:ed:1f:65:de:
a7:5d:02:23:11:dc:91:04:7f:47:9b:93:bd:b7:d3:64:17:41:
9b:44:5c:a1:5c:c2:01:de:f5:2e:98:aa:e2:ef:6e:76:70:4e:
11:40:fa:3c:9a:02:5c:c8:fc:8d:6d:51:3e:ed:16:6c:e0:23:
e6:09:e7:df:e9:7c:9a:e5:df:6c:bd:2b:09:bd:2d:39:d9:61:
70:e3:fa:cb:ca:14:17:59:07:d1:d3:98:7c:e4:81:94:34:6c:
bd:27:f2:0b:12:43:99:55:5f:06:9d:aa:4a:42:22:fe:88:8c:
5c:35:af:72:40:60:4c:86:ec:da:4c:a2:96:6b:7b:6e:37:9e:
b1:0e:1f:36:b9:45:51:b0:02:d4:a0:81:b7:29:5c:1a:23:9d:
db:54:07:e2:9e:0d:b9:1f:b4:dc:8b:4c:b3:70:fd:30:31:24:
98:f9:cf:65:aa:20:46:df:42:70:1d:16:48:d8:03:02:4c:02:
ae:11:03:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzNq/UG+QovixVo2oGLCjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5MTc5ZTdjZjYwNDg4YzNlZjViNzcwZDIxYWViMTQ3ZGE0
YzdjZWUwHhcNMjYwMzI1MjEwMDUyWhcNMjYwMzI2MjEwMDUyWjAzMTEwLwYDVQQD
Eyg2MjA3ZTAxZTI0N2M4NGI3YzBjMWYxNmRkY2FjOTlkNDQ1ZjFjMTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnapRhVGlD98UaamBjwiMjdUqHhRr
FxeJSdxYoRsKx8E0HpsCmjifc3F/GD2kaR46d+chiXI7SHxnTs4S/BDkaZyLGRaF
JgFpo/nsYnZh0gmVvWjpMO7zA32rGZAzJvoK9tA1wLKReLRyfrBgtAr05bZdov7k
2YQSYvMCjV9fS1QCpJJyy4hyBhaKZBGZoprZiKXeKCzfTgDCLvqjgZUxGEYavgnC
DYLtPDeqRNmYxlq3s7Hhg5dK2o+dTcaslZNZF+L/7w06YUhnopX6tP5ftYK20JEW
R8uL2ao357AXtoqu4jLt4dxj815HP4zlGEsBVnuG4KRG3JByIz+VezOA/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGIH4B4kfIS3wMHxbdysmdRF8cE6MB8GA1UdIwQY
MBaAFEkXnnz2BIjD71t3DSGusUfaTHzuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1JlZWZQWUVpTVB2VzNjTklhNnhSOXBNZk80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kNTJlYWMtYzdlMi00ODgxLTg4ZTMt
NDcxZDQyYzJkODA2LzEvU1JlZWZQWUVpTVB2VzNjTklhNnhSOXBNZk80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9kNTJlYWMtYzdlMi00ODgxLTg4ZTMtNDcxZDQyYzJkODA2
LzEvU1JlZWZQWUVpTVB2VzNjTklhNnhSOXBNZk80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARuDJBngX
IimFIpI2XDXJtfZjMx8D3TCKyQNdG/j3fjjSvI7KvYqJTj5Xy3xjwgFQzzb14mmu
aeQaHaTx5+KZw0tCi7DtH2Xep10CIxHckQR/R5uTvbfTZBdBm0RcoVzCAd71Lpiq
4u9udnBOEUD6PJoCXMj8jW1RPu0WbOAj5gnn3+l8muXfbL0rCb0tOdlhcOP6y8oU
F1kH0dOYfOSBlDRsvSfyCxJDmVVfBp2qSkIi/oiMXDWvckBgTIbs2kyilmt7bjee
sQ4fNrlFUbAC1KCBtylcGiOd21QH4p4NuR+03ItMs3D9MDEkmPnPZaogRt9CcB0W
SNgDAkwCrhED+A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:58 2026 by rpki-client