Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/a905e9-f93b-4d60-8108-810b9f5cc415/1/S11Foqu5YNK851js5zOxJtyn5xs.mft
File: S11Foqu5YNK851js5zOxJtyn5xs.mft (raw, json)
Hash identifier: rVHu1b2mKdwrdcWLLkVH3zBCc/kxkLGgdLMgJgU0vBM=
Subject key identifier: F5:7C:F9:88:DC:F3:76:28:E3:99:6C:1D:B1:F5:F6:02:98:CE:42:6D
Authority key identifier: 4B:5D:45:A2:AB:B9:60:D2:BC:E7:58:EC:E7:33:B1:26:DC:A7:E7:1B
Certificate issuer: /CN=4b5d45a2abb960d2bce758ece733b126dca7e71b
Certificate serial: 019D26CD5472520ABF0DEBF5A80A9463844D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S11Foqu5YNK851js5zOxJtyn5xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/a905e9-f93b-4d60-8108-810b9f5cc415/1/S11Foqu5YNK851js5zOxJtyn5xs.mft
Manifest number: 1750
Signing time: Wed 25 Mar 2026 21:01:23 +0000
Manifest this update: Wed 25 Mar 2026 21:01:23 +0000
Manifest next update: Thu 26 Mar 2026 21:01:23 +0000
Files and hashes: 1: MGecWndx1rC8r0_cF__XvWTIdhY.roa (hash: xMJtrWi1rZ3GmoFWTN/zEzHLjFTmPRigqDi25vDVZzk=)
2: S11Foqu5YNK851js5zOxJtyn5xs.crl (hash: 6iF1wjoQB6lod8mvWWHnwKMS9PH8FWTvXhXDDupDf90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/a905e9-f93b-4d60-8108-810b9f5cc415/1/S11Foqu5YNK851js5zOxJtyn5xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/a905e9-f93b-4d60-8108-810b9f5cc415/1/S11Foqu5YNK851js5zOxJtyn5xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/S11Foqu5YNK851js5zOxJtyn5xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:54:72:52:0a:bf:0d:eb:f5:a8:0a:94:63:84:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b5d45a2abb960d2bce758ece733b126dca7e71b
Validity
Not Before: Mar 25 21:01:23 2026 GMT
Not After : Mar 26 21:01:23 2026 GMT
Subject: CN=f57cf988dcf37628e3996c1db1f5f60298ce426d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:51:ab:ea:b6:ad:26:b5:12:c5:4a:32:98:0a:
2f:9c:53:db:f0:ce:58:83:06:17:78:d2:c8:00:ec:
92:02:f2:97:11:79:81:f6:4a:53:9d:71:be:5f:91:
17:5c:12:76:0e:8d:fc:8a:f7:4e:0f:e9:15:c3:a4:
86:20:08:8f:2a:db:1a:bc:99:e8:b7:80:5a:8c:c1:
6e:ac:e2:a6:50:40:81:f2:ee:82:95:1e:3c:c6:84:
d2:7c:ac:2b:9a:52:7a:1f:66:6a:63:05:30:ae:f9:
f9:75:4a:2e:5d:2b:fd:7d:6e:e2:8b:5b:05:59:b8:
e8:d4:99:71:e6:5b:d4:4c:ff:09:ed:52:60:84:43:
ca:9d:62:e3:64:fc:ce:d0:bb:89:9b:ec:95:66:63:
e6:69:5e:8c:55:69:d8:b9:a7:e6:ed:ef:aa:76:be:
f1:92:ec:01:5a:e8:84:28:5b:ab:3d:59:64:f2:12:
c0:a3:ec:62:d1:d7:ce:50:53:77:5a:59:1e:b8:00:
8f:da:48:7c:a2:73:37:62:c0:97:e2:c7:22:e0:a7:
80:de:0d:36:47:dc:b2:92:3e:6c:b1:36:9b:61:e6:
50:f6:ab:67:d0:69:41:a5:f9:0d:20:b7:76:fa:87:
3a:f3:38:6e:d3:5b:ad:b9:d9:02:ba:94:c0:6e:be:
b2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:7C:F9:88:DC:F3:76:28:E3:99:6C:1D:B1:F5:F6:02:98:CE:42:6D
X509v3 Authority Key Identifier:
keyid:4B:5D:45:A2:AB:B9:60:D2:BC:E7:58:EC:E7:33:B1:26:DC:A7:E7:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S11Foqu5YNK851js5zOxJtyn5xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a905e9-f93b-4d60-8108-810b9f5cc415/1/S11Foqu5YNK851js5zOxJtyn5xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a905e9-f93b-4d60-8108-810b9f5cc415/1/S11Foqu5YNK851js5zOxJtyn5xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:19:01:a1:eb:88:03:fa:05:40:fe:27:a4:c1:77:ec:b5:ef:
25:27:50:2f:54:56:26:0d:aa:e5:20:66:2c:fb:a8:d0:d1:47:
40:8f:1b:6a:b0:f7:ae:6c:5d:1d:8d:4b:41:1f:85:53:d9:af:
eb:f2:0f:0b:3e:9d:0a:69:5f:45:de:eb:1e:7e:01:6e:bc:be:
bd:89:e3:1d:05:ff:70:61:89:d4:ae:11:5d:d9:7e:c0:2a:3d:
c3:8d:31:c5:b8:ee:54:74:c7:f5:16:41:28:07:7a:0c:33:97:
1d:1d:05:0a:df:3a:5a:77:f7:4f:80:11:01:aa:07:5b:26:47:
0f:df:9a:f8:b3:bb:d3:a5:4e:66:e6:3a:7f:9e:63:48:b3:45:
6f:80:5b:fc:eb:9a:be:0c:6c:21:dd:e1:20:39:4f:7c:68:e3:
4a:a5:75:df:ce:19:fd:bf:b0:30:d6:ee:38:ce:06:fe:0a:0e:
4c:c7:7f:f1:c3:eb:dc:ba:37:29:0d:b9:54:9a:83:b0:29:73:
99:82:d4:6c:31:f3:c0:dd:dc:d2:4b:22:9a:0b:6f:a7:09:05:
a6:3d:be:f4:3a:5b:10:eb:37:1e:fc:2e:4d:a5:9d:4d:97:97:
00:fb:25:00:4a:3a:a5:c8:63:ea:5d:d6:e1:e7:1a:a5:e4:35:
d5:9f:66:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:12:11 2026 by rpki-client