Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
File: SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft (raw, json)
Hash identifier: D/AHRho41aHjKkdsim5tOTp+eVYAH5MviBNP1EoM62Q=
Subject key identifier: 94:10:E5:AE:0D:B4:79:DD:E8:AD:50:6F:C8:D5:1A:16:64:EA:90:EC
Authority key identifier: 48:5D:DB:67:8C:4C:0D:0C:48:8E:FD:3B:83:67:14:21:89:F3:35:8A
Certificate issuer: /CN=485ddb678c4c0d0c488efd3b8367142189f3358a
Certificate serial: 019D2771C0A66BD2833ECD859FDAFFA08506
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
Manifest number: 0866
Signing time: Thu 26 Mar 2026 00:00:59 +0000
Manifest this update: Thu 26 Mar 2026 00:00:59 +0000
Manifest next update: Fri 27 Mar 2026 00:00:59 +0000
Files and hashes: 1: 3jYKnkkcPN6zosdPDC704_TH7Vg.roa (hash: kX0KO9Whng4G4PQyxbPg/tClDSCWlQb64Svmgd3bElg=)
2: SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl (hash: dl3/OUOI1B7KoAhg6Xt9j+jRP7YB1flbsawlTkzwYdg=)
3: d7BNBvtBybD-ouMBr6YNcUi45jE.roa (hash: z33gEnZ5ORYGaYJCcJZ5qtqJlEn1QrL+f98X4D8eWjU=)
4: r_AxxcY8QiH2nWS9CL04AgPUmsY.roa (hash: l8fqDJAdHfTIgiiJd3kewidzUv4M6LymruB3QWo/rdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:c0:a6:6b:d2:83:3e:cd:85:9f:da:ff:a0:85:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485ddb678c4c0d0c488efd3b8367142189f3358a
Validity
Not Before: Mar 26 00:00:59 2026 GMT
Not After : Mar 27 00:00:59 2026 GMT
Subject: CN=9410e5ae0db479dde8ad506fc8d51a1664ea90ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f3:d8:ef:f4:b7:9d:56:93:85:3e:5a:c3:ae:
b8:ba:b1:4c:0f:21:ed:39:2a:04:b3:72:89:6e:99:
e3:25:79:b9:58:6f:81:8b:aa:8d:fa:d4:e7:1a:c7:
6a:b7:6a:14:8b:35:24:ff:63:24:f2:20:2e:e9:e1:
b8:4c:54:26:ae:aa:bc:cf:6d:45:2c:28:2e:8d:3f:
bc:22:74:72:b1:74:0a:97:91:9f:83:2a:3b:8d:69:
b5:cf:3d:a3:7f:d4:69:8e:0c:11:c0:f2:93:d4:e2:
e1:5b:83:d2:6d:94:fd:21:ca:7e:18:74:dd:cd:ba:
ae:46:bb:c7:26:56:02:cc:30:02:db:44:e1:30:3c:
72:43:0b:bb:b1:f6:42:a5:78:3c:44:9e:6d:f6:54:
9e:75:a7:e9:c9:0a:cc:06:59:1c:0d:6a:12:36:20:
2b:c1:16:21:73:d5:51:1d:46:43:a4:73:5d:ff:82:
87:63:b3:4c:7f:49:79:93:85:88:58:9c:15:8c:45:
b0:3a:4b:de:16:42:a8:0c:7a:20:fc:1c:97:53:f5:
c6:15:79:23:2a:00:13:3b:a2:d5:43:8e:91:1f:11:
12:ca:34:04:aa:a8:67:f2:b2:79:8f:72:29:0f:80:
dc:e6:71:dc:7e:3a:27:3c:0f:3d:f1:2c:51:c0:1c:
91:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:10:E5:AE:0D:B4:79:DD:E8:AD:50:6F:C8:D5:1A:16:64:EA:90:EC
X509v3 Authority Key Identifier:
keyid:48:5D:DB:67:8C:4C:0D:0C:48:8E:FD:3B:83:67:14:21:89:F3:35:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:b2:57:1c:e9:0e:14:1c:62:2b:ec:d1:30:e0:15:48:7f:16:
70:a2:e2:e9:12:8c:c2:3d:6f:cf:25:25:bc:05:47:3e:7b:81:
81:bd:ee:1b:57:cf:b3:6a:57:07:06:f8:c7:8d:08:a8:91:a0:
ba:c0:36:3c:e5:a7:ae:0a:a3:e4:39:39:0f:31:98:17:67:27:
02:b4:5f:3b:fa:0c:f1:1c:44:46:31:2e:e3:e2:85:02:cf:21:
55:15:4a:21:48:3d:63:93:8c:2b:de:28:28:20:0e:cb:9c:3b:
7d:99:34:a9:7c:95:67:9a:ec:42:f4:82:f0:6d:2f:a7:b6:27:
c6:ec:2a:92:14:52:2e:bf:79:7e:58:d7:23:b4:f1:01:4b:93:
8d:af:fe:1f:31:a7:d0:dc:0a:5e:f1:66:d3:fd:38:61:f8:09:
79:c9:d7:18:bc:e0:89:6c:dd:76:5d:0e:f5:ec:7c:73:b8:59:
b4:97:8c:f9:a6:8c:9b:81:34:65:f0:13:e0:8c:5c:a6:e3:e5:
86:58:92:b1:56:33:14:04:54:5a:5c:7d:67:ee:1b:aa:8a:8d:
59:f4:9a:7e:93:a8:08:4a:89:8d:4f:36:5a:5a:27:08:30:6f:
0f:8f:a4:ce:fe:98:03:9e:8a:b0:68:3d:5d:b4:e0:ba:9e:9c:
d2:11:21:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:13:15 2026 by rpki-client