Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
File: SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft (raw, json)
Hash identifier: OYOCH3vsBO+BqcYe8TSyq0QsAzgrZjoT/IilRKOyk1U=
Subject key identifier: 23:6E:7B:CE:1D:6C:C2:A2:8C:C3:E4:F2:6F:50:D9:0C:FC:64:2A:10
Authority key identifier: 48:5D:DB:67:8C:4C:0D:0C:48:8E:FD:3B:83:67:14:21:89:F3:35:8A
Certificate issuer: /CN=485ddb678c4c0d0c488efd3b8367142189f3358a
Certificate serial: 019F8F7F92E9C50F834F128CD90DA0B89A3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
Manifest number: 09A5
Signing time: Thu 23 Jul 2026 15:02:10 +0000
Manifest this update: Thu 23 Jul 2026 15:02:10 +0000
Manifest next update: Fri 24 Jul 2026 15:02:10 +0000
Files and hashes: 1: 3jYKnkkcPN6zosdPDC704_TH7Vg.roa (hash: kX0KO9Whng4G4PQyxbPg/tClDSCWlQb64Svmgd3bElg=)
2: SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl (hash: pNf1n1qGelImSw+lM854ctFzmXql/hEBeMwELaM75bo=)
3: d7BNBvtBybD-ouMBr6YNcUi45jE.roa (hash: z33gEnZ5ORYGaYJCcJZ5qtqJlEn1QrL+f98X4D8eWjU=)
4: r_AxxcY8QiH2nWS9CL04AgPUmsY.roa (hash: l8fqDJAdHfTIgiiJd3kewidzUv4M6LymruB3QWo/rdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:92:e9:c5:0f:83:4f:12:8c:d9:0d:a0:b8:9a:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485ddb678c4c0d0c488efd3b8367142189f3358a
Validity
Not Before: Jul 23 15:02:10 2026 GMT
Not After : Jul 24 15:02:10 2026 GMT
Subject: CN=236e7bce1d6cc2a28cc3e4f26f50d90cfc642a10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a8:27:eb:f5:1e:b2:82:9e:e4:f4:97:d2:72:
d1:d0:07:6a:ce:af:44:3a:2a:19:a2:e1:76:e4:5c:
53:64:18:0b:24:e4:24:d9:27:6e:83:af:bb:db:6a:
3a:99:58:52:57:33:a5:ba:3a:3a:f8:1b:1b:e5:9f:
fe:33:83:fd:0e:64:df:41:a9:82:81:9d:4d:c8:2d:
6c:79:d5:07:24:f2:26:7e:a0:4e:52:58:9f:d1:33:
a4:3b:ec:55:15:0b:38:1c:69:0e:0c:3f:e5:da:73:
09:e5:db:25:94:8d:23:2b:8a:7c:69:bb:21:ae:c3:
e2:96:0f:56:0a:16:41:1f:4e:84:8e:99:b1:22:93:
59:d4:f7:93:59:1f:31:b7:0d:89:f9:57:47:41:31:
2e:e1:09:87:2a:93:9f:84:3c:03:71:5c:91:30:4f:
1e:c1:7f:31:80:f3:d0:63:bc:79:d5:d2:a9:34:ab:
cd:06:ce:bc:d8:14:b5:9d:d3:08:04:35:d1:80:c9:
13:ae:f1:2e:4a:76:79:e7:0e:27:4d:18:72:c9:54:
c3:fa:cc:f0:e5:32:04:c6:db:15:85:b0:f0:b5:38:
02:a0:9c:f0:d3:4e:24:6a:36:f5:42:29:32:02:95:
f8:5d:2d:3b:b9:b5:a1:be:6e:ff:05:cc:e5:15:4c:
c8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:6E:7B:CE:1D:6C:C2:A2:8C:C3:E4:F2:6F:50:D9:0C:FC:64:2A:10
X509v3 Authority Key Identifier:
keyid:48:5D:DB:67:8C:4C:0D:0C:48:8E:FD:3B:83:67:14:21:89:F3:35:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:3e:f5:c4:27:7a:22:6a:9f:4e:90:28:37:39:a0:c3:ee:b0:
54:f4:7a:21:ad:fb:61:f2:96:b3:23:b8:c2:b0:87:7e:f4:21:
f1:20:5f:b1:f5:f5:be:a8:93:68:32:9a:11:fa:0e:22:e9:cf:
e9:54:56:b4:9e:02:47:76:35:88:7d:2b:2b:1f:4a:87:ab:50:
97:95:3d:11:f8:94:b9:03:f6:aa:32:7e:ed:3d:9b:c8:e6:ca:
4d:3c:9f:eb:89:31:14:45:e2:d0:7e:e7:8a:34:96:d6:5a:cd:
1b:f6:96:33:4a:42:97:cc:96:74:64:e1:ac:6a:a1:ee:8d:f3:
c0:e6:0b:dd:c7:79:31:98:ea:a5:31:67:95:a6:77:b9:26:98:
29:6a:c1:c1:07:f2:e2:ac:05:70:e7:4f:07:3e:c9:cd:ba:03:
73:65:6e:8d:f4:f1:d8:15:ec:a7:71:bd:9c:95:c2:9a:03:b3:
e0:5a:a0:94:c6:2a:da:60:70:29:35:f8:ec:12:65:86:50:09:
7e:52:e3:72:7f:56:42:65:f3:d6:dd:6b:84:d9:c2:e6:e5:b5:
ee:03:f9:c8:6d:2d:20:36:e4:2e:21:e4:7e:3a:ee:3a:11:a6:
97:b9:23:85:33:23:de:5d:cc:55:d8:3a:68:67:d6:9e:35:6e:
23:ae:00:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:16:08 2026 by rpki-client