Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
File: SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft (raw, json)
Hash identifier: WyuTRcH99FLeh5VzQTQxADgQT0h1O9RHWSedmCjLMdc=
Subject key identifier: 57:C1:B3:3F:1E:50:84:81:59:3D:90:1E:26:43:E4:9A:68:51:3B:2F
Authority key identifier: 48:5D:DB:67:8C:4C:0D:0C:48:8E:FD:3B:83:67:14:21:89:F3:35:8A
Certificate issuer: /CN=485ddb678c4c0d0c488efd3b8367142189f3358a
Certificate serial: 01A1DE7134626197FF3136CCA309CBD0168B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
Manifest number: 0AD7
Signing time: Sun 15 Nov 2026 09:02:03 +0000
Manifest this update: Sun 15 Nov 2026 09:02:03 +0000
Manifest next update: Mon 16 Nov 2026 09:02:03 +0000
Files and hashes: 1: 3jYKnkkcPN6zosdPDC704_TH7Vg.roa (hash: kX0KO9Whng4G4PQyxbPg/tClDSCWlQb64Svmgd3bElg=)
2: SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl (hash: 9cSa5yt/W6e/QJz0OKJDAPNFD5Yvuw6DtZP79QaU8vE=)
3: d7BNBvtBybD-ouMBr6YNcUi45jE.roa (hash: z33gEnZ5ORYGaYJCcJZ5qtqJlEn1QrL+f98X4D8eWjU=)
4: r_AxxcY8QiH2nWS9CL04AgPUmsY.roa (hash: l8fqDJAdHfTIgiiJd3kewidzUv4M6LymruB3QWo/rdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:71:34:62:61:97:ff:31:36:cc:a3:09:cb:d0:16:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485ddb678c4c0d0c488efd3b8367142189f3358a
Validity
Not Before: Nov 15 09:02:03 2026 GMT
Not After : Nov 16 09:02:03 2026 GMT
Subject: CN=57c1b33f1e508481593d901e2643e49a68513b2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:30:9e:7d:bf:0e:24:3c:13:8e:65:55:ab:43:
21:eb:34:d4:55:3d:13:df:95:d4:73:28:01:07:7c:
e9:06:e8:a3:07:b1:6e:35:0a:5a:66:2b:6d:50:68:
12:f9:f8:0c:8b:bd:f3:df:85:f6:79:60:63:6c:5a:
8f:fb:0b:9b:e7:3b:18:dd:fa:c0:e6:d4:66:b3:e5:
3c:49:0d:45:9d:e6:f4:94:54:94:3a:39:a6:12:de:
a8:de:d3:c7:54:39:09:85:ff:9f:76:2b:0a:84:f8:
85:87:86:02:91:6b:b8:6d:9e:e6:39:27:fd:9a:7a:
a7:97:eb:42:66:26:66:82:d2:7b:22:36:2b:db:52:
2d:54:2f:6e:8e:e5:06:3b:27:d3:ac:08:89:97:10:
48:63:58:0e:13:0f:ea:3c:61:1a:9d:c7:32:a7:00:
cd:c8:5b:d6:d5:09:f0:ed:99:09:d4:63:24:cf:db:
39:c0:1e:00:ad:5e:f7:dd:b9:2b:d5:63:d5:03:35:
64:01:a0:08:37:89:98:ba:d6:76:65:b2:5e:77:d2:
6a:55:f2:b3:bb:83:5f:fd:ae:7e:83:32:4d:7a:8f:
57:6f:dd:7c:4c:f6:68:5f:71:5d:db:45:44:06:bf:
e5:14:23:00:24:c7:38:5c:6f:a6:fa:8e:00:dc:ff:
55:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C1:B3:3F:1E:50:84:81:59:3D:90:1E:26:43:E4:9A:68:51:3B:2F
X509v3 Authority Key Identifier:
keyid:48:5D:DB:67:8C:4C:0D:0C:48:8E:FD:3B:83:67:14:21:89:F3:35:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:89:1f:f4:56:88:26:5e:14:d2:f6:00:cb:e6:c0:1c:2e:63:
7c:a9:e7:eb:25:8a:c3:e8:e1:54:9f:4e:86:be:2d:60:7d:97:
66:20:66:66:b6:71:69:53:58:fe:1f:a5:0d:4f:b0:6b:24:fb:
ab:c0:46:b7:3f:6e:cf:3f:32:af:c9:30:c2:73:7a:15:f8:01:
6b:c5:b9:a3:49:16:e0:3e:c4:45:07:c3:bb:47:de:c2:35:eb:
4c:5b:2b:66:c6:85:96:2d:a9:7a:54:53:e4:d5:10:49:72:40:
1f:95:0e:d3:88:21:be:f0:75:d4:58:fc:dc:7e:8d:57:ed:2e:
36:39:29:21:32:91:9f:fe:99:8a:51:0b:06:a1:b6:7f:70:30:
0e:09:30:d0:ac:41:51:13:be:83:2f:4b:c1:b4:03:7e:d6:77:
76:15:f5:dd:db:f8:6b:15:70:f6:d7:5f:1c:05:0a:5c:e5:72:
94:73:2f:09:a9:5d:b0:0a:bc:ee:b0:3c:67:39:43:04:ee:79:
42:a9:8b:68:0e:79:79:e7:ab:cc:00:87:25:f1:bf:07:ca:dc:
d4:47:09:a6:dd:91:07:27:66:ed:db:5c:3a:85:01:ea:10:bf:
1f:5a:2b:21:2a:66:92:35:91:12:2d:40:1f:3b:9e:88:64:62:
d2:1b:82:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:54:59 2026 by rpki-client