Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft
File: sFoGBOdodvoD5q2Gh_odtsY9OQg.mft (raw, json)
Hash identifier: gaj88UmFoiGDqAdf7zyJTbs0BYtdTVrYCqi6qvlG/+Y=
Subject key identifier: 62:2E:BF:E7:CF:E1:35:F2:69:AC:80:63:C2:5C:0A:47:3C:5D:76:2D
Authority key identifier: B0:5A:06:04:E7:68:76:FA:03:E6:AD:86:87:FA:1D:B6:C6:3D:39:08
Certificate issuer: /CN=b05a0604e76876fa03e6ad8687fa1db6c63d3908
Certificate serial: 019D389BEC656116047A7395863C2A18140E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFoGBOdodvoD5q2Gh_odtsY9OQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 08:00:35 +0000
Manifest this update: Sun 29 Mar 2026 08:00:35 +0000
Manifest next update: Mon 30 Mar 2026 08:00:35 +0000
Files and hashes: 1: YVVSxC4wbNTE6amPOj_aUWu9KmQ.roa (hash: jx8KSb9gYYltGS0dfqO/0sgILL/tPjue23+E+n9mHYY=)
2: jvfuzQB2Ic8Lkn_v-fU0vD7KZUI.roa (hash: wTQiDytgLASjhAyRpE2k4salmmSbcvPsNpIE4v8G2dw=)
3: sFoGBOdodvoD5q2Gh_odtsY9OQg.crl (hash: yuoZLKpH+SPYvyE7ewTFuk5jjZueNs17z+puNqbrJmQ=)
4: xgkVb7jGmrVMuFNZV5uC54rwBLc.roa (hash: U7zPiRVnuj8K+WrtUv0kblwys87NbJBaEKGAwaoWJcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/sFoGBOdodvoD5q2Gh_odtsY9OQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:ec:65:61:16:04:7a:73:95:86:3c:2a:18:14:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05a0604e76876fa03e6ad8687fa1db6c63d3908
Validity
Not Before: Mar 29 08:00:35 2026 GMT
Not After : Mar 30 08:00:35 2026 GMT
Subject: CN=622ebfe7cfe135f269ac8063c25c0a473c5d762d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:12:6d:2f:ee:b1:31:ec:24:94:6f:20:a9:5b:
9a:73:c3:dc:c6:39:fb:94:cf:93:71:32:f5:42:77:
ee:22:15:65:b9:5b:93:f6:d1:de:ce:b3:86:14:ed:
3d:b4:83:5f:d3:2c:20:7c:5c:31:0d:44:c7:d3:83:
54:81:b2:8d:87:11:4b:bd:b9:d4:f0:1e:5e:65:0a:
af:d5:5a:65:2e:46:f8:d3:5f:b5:08:6c:c3:f6:d4:
5c:da:e0:c2:f2:ee:f7:65:7d:7d:cd:e0:e7:47:51:
91:e0:41:b3:29:52:d0:b9:75:53:c9:bb:fc:07:bc:
ea:20:95:25:94:c8:47:c3:da:40:ab:df:f5:65:5d:
7d:cc:49:5b:d2:4e:73:72:6b:d2:13:c3:1c:f5:c5:
69:dd:59:66:ae:22:cd:ba:71:f5:ae:fd:ca:0f:70:
c5:5c:48:96:67:85:87:f3:7e:38:5e:f5:57:d1:6a:
e1:93:c6:7b:f6:04:75:01:89:bb:39:69:43:8a:ac:
dd:c8:93:3f:cb:0a:0a:ba:78:06:5e:f4:9b:7f:38:
df:3e:a0:b7:b7:94:3f:ca:80:fa:d5:2b:f8:fc:85:
23:7a:2e:44:cc:bb:84:65:d7:0e:44:a0:ff:1d:91:
f1:4a:78:22:93:0b:b7:87:97:ed:4e:ea:f5:a6:f9:
7f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:2E:BF:E7:CF:E1:35:F2:69:AC:80:63:C2:5C:0A:47:3C:5D:76:2D
X509v3 Authority Key Identifier:
keyid:B0:5A:06:04:E7:68:76:FA:03:E6:AD:86:87:FA:1D:B6:C6:3D:39:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFoGBOdodvoD5q2Gh_odtsY9OQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:17:70:e2:2b:d0:82:d3:f1:3d:59:2a:28:7b:8e:a9:66:f5:
63:ea:6f:41:7e:b5:2a:8c:7b:e1:b5:e1:98:28:5f:96:c5:a1:
d6:85:5b:8b:31:a2:2d:e8:06:65:c0:2f:9e:e9:5a:b8:1c:09:
f2:89:bf:50:93:8c:13:2e:9d:4a:72:ec:ff:14:77:c1:ed:da:
79:0f:eb:7b:0a:32:eb:77:05:63:79:1d:1f:94:1a:db:2c:bb:
e2:13:6e:64:58:e9:a8:e0:c3:73:4c:9d:50:20:93:aa:d3:cf:
d7:e8:4a:f9:24:5f:83:57:30:4c:13:c0:9f:a4:5f:e6:0f:c0:
9d:13:67:0a:fd:96:9b:7c:98:da:ee:fa:e0:77:e0:16:8a:d3:
84:0b:83:de:ba:5f:0e:16:be:ef:fa:40:43:34:bf:08:29:2c:
bf:0e:bc:03:87:4f:c1:25:fe:bb:5a:8e:23:9a:02:06:bc:bf:
81:1c:1e:97:35:40:08:82:76:c1:4c:de:01:2a:12:96:76:53:
61:73:6a:ee:dd:f2:1f:3e:7c:02:eb:48:5b:39:58:84:93:ca:
b7:4d:ba:94:ab:15:81:4a:7c:cf:d9:77:2f:db:cb:a2:ba:39:
02:99:a5:1b:f2:4f:aa:e7:f1:07:37:69:b1:1c:17:0c:64:35:
9c:d2:72:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:28 2026 by rpki-client