Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
File: sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft (raw, json)
Hash identifier: Stzoe6ilZqg2NuBVshKGsq/hm6MT4k2Z/gSr4HyekTM=
Subject key identifier: BE:EC:D8:BD:48:55:81:8B:03:3E:C1:8E:EE:FD:95:87:B5:77:CD:86
Authority key identifier: B1:11:57:C9:8F:26:27:9F:C3:EE:D2:DA:B3:CF:11:83:72:BD:BE:1B
Certificate issuer: /CN=b11157c98f26279fc3eed2dab3cf118372bdbe1b
Certificate serial: 01A08979F9CC6FDC891B66350360F6AE2924
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRFXyY8mJ5_D7tLas88Rg3K9vhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
Manifest number: 0741
Signing time: Thu 10 Sep 2026 04:01:07 +0000
Manifest this update: Thu 10 Sep 2026 04:01:07 +0000
Manifest next update: Fri 11 Sep 2026 04:01:07 +0000
Files and hashes: 1: KfYGsusnHllzc3HN92AAdqUVjQo.roa (hash: gW3c/fjZpWHlQkkjPS1/2ufW3e6QoYfqV4VH4SK5fWk=)
2: sRFXyY8mJ5_D7tLas88Rg3K9vhs.crl (hash: fnXT6V9uswSSsEovIMrda90IVyaEpqbSNp9ncL7byoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sRFXyY8mJ5_D7tLas88Rg3K9vhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 04:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:79:f9:cc:6f:dc:89:1b:66:35:03:60:f6:ae:29:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b11157c98f26279fc3eed2dab3cf118372bdbe1b
Validity
Not Before: Sep 10 04:01:07 2026 GMT
Not After : Sep 11 04:01:07 2026 GMT
Subject: CN=beecd8bd4855818b033ec18eeefd9587b577cd86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:80:07:99:a6:20:46:b0:4d:96:20:82:0e:bd:
85:f6:86:8c:d1:5f:79:63:46:f2:7f:6f:c5:58:e3:
61:46:d2:0b:65:a4:5a:0a:75:09:19:3a:c9:65:a7:
0d:fb:1c:c1:40:3a:18:26:9d:90:5a:52:a8:b4:60:
5f:3a:58:5a:97:28:f0:48:5c:39:f9:5a:0c:4a:2b:
a8:a4:58:a7:be:1d:a4:de:e5:58:9e:8a:3c:01:92:
be:04:d0:1d:50:64:2c:3a:20:5d:8c:82:24:e1:4f:
92:46:8d:61:4b:e5:50:81:b5:36:5a:32:db:c1:13:
cd:32:41:e9:82:33:9c:bb:4f:8b:e9:69:32:4c:20:
86:34:1f:7c:68:25:27:d3:7a:fc:70:8f:39:39:b0:
64:83:f2:23:b4:79:5c:c3:48:26:32:ff:ca:b9:0b:
92:d9:20:d5:96:d4:b4:24:91:53:df:75:bd:5e:4c:
49:86:bc:23:c2:53:07:ee:91:49:2c:fb:34:61:4c:
3b:22:10:25:12:23:89:67:80:53:30:47:33:c6:a4:
f7:a3:6b:e9:13:0a:22:4c:84:01:18:69:98:eb:c4:
1d:9c:98:a7:31:5d:50:fb:3b:86:9f:dd:16:45:a7:
99:dd:a2:9d:82:50:8d:9a:29:7e:61:18:60:56:48:
20:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:EC:D8:BD:48:55:81:8B:03:3E:C1:8E:EE:FD:95:87:B5:77:CD:86
X509v3 Authority Key Identifier:
keyid:B1:11:57:C9:8F:26:27:9F:C3:EE:D2:DA:B3:CF:11:83:72:BD:BE:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRFXyY8mJ5_D7tLas88Rg3K9vhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:2d:74:d8:cc:75:65:7c:8e:5e:1a:0e:b6:98:77:f8:3b:58:
d7:13:f8:93:86:65:b8:3a:10:2e:cc:5d:8b:58:c2:11:d0:d3:
4d:a4:9f:cd:b2:05:ca:40:03:73:5e:45:8e:d4:83:c9:d0:1f:
bf:d9:02:1b:0b:50:39:36:9b:73:f5:dc:ca:50:ba:0e:d3:29:
33:53:8e:ee:de:e8:67:67:8c:8b:19:8a:c6:ca:77:3c:be:3e:
c9:51:51:3c:bb:43:a1:ff:5f:c5:e2:80:31:83:7b:64:b5:91:
97:dc:da:70:54:0d:1b:fe:0d:7a:83:b6:7e:96:ae:55:3e:31:
19:4d:75:5b:d6:21:03:20:b6:57:8a:8b:9f:fc:f3:b3:01:81:
fd:6b:31:be:e4:1e:d9:59:c2:b3:f3:0a:84:80:47:95:30:76:
02:4c:4d:52:b2:8a:67:0f:14:67:d7:b4:28:e5:e3:72:14:1a:
7d:8a:a9:af:b3:6c:e4:9b:64:44:69:6c:4f:8f:dd:84:7b:98:
86:d5:0c:9d:e8:9c:0a:ff:b5:89:29:36:aa:9d:dd:c9:fa:31:
42:a7:07:12:81:ec:d1:40:72:17:af:e5:a7:cb:33:cf:b8:a6:
76:31:7c:7a:39:a1:d9:1c:e3:77:4c:75:eb:89:6c:cf:8b:e1:
62:f3:2f:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCJefnMb9yJG2Y1A2D2rikkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxMTE1N2M5OGYyNjI3OWZjM2VlZDJkYWIzY2YxMTgzNzJi
ZGJlMWIwHhcNMjYwOTEwMDQwMTA3WhcNMjYwOTExMDQwMTA3WjAzMTEwLwYDVQQD
EyhiZWVjZDhiZDQ4NTU4MThiMDMzZWMxOGVlZWZkOTU4N2I1NzdjZDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIAHmaYgRrBNliCCDr2F9oaM0V95
Y0byf2/FWONhRtILZaRaCnUJGTrJZacN+xzBQDoYJp2QWlKotGBfOlhalyjwSFw5
+VoMSiuopFinvh2k3uVYnoo8AZK+BNAdUGQsOiBdjIIk4U+SRo1hS+VQgbU2WjLb
wRPNMkHpgjOcu0+L6WkyTCCGNB98aCUn03r8cI85ObBkg/IjtHlcw0gmMv/KuQuS
2SDVltS0JJFT33W9XkxJhrwjwlMH7pFJLPs0YUw7IhAlEiOJZ4BTMEczxqT3o2vp
EwoiTIQBGGmY68QdnJinMV1Q+zuGn90WRaeZ3aKdglCNmil+YRhgVkggswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL7s2L1IVYGLAz7Bju79lYe1d82GMB8GA1UdIwQY
MBaAFLERV8mPJiefw+7S2rPPEYNyvb4bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1JGWHlZOG1KNV9EN3RMYXM4OFJnM0s5dmhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy81MjFhNzQtZWJjOS00MjY3LWIwNDYt
ZTBhY2FjYzEwZWY1LzEvc1JGWHlZOG1KNV9EN3RMYXM4OFJnM0s5dmhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy81MjFhNzQtZWJjOS00MjY3LWIwNDYtZTBhY2FjYzEwZWY1
LzEvc1JGWHlZOG1KNV9EN3RMYXM4OFJnM0s5dmhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWi102Mx1
ZXyOXhoOtph3+DtY1xP4k4ZluDoQLsxdi1jCEdDTTaSfzbIFykADc15FjtSDydAf
v9kCGwtQOTabc/XcylC6DtMpM1OO7t7oZ2eMixmKxsp3PL4+yVFRPLtDof9fxeKA
MYN7ZLWRl9zacFQNG/4NeoO2fpauVT4xGU11W9YhAyC2V4qLn/zzswGB/WsxvuQe
2VnCs/MKhIBHlTB2AkxNUrKKZw8UZ9e0KOXjchQafYqpr7Ns5JtkRGlsT4/dhHuY
htUMneicCv+1iSk2qp3dyfoxQqcHEoHs0UByF6/lp8szz7imdjF8ejmh2Rzjd0x1
64lsz4vhYvMvRA==
-----END CERTIFICATE-----
Generated at Thu Sep 10 13:35:00 2026 by rpki-client