Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
File: sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft (raw, json)
Hash identifier: MvTBBhNu/dEuj2Bhnyg0PPyK1tcCdcTEJ8h1EN6TDA4=
Subject key identifier: 45:08:37:88:F3:F2:6C:E0:D4:29:D7:FB:7A:13:F9:AE:1D:CE:9C:E2
Authority key identifier: B1:11:57:C9:8F:26:27:9F:C3:EE:D2:DA:B3:CF:11:83:72:BD:BE:1B
Certificate issuer: /CN=b11157c98f26279fc3eed2dab3cf118372bdbe1b
Certificate serial: 01A178F1B3D5E628ED136F38F24D90C6DA38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRFXyY8mJ5_D7tLas88Rg3K9vhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
Manifest number: 07BD
Signing time: Mon 26 Oct 2026 16:01:08 +0000
Manifest this update: Mon 26 Oct 2026 16:01:08 +0000
Manifest next update: Tue 27 Oct 2026 16:01:08 +0000
Files and hashes: 1: KfYGsusnHllzc3HN92AAdqUVjQo.roa (hash: gW3c/fjZpWHlQkkjPS1/2ufW3e6QoYfqV4VH4SK5fWk=)
2: sRFXyY8mJ5_D7tLas88Rg3K9vhs.crl (hash: 0UvhmKPkruGJ68WTye3M12BUTZoKD74rRTSNuXNpxN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sRFXyY8mJ5_D7tLas88Rg3K9vhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 16:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:f1:b3:d5:e6:28:ed:13:6f:38:f2:4d:90:c6:da:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b11157c98f26279fc3eed2dab3cf118372bdbe1b
Validity
Not Before: Oct 26 16:01:08 2026 GMT
Not After : Oct 27 16:01:08 2026 GMT
Subject: CN=45083788f3f26ce0d429d7fb7a13f9ae1dce9ce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:de:3d:65:fd:d7:65:ae:a6:4e:95:69:ed:8c:
06:4f:69:83:2e:ab:ef:9b:fa:c6:7f:8a:64:0f:04:
ef:2e:54:61:d1:2f:b6:55:fd:a4:da:4a:8e:8c:c7:
f6:d9:e6:e8:13:d3:b4:11:f2:8d:e7:e9:77:7c:df:
58:2c:bb:cf:0d:ff:b2:71:f8:13:f4:27:c9:f0:38:
81:10:8c:84:ce:8e:0e:57:5e:6d:70:98:eb:a0:be:
01:bd:78:f6:a8:7b:fb:37:3c:e5:f8:c3:f3:36:ec:
bf:a4:5c:8c:41:41:a3:be:c1:d5:a1:64:b9:6d:41:
74:0d:90:44:4f:43:c6:8f:6b:43:54:33:11:9a:c2:
68:d2:79:a3:aa:58:93:9b:87:68:53:df:25:d7:d6:
b8:92:c3:9a:39:4e:93:3d:fb:62:c5:fe:d4:eb:48:
76:05:23:1d:41:03:9d:a5:be:9f:9a:83:34:11:ca:
d7:f0:18:c5:3a:91:98:37:68:df:93:84:82:5b:2a:
83:c4:d8:91:23:e5:9c:23:a1:ff:47:1d:7e:19:7d:
56:5e:c4:26:fc:67:65:9d:51:33:50:6a:f0:df:18:
d2:6c:bb:31:c6:15:9f:38:d2:91:86:b5:93:27:89:
8e:fe:f6:ea:60:18:f7:ac:1d:8f:26:e0:86:90:05:
4f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:08:37:88:F3:F2:6C:E0:D4:29:D7:FB:7A:13:F9:AE:1D:CE:9C:E2
X509v3 Authority Key Identifier:
keyid:B1:11:57:C9:8F:26:27:9F:C3:EE:D2:DA:B3:CF:11:83:72:BD:BE:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRFXyY8mJ5_D7tLas88Rg3K9vhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:1b:c5:6f:8c:aa:35:d6:65:a6:e8:b6:db:32:55:6c:df:de:
e9:24:cd:f1:25:d7:54:79:16:3d:f0:6f:85:83:52:79:21:59:
fb:08:3e:30:02:ed:57:25:1c:4d:4d:70:d0:dc:c8:19:f6:39:
23:1d:94:9e:ca:7e:d9:43:4f:f5:2c:f8:e2:88:69:ed:e4:8b:
0f:1e:45:8a:f6:d6:02:c6:3d:27:c1:82:80:61:fd:cd:8e:e3:
8c:c9:20:21:d4:d5:06:7a:95:0f:18:f6:7b:b1:aa:8b:43:c2:
b7:2e:43:48:9d:1f:df:ab:f3:79:2c:e0:30:37:16:4a:7f:09:
83:b7:a5:0e:d8:40:b1:9c:cf:3d:69:4e:55:7f:ab:71:bc:2b:
4f:88:1f:be:16:0f:7a:9f:52:5a:3b:e9:d0:96:d0:15:06:de:
00:db:54:65:f7:91:66:a9:b3:2a:77:9a:30:ba:9f:5f:e6:1b:
3c:92:84:56:26:9f:90:e1:27:66:88:f9:c9:64:9d:9a:c2:ea:
78:b6:9a:c8:d2:ab:05:f6:20:f9:d0:d0:a1:e9:77:55:06:00:
2b:e9:7b:9a:1e:fa:18:21:47:a3:6d:a2:b8:aa:dc:83:5a:a3:
db:36:a7:c8:9c:6a:3f:a5:64:f2:d1:fa:eb:74:03:b7:d1:a0:
f0:4d:47:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 01:49:47 2026 by rpki-client