Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
File: sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft (raw, json)
Hash identifier: ZlfrTbecsOX/gGN8bR4AmxOR6n6M3gsBbzPbC5anqUo=
Subject key identifier: C6:34:15:3D:85:A3:4F:85:AC:D2:5F:BF:43:37:92:DC:00:64:C2:FF
Authority key identifier: B1:11:57:C9:8F:26:27:9F:C3:EE:D2:DA:B3:CF:11:83:72:BD:BE:1B
Certificate issuer: /CN=b11157c98f26279fc3eed2dab3cf118372bdbe1b
Certificate serial: 019D37C0FBFC1D0B2F695D6FD2319B7F333D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRFXyY8mJ5_D7tLas88Rg3K9vhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
Manifest number: 0589
Signing time: Sun 29 Mar 2026 04:01:27 +0000
Manifest this update: Sun 29 Mar 2026 04:01:27 +0000
Manifest next update: Mon 30 Mar 2026 04:01:27 +0000
Files and hashes: 1: KfYGsusnHllzc3HN92AAdqUVjQo.roa (hash: gW3c/fjZpWHlQkkjPS1/2ufW3e6QoYfqV4VH4SK5fWk=)
2: sRFXyY8mJ5_D7tLas88Rg3K9vhs.crl (hash: xoCV15SVAMNF3xKHhI/hbx+AqJD6yI2nGUn0M2M7BgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sRFXyY8mJ5_D7tLas88Rg3K9vhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:fb:fc:1d:0b:2f:69:5d:6f:d2:31:9b:7f:33:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b11157c98f26279fc3eed2dab3cf118372bdbe1b
Validity
Not Before: Mar 29 04:01:27 2026 GMT
Not After : Mar 30 04:01:27 2026 GMT
Subject: CN=c634153d85a34f85acd25fbf433792dc0064c2ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:92:29:f4:26:8e:76:90:db:f5:2c:b9:81:75:
fc:b6:c0:6e:02:50:4d:35:51:f1:89:97:5d:8d:eb:
cf:1c:8c:60:83:16:25:63:85:ff:62:2e:0d:83:a9:
be:f5:03:e6:d4:1d:ea:4f:eb:5f:2c:1c:83:43:78:
62:f0:04:be:06:d6:80:44:d9:b8:0e:0d:40:c5:54:
32:3a:3b:16:7c:4b:b1:ff:de:c4:03:84:27:68:ec:
dc:76:43:2b:8a:3f:6d:1c:92:1b:74:c8:60:f3:f8:
3b:06:52:89:9f:18:7e:93:2a:88:eb:b3:ba:22:db:
bf:22:96:4d:94:a5:b1:71:59:f0:68:91:79:52:32:
8b:ef:fc:b5:d9:25:18:61:e4:41:99:3f:71:e6:42:
4c:45:09:e4:0f:01:1e:78:26:02:1f:b2:5f:97:04:
6b:8a:8f:6d:01:08:96:1a:c7:36:40:57:62:f7:55:
b3:d8:2c:b1:57:ec:cf:43:1f:fa:c1:1a:92:46:82:
ca:62:63:3c:db:46:1c:a6:4e:8c:7b:6f:52:78:90:
f0:4b:8b:dd:67:67:19:5f:e1:1b:42:69:0e:68:cc:
f3:c6:a9:0f:ac:ba:84:38:81:43:80:d2:43:d6:9f:
70:6b:2f:c6:35:a8:2b:4a:53:b6:ad:51:92:bf:aa:
66:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:34:15:3D:85:A3:4F:85:AC:D2:5F:BF:43:37:92:DC:00:64:C2:FF
X509v3 Authority Key Identifier:
keyid:B1:11:57:C9:8F:26:27:9F:C3:EE:D2:DA:B3:CF:11:83:72:BD:BE:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRFXyY8mJ5_D7tLas88Rg3K9vhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:b9:69:52:2c:76:bc:43:72:ee:59:c8:64:94:ba:b7:0b:c0:
82:4e:88:dd:83:ad:7c:8b:7d:a8:1d:35:fe:e2:aa:d0:d9:ef:
45:0d:b6:73:19:87:15:74:5d:e7:e1:34:11:d9:c0:c1:4a:fd:
1d:75:46:90:0d:43:4f:be:82:42:fa:af:26:49:dd:f5:61:19:
43:31:32:b6:2b:8e:bc:53:62:c8:35:d5:e6:e4:0b:dc:11:13:
ca:ed:f7:dc:af:5c:87:de:82:10:72:ec:a6:39:37:c1:e2:44:
54:49:9a:03:70:40:ca:fa:17:08:e8:64:6f:43:0e:ed:65:c4:
d3:0c:2c:a7:59:73:f8:1c:f2:9b:cd:8b:74:1b:78:b0:8c:5e:
9d:f8:5c:a3:06:2a:94:76:d7:5c:64:15:18:3f:e4:52:31:44:
c2:d3:2a:70:4a:b7:bb:58:10:00:b7:c7:4d:e1:17:ca:00:b4:
04:da:ff:57:dc:d6:85:2e:17:a3:6e:df:27:7a:1b:80:5d:b1:
ec:13:1f:f5:40:40:81:06:b5:57:0a:23:b5:8c:3d:4e:fb:92:
65:c6:e7:0e:32:6b:1c:40:4c:59:09:f6:52:a1:81:ba:dc:95:
55:5c:39:ec:1d:89:3f:c5:2e:94:45:f0:c8:65:bb:d7:e4:4d:
ad:a3:be:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:41 2026 by rpki-client