Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
File: sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft (raw, json)
Hash identifier: KLbFW8jfDuiH4F7nKXhN/oqjF8+XypZAH1n1+FTeihw=
Subject key identifier: 79:B3:FB:F9:EB:29:57:DE:BE:F3:BB:FF:F1:D5:AC:6E:4C:ED:0D:07
Authority key identifier: B1:11:57:C9:8F:26:27:9F:C3:EE:D2:DA:B3:CF:11:83:72:BD:BE:1B
Certificate issuer: /CN=b11157c98f26279fc3eed2dab3cf118372bdbe1b
Certificate serial: 019EB80E807E531AF6C1799240EF42EC948C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRFXyY8mJ5_D7tLas88Rg3K9vhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
Manifest number: 0650
Signing time: Thu 11 Jun 2026 19:00:18 +0000
Manifest this update: Thu 11 Jun 2026 19:00:18 +0000
Manifest next update: Fri 12 Jun 2026 19:00:18 +0000
Files and hashes: 1: KfYGsusnHllzc3HN92AAdqUVjQo.roa (hash: gW3c/fjZpWHlQkkjPS1/2ufW3e6QoYfqV4VH4SK5fWk=)
2: sRFXyY8mJ5_D7tLas88Rg3K9vhs.crl (hash: HJmMtMEshAk4PcdEIWrEifqPzP2b00LMcV3pec7+ulc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sRFXyY8mJ5_D7tLas88Rg3K9vhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 19:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:0e:80:7e:53:1a:f6:c1:79:92:40:ef:42:ec:94:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b11157c98f26279fc3eed2dab3cf118372bdbe1b
Validity
Not Before: Jun 11 19:00:18 2026 GMT
Not After : Jun 12 19:00:18 2026 GMT
Subject: CN=79b3fbf9eb2957debef3bbfff1d5ac6e4ced0d07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:47:76:d2:60:8a:6e:51:8d:c8:c0:03:66:a1:
54:79:3a:19:4a:83:a1:16:26:37:83:91:ac:35:0d:
fe:da:5f:45:e8:2b:95:89:ed:e5:47:b2:8a:ac:82:
30:24:2b:dc:1f:ac:2d:ed:23:2b:be:4f:36:22:3c:
c3:68:a2:9a:f0:bc:48:0f:c9:d4:96:8d:80:b0:c9:
04:12:ce:14:bc:bd:f6:08:b8:3b:e2:18:6b:b3:de:
a0:29:2a:eb:be:fc:94:b7:a0:4f:9d:c7:8e:a4:7f:
15:c2:d8:05:8a:1e:d2:87:70:48:15:b7:40:72:56:
88:3e:dd:9c:98:0d:3d:74:39:10:f0:32:cd:07:a8:
15:f2:86:9b:e1:45:0b:f2:a1:4a:4f:3c:f7:01:bf:
f2:7c:f9:8e:97:32:36:0a:31:19:b6:dd:ff:f8:7d:
42:21:97:7a:a9:98:08:c6:30:c2:4c:3c:10:a4:70:
71:07:f9:c1:f1:41:ef:a2:fe:ae:da:c9:28:b5:15:
88:5e:b0:99:2a:c3:3e:41:74:05:c0:85:85:d0:6f:
b4:52:c4:46:93:55:ed:c0:09:26:86:ae:f6:15:ca:
75:7f:88:eb:55:59:a6:4e:56:1e:27:70:9e:9a:84:
c3:a1:7a:9b:c1:87:67:42:60:78:70:f1:c4:23:9d:
31:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B3:FB:F9:EB:29:57:DE:BE:F3:BB:FF:F1:D5:AC:6E:4C:ED:0D:07
X509v3 Authority Key Identifier:
keyid:B1:11:57:C9:8F:26:27:9F:C3:EE:D2:DA:B3:CF:11:83:72:BD:BE:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRFXyY8mJ5_D7tLas88Rg3K9vhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:b5:ec:05:ae:27:a6:89:1f:4d:2d:26:4b:32:c7:a2:ac:54:
1e:18:a3:36:da:98:5f:5b:b2:8e:fc:f7:4b:c4:3f:6c:c8:30:
24:f7:bb:e4:a4:0f:40:60:67:57:b1:49:91:6e:34:c9:66:53:
19:e6:1a:e6:a9:2a:b1:85:67:df:63:7b:ac:e4:92:d2:7f:1c:
cd:cc:1b:12:7f:7d:62:6b:e6:26:c8:94:06:70:ca:44:7b:3b:
ba:61:94:79:65:e1:1d:0e:c7:a0:81:5b:16:24:7a:4a:bc:ce:
5d:32:b6:66:fe:02:e9:80:b6:6c:12:5a:76:b6:91:7f:66:a6:
84:20:53:db:dc:d8:8c:23:b2:23:c6:b1:9b:b8:5f:08:79:0b:
03:00:94:3c:73:90:de:6c:b4:3d:be:e5:b9:4f:57:57:f8:7f:
a8:5a:d5:d8:81:85:83:46:0d:61:62:ab:cb:84:e0:0d:e5:c0:
2e:b0:f0:c8:3e:b1:cb:ec:1a:d2:1c:9e:44:7e:67:b1:9b:98:
62:2c:fe:de:98:17:30:3b:d8:f9:bd:f0:f4:e8:6b:2e:79:1c:
74:e8:53:00:57:5c:c7:0c:7a:ee:ea:4f:f8:b5:15:26:db:05:
29:77:21:db:9b:b2:bd:e1:8e:a6:4e:43:d1:24:c2:5a:48:e1:
38:29:0a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:55:49 2026 by rpki-client