Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft
File: sFRCxP_pwddh58VpNg6tBCQ4-QM.mft (raw, json)
Hash identifier: E0e35eQn7KwUYCY/0X7+VP270X+H6h3Bgvantg66/q4=
Subject key identifier: 2C:3E:6F:E0:4D:4C:C9:63:94:A1:B6:DC:E4:36:E7:C8:F2:1E:CA:EF
Authority key identifier: B0:54:42:C4:FF:E9:C1:D7:61:E7:C5:69:36:0E:AD:04:24:38:F9:03
Certificate issuer: /CN=b05442c4ffe9c1d761e7c569360ead042438f903
Certificate serial: 019D3A8AADF452FE664D55EB41769EE8EF24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft
Manifest number: 164D
Signing time: Sun 29 Mar 2026 17:01:00 +0000
Manifest this update: Sun 29 Mar 2026 17:01:00 +0000
Manifest next update: Mon 30 Mar 2026 17:01:00 +0000
Files and hashes: 1: RSgAiFfFUDOLRRmOCmbncd53Jto.roa (hash: R29MYZiBKSn2Fy47uX6Yiye7bvq2OW5L5W2duo3Eaes=)
2: SwUYDEAlxO6M5eWOj4TfdQ0JQ2c.roa (hash: kp4VVBnJ9x9RoYER3ShnXFsDjH+5JSgU9IM02fkmGYw=)
3: p16cU-7zatx3ndSU5oxcouZGGsA.asa (hash: 2m9k8zrzrHn7HIAqTxycPMDWckYHPav0fwCmzqUUYGo=)
4: sFRCxP_pwddh58VpNg6tBCQ4-QM.crl (hash: 2CQ87/6hkjPgS4uLghmpPtMSpK8WqnnLHyPF7LuSiDo=)
5: zQ__yCcwrvF4SpWJekyRseIBHM0.asa (hash: 5Ccdj50AwmV19PztW4Q1959SDmAm1f7TUTOUsxH1IQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft
rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:8a:ad:f4:52:fe:66:4d:55:eb:41:76:9e:e8:ef:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05442c4ffe9c1d761e7c569360ead042438f903
Validity
Not Before: Mar 29 17:01:00 2026 GMT
Not After : Mar 30 17:01:00 2026 GMT
Subject: CN=2c3e6fe04d4cc96394a1b6dce436e7c8f21ecaef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:cf:5e:5b:cb:00:bd:b8:d5:f7:ca:5f:40:f7:
a3:60:1b:2f:d0:b4:f5:1b:5b:b9:76:c7:c6:75:5c:
1f:b6:e4:15:b7:32:4d:88:8c:ca:85:aa:02:89:f2:
c6:e3:58:25:bc:cb:5a:59:6d:a9:1d:e2:e0:2a:e9:
54:ef:aa:18:be:ac:be:c0:32:41:92:db:c3:0f:c8:
54:86:ea:98:8a:02:7f:c2:9b:da:ef:bc:63:46:11:
d9:25:a2:d9:3e:63:a3:1e:77:51:e9:1a:e6:06:4b:
4b:46:7f:f5:76:6e:92:af:40:d3:9b:d3:ee:45:72:
a9:3e:e4:17:31:4d:f7:3a:63:5d:07:a3:86:56:c0:
81:15:84:ee:58:64:aa:0f:02:cb:e2:c9:28:f3:92:
d8:2d:76:18:a0:3f:63:28:9c:ee:b6:04:e7:fa:4d:
3a:82:55:9b:f7:93:59:fd:28:dc:f6:c4:45:db:27:
cd:f1:88:b3:e3:47:2b:ed:ed:0c:52:e3:8a:c9:f0:
8b:b9:73:1f:9b:b9:88:10:5a:10:89:70:26:f2:ed:
5e:ff:89:d5:f2:ec:d3:63:5b:20:bf:28:9c:12:b8:
73:36:ca:45:d5:48:f3:39:20:77:72:0b:92:81:37:
05:e3:fc:71:92:0f:16:9b:8e:70:58:4d:ed:1a:7c:
0b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:3E:6F:E0:4D:4C:C9:63:94:A1:B6:DC:E4:36:E7:C8:F2:1E:CA:EF
X509v3 Authority Key Identifier:
keyid:B0:54:42:C4:FF:E9:C1:D7:61:E7:C5:69:36:0E:AD:04:24:38:F9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:38:6b:1e:eb:5c:8f:0e:5f:a1:f6:4d:cd:46:51:6f:79:66:
e3:47:10:22:48:be:6b:59:77:0c:b4:16:a9:91:3e:5e:d2:db:
05:c2:0f:18:0d:75:29:19:28:01:71:7e:ca:52:40:b3:4f:fd:
a7:75:60:c9:c1:ec:ae:cf:29:aa:13:47:67:d8:02:30:cc:a7:
00:06:6e:13:9f:96:49:12:c5:96:9d:35:50:dd:1c:e4:54:d1:
31:88:52:24:88:6d:de:73:cd:d8:71:60:1e:2b:b1:5f:f6:09:
74:19:85:db:d7:16:52:58:be:2c:f2:f5:4b:88:37:53:60:f0:
6f:1b:aa:dd:39:ec:d1:f6:ac:6a:3e:e8:8d:26:7b:ee:01:b8:
79:0a:b9:89:3d:a7:79:76:d9:08:53:57:f3:59:fa:0f:21:d4:
77:cb:da:a9:9d:74:8e:9b:fd:be:3c:67:a5:61:11:85:ae:ec:
36:e1:f6:0d:11:2d:6c:6c:1a:a9:15:df:a4:f4:36:8f:b3:07:
91:f5:79:3f:d4:95:c2:5d:d1:bc:ec:e6:3d:30:c7:6b:db:30:
de:c6:67:cf:a9:00:c6:1a:2a:f8:49:a3:02:01:c1:47:c1:32:
ab:c1:a3:9a:7e:26:66:99:7c:90:a5:3a:3d:68:ec:65:62:bd:
64:b6:ce:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:50:22 2026 by rpki-client