Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft
File: sRofl3C6sHdRW3cSy41JVQsxOKE.mft (raw, json)
Hash identifier: j2aO8zQvI3SQ3E1Z3YjgXtBci7EvcNcoax+OyxOtxkw=
Subject key identifier: 59:2E:2D:6F:25:DE:B0:EE:01:47:AA:0D:C9:76:D3:F0:EF:6D:D8:DD
Authority key identifier: B1:1A:1F:97:70:BA:B0:77:51:5B:77:12:CB:8D:49:55:0B:31:38:A1
Certificate issuer: /CN=b11a1f9770bab077515b7712cb8d49550b3138a1
Certificate serial: 019F122E83BC48535E111B7A6AEA4912B82C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRofl3C6sHdRW3cSy41JVQsxOKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft
Manifest number: 0ED9
Signing time: Mon 29 Jun 2026 07:01:05 +0000
Manifest this update: Mon 29 Jun 2026 07:01:05 +0000
Manifest next update: Tue 30 Jun 2026 07:01:05 +0000
Files and hashes: 1: IHeSpn9zzFGkB0I3Aq-TbT_Yi_M.roa (hash: I4iH62Xbpv9TcN2x5dZKrT7UkMHzqfLA1ys5Hw46kzg=)
2: WCA0B9M68iSK-689JNNQ3x_gaaQ.roa (hash: mIL2rvF2fj48OLmmFlBKTID0LzN8VFC9HV5FYjZjf+Q=)
3: sRofl3C6sHdRW3cSy41JVQsxOKE.crl (hash: SuMxAp2UhSZ96q50r/NZuAfadsgVYEPg6dRAOvPRjYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sRofl3C6sHdRW3cSy41JVQsxOKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 07:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:2e:83:bc:48:53:5e:11:1b:7a:6a:ea:49:12:b8:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b11a1f9770bab077515b7712cb8d49550b3138a1
Validity
Not Before: Jun 29 07:01:05 2026 GMT
Not After : Jun 30 07:01:05 2026 GMT
Subject: CN=592e2d6f25deb0ee0147aa0dc976d3f0ef6dd8dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a3:cf:9f:f1:93:8c:42:24:bf:ff:bf:e4:13:
96:04:f2:2b:10:f4:2b:0c:98:e9:e3:75:00:f5:19:
b8:28:b0:6b:67:90:14:55:08:93:1e:6a:46:62:76:
97:1e:1b:fe:09:32:93:80:a6:e6:94:ec:db:cf:6f:
64:f0:2f:da:bf:db:e3:28:c7:90:cf:6b:2a:2e:30:
8a:21:79:62:27:70:fe:c1:0f:05:67:75:88:33:ea:
60:d1:c1:5c:ed:57:21:9b:58:4f:a9:78:83:e5:f1:
d9:fc:c3:21:e3:3b:0d:81:cf:58:ff:54:5d:bd:ee:
ac:16:ed:54:6a:c5:ad:9e:3e:f5:06:b2:75:8a:c8:
91:9a:8b:e7:a5:5f:1e:a5:a0:43:d5:6a:75:6c:86:
71:01:20:49:a0:1a:c5:66:58:22:88:63:43:94:20:
ab:84:e9:62:d3:45:16:28:80:01:95:3c:72:7f:6d:
7e:9b:c3:00:6d:94:89:b4:50:89:b4:6d:a3:c7:e6:
d5:4f:7f:b7:99:08:5a:bc:e7:1f:25:2b:a9:f2:69:
be:4c:42:b9:ae:d4:7d:33:0b:e7:8d:4c:4d:d4:54:
d9:f5:a1:9f:ab:53:b0:7e:67:ff:f2:1d:18:52:8f:
78:b2:e4:7f:1c:66:75:1b:2a:c7:61:11:95:71:c5:
33:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:2E:2D:6F:25:DE:B0:EE:01:47:AA:0D:C9:76:D3:F0:EF:6D:D8:DD
X509v3 Authority Key Identifier:
keyid:B1:1A:1F:97:70:BA:B0:77:51:5B:77:12:CB:8D:49:55:0B:31:38:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRofl3C6sHdRW3cSy41JVQsxOKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:6a:a5:c6:ca:78:c6:d2:fb:b2:ac:f6:b9:87:ae:3f:7b:0b:
42:19:32:1f:52:3c:00:8e:5d:20:5b:5f:11:75:29:06:ee:d6:
5e:74:61:e7:f5:76:29:71:00:53:ad:ba:e3:81:2e:dd:39:67:
5f:f6:d0:7d:7e:10:9f:b6:98:10:1f:3a:b3:f7:c3:05:d9:2e:
90:19:30:0d:e2:9e:bb:52:c4:a5:a2:52:15:31:60:e0:e4:d7:
74:81:34:fe:c8:99:2a:1f:1f:61:d6:73:3c:ee:69:d7:35:2d:
54:97:22:8b:e1:a2:ea:7d:10:d9:4b:c4:c1:ec:1e:d2:eb:fa:
84:e4:39:ea:0d:52:d5:b3:7c:af:7e:15:87:88:d9:e1:7f:35:
f0:eb:3b:c5:85:1a:d7:32:2b:b8:e3:c3:57:49:36:e9:1e:ca:
a0:95:6b:4c:75:7e:11:f8:21:2a:bf:71:30:66:47:84:71:18:
79:99:19:c2:de:1e:1a:ae:be:28:54:10:12:5e:57:5c:1b:37:
01:9b:79:87:ad:14:69:a4:43:ce:20:40:66:31:a2:eb:99:49:
f3:05:f8:fb:c4:c5:b3:c1:e8:a2:1e:a1:e8:c7:57:32:18:f5:
ba:18:4e:d7:84:48:11:97:76:b7:6b:36:a5:de:ba:4b:c2:73:
3d:6f:04:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 14:52:00 2026 by rpki-client