Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft
File: sRofl3C6sHdRW3cSy41JVQsxOKE.mft (raw, json)
Hash identifier: KpPsVteiMd0BeiC2xfk+sAO10ltn+DCfmP2Q2qHFe1I=
Subject key identifier: 87:23:39:15:AE:3C:7A:05:B6:E1:B6:51:F9:FB:BA:80:DD:6F:81:17
Authority key identifier: B1:1A:1F:97:70:BA:B0:77:51:5B:77:12:CB:8D:49:55:0B:31:38:A1
Certificate issuer: /CN=b11a1f9770bab077515b7712cb8d49550b3138a1
Certificate serial: 019E2A70C307034F41A0028546A89CCE043A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRofl3C6sHdRW3cSy41JVQsxOKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft
Manifest number: 0E61
Signing time: Fri 15 May 2026 07:01:33 +0000
Manifest this update: Fri 15 May 2026 07:01:33 +0000
Manifest next update: Sat 16 May 2026 07:01:33 +0000
Files and hashes: 1: IHeSpn9zzFGkB0I3Aq-TbT_Yi_M.roa (hash: I4iH62Xbpv9TcN2x5dZKrT7UkMHzqfLA1ys5Hw46kzg=)
2: WCA0B9M68iSK-689JNNQ3x_gaaQ.roa (hash: mIL2rvF2fj48OLmmFlBKTID0LzN8VFC9HV5FYjZjf+Q=)
3: sRofl3C6sHdRW3cSy41JVQsxOKE.crl (hash: g589y5z8F4khOXJyYNTw7iapaLf6DzK0mUJgC8WlAfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sRofl3C6sHdRW3cSy41JVQsxOKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:70:c3:07:03:4f:41:a0:02:85:46:a8:9c:ce:04:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b11a1f9770bab077515b7712cb8d49550b3138a1
Validity
Not Before: May 15 07:01:33 2026 GMT
Not After : May 16 07:01:33 2026 GMT
Subject: CN=87233915ae3c7a05b6e1b651f9fbba80dd6f8117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3a:2c:a8:a6:39:60:fe:43:57:7a:a3:07:d9:
92:73:a5:a5:fe:74:19:36:4b:6b:27:b9:5f:62:3a:
38:fa:16:76:7e:d8:be:bd:1e:b6:f7:42:18:a4:d8:
9d:f2:ee:50:58:55:ec:e0:27:7c:99:8f:d6:bf:ab:
83:88:74:8c:cd:ca:46:d8:05:6a:19:3c:ae:64:c6:
01:1c:6b:0c:02:cc:3a:45:00:6a:71:e2:f9:44:b0:
72:1e:d1:27:ac:8f:c4:ca:f2:b6:c8:09:16:72:96:
f4:b5:b5:cf:7a:5c:b2:9c:9b:8b:95:39:84:f4:5b:
c6:5b:10:8a:1a:38:b6:59:90:7a:0c:f5:6e:24:e4:
b0:04:99:1a:4b:d2:b9:95:eb:41:76:37:5c:dc:95:
d2:a1:3b:61:81:83:23:24:a3:02:3e:4a:19:24:91:
f8:f0:a6:7a:21:77:fd:0d:c5:74:c7:f4:7a:89:8e:
ba:2d:2b:d0:63:2d:41:d7:3d:67:10:77:1c:08:98:
0f:f6:f8:7e:b6:b1:66:e5:78:08:53:18:6f:b8:3d:
f6:92:68:81:4d:6f:ea:06:48:89:15:53:7e:b6:52:
6c:b6:86:de:66:51:70:a5:2f:ac:5d:f0:e7:f1:81:
67:5a:cf:53:78:55:8f:b8:e2:c0:2f:4c:2a:df:53:
6f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:23:39:15:AE:3C:7A:05:B6:E1:B6:51:F9:FB:BA:80:DD:6F:81:17
X509v3 Authority Key Identifier:
keyid:B1:1A:1F:97:70:BA:B0:77:51:5B:77:12:CB:8D:49:55:0B:31:38:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRofl3C6sHdRW3cSy41JVQsxOKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:ec:9c:06:d6:af:6f:47:65:ef:0d:c3:2b:5b:1e:bb:c7:19:
42:16:0b:f5:50:76:72:6d:d3:80:2a:e0:ce:46:48:92:0f:7c:
0a:de:e8:01:6f:34:eb:7c:0a:c3:fa:e3:6b:56:cc:d2:f6:82:
a1:97:14:1d:5e:48:1f:2c:b6:32:14:46:07:0a:28:86:04:4c:
67:03:85:fe:08:5f:19:42:58:00:e9:97:a0:f3:50:64:38:6b:
65:b6:d1:10:ea:08:ed:6f:d4:90:93:41:0c:e6:c1:fc:0b:de:
f7:ad:c0:d9:ba:a2:95:a4:7a:bf:02:e5:f3:af:21:10:9c:9a:
75:45:34:9d:2f:20:95:99:f4:1b:a6:48:fa:24:92:40:84:de:
85:e1:8d:e7:3e:a6:65:ca:ed:9e:1f:6b:90:95:8e:46:71:e2:
b1:43:05:b0:0a:70:f3:56:0f:c2:e0:78:1b:be:22:d9:91:88:
f1:0b:cc:0b:1c:85:9b:23:61:97:3e:e3:1a:f2:d5:97:d8:f0:
4e:cf:f6:67:7f:3f:8f:6d:42:19:57:2d:0e:88:c2:73:44:b5:
1f:6c:a9:62:38:68:e2:0e:30:5b:a8:cf:a9:26:0b:30:fd:73:
dc:c1:c7:72:7c:9a:f7:55:d4:d0:d9:ec:91:96:47:91:90:b3:
04:c1:0a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 09:51:24 2026 by rpki-client