Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft
File: sRofl3C6sHdRW3cSy41JVQsxOKE.mft (raw, json)
Hash identifier: cA5Qy5XFcxBojLy3RPszeHnA1NOYl/rEfsg5Ovv+0ig=
Subject key identifier: 09:30:31:78:4D:93:8E:3E:BC:9A:D2:B8:7D:19:85:FD:98:0A:AC:E0
Authority key identifier: B1:1A:1F:97:70:BA:B0:77:51:5B:77:12:CB:8D:49:55:0B:31:38:A1
Certificate issuer: /CN=b11a1f9770bab077515b7712cb8d49550b3138a1
Certificate serial: 01A138923C3868595778BF35C9D93B263442
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRofl3C6sHdRW3cSy41JVQsxOKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft
Manifest number: 0FF6
Signing time: Wed 14 Oct 2026 04:01:10 +0000
Manifest this update: Wed 14 Oct 2026 04:01:10 +0000
Manifest next update: Thu 15 Oct 2026 04:01:10 +0000
Files and hashes: 1: IHeSpn9zzFGkB0I3Aq-TbT_Yi_M.roa (hash: I4iH62Xbpv9TcN2x5dZKrT7UkMHzqfLA1ys5Hw46kzg=)
2: WCA0B9M68iSK-689JNNQ3x_gaaQ.roa (hash: mIL2rvF2fj48OLmmFlBKTID0LzN8VFC9HV5FYjZjf+Q=)
3: sRofl3C6sHdRW3cSy41JVQsxOKE.crl (hash: q8mw6AVb5Q6zJg6sj8rjOjOaGrxaKUm61VLl7mUVm50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sRofl3C6sHdRW3cSy41JVQsxOKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 20:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:38:92:3c:38:68:59:57:78:bf:35:c9:d9:3b:26:34:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b11a1f9770bab077515b7712cb8d49550b3138a1
Validity
Not Before: Oct 14 04:01:10 2026 GMT
Not After : Oct 15 04:01:10 2026 GMT
Subject: CN=093031784d938e3ebc9ad2b87d1985fd980aace0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:40:81:52:c0:25:d1:6c:4f:b6:01:30:6b:3d:
a4:d7:08:5d:5a:cd:48:73:5e:e8:84:7b:b3:00:69:
fb:84:9d:c2:fe:e9:44:0b:4c:3a:37:84:d6:f7:38:
09:4e:3e:45:72:3f:09:b8:9a:92:f1:d9:3e:dc:21:
f6:59:f2:df:11:90:a1:ec:49:83:a1:4f:d1:91:ea:
b4:30:f7:5e:26:b1:59:a6:c3:65:e8:60:a0:c1:e4:
22:1f:8a:1c:3b:95:29:b0:44:df:04:b8:73:1e:f3:
c4:94:e0:01:6f:2f:69:9a:37:c9:18:98:4f:62:75:
d8:de:0e:7b:4d:c5:03:1b:b3:63:4b:57:8e:41:44:
00:62:e9:c4:ed:09:cb:3f:12:42:97:49:1e:55:71:
b7:ee:1a:31:c6:d8:13:c9:d8:ca:8f:14:ac:19:75:
95:56:bf:e6:84:c8:ff:1d:15:29:bd:6a:fc:ad:69:
3f:3c:d4:89:a6:41:6a:dc:81:b1:f5:5e:b9:9d:12:
92:9c:dc:d8:d6:75:4c:d5:d7:cc:41:8d:ee:92:b1:
06:f1:2a:73:5b:0b:41:3b:0b:05:8a:11:14:07:5b:
26:14:89:52:03:e3:99:7c:e8:01:19:6c:f2:f8:e5:
7a:75:99:b8:67:5f:9d:21:0f:8d:60:e7:dc:f2:42:
e1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:30:31:78:4D:93:8E:3E:BC:9A:D2:B8:7D:19:85:FD:98:0A:AC:E0
X509v3 Authority Key Identifier:
keyid:B1:1A:1F:97:70:BA:B0:77:51:5B:77:12:CB:8D:49:55:0B:31:38:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRofl3C6sHdRW3cSy41JVQsxOKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:be:2c:69:84:36:1e:fd:17:dd:c9:9f:73:04:45:5a:36:f9:
e3:b3:0f:a3:f5:f4:28:dc:94:20:f1:37:91:f9:3e:43:99:7a:
86:a1:2a:35:59:7b:1c:06:b1:89:8f:f1:a0:29:50:1f:a8:f4:
88:e5:fc:5f:72:29:0a:3b:01:47:24:c0:f2:01:b8:eb:4b:3c:
81:2e:5e:5c:7b:8d:c5:ce:6b:cf:16:df:ab:50:0e:1a:a0:bf:
16:fd:60:01:ed:46:21:a7:75:77:3f:cb:30:3a:98:70:d5:c0:
7d:79:22:1d:a0:56:99:a3:ff:54:ea:62:5e:03:a6:98:cc:ad:
75:46:98:76:7a:11:d1:d7:9f:a4:2e:8a:c9:53:d4:6e:3e:d7:
9c:00:cc:88:36:10:02:a7:91:b2:1a:88:08:06:9c:a2:64:0f:
e6:ac:8e:35:b2:d0:1c:43:c0:09:b9:c4:5e:ba:2b:5d:39:bd:
50:2f:ba:9f:4a:cd:90:4b:80:5a:8d:f6:0b:7f:14:e0:55:4c:
6e:32:bf:c8:9d:a9:c8:f9:d7:ff:22:dc:34:aa:23:e9:2a:d4:
46:2d:27:89:ac:b0:62:38:5a:55:88:1a:3f:25:70:9d:88:b7:
ad:ed:80:bf:32:52:65:a2:c4:11:f4:8e:fc:c4:3f:3d:a3:7d:
e3:8a:56:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 06:52:32 2026 by rpki-client