Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft
File: sRofl3C6sHdRW3cSy41JVQsxOKE.mft (raw, json)
Hash identifier: crydOFMC1thOwvev5N/xJ/vkxgzy7vBgILYkxV65JrU=
Subject key identifier: A2:8B:39:3B:F3:B7:60:5F:7D:76:DE:43:F1:A7:DA:E1:A3:99:0E:E9
Authority key identifier: B1:1A:1F:97:70:BA:B0:77:51:5B:77:12:CB:8D:49:55:0B:31:38:A1
Certificate issuer: /CN=b11a1f9770bab077515b7712cb8d49550b3138a1
Certificate serial: 019D08C2C36981872DDF7508635DFA502DB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRofl3C6sHdRW3cSy41JVQsxOKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft
Manifest number: 0DCB
Signing time: Fri 20 Mar 2026 01:01:14 +0000
Manifest this update: Fri 20 Mar 2026 01:01:14 +0000
Manifest next update: Sat 21 Mar 2026 01:01:14 +0000
Files and hashes: 1: IHeSpn9zzFGkB0I3Aq-TbT_Yi_M.roa (hash: I4iH62Xbpv9TcN2x5dZKrT7UkMHzqfLA1ys5Hw46kzg=)
2: WCA0B9M68iSK-689JNNQ3x_gaaQ.roa (hash: mIL2rvF2fj48OLmmFlBKTID0LzN8VFC9HV5FYjZjf+Q=)
3: sRofl3C6sHdRW3cSy41JVQsxOKE.crl (hash: aG5KBY7uIVkWpi27uQgUzCYcBC9/FvnMei2p2FKT/CY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sRofl3C6sHdRW3cSy41JVQsxOKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:08:c2:c3:69:81:87:2d:df:75:08:63:5d:fa:50:2d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b11a1f9770bab077515b7712cb8d49550b3138a1
Validity
Not Before: Mar 20 01:01:14 2026 GMT
Not After : Mar 21 01:01:14 2026 GMT
Subject: CN=a28b393bf3b7605f7d76de43f1a7dae1a3990ee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:f4:2a:8f:ad:4e:41:05:5d:a4:fb:d0:a7:1c:
0e:da:f2:79:13:1a:17:0c:04:85:12:38:d6:92:e1:
a9:bc:cd:49:7e:4c:b2:29:e1:69:ec:21:f1:6e:08:
05:39:2c:30:9b:10:00:13:4f:95:5f:df:f9:0b:d2:
5a:15:cc:e2:98:67:67:42:92:17:6e:42:ff:e7:57:
ab:29:4a:d7:23:3e:bd:68:01:af:71:0b:4b:86:6f:
b6:22:6e:ef:a5:74:38:56:dc:60:ad:ef:6b:a6:6c:
aa:2f:16:32:8b:34:35:b7:71:78:c8:88:ce:bd:7d:
ff:2b:cc:ad:69:7b:74:9a:8d:bf:f7:1f:b6:0b:08:
a1:ed:55:d2:5d:47:c0:14:5f:8e:8e:36:a7:ec:e4:
e9:c1:bb:2d:d0:12:6a:01:af:fd:2c:5d:1f:76:c3:
d5:23:34:71:76:4e:ba:28:b9:7c:fe:c0:62:0d:5a:
15:b5:fa:23:7b:9a:2f:ed:27:c6:5d:f6:dd:66:44:
5f:a4:3d:71:f9:d9:d6:77:5c:bd:da:cf:a8:69:b7:
fa:4f:b3:0a:30:93:d1:5e:9a:d8:95:4c:af:88:ad:
2a:a5:42:75:71:5c:41:17:8b:28:8a:26:da:9a:4a:
31:de:67:8b:a5:ec:91:94:5b:6a:38:4a:84:1a:aa:
c9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:8B:39:3B:F3:B7:60:5F:7D:76:DE:43:F1:A7:DA:E1:A3:99:0E:E9
X509v3 Authority Key Identifier:
keyid:B1:1A:1F:97:70:BA:B0:77:51:5B:77:12:CB:8D:49:55:0B:31:38:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRofl3C6sHdRW3cSy41JVQsxOKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:c5:21:36:ed:99:4e:99:33:63:95:8b:1b:d4:46:f1:c7:6f:
ed:5e:cc:62:04:d8:29:6e:f4:03:d6:48:5f:fe:1b:6c:e9:12:
c7:d5:64:f3:7f:64:ff:95:ea:f7:ac:b3:96:05:f8:b1:67:ab:
c8:33:4d:35:b1:1f:64:3d:ac:f7:c9:83:f3:83:47:09:4a:bc:
51:21:46:bf:65:60:5d:ab:bf:8f:a1:1f:95:74:13:a6:1d:4a:
4b:8a:94:80:cc:1d:a9:d7:58:40:06:c7:77:dd:95:27:65:52:
eb:12:67:82:03:45:fa:9a:a8:f7:a0:7d:2e:59:23:78:3a:d2:
13:6d:75:76:99:1e:2a:df:f3:01:aa:b0:a6:4d:0b:6e:d5:d2:
97:60:38:f3:ce:c4:71:c6:7b:26:22:18:a6:cb:6f:cc:6c:0b:
ee:5a:4f:0f:6c:4d:c1:e8:bc:3e:54:6d:6f:b2:a3:41:41:17:
be:0d:67:94:11:8d:ea:1c:97:de:7a:0c:2d:c2:fc:2a:d6:f0:
38:13:b6:ce:3d:b7:5f:fb:40:cc:f5:df:25:e7:b9:e6:fa:cb:
4d:90:7d:87:57:8a:c4:58:52:ca:6c:6f:38:c2:94:60:e9:f1:
ad:13:27:b4:1a:a0:46:c9:7b:0e:4a:aa:53:3f:2e:ed:88:a1:
75:3d:76:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 04:45:24 2026 by rpki-client