Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft
File: svJ5U61GkMBo-0D581YAM3m7Y_g.mft (raw, json)
Hash identifier: K1rzhaBlDb12rrrKTVn+4EexdpS1LywmWsBCdzgPKU4=
Subject key identifier: 60:6B:EC:20:4A:D4:36:B3:59:EC:CC:E1:8B:F7:8F:6C:B1:D2:9A:E5
Authority key identifier: B2:F2:79:53:AD:46:90:C0:68:FB:40:F9:F3:56:00:33:79:BB:63:F8
Certificate issuer: /CN=b2f27953ad4690c068fb40f9f356003379bb63f8
Certificate serial: 019D37F6EE81C3DDFD292CEF224D9DEB4999
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/svJ5U61GkMBo-0D581YAM3m7Y_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft
Manifest number: 121F
Signing time: Sun 29 Mar 2026 05:00:22 +0000
Manifest this update: Sun 29 Mar 2026 05:00:22 +0000
Manifest next update: Mon 30 Mar 2026 05:00:22 +0000
Files and hashes: 1: ObNZb8WcPYnp4vym-GNDnVBbhRc.roa (hash: cB7fQ1+Il9kNcY3mzLGz4gNtT9PoEWbZCafUMp1Ym5Y=)
2: WSWSZ5HnExf16ja-7wBmWbN2JQM.roa (hash: N8qjQNMkd309dGRmp5jGiVmond6LS7+l8O8FW5pyrZw=)
3: svJ5U61GkMBo-0D581YAM3m7Y_g.crl (hash: 42igabhftpgfmZHIcvisuW3ns4pPbiTd3GFtZYri62M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/svJ5U61GkMBo-0D581YAM3m7Y_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:ee:81:c3:dd:fd:29:2c:ef:22:4d:9d:eb:49:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f27953ad4690c068fb40f9f356003379bb63f8
Validity
Not Before: Mar 29 05:00:22 2026 GMT
Not After : Mar 30 05:00:22 2026 GMT
Subject: CN=606bec204ad436b359eccce18bf78f6cb1d29ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:27:fa:6e:8b:e3:8e:cb:ba:5c:9a:16:c7:7d:
cb:bc:ce:9f:69:7f:76:bd:83:37:cf:33:b3:40:a8:
e5:50:22:8f:db:ec:39:bf:9d:74:38:87:3e:23:9f:
18:1f:d9:52:11:2f:e1:3a:37:b8:72:de:39:39:e6:
3c:47:e8:e2:d7:d2:5e:31:b8:02:54:b9:4e:51:7e:
79:78:ff:e4:85:8b:c0:98:5c:76:c3:9e:42:94:02:
6b:51:56:5a:3a:93:7b:81:bf:76:b1:c6:74:fe:b0:
25:e0:35:33:61:95:fe:d6:6b:a0:f8:39:ec:7e:00:
d6:90:8a:a3:a7:ea:b4:ba:be:1c:9d:ee:4d:be:86:
f3:d5:0e:95:07:5f:ee:52:22:95:d5:35:44:cf:96:
d2:0a:e4:cf:8a:a9:d5:53:fd:c5:51:c7:06:ec:16:
ce:2c:9c:39:f8:9f:fc:f4:fe:52:dd:82:e3:ec:1c:
58:d2:f3:fc:64:b4:91:a7:cb:ab:4c:ea:0b:50:9c:
61:50:16:bf:47:00:51:b0:44:bd:55:dd:71:96:8f:
c0:87:f5:9b:2a:57:d5:78:fb:47:bc:d2:eb:89:36:
45:2c:4b:28:22:00:ae:fd:8c:c6:f5:3e:c8:22:87:
e7:87:c8:c7:7a:b2:29:21:4d:8b:66:f4:a8:98:14:
6e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:6B:EC:20:4A:D4:36:B3:59:EC:CC:E1:8B:F7:8F:6C:B1:D2:9A:E5
X509v3 Authority Key Identifier:
keyid:B2:F2:79:53:AD:46:90:C0:68:FB:40:F9:F3:56:00:33:79:BB:63:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/svJ5U61GkMBo-0D581YAM3m7Y_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:57:e1:e1:09:85:f1:df:aa:58:bc:4c:a2:26:54:f1:5d:82:
be:54:c6:46:24:7d:e3:b8:8b:cf:6e:67:73:ab:e6:14:8c:ee:
79:95:8e:76:1f:3d:5b:87:68:d6:31:71:79:fd:93:16:72:c4:
ce:d2:b5:2e:53:f4:79:33:cc:85:4b:2d:fb:9d:05:13:53:26:
aa:77:45:53:64:85:9e:77:bf:ec:23:e6:a8:24:8a:0e:d4:e2:
f3:40:c6:5d:a7:37:56:2d:c8:3b:31:b9:f2:a5:6a:1c:c5:1f:
82:14:8b:bb:de:44:7d:12:5b:ba:88:94:7f:95:e7:7e:49:a1:
5d:2e:3c:70:98:b0:d3:e9:fe:cc:fc:1d:3d:04:bb:8a:16:f8:
5b:bc:b1:b3:48:9b:7a:91:91:17:e0:23:29:b6:96:3d:45:e5:
2e:e9:75:31:4c:50:28:6f:0c:6e:67:dc:77:d9:cf:73:3c:75:
2b:43:85:63:e3:a6:7d:c5:25:2a:f5:de:aa:12:16:2d:5f:ad:
c2:2e:94:70:91:39:ea:1f:59:6c:1d:9e:0b:2f:92:2d:2f:0d:
f8:c7:26:97:b9:4c:a7:b1:01:29:9f:66:2e:f7:27:05:93:ba:
4e:13:ae:b2:a1:a8:1b:21:44:6b:46:9f:a3:e6:4b:9a:6e:df:
82:46:95:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:46 2026 by rpki-client