Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft
File: sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft (raw, json)
Hash identifier: /uWFwVA3TtJ+Lf2GTgx8+efmQ1pH+dlARpgDROzMdyQ=
Subject key identifier: CA:0D:D3:22:FD:5B:72:D2:BD:0E:4A:A1:A2:3A:7E:9E:49:D0:34:DB
Authority key identifier: B1:F5:BB:AA:05:19:80:BD:48:11:B6:65:5A:0F:95:DB:36:12:78:09
Certificate issuer: /CN=b1f5bbaa051980bd4811b6655a0f95db36127809
Certificate serial: 019CE523B6DD04510C92FCDFF05C25B4E16B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sfW7qgUZgL1IEbZlWg-V2zYSeAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft
Manifest number: 11F5
Signing time: Fri 13 Mar 2026 03:00:48 +0000
Manifest this update: Fri 13 Mar 2026 03:00:48 +0000
Manifest next update: Sat 14 Mar 2026 03:00:48 +0000
Files and hashes: 1: H1ayDIygYNIOiS92j6cNtqBQm1c.roa (hash: zAMEhxkwZgHjIWB7MVVQZowg1h/HvADUtVLj69PryUA=)
2: sfW7qgUZgL1IEbZlWg-V2zYSeAk.crl (hash: w9FDRyFmW6+XAoQ8r/ILrLnjCuWhYxtiCXpLlaWyS9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sfW7qgUZgL1IEbZlWg-V2zYSeAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:23:b6:dd:04:51:0c:92:fc:df:f0:5c:25:b4:e1:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1f5bbaa051980bd4811b6655a0f95db36127809
Validity
Not Before: Mar 13 03:00:48 2026 GMT
Not After : Mar 14 03:00:48 2026 GMT
Subject: CN=ca0dd322fd5b72d2bd0e4aa1a23a7e9e49d034db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:78:d8:92:24:3c:01:65:77:3a:af:5a:e1:9f:
a7:dc:43:2a:87:71:01:b7:a7:9b:64:c6:95:e4:e3:
29:aa:13:18:95:6b:be:5c:86:a2:05:75:cc:01:10:
43:3d:94:34:bb:d1:32:96:bc:98:c5:a2:4d:d1:cd:
55:38:79:f8:c8:8e:7d:29:bd:46:48:30:83:5a:da:
d3:e7:5c:f8:28:cd:23:62:f9:00:b8:c3:2b:ab:76:
5a:0e:b8:45:6d:ac:37:92:5c:6b:6d:89:9e:bb:2a:
2b:13:6d:a6:86:93:5f:02:d1:58:40:ee:3c:41:32:
de:f3:dd:1d:80:02:71:f7:75:c8:40:d5:cd:5d:3f:
5f:dc:0a:4b:66:d3:7c:6f:cc:5e:99:a1:bc:ee:a6:
24:21:dc:ae:a2:69:03:5b:f7:d6:3a:bf:2c:99:0a:
38:d7:38:df:72:1f:67:de:1c:d6:62:34:a3:e0:e9:
34:50:1e:60:f4:d8:51:8e:66:ee:3b:64:de:1c:dd:
25:ad:ec:8d:b9:37:38:2e:9c:8a:78:84:a6:3b:9f:
f3:0e:a8:14:5f:74:51:a2:c0:fc:8b:52:a4:14:4a:
49:b6:d8:c9:08:f9:64:5b:29:26:6a:f6:8e:01:d0:
f7:19:e4:0c:40:69:5d:97:d7:3f:e4:1d:2a:cc:38:
5c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:0D:D3:22:FD:5B:72:D2:BD:0E:4A:A1:A2:3A:7E:9E:49:D0:34:DB
X509v3 Authority Key Identifier:
keyid:B1:F5:BB:AA:05:19:80:BD:48:11:B6:65:5A:0F:95:DB:36:12:78:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sfW7qgUZgL1IEbZlWg-V2zYSeAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:bc:92:ee:12:19:33:31:df:ab:1b:3d:26:c0:fa:d2:77:2f:
a5:8a:45:46:aa:be:3a:69:1f:4b:ce:03:97:ff:9f:5a:54:7c:
b9:96:90:de:21:dd:cd:1b:1c:30:14:a2:79:16:59:91:7f:4f:
d6:a8:01:f5:af:7f:cd:01:eb:e0:cb:bf:d6:4d:4b:9c:f3:94:
e2:d6:b9:d5:f7:d3:c7:69:5f:89:0c:7a:75:bd:3d:b2:0b:be:
bb:35:cd:e9:d5:7a:56:5f:6a:f6:62:e4:6c:45:57:39:28:95:
34:45:c1:4f:6c:b2:55:da:3c:7d:43:9a:20:89:36:a9:ab:3a:
62:4d:bb:d6:c5:a7:de:cf:ee:83:11:68:00:cf:68:67:eb:22:
54:39:a2:45:2b:0a:5c:2a:ab:ac:81:0f:d9:91:a8:0d:d8:86:
7e:64:91:da:7e:9b:e2:ab:28:a3:ef:be:15:36:af:fe:5c:ad:
2f:a1:54:6b:98:f0:29:c9:b1:12:2c:d1:ce:2d:86:31:32:3a:
bf:c5:5d:26:74:ae:d4:34:b0:58:65:21:e8:82:4c:37:81:7f:
2c:53:4b:68:bb:93:ee:14:e7:8f:5d:a7:c5:3d:bb:68:a2:91:
60:c9:47:84:58:9a:9f:7c:68:67:41:42:85:f3:4f:f5:cb:cb:
e2:fc:5a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:38:51 2026 by rpki-client