Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/sffQCUrcmNmwMnIOgePbWqdYHHQ.mft
File: sffQCUrcmNmwMnIOgePbWqdYHHQ.mft (raw, json)
Hash identifier: 2NIHwq4IaRNaCoWTb5Lhxw3FX4PU6r+vzV9/1P1/Bgc=
Subject key identifier: 7F:23:B8:CE:7B:23:2D:1E:75:CA:F0:E6:8B:8D:65:55:CF:C9:F1:BC
Authority key identifier: B1:F7:D0:09:4A:DC:98:D9:B0:32:72:0E:81:E3:DB:5A:A7:58:1C:74
Certificate issuer: /CN=b1f7d0094adc98d9b032720e81e3db5aa7581c74
Certificate serial: 019D390A0644A28024A1E338C4A8ADB6CBF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sffQCUrcmNmwMnIOgePbWqdYHHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/sffQCUrcmNmwMnIOgePbWqdYHHQ.mft
Manifest number: 0E17
Signing time: Sun 29 Mar 2026 10:00:51 +0000
Manifest this update: Sun 29 Mar 2026 10:00:51 +0000
Manifest next update: Mon 30 Mar 2026 10:00:51 +0000
Files and hashes: 1: c0cTTJQDf36qVQCG96WRyKdM_Wc.roa (hash: aYsM49Xy0hnVUlbAWRXmCHPgWbkgOmuFrAd7Tian+Cg=)
2: sffQCUrcmNmwMnIOgePbWqdYHHQ.crl (hash: GLAd0dYKSAUNof5Wlu2Rb0bIs2V2b6fOOPD4VbdZiRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/sffQCUrcmNmwMnIOgePbWqdYHHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/sffQCUrcmNmwMnIOgePbWqdYHHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sffQCUrcmNmwMnIOgePbWqdYHHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 10:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:06:44:a2:80:24:a1:e3:38:c4:a8:ad:b6:cb:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1f7d0094adc98d9b032720e81e3db5aa7581c74
Validity
Not Before: Mar 29 10:00:51 2026 GMT
Not After : Mar 30 10:00:51 2026 GMT
Subject: CN=7f23b8ce7b232d1e75caf0e68b8d6555cfc9f1bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:db:21:fe:83:20:73:6a:a1:61:ef:74:ab:da:
7b:06:f3:7e:4a:f6:2d:71:6a:52:9a:4e:60:1e:12:
86:38:70:e1:12:e2:3d:2d:06:9b:01:4e:bc:87:4e:
e8:d5:6c:83:b2:d7:6c:1c:e3:a2:2f:1d:5a:bf:c1:
c5:17:21:4a:ac:ea:6b:d9:75:2b:d9:19:ff:fc:c1:
3e:18:3d:97:ba:fb:29:14:d8:f5:00:c3:66:e6:69:
89:01:7e:57:38:2d:2b:56:4d:77:60:11:2d:64:ab:
dc:36:b4:35:8a:be:5c:2e:ae:0a:fc:17:e0:24:a7:
19:9d:d0:72:06:53:44:12:fa:f6:b5:98:3a:f9:5e:
cc:c8:9f:6b:14:72:80:dd:41:23:67:32:6e:5c:eb:
0b:fe:f9:ca:c5:fc:77:1c:93:43:5c:68:4c:68:56:
82:58:00:f5:08:c8:e1:35:0d:04:97:1e:ff:88:2d:
d9:5d:18:bc:a3:14:a6:b3:ae:a9:0d:51:b6:51:e3:
82:8c:a0:a8:d6:29:e0:5e:33:af:b6:9c:29:b8:39:
ad:ec:bc:ce:5f:1e:1a:de:02:ad:c8:0b:db:f5:10:
10:16:a9:89:86:e6:43:d0:dd:f2:1a:e8:8e:9b:c2:
63:e4:b0:11:70:0a:e9:68:37:fa:bb:79:ca:7d:8b:
ac:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:23:B8:CE:7B:23:2D:1E:75:CA:F0:E6:8B:8D:65:55:CF:C9:F1:BC
X509v3 Authority Key Identifier:
keyid:B1:F7:D0:09:4A:DC:98:D9:B0:32:72:0E:81:E3:DB:5A:A7:58:1C:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sffQCUrcmNmwMnIOgePbWqdYHHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/sffQCUrcmNmwMnIOgePbWqdYHHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/sffQCUrcmNmwMnIOgePbWqdYHHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:fe:da:38:8d:21:9c:39:f8:6d:8a:6b:2b:a5:b1:c6:61:20:
c0:17:d4:a1:fc:a1:fd:8b:c7:57:e8:5c:16:df:e2:25:68:98:
33:40:02:8e:21:29:5e:bc:53:69:65:6b:ef:02:c5:ad:d6:24:
d8:1c:4f:75:a8:08:c8:d1:0b:18:f9:db:b9:37:97:95:8f:fe:
84:d2:d4:6e:e9:43:1e:a8:f5:4e:77:54:c3:53:ce:a9:81:3e:
0a:df:13:14:de:74:4a:35:f8:ee:e2:16:97:d5:d9:6f:c1:09:
56:14:8f:63:e6:6a:94:70:97:b5:6a:8a:ef:32:5d:3c:64:3f:
13:c8:84:73:21:ee:6c:58:6c:b9:97:48:fc:57:0e:33:ad:26:
e4:c5:ca:bc:0f:3b:9f:66:fd:cb:0d:93:b9:65:78:2b:b4:b9:
98:5f:22:cb:12:22:02:d6:4f:fd:40:97:92:26:a7:2b:16:5b:
d3:2d:b2:6b:e5:2f:52:9b:bd:23:23:89:7f:45:56:2e:9e:2d:
a9:8a:9f:d1:ad:e5:7a:d4:8c:cf:6d:d3:b8:64:68:58:08:f6:
5c:7f:4b:10:a0:00:03:cb:af:07:d7:05:58:ac:d3:d2:e7:2b:
76:0a:57:82:6d:b2:ad:77:f9:0f:ad:8e:9c:50:86:b2:ed:ad:
c3:ec:fb:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:25:44 2026 by rpki-client