Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
File: sFf1RPU_NdjS5zyylltPTX0CKVk.mft (raw, json)
Hash identifier: xGTIGjmSHMM81BqgqQOSbT2FGT+/NClJ7qgk22SxS1I=
Subject key identifier: 77:DC:F2:04:C7:9D:78:DE:8A:A6:92:3B:39:05:C4:9C:42:D5:BB:DF
Authority key identifier: B0:57:F5:44:F5:3F:35:D8:D2:E7:3C:B2:96:5B:4F:4D:7D:02:29:59
Certificate issuer: /CN=b057f544f53f35d8d2e73cb2965b4f4d7d022959
Certificate serial: 019FA228E3156D1CA4F3C6995F35619994B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
Manifest number: 1964
Signing time: Mon 27 Jul 2026 06:00:16 +0000
Manifest this update: Mon 27 Jul 2026 06:00:16 +0000
Manifest next update: Tue 28 Jul 2026 06:00:16 +0000
Files and hashes: 1: 1-LQW0hELrOlw1d0vdgbz08TyBgo.roa (hash: B2ILvHFw8ZMKCLvJqBB9DL0g8zmbsD02oH7FPgU93Nk=)
2: sFf1RPU_NdjS5zyylltPTX0CKVk.crl (hash: XTnrpPblHm7dxiCtRqoFL6r4AH5DFDKe2pjtfwCXOGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 06:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:28:e3:15:6d:1c:a4:f3:c6:99:5f:35:61:99:94:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b057f544f53f35d8d2e73cb2965b4f4d7d022959
Validity
Not Before: Jul 27 06:00:16 2026 GMT
Not After : Jul 28 06:00:16 2026 GMT
Subject: CN=77dcf204c79d78de8aa6923b3905c49c42d5bbdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:63:a9:2c:a9:9d:83:d7:fe:2d:63:04:46:12:
7c:20:2b:fd:48:7c:6e:96:f7:1c:da:fa:53:33:f9:
12:4a:0d:68:76:45:9b:11:1b:17:e9:8c:3f:4f:08:
a5:34:d4:9e:67:bf:86:2d:4c:57:ea:57:46:1a:51:
81:57:03:4e:e5:dd:a0:2e:d6:e5:6c:7e:26:ab:52:
36:f8:54:42:b3:cd:32:51:8a:09:c0:3d:44:e7:6a:
d9:7c:cf:ec:8f:cd:88:5c:11:ce:9d:5d:42:f8:37:
01:c8:41:3a:05:86:8b:37:31:e2:e9:8c:87:0c:ad:
00:77:3d:a9:12:ec:d6:f3:89:a5:22:d5:8d:54:5d:
8c:fa:35:77:c1:c8:02:c4:fa:e7:58:ad:8d:da:f1:
34:8a:70:9a:16:73:70:af:8a:86:65:96:93:f0:72:
e8:b3:8b:c1:1b:74:a7:bf:0b:15:c5:8a:84:0a:f1:
28:16:64:92:6c:10:24:78:c4:bd:01:d6:24:ea:4e:
65:ba:e8:63:30:b1:77:46:f2:e6:bf:02:4c:9d:6f:
b2:b2:34:0f:71:be:9b:3f:58:cb:a0:bf:3c:5a:b7:
7f:a4:03:1c:08:ef:a9:88:73:75:4b:e7:82:b3:15:
f8:c9:1b:9f:08:79:47:4f:14:48:62:f3:34:81:da:
ba:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:DC:F2:04:C7:9D:78:DE:8A:A6:92:3B:39:05:C4:9C:42:D5:BB:DF
X509v3 Authority Key Identifier:
keyid:B0:57:F5:44:F5:3F:35:D8:D2:E7:3C:B2:96:5B:4F:4D:7D:02:29:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:c5:1f:f5:18:fc:cd:68:f0:ca:bf:cc:8e:50:11:0b:fe:7b:
33:55:83:87:54:42:f1:12:de:cd:d2:28:08:9d:72:40:82:3b:
5e:5a:60:7f:cf:66:e9:0c:ca:5a:cb:a9:ae:b2:6d:c8:06:50:
36:f4:eb:3d:45:dd:25:30:96:e3:38:66:0d:dd:54:e8:08:66:
37:0c:38:c1:04:3c:d9:f9:0f:01:7a:8a:5b:b6:14:8b:35:d6:
fe:92:88:e0:2f:96:b6:9c:57:89:6d:95:7e:1c:46:76:81:5d:
ad:64:5e:cf:fa:1c:00:e3:8f:cf:ae:72:dc:70:77:28:91:71:
3a:c0:35:74:a2:c8:40:ac:c5:e7:5f:81:07:83:81:2b:d0:d9:
dc:cb:af:1e:ca:1c:ab:ad:42:6a:d2:83:6a:0b:ea:dc:e4:4a:
1c:e2:6d:7c:a6:b8:b5:d7:3f:99:3b:f6:1a:28:d7:3b:db:67:
00:46:77:c3:fd:08:d2:f5:85:27:72:97:f1:67:54:57:09:21:
0d:e9:5e:e1:8e:bf:08:85:7a:d5:08:c0:8d:9b:57:fe:9a:5e:
80:9a:80:a0:f2:99:37:db:77:47:99:7e:3a:5b:0c:5c:1a:b9:
88:09:47:d2:e1:a6:e2:f3:32:4d:f0:c6:f4:a4:cc:ce:3f:4a:
1f:46:bc:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:40:08 2026 by rpki-client