Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
File: sFf1RPU_NdjS5zyylltPTX0CKVk.mft (raw, json)
Hash identifier: SZ0OqITbxDhNXXdvRkEm6EziZ69w+z3Ef1ltFGq2qEA=
Subject key identifier: C5:26:0C:C2:BE:F7:29:9A:E9:10:B6:0A:DC:67:7A:3A:DB:58:7E:ED
Authority key identifier: B0:57:F5:44:F5:3F:35:D8:D2:E7:3C:B2:96:5B:4F:4D:7D:02:29:59
Certificate issuer: /CN=b057f544f53f35d8d2e73cb2965b4f4d7d022959
Certificate serial: 019D382E8B921FAFC81CA4DF131A06051A86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
Manifest number: 1824
Signing time: Sun 29 Mar 2026 06:01:07 +0000
Manifest this update: Sun 29 Mar 2026 06:01:07 +0000
Manifest next update: Mon 30 Mar 2026 06:01:07 +0000
Files and hashes: 1: 1-LQW0hELrOlw1d0vdgbz08TyBgo.roa (hash: B2ILvHFw8ZMKCLvJqBB9DL0g8zmbsD02oH7FPgU93Nk=)
2: sFf1RPU_NdjS5zyylltPTX0CKVk.crl (hash: 1oX+NVugvm1k9yehHwpKD2IRoJtqaUnVCrjLtiAsHZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:8b:92:1f:af:c8:1c:a4:df:13:1a:06:05:1a:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b057f544f53f35d8d2e73cb2965b4f4d7d022959
Validity
Not Before: Mar 29 06:01:07 2026 GMT
Not After : Mar 30 06:01:07 2026 GMT
Subject: CN=c5260cc2bef7299ae910b60adc677a3adb587eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:47:3c:11:b2:81:ff:2c:f5:3c:0d:eb:7d:a0:
e1:9e:7a:c3:8d:35:68:6c:fd:63:11:7e:e3:af:64:
fb:90:1e:8f:c4:d4:62:b1:c5:bf:7d:1c:3b:85:7f:
57:8d:13:f5:d6:cf:a4:21:af:8d:3a:9a:9b:fd:0e:
a0:87:99:28:2d:07:fb:6c:b2:43:9d:ab:19:87:6a:
5b:2e:fa:05:dd:38:99:25:2c:b1:03:c6:25:40:f0:
1e:64:7a:5f:05:97:98:5a:c4:a4:1d:4b:7e:d9:44:
2d:9c:b2:f4:d9:7d:9e:a2:b6:14:2a:65:2e:76:40:
4d:96:d3:d9:df:a4:e2:5d:7a:78:ea:b1:a0:92:f5:
6a:aa:45:ce:f3:a7:4c:d7:6f:d3:36:bf:82:83:84:
2d:7f:9d:c4:da:dc:ce:80:bb:56:64:30:c3:dc:a4:
27:75:ae:6d:ed:54:9c:26:5f:6e:c6:fa:39:ed:ba:
14:69:bc:b2:f7:3a:e0:9c:76:d8:27:28:0a:48:e8:
b0:f4:99:9d:5e:22:ae:68:54:72:e2:dc:0f:dd:0e:
57:70:08:d4:6c:56:3f:14:70:ed:8f:e3:d2:61:15:
f4:9e:6e:fd:39:8d:96:e7:f5:17:b1:0a:f3:c7:5e:
4b:f6:03:ff:ba:2c:2d:44:21:af:24:3b:df:0b:65:
78:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:26:0C:C2:BE:F7:29:9A:E9:10:B6:0A:DC:67:7A:3A:DB:58:7E:ED
X509v3 Authority Key Identifier:
keyid:B0:57:F5:44:F5:3F:35:D8:D2:E7:3C:B2:96:5B:4F:4D:7D:02:29:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:91:80:9f:37:80:0a:96:74:6a:e6:84:47:ba:84:06:5b:66:
0a:d4:28:62:a2:19:fd:99:6d:df:ba:8d:53:fa:74:68:c9:fb:
2d:fa:1b:ee:a5:94:1e:79:a3:96:51:22:57:ed:fa:25:1d:f0:
fd:b3:43:b5:4b:79:10:c1:57:81:1e:0b:bc:27:6f:45:3d:12:
3f:a5:d3:64:92:b7:85:66:6e:63:10:87:b6:46:1a:ea:23:4e:
9f:4a:54:3e:74:03:5c:58:98:d5:65:03:6f:6b:b7:d8:ad:5d:
4c:d8:8d:df:a1:78:86:bf:71:01:52:04:68:aa:fa:37:4a:e5:
18:5e:5f:21:03:4e:4d:be:2e:75:59:f6:c2:74:22:66:41:e9:
6d:1e:05:38:e7:de:35:d3:37:44:5a:39:01:e2:21:e9:cb:38:
af:f1:d4:8a:7a:c7:b7:31:a9:b2:ef:ea:0b:a6:8b:45:c7:12:
c8:58:2f:33:d7:ed:37:3e:4f:26:c3:99:b4:3d:22:b2:5a:dd:
36:00:0c:01:0b:a9:21:03:72:6c:db:97:66:7b:47:e6:bf:ac:
be:66:7a:82:44:75:a9:b9:e4:53:71:07:7a:18:5a:b2:4d:e7:
d6:3e:05:36:01:47:ab:56:7a:b7:95:64:74:95:8b:c2:cc:50:
26:95:d0:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:27 2026 by rpki-client