Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.mft
File: sIRyULOncSfffDx7je-MnZGdxLk.mft (raw, json)
Hash identifier: gBnCdKESPholA/itB4QBRrDA4d8d8N9VLqtC7vCSnwQ=
Subject key identifier: 4B:2F:95:F9:D0:70:09:8F:DE:74:0D:CD:E9:AD:CC:38:37:D0:A3:0E
Authority key identifier: B0:84:72:50:B3:A7:71:27:DF:7C:3C:7B:8D:EF:8C:9D:91:9D:C4:B9
Certificate issuer: /CN=b0847250b3a77127df7c3c7b8def8c9d919dc4b9
Certificate serial: 019D37C00BB3363BDF69FC87C8960F281EE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sIRyULOncSfffDx7je-MnZGdxLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.mft
Manifest number: 0AF3
Signing time: Sun 29 Mar 2026 04:00:25 +0000
Manifest this update: Sun 29 Mar 2026 04:00:25 +0000
Manifest next update: Mon 30 Mar 2026 04:00:25 +0000
Files and hashes: 1: SyjKeUnbRSDs4kNGNlsLLfS--v4.roa (hash: FpkjhgAtv2x7Z5TEduGx1C16Z0THVbd0mVvuXtouz6k=)
2: sIRyULOncSfffDx7je-MnZGdxLk.crl (hash: pnFpUasJEtLYA77GVvt4DXxU91nxixNz4CmKfVH4F50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sIRyULOncSfffDx7je-MnZGdxLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:0b:b3:36:3b:df:69:fc:87:c8:96:0f:28:1e:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0847250b3a77127df7c3c7b8def8c9d919dc4b9
Validity
Not Before: Mar 29 04:00:25 2026 GMT
Not After : Mar 30 04:00:25 2026 GMT
Subject: CN=4b2f95f9d070098fde740dcde9adcc3837d0a30e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f7:38:1f:fa:74:4e:6f:44:a1:1e:5e:2e:36:
91:c1:54:ec:b9:95:01:55:1f:4f:b8:2f:19:d2:64:
4a:9a:02:fc:52:f1:51:f1:a9:ff:4f:1c:b7:79:33:
2f:29:41:83:03:8b:ab:4d:43:48:24:88:98:1f:ed:
5c:e8:78:91:e0:7c:f8:2e:06:b1:74:3b:9a:4f:96:
60:d0:df:87:57:44:17:fb:70:84:46:aa:45:4e:9d:
6e:35:af:ab:be:e5:e6:dd:cd:e9:a2:7a:83:37:44:
da:5c:dd:c9:64:57:8a:48:69:1d:70:02:cc:34:68:
65:71:6b:32:0a:d8:39:b1:35:d4:0a:ae:df:71:bb:
06:d0:14:98:40:50:b3:ef:a8:8a:5d:45:41:1f:84:
db:2f:af:a0:30:13:68:68:d5:73:67:d0:5e:94:55:
a3:32:28:90:63:5b:eb:ae:ae:04:ad:a5:3f:61:8d:
02:11:cc:2f:2a:75:3e:af:8d:8f:c7:e0:14:91:ea:
ef:0e:10:7c:1e:22:c9:fb:d4:22:49:ce:bd:b0:77:
db:fd:06:05:7a:aa:16:5e:d0:27:85:25:d9:3b:d9:
74:f3:47:e4:7c:91:21:0f:6b:45:3f:86:44:dc:68:
36:22:47:6e:3a:6f:62:76:2c:ca:f8:65:f3:fa:63:
1a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:2F:95:F9:D0:70:09:8F:DE:74:0D:CD:E9:AD:CC:38:37:D0:A3:0E
X509v3 Authority Key Identifier:
keyid:B0:84:72:50:B3:A7:71:27:DF:7C:3C:7B:8D:EF:8C:9D:91:9D:C4:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sIRyULOncSfffDx7je-MnZGdxLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:b7:f5:27:13:ba:41:2f:1a:a0:9f:6a:d5:26:3e:4f:f7:4d:
c2:ba:ba:c1:e6:68:ce:0e:18:90:5f:ec:2a:d1:1c:12:59:16:
37:6c:06:d2:f9:ad:53:a0:d8:18:58:77:15:7b:17:03:4e:bb:
26:56:f0:8f:c8:a8:06:d5:77:60:a6:f8:0c:e7:87:7b:cd:98:
c3:45:d4:3b:4b:17:6b:69:28:5a:7b:e8:48:6f:83:ca:ea:31:
0c:c5:04:80:ce:48:61:73:5b:2c:1b:71:18:23:02:28:8e:09:
66:77:3d:fd:3a:2c:0b:a7:c1:af:75:19:d4:8b:e4:c2:e7:a9:
aa:62:28:cc:eb:97:b0:bd:05:29:ec:1c:1e:2d:5e:22:dc:86:
44:e3:a2:6f:57:8a:f8:ad:da:d3:e6:0b:7a:e6:96:24:eb:7c:
61:ca:0a:68:e0:a7:ff:27:a0:6f:00:73:79:e3:c7:21:52:7a:
b5:b1:0b:82:e0:a4:9c:43:2e:3a:15:e9:06:78:ec:74:66:de:
12:3e:23:76:ac:c0:48:ec:85:e3:15:0e:ba:8d:e9:c5:42:a7:
25:00:e3:77:eb:44:ca:49:c8:a9:e7:0f:47:5d:33:19:7a:44:
3d:8c:34:5b:76:2d:34:6d:63:20:6c:a1:a1:02:70:b5:2b:d2:
d6:fc:3d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:34 2026 by rpki-client