Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.mft
File: sSQfEp2_xKFlH-zboDEI_NLMHfI.mft (raw, json)
Hash identifier: JTToPq2APwd9ww02UALSHNgUPzZx7V4wcEhDiJpXqmI=
Subject key identifier: FB:45:72:75:44:A7:A8:A0:6A:A1:AB:E5:D4:48:30:03:76:FE:DC:52
Authority key identifier: B1:24:1F:12:9D:BF:C4:A1:65:1F:EC:DB:A0:31:08:FC:D2:CC:1D:F2
Certificate issuer: /CN=b1241f129dbfc4a1651fecdba03108fcd2cc1df2
Certificate serial: 019D397766CF088387F05F14129E12D0646A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sSQfEp2_xKFlH-zboDEI_NLMHfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.mft
Manifest number: 0C3B
Signing time: Sun 29 Mar 2026 12:00:19 +0000
Manifest this update: Sun 29 Mar 2026 12:00:19 +0000
Manifest next update: Mon 30 Mar 2026 12:00:19 +0000
Files and hashes: 1: R7qJzjI_I0ZyfxtzpHAwF6z7ftA.asa (hash: JOhc4+TJAT9y3euT9g0kxLqAA+8lYprveqxEcA29tPI=)
2: WVWzNQBj7seo8FjvmhSj1kI6sP0.roa (hash: LoWAtshb113BC94Wt1I33mRTXma6WTQ9kgqJ5YaRPcM=)
3: imh_l3g4l-v4ARvrB47zBr6npYc.roa (hash: +4LHZfbwAtdvhA+phsNIwxwF9nTHU9oJ87vaM1DwuoA=)
4: sSQfEp2_xKFlH-zboDEI_NLMHfI.crl (hash: phR60Dck0eWeJB9n2Bq4JI5+9FgPFeoo8r5N/p6wVTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sSQfEp2_xKFlH-zboDEI_NLMHfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:66:cf:08:83:87:f0:5f:14:12:9e:12:d0:64:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1241f129dbfc4a1651fecdba03108fcd2cc1df2
Validity
Not Before: Mar 29 12:00:19 2026 GMT
Not After : Mar 30 12:00:19 2026 GMT
Subject: CN=fb45727544a7a8a06aa1abe5d448300376fedc52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:de:ea:0e:1e:0b:9c:fe:d7:33:16:c9:39:cd:
81:41:38:04:39:13:bb:d6:04:a0:fc:2e:2a:a0:2f:
c1:1b:3c:6d:fb:e0:da:b7:93:42:6f:c3:d6:38:f6:
e5:af:6b:04:94:1a:78:58:97:e9:cf:7d:c7:39:4e:
6c:a9:40:8c:21:cb:f5:d7:66:0b:3d:a8:29:9c:f1:
66:94:6b:36:f5:a3:d3:39:d5:18:d2:b2:88:6d:d8:
7e:46:9e:fa:f6:ef:20:a5:27:3d:fa:0b:39:cd:1b:
f8:f7:b1:35:28:5e:26:a8:44:00:c3:fb:4c:c3:2a:
f6:31:49:ce:32:85:8f:96:df:d7:61:52:65:f7:a6:
f3:d5:34:46:df:8f:71:c7:9a:6c:6a:02:4a:2d:bf:
33:31:b1:45:56:88:9a:d8:09:47:d7:1b:4b:e6:bf:
48:e2:c3:01:5a:c8:23:36:2c:3d:25:55:cd:f1:c2:
db:0d:b8:a1:e8:0c:ca:13:6a:3d:b6:a0:5a:d3:5c:
31:c0:75:71:38:fa:ae:09:dc:a6:6f:57:c3:4e:72:
d7:ba:ae:13:fa:95:b3:18:d6:d9:5a:b2:d9:29:40:
43:fd:8c:53:f4:b4:12:07:70:cf:72:6e:c0:fc:4f:
d1:94:ed:a1:80:fd:77:1e:2a:d9:b7:bb:1d:3d:ae:
8c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:45:72:75:44:A7:A8:A0:6A:A1:AB:E5:D4:48:30:03:76:FE:DC:52
X509v3 Authority Key Identifier:
keyid:B1:24:1F:12:9D:BF:C4:A1:65:1F:EC:DB:A0:31:08:FC:D2:CC:1D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sSQfEp2_xKFlH-zboDEI_NLMHfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:cb:20:9d:11:b7:20:c5:5b:12:c5:82:33:0c:ae:47:6e:31:
aa:b5:f9:2c:e2:19:f1:63:3b:8e:7d:ae:20:09:5a:c6:db:bd:
dc:e7:be:ef:b1:5a:96:4a:de:42:8d:a3:f6:12:39:28:73:c9:
c5:95:45:08:08:e5:3f:b5:0f:87:25:88:04:a0:ff:58:a2:1f:
18:f9:57:6e:78:72:24:1d:82:23:c3:3a:d0:dd:45:cb:96:43:
84:82:cc:b3:b4:09:f0:3b:94:57:c5:d5:f8:f4:32:ee:18:50:
2f:a7:1d:49:55:97:ad:29:de:c3:bd:e9:7e:ee:d4:8c:4e:78:
32:b6:41:df:c0:e6:74:86:b6:37:18:96:14:7f:6a:3c:9d:d6:
d9:64:aa:60:69:37:25:0f:93:8e:da:40:28:e5:5f:17:e4:f0:
cc:d6:2a:eb:a9:7a:ee:45:71:7d:bc:01:95:5b:ee:df:b6:41:
8a:79:84:cd:18:44:f1:3a:61:8d:ec:a7:35:38:fc:a9:00:0a:
9e:f7:31:03:e8:a9:ee:66:95:35:9a:ae:e8:e0:19:0a:b5:5f:
9f:31:fc:a5:c6:c4:41:e0:92:b8:9d:7e:3f:fa:36:dc:37:09:
85:40:e1:6e:5d:a7:12:31:69:c2:52:bd:52:9f:c4:d4:bc:17:
53:93:31:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:24:05 2026 by rpki-client