Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft
File: SReefPYEiMPvW3cNIa6xR9pMfO4.mft (raw, json)
Hash identifier: 5SrHh7tnpbDaaaKkdsJVtkosuRrqKMI7fjg+Ju3EBvA=
Subject key identifier: BA:1B:C5:F9:F4:84:0C:A8:5E:02:9E:2E:59:30:16:80:BA:77:FC:8A
Authority key identifier: 49:17:9E:7C:F6:04:88:C3:EF:5B:77:0D:21:AE:B1:47:DA:4C:7C:EE
Certificate issuer: /CN=49179e7cf60488c3ef5b770d21aeb147da4c7cee
Certificate serial: 019D3A1C651458CFDC5FCB02F446679AE734
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SReefPYEiMPvW3cNIa6xR9pMfO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft
Manifest number: 1576
Signing time: Sun 29 Mar 2026 15:00:32 +0000
Manifest this update: Sun 29 Mar 2026 15:00:32 +0000
Manifest next update: Mon 30 Mar 2026 15:00:32 +0000
Files and hashes: 1: Ep5ktzb7jazkCqqKIA1eaooWA3A.roa (hash: V0HuBh1yvdXINaO+p6RF/CkRfffpWDmrMD6p3MKWJhs=)
2: SReefPYEiMPvW3cNIa6xR9pMfO4.crl (hash: +bsoAVn9ELxhqOF9ehQWadXpOPbZeZt3Nx1kMD+O+70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SReefPYEiMPvW3cNIa6xR9pMfO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:65:14:58:cf:dc:5f:cb:02:f4:46:67:9a:e7:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49179e7cf60488c3ef5b770d21aeb147da4c7cee
Validity
Not Before: Mar 29 15:00:32 2026 GMT
Not After : Mar 30 15:00:32 2026 GMT
Subject: CN=ba1bc5f9f4840ca85e029e2e59301680ba77fc8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9c:ce:d1:36:78:5a:5c:23:3a:5e:a9:96:04:
b9:c1:b2:2e:7e:18:8b:83:8a:71:e3:fb:80:1a:a4:
4b:79:69:7f:da:23:7a:9a:74:1a:2a:b7:3d:de:4b:
0e:37:c6:ba:8d:ec:95:ec:ef:de:a2:b1:e8:23:18:
0d:f2:f6:8e:fb:07:ca:03:f7:39:82:db:6a:e5:6f:
50:c7:6d:8e:5b:73:de:5d:5b:e1:4e:5b:d9:3b:41:
00:ca:67:cb:f4:f6:41:3f:0b:5a:64:15:72:59:72:
9d:81:a0:2f:7e:90:b9:7a:bc:7b:98:87:e0:ab:6b:
a6:92:69:d0:74:e0:fe:b9:05:83:f5:47:2a:82:72:
cb:16:34:dd:cc:e9:2b:57:32:1b:4d:ac:2a:c5:02:
cd:bc:2f:15:20:31:e8:d2:20:5a:6f:ae:dd:a0:f0:
e7:1d:50:44:39:4f:46:eb:05:aa:e0:19:1f:92:a7:
04:d0:5f:e4:17:78:49:58:a4:6e:13:09:e0:9a:58:
77:f6:96:2e:de:a7:ed:64:c6:c4:37:05:73:0b:3e:
e7:2f:22:c3:95:f2:de:60:4c:9d:75:c3:41:77:97:
13:f6:cf:18:17:4e:c1:99:8d:05:33:ef:2f:09:80:
70:df:e6:8a:fc:f9:4e:7b:c8:0b:96:c3:95:69:b0:
b7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:1B:C5:F9:F4:84:0C:A8:5E:02:9E:2E:59:30:16:80:BA:77:FC:8A
X509v3 Authority Key Identifier:
keyid:49:17:9E:7C:F6:04:88:C3:EF:5B:77:0D:21:AE:B1:47:DA:4C:7C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SReefPYEiMPvW3cNIa6xR9pMfO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:34:32:7f:87:86:05:21:33:aa:87:67:fc:dd:65:6a:90:08:
89:f2:dd:f5:97:50:eb:53:db:e5:dd:96:7a:e0:e3:7b:e6:81:
3c:00:96:36:3c:09:53:27:ba:f1:d6:67:90:33:8e:31:ec:ed:
f4:22:36:e5:42:24:62:00:fb:20:61:38:ff:4e:38:ef:10:fe:
78:00:5d:52:ac:d3:ff:89:42:0b:e9:93:33:51:29:02:96:04:
66:00:eb:a9:10:62:fe:b4:9c:47:d8:e2:1c:2b:77:c9:90:d3:
46:d6:6f:2e:6e:bd:4a:c4:80:90:f1:41:4c:ba:ef:10:69:ef:
65:3f:87:3e:a7:22:61:cb:34:f8:58:02:fc:9f:65:bb:08:c9:
a4:21:2b:b1:0a:04:07:96:98:89:2d:53:20:9f:19:7b:9c:d9:
93:9f:82:71:98:3a:c0:79:b6:08:e8:56:40:52:84:0c:92:e5:
be:a2:37:f2:f3:28:e7:e3:6c:47:19:06:55:07:bf:07:c5:29:
fe:08:f2:8f:73:d3:cf:98:6e:42:d2:5c:cb:f4:4c:a2:61:64:
15:7d:f9:5a:00:ba:b7:63:6f:4d:10:ef:66:d7:dc:e3:45:dc:
4f:e0:f8:33:27:12:41:dd:cf:b7:33:cb:d7:71:92:ba:6b:f3:
a2:3c:dd:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:13:13 2026 by rpki-client