Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft
File: SReefPYEiMPvW3cNIa6xR9pMfO4.mft (raw, json)
Hash identifier: D0J7QFezOp5NbONizgnfnAoAjzz1gmwG9E3jpwRYn+4=
Subject key identifier: 61:34:A2:EF:26:1D:D3:77:C4:46:6F:BC:C6:0A:01:85:BA:E2:DB:5C
Authority key identifier: 49:17:9E:7C:F6:04:88:C3:EF:5B:77:0D:21:AE:B1:47:DA:4C:7C:EE
Certificate issuer: /CN=49179e7cf60488c3ef5b770d21aeb147da4c7cee
Certificate serial: 019EBA6AF6535F5356C235F48B422C50643C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SReefPYEiMPvW3cNIa6xR9pMfO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft
Manifest number: 163D
Signing time: Fri 12 Jun 2026 06:00:32 +0000
Manifest this update: Fri 12 Jun 2026 06:00:32 +0000
Manifest next update: Sat 13 Jun 2026 06:00:32 +0000
Files and hashes: 1: Ep5ktzb7jazkCqqKIA1eaooWA3A.roa (hash: V0HuBh1yvdXINaO+p6RF/CkRfffpWDmrMD6p3MKWJhs=)
2: SReefPYEiMPvW3cNIa6xR9pMfO4.crl (hash: MfrcYnZXgFlgzH9dGHvxx0kk/pkqsHWoXt2xC960sjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SReefPYEiMPvW3cNIa6xR9pMfO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 06:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ba:6a:f6:53:5f:53:56:c2:35:f4:8b:42:2c:50:64:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49179e7cf60488c3ef5b770d21aeb147da4c7cee
Validity
Not Before: Jun 12 06:00:32 2026 GMT
Not After : Jun 13 06:00:32 2026 GMT
Subject: CN=6134a2ef261dd377c4466fbcc60a0185bae2db5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fd:33:40:a4:25:b2:17:37:7c:fe:9d:0d:5d:
33:16:92:60:4d:f4:8d:e4:ec:55:3c:b6:57:04:c1:
7d:1b:44:52:42:24:ef:66:c8:cf:ad:b1:d6:01:3b:
28:24:7f:58:c1:51:7a:c8:a5:b7:fd:b9:60:6b:b7:
8b:1c:12:c1:ff:f0:c9:ef:ed:df:e5:e9:17:00:5f:
72:5f:95:a1:3d:8e:94:56:35:e5:68:d5:0a:bf:59:
7c:50:61:ad:d2:21:a2:83:db:d9:02:61:47:14:d5:
76:a6:6e:88:ef:13:e3:14:f1:56:e8:93:f1:a3:e1:
39:a0:fc:82:0c:58:5a:54:ec:9a:96:29:19:3f:af:
4e:07:23:9c:32:35:c5:cf:3b:31:27:a2:0c:e0:0c:
fd:b1:4b:b5:1a:37:f8:48:f1:27:c5:9a:f3:64:46:
c7:bf:bf:d7:0a:fb:dc:38:50:f6:15:f7:10:c7:ad:
ba:00:48:4e:d6:3e:00:40:6a:27:a4:5b:d2:02:33:
50:f9:70:f5:71:91:3b:33:26:58:e1:c1:ab:c5:0d:
66:53:3c:35:84:5b:5c:3e:87:e8:37:65:61:3c:bc:
19:3f:ea:c5:76:6f:fd:eb:5f:1c:55:0d:43:18:0f:
93:7b:0f:db:15:01:a0:21:8e:49:27:7f:77:cf:93:
ee:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:34:A2:EF:26:1D:D3:77:C4:46:6F:BC:C6:0A:01:85:BA:E2:DB:5C
X509v3 Authority Key Identifier:
keyid:49:17:9E:7C:F6:04:88:C3:EF:5B:77:0D:21:AE:B1:47:DA:4C:7C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SReefPYEiMPvW3cNIa6xR9pMfO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:11:37:ee:15:4c:40:73:4f:c8:e1:6b:c2:56:eb:36:78:3f:
cb:c0:e9:1d:65:a0:bd:06:b4:62:cc:ee:18:37:5c:4d:06:ce:
7a:49:c8:1c:21:85:cd:24:1f:74:8e:a6:62:1a:c6:75:0b:e1:
35:f6:45:5b:c2:e3:43:c1:9b:f7:3a:e6:92:c4:e3:43:52:d3:
d7:64:d0:d1:4e:6d:11:64:2a:68:7d:38:5f:ce:c6:56:5e:cf:
a4:24:50:26:8a:0b:36:f7:56:cb:1e:22:3e:31:8b:d0:b6:24:
8e:42:3b:65:6b:88:e3:49:08:60:40:1f:b3:48:09:58:85:9a:
9f:88:a2:bc:5d:2c:1b:f0:98:7b:a1:d1:7b:a2:64:3c:f1:ab:
e7:95:6d:41:bd:9d:6a:4f:b5:f0:f8:30:8b:43:26:ed:d5:8a:
35:7f:8a:33:22:ce:ea:e6:23:e0:84:35:91:c8:3d:8d:45:60:
03:f0:ed:64:2b:02:d3:9b:27:66:19:88:8c:f4:92:d3:19:d2:
86:91:b5:68:23:85:5c:e7:c9:19:43:0e:c9:0a:7a:4a:15:55:
59:03:91:fd:73:0c:2b:7c:47:83:cb:52:e7:2b:03:57:37:14:
7d:15:73:e8:01:9a:a5:84:5a:08:97:01:58:44:00:d9:34:2e:
2b:70:eb:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 09:09:57 2026 by rpki-client