Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
File: SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft (raw, json)
Hash identifier: cNcrga0EomizDTTFDoYLePaucsaNY5YUp1C3eVfBrDw=
Subject key identifier: CC:F9:3B:41:3E:45:B0:7D:63:96:2B:CB:F5:00:91:41:EE:7D:3E:2A
Authority key identifier: 48:5D:DB:67:8C:4C:0D:0C:48:8E:FD:3B:83:67:14:21:89:F3:35:8A
Certificate issuer: /CN=485ddb678c4c0d0c488efd3b8367142189f3358a
Certificate serial: 01A17628588E8EA8DFB5C600152811106506
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
Manifest number: 0AA1
Signing time: Mon 26 Oct 2026 03:01:57 +0000
Manifest this update: Mon 26 Oct 2026 03:01:57 +0000
Manifest next update: Tue 27 Oct 2026 03:01:57 +0000
Files and hashes: 1: 3jYKnkkcPN6zosdPDC704_TH7Vg.roa (hash: kX0KO9Whng4G4PQyxbPg/tClDSCWlQb64Svmgd3bElg=)
2: SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl (hash: lLt9L/5Hpu4ittOmbP5vKf8KSwQtDy1ydddJ/mdDTo4=)
3: d7BNBvtBybD-ouMBr6YNcUi45jE.roa (hash: z33gEnZ5ORYGaYJCcJZ5qtqJlEn1QrL+f98X4D8eWjU=)
4: r_AxxcY8QiH2nWS9CL04AgPUmsY.roa (hash: l8fqDJAdHfTIgiiJd3kewidzUv4M6LymruB3QWo/rdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:28:58:8e:8e:a8:df:b5:c6:00:15:28:11:10:65:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485ddb678c4c0d0c488efd3b8367142189f3358a
Validity
Not Before: Oct 26 03:01:57 2026 GMT
Not After : Oct 27 03:01:57 2026 GMT
Subject: CN=ccf93b413e45b07d63962bcbf5009141ee7d3e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a6:9b:70:ea:0b:9f:85:35:24:f3:4d:5b:41:
ff:39:07:fe:86:62:96:28:e3:15:db:02:53:62:c2:
36:cb:6e:7a:71:1c:e7:05:74:25:10:96:ee:34:b7:
3f:f9:d6:97:4d:bd:af:b6:2d:aa:1f:26:76:f0:5d:
ff:4e:0c:ac:29:8c:e2:ca:c5:79:60:84:2c:9d:3d:
b6:e5:eb:ec:06:e5:6a:b4:0d:a6:20:65:0a:f6:b4:
19:27:41:24:b3:fb:ba:1a:d0:17:25:e6:92:66:26:
c2:cd:2f:bf:4c:70:5d:ab:a8:e7:88:da:5d:49:28:
a4:4c:a0:5c:f9:d5:06:fa:f2:5e:db:01:e8:00:c6:
d6:0b:e8:db:6b:12:80:4d:e8:91:18:20:31:03:27:
ec:76:53:62:8a:84:bb:6a:11:f4:a7:4c:48:01:d1:
2c:51:cb:29:91:b8:1d:cc:11:54:a2:7d:1e:a6:27:
de:15:71:70:c2:91:d3:c4:dc:a7:54:9d:1d:37:91:
75:4d:18:6b:19:d7:d5:19:53:fd:a2:1c:ab:07:ef:
45:4f:ae:8f:96:b1:80:1b:cc:13:4e:ba:4a:a6:f5:
5e:65:35:c5:84:2d:57:70:48:f3:bb:a0:47:17:2a:
8d:57:61:27:cc:aa:c9:c5:ad:45:1b:2c:42:1f:4b:
52:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F9:3B:41:3E:45:B0:7D:63:96:2B:CB:F5:00:91:41:EE:7D:3E:2A
X509v3 Authority Key Identifier:
keyid:48:5D:DB:67:8C:4C:0D:0C:48:8E:FD:3B:83:67:14:21:89:F3:35:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:b6:05:e8:d5:9a:5e:d2:da:e9:47:db:f5:ba:ef:71:86:43:
22:d4:8b:2c:2b:26:ea:ce:cd:96:b3:37:e2:3b:8a:4b:95:ff:
ae:96:83:9f:95:13:58:fd:23:2a:32:e9:c8:23:c8:c4:85:29:
8d:30:be:19:d9:94:14:f5:6b:36:a2:cc:df:07:8e:69:fe:b7:
d9:ca:76:67:3a:59:d3:75:13:82:a3:1e:b6:6f:da:d3:c4:1e:
e3:f2:d5:55:53:a4:a8:8d:15:e4:70:20:4b:6a:8a:56:77:3e:
07:ff:fd:c2:83:0f:43:89:7c:a8:39:19:22:e0:d3:7d:9c:8a:
a9:38:f3:ac:2b:b3:1d:db:e7:3a:34:98:f6:f1:4b:80:76:f6:
63:64:20:83:ea:a3:6a:46:1f:6d:c3:9e:fb:fc:d0:dc:1f:e4:
fb:5f:cc:e1:25:39:6a:2e:3e:c0:bb:41:11:83:70:f8:a1:16:
62:38:fa:84:79:23:2a:fd:97:52:ed:6b:43:59:56:25:07:be:
49:f0:2c:84:e9:51:32:59:0f:6a:76:a4:99:81:d7:cc:07:74:
a8:b8:90:5a:44:37:c5:b7:e6:ad:65:ce:b4:be:34:87:d6:01:
93:1e:b0:a6:c9:42:cf:4a:29:f7:91:83:0b:d4:4b:dc:eb:ad:
db:ed:56:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 07:32:07 2026 by rpki-client