Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
File: SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft (raw, json)
Hash identifier: ToCoFCXra1k2TDIVlTszVcbu5qMNGWwA0lhD5T4k8y4=
Subject key identifier: 31:06:26:F3:4D:22:A6:D2:70:B8:DE:7B:CF:A4:E6:B8:F8:10:91:5A
Authority key identifier: 48:5D:DB:67:8C:4C:0D:0C:48:8E:FD:3B:83:67:14:21:89:F3:35:8A
Certificate issuer: /CN=485ddb678c4c0d0c488efd3b8367142189f3358a
Certificate serial: 019CE1EC4DD06793E004E236BFE6C6BF7D62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
Manifest number: 0842
Signing time: Thu 12 Mar 2026 12:01:25 +0000
Manifest this update: Thu 12 Mar 2026 12:01:25 +0000
Manifest next update: Fri 13 Mar 2026 12:01:25 +0000
Files and hashes: 1: 3jYKnkkcPN6zosdPDC704_TH7Vg.roa (hash: kX0KO9Whng4G4PQyxbPg/tClDSCWlQb64Svmgd3bElg=)
2: SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl (hash: pwX7seWt7ZZUzUEL9iFWEySQts6Td1Byw1sJo0Yvaks=)
3: d7BNBvtBybD-ouMBr6YNcUi45jE.roa (hash: z33gEnZ5ORYGaYJCcJZ5qtqJlEn1QrL+f98X4D8eWjU=)
4: r_AxxcY8QiH2nWS9CL04AgPUmsY.roa (hash: l8fqDJAdHfTIgiiJd3kewidzUv4M6LymruB3QWo/rdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 12:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e1:ec:4d:d0:67:93:e0:04:e2:36:bf:e6:c6:bf:7d:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485ddb678c4c0d0c488efd3b8367142189f3358a
Validity
Not Before: Mar 12 12:01:25 2026 GMT
Not After : Mar 13 12:01:25 2026 GMT
Subject: CN=310626f34d22a6d270b8de7bcfa4e6b8f810915a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:2c:3e:ad:49:35:b2:7a:b0:0e:f8:6b:46:23:
eb:80:af:79:70:c9:44:b6:37:d2:e8:c3:0c:30:11:
73:39:00:0b:c0:49:d0:87:b9:48:60:1b:e0:da:50:
51:76:cf:e1:f7:b6:bb:36:11:76:90:17:81:3a:74:
df:95:e1:8e:61:ff:cd:e2:c6:d9:14:49:f0:42:e8:
15:4a:7c:1e:0e:25:22:9c:24:6c:fe:2c:df:40:68:
41:3d:1a:3b:0e:d8:38:96:ab:c1:6b:0a:11:58:40:
68:b4:69:9c:92:24:59:6b:46:a2:d8:1e:c9:c7:b0:
5d:f3:55:1b:02:90:df:70:f3:fd:f0:13:6f:8d:dd:
d2:de:99:96:26:52:3d:ab:39:54:65:e5:4c:80:c4:
b4:9b:f0:59:3e:63:d6:63:3f:6d:e9:4e:38:25:84:
35:18:8f:cc:5e:55:89:56:27:bb:99:cd:9c:e1:0a:
48:81:11:31:e2:05:21:f3:9d:ee:c3:19:af:1a:fe:
ea:d1:e9:3e:a5:d2:f3:c3:f3:d6:28:9a:85:63:17:
37:75:df:f6:ca:ec:84:ab:62:f8:a1:2b:6c:6d:3a:
52:20:2d:6a:04:18:89:12:b6:7f:18:20:79:6d:1c:
61:00:2e:14:9d:e3:a9:76:45:cb:58:6e:68:82:f5:
d3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:06:26:F3:4D:22:A6:D2:70:B8:DE:7B:CF:A4:E6:B8:F8:10:91:5A
X509v3 Authority Key Identifier:
keyid:48:5D:DB:67:8C:4C:0D:0C:48:8E:FD:3B:83:67:14:21:89:F3:35:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ac:2c:48:63:bc:31:84:a5:3a:f9:d5:9b:39:5c:31:7e:19:
9b:bb:61:2f:0f:8a:fd:9a:0e:d2:43:60:5c:a6:2c:51:e7:a2:
34:c8:19:cb:b3:8b:9f:94:eb:11:07:85:59:84:3b:f3:eb:92:
04:17:52:4a:a5:8a:e4:ff:c5:07:71:01:8c:08:ed:1c:0e:50:
65:9e:58:55:81:5c:26:da:5f:b5:07:00:95:40:66:51:74:6e:
f2:db:1b:9f:c9:d8:0b:8c:92:c3:46:28:c4:08:02:72:7f:79:
9f:61:b9:e0:ea:f0:49:25:fe:9b:00:90:5e:f5:47:b5:0a:a9:
84:6c:15:e9:0b:1d:3c:37:d1:84:74:cd:e1:d4:99:a1:ba:63:
81:14:19:31:01:d7:be:fb:43:e1:86:7c:16:de:31:a5:85:49:
8c:c0:27:cd:34:44:97:5e:51:1b:02:8d:e6:88:e1:36:89:94:
da:f8:f8:47:94:e4:df:57:fb:13:9e:1b:66:8c:62:00:19:fc:
fa:5f:a2:7d:61:6e:b9:f1:d3:a3:55:ca:65:11:ac:e6:7f:99:
44:09:ce:b8:0e:2d:37:14:5a:d6:df:b1:a7:2d:ba:cf:48:39:
67:23:31:40:42:d9:b4:32:f3:28:a2:d8:33:a5:6a:5d:41:60:
44:67:0d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 17:09:16 2026 by rpki-client