Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft
File: Sd2PGmKl1_gCEt4PPv51svozj_4.mft (raw, json)
Hash identifier: exWp6d/Xt5K82FB9UyZyPSd8pFC2qOF3ZlrLIX+GAxw=
Subject key identifier: 10:AE:21:86:03:69:34:C2:C2:FF:CB:72:41:A9:60:28:45:95:63:6D
Authority key identifier: 49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE
Certificate issuer: /CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe
Certificate serial: 019F82681D655EEEB652D8659D1786132E5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft
Manifest number: 1095
Signing time: Tue 21 Jul 2026 02:01:29 +0000
Manifest this update: Tue 21 Jul 2026 02:01:29 +0000
Manifest next update: Wed 22 Jul 2026 02:01:29 +0000
Files and hashes: 1: Sd2PGmKl1_gCEt4PPv51svozj_4.crl (hash: pqcGZVXxhrA2LR0+d9m/uSneT5/8ZuutonTMWMPls8s=)
2: V78nEVrkCr-6qVq2YThSOW0v9hQ.roa (hash: xNhsyzIzttzlPtpbDSsbaMS/afTumd4QgcW09/sybCo=)
3: Xa5ZEib4beYJlxTAfqH4TkUICYc.roa (hash: D8DKa7hMzJqzvE+Ps7OZpvhXs8ZcGfY5yNW/KmpvW2w=)
4: a9gOs16S7E8yMt4OCaHGofZ5_Nk.roa (hash: STlb4G4+2zO56FQhlRnjRCZNYNouodVHaskNufokcfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:82:68:1d:65:5e:ee:b6:52:d8:65:9d:17:86:13:2e:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe
Validity
Not Before: Jul 21 02:01:29 2026 GMT
Not After : Jul 22 02:01:29 2026 GMT
Subject: CN=10ae2186036934c2c2ffcb7241a960284595636d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:94:a8:e8:f5:d6:0c:d2:ac:be:59:09:a2:b8:
f7:62:2a:2c:ba:e3:6b:ba:c2:54:fe:71:e2:27:bf:
83:79:e8:31:a6:aa:52:34:b6:d9:38:bf:9d:3d:fa:
14:f8:7b:1c:3a:95:c5:40:ad:c4:ec:b3:a0:71:15:
e3:63:5c:a3:d3:e7:27:b8:aa:a6:1e:0d:9c:ed:50:
e7:49:17:fb:94:fc:07:db:e9:d9:5d:77:44:8b:52:
c6:8c:db:eb:d2:ed:a6:36:1f:67:e3:b6:e9:62:a8:
1f:69:7a:84:1b:5a:9e:45:7e:4b:75:9a:18:fe:bb:
98:f4:0e:70:8f:ce:d3:de:25:fd:69:7a:9e:7a:90:
62:4d:16:e4:42:56:a2:bd:d9:eb:52:ca:26:1d:45:
64:47:e3:53:61:81:7e:b3:d7:66:94:fa:32:99:ed:
4e:e6:22:5a:67:bd:ee:a7:cb:b6:d0:bd:e8:87:10:
23:8c:ea:a1:ce:33:73:62:3c:40:96:66:59:5c:d3:
75:53:59:31:68:d4:94:0b:8d:0c:f3:79:5e:af:33:
23:8a:86:75:53:43:12:52:8e:66:7c:6a:7a:40:ab:
a5:46:75:24:85:e0:c9:8b:bd:d1:1f:4d:71:f2:23:
04:ff:b0:79:ff:cb:c5:81:aa:f9:ed:50:3c:f2:67:
dd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:AE:21:86:03:69:34:C2:C2:FF:CB:72:41:A9:60:28:45:95:63:6D
X509v3 Authority Key Identifier:
keyid:49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:c7:79:3f:52:cd:03:19:20:82:75:08:af:7f:9b:f6:ef:c2:
4e:8f:1e:83:c3:fb:96:7e:4a:11:ab:52:d3:29:6d:97:d2:c7:
6a:fa:50:1f:27:82:dd:25:82:e1:81:69:b1:49:43:e0:21:52:
12:16:0f:bb:89:c9:d4:56:92:d9:42:44:2c:3e:8a:1e:a0:d6:
c6:98:e2:32:8c:2e:6c:6b:8f:f1:86:8e:53:96:cb:5f:bf:32:
13:2d:c1:b0:74:60:87:c2:6c:37:ad:07:ec:45:73:d3:e5:fe:
26:23:f9:d0:2a:4a:6b:71:e2:33:23:e5:44:40:7b:8c:ce:7a:
aa:76:23:02:d5:ae:34:b4:29:cc:b9:ba:5e:2d:72:e3:f3:93:
e3:34:8d:09:49:3d:96:c2:19:55:fe:3f:9d:d8:4c:27:b7:f9:
a5:95:45:8d:dd:96:74:63:6f:e9:10:4b:fc:f9:29:86:04:a7:
ec:71:fc:24:65:36:f2:ff:ba:d4:88:09:03:14:ca:15:42:77:
6b:55:d1:35:45:75:db:dc:d0:a4:e4:2d:f2:ed:5e:01:aa:03:
a4:f5:a9:4c:7e:4c:26:f1:59:1b:b6:69:b4:5b:76:b3:f4:e4:
42:6b:6f:14:ac:62:e5:26:02:48:2b:cb:6d:cb:bf:2e:fb:30:
87:3e:64:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 07:06:33 2026 by rpki-client