Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.mft
File: SrfcA3ifWGIbJejdDZJdyRtKWqI.mft (raw, json)
Hash identifier: eGV3C0a+My/h9aqZ9wrfKu0hSmiczUD39DtjoAi+UYw=
Subject key identifier: 7F:31:6E:5E:85:0B:0A:2F:4F:82:E8:0C:D2:4B:D1:72:26:DA:AA:F8
Authority key identifier: 4A:B7:DC:03:78:9F:58:62:1B:25:E8:DD:0D:92:5D:C9:1B:4A:5A:A2
Certificate issuer: /CN=4ab7dc03789f58621b25e8dd0d925dc91b4a5aa2
Certificate serial: 019F864482CBCE77C4FDA2A713155EE590D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SrfcA3ifWGIbJejdDZJdyRtKWqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.mft
Manifest number: 0E66
Signing time: Tue 21 Jul 2026 20:01:04 +0000
Manifest this update: Tue 21 Jul 2026 20:01:04 +0000
Manifest next update: Wed 22 Jul 2026 20:01:04 +0000
Files and hashes: 1: PsulLIoJ2K5yIXwpqDT_vBbetoI.roa (hash: g6k+9r2f7VE361y/QPPTNZq47JKvyoKEVsQ41jGm2AM=)
2: SrfcA3ifWGIbJejdDZJdyRtKWqI.crl (hash: dgpjZV2Hk7gTKY9uOK/zet2pe5oXPOOE9C0rNtjytqY=)
3: xPJTQ1B0b58IM-swEMoKUaok-jY.roa (hash: 8WLFOKN87EOL1HNV9YM46I3DeHkcz7BwooQlJCjXH2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SrfcA3ifWGIbJejdDZJdyRtKWqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 20:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:44:82:cb:ce:77:c4:fd:a2:a7:13:15:5e:e5:90:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ab7dc03789f58621b25e8dd0d925dc91b4a5aa2
Validity
Not Before: Jul 21 20:01:04 2026 GMT
Not After : Jul 22 20:01:04 2026 GMT
Subject: CN=7f316e5e850b0a2f4f82e80cd24bd17226daaaf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5c:1d:04:ef:34:b5:2d:0a:b7:40:b4:c7:2d:
67:b8:bd:82:a9:62:6d:f7:d8:74:57:74:91:68:b7:
21:06:ec:1d:b4:45:67:47:27:eb:7f:a2:61:15:cb:
be:ea:5c:6a:34:c2:06:1c:03:83:28:7d:dd:28:37:
2a:c4:5e:87:13:3e:b8:a4:53:a4:97:cd:ce:30:f3:
7d:96:48:5e:af:71:6e:7d:74:fe:e6:da:41:73:bc:
3f:0b:a7:a2:79:4e:8d:07:6f:09:0d:e9:e5:17:64:
33:4b:96:e8:7f:6d:5e:87:3a:9b:f2:4c:04:05:0f:
1f:3a:38:93:cf:de:3c:04:cd:59:5b:eb:9b:37:36:
55:4e:47:68:7f:c2:48:7e:a6:0e:2d:cd:88:6c:66:
70:b1:7b:57:2e:b9:af:68:df:60:f1:a8:04:4d:92:
34:5d:a3:d7:3d:60:d8:98:d4:98:17:8d:40:dd:87:
f8:c3:05:be:97:e9:f0:f8:a1:c0:c0:77:a5:2f:ff:
c2:ab:56:fe:38:4e:e4:9a:64:3a:22:32:34:cc:ab:
61:f3:7f:d5:91:25:76:80:78:29:f6:cb:d4:fa:59:
78:61:27:6a:a1:40:a8:95:b3:4e:cb:b1:bf:00:aa:
bc:28:bf:eb:43:7a:26:8d:8c:2a:9b:0d:70:bf:fd:
f6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:31:6E:5E:85:0B:0A:2F:4F:82:E8:0C:D2:4B:D1:72:26:DA:AA:F8
X509v3 Authority Key Identifier:
keyid:4A:B7:DC:03:78:9F:58:62:1B:25:E8:DD:0D:92:5D:C9:1B:4A:5A:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SrfcA3ifWGIbJejdDZJdyRtKWqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ef:53:c6:2e:b4:30:32:ec:67:17:45:73:dc:f3:49:ed:28:
f8:62:41:6e:8e:ad:94:c6:a6:22:71:75:d1:ed:bf:e1:67:45:
eb:04:73:86:44:1e:69:0f:e3:10:e2:13:74:e3:8c:f6:4d:98:
78:c9:69:d5:8b:1b:5e:cd:57:c3:75:7c:d7:b4:22:15:c2:54:
e6:ed:e2:fe:ec:c2:10:7d:9c:5f:87:53:be:cd:e1:86:3b:82:
12:e2:f8:b0:81:02:99:29:ae:d9:09:c3:fb:63:e0:77:f5:cb:
3f:e4:e9:e7:b9:94:1d:ac:68:3c:99:58:db:20:23:31:e0:d5:
5b:47:0a:d2:d3:00:a5:e9:ac:77:a7:c0:c6:d8:5f:a1:95:b3:
c1:b4:bf:d1:0d:66:96:92:fb:7e:80:b2:94:97:e8:cf:d3:c8:
e1:df:11:2d:27:d3:6a:5b:6d:5b:9f:89:c9:74:48:a9:af:b3:
0d:00:7b:a1:db:a4:99:8e:67:82:2f:9e:c6:8b:d1:9e:40:d3:
43:8d:5e:79:f8:f9:e7:e2:ca:90:30:00:25:eb:ad:68:8c:e7:
aa:ca:57:f6:9e:8f:0e:66:21:ef:8b:fe:52:fe:9e:ac:89:35:
b8:ec:d0:96:95:99:c2:cd:a4:67:5a:d3:49:e2:2e:f8:84:06:
2b:21:ae:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:44:46 2026 by rpki-client