Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.mft
File: SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.mft (raw, json)
Hash identifier: 30wQOcAUBd0tF2z5l7kBMEX5XGbrSDCIyMqk52HomQk=
Subject key identifier: DA:FA:E7:DE:FB:0D:75:CB:D2:FF:51:C6:BA:4A:D2:A7:6F:05:57:05
Authority key identifier: 49:17:58:77:3A:99:E7:71:B9:0C:A9:BB:22:F7:FC:AD:BF:B6:32:48
Certificate issuer: /CN=491758773a99e771b90ca9bb22f7fcadbfb63248
Certificate serial: 019D39778948D419D27519971903F3DD89BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.mft
Manifest number: 0133
Signing time: Sun 29 Mar 2026 12:00:28 +0000
Manifest this update: Sun 29 Mar 2026 12:00:28 +0000
Manifest next update: Mon 30 Mar 2026 12:00:28 +0000
Files and hashes: 1: SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.crl (hash: O5MtoOMigl9S+FQxSDpxQ2ne1iLi/9nX2RDH3CNZICQ=)
2: Z1MLI8tNzY6d4mU0MA4vsliznRQ.roa (hash: Hb0AvXt+7YtqdooEE/7Fg18JAVs1ie9AUIwS/98EVJs=)
3: rMUucMZwyHqVe68VNeoN6D-FuLA.asa (hash: nVyVPJj6zrsI6p0L4gt0DztUXIz3kVI0kWZGXavJ6p4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 12:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:89:48:d4:19:d2:75:19:97:19:03:f3:dd:89:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=491758773a99e771b90ca9bb22f7fcadbfb63248
Validity
Not Before: Mar 29 12:00:28 2026 GMT
Not After : Mar 30 12:00:28 2026 GMT
Subject: CN=dafae7defb0d75cbd2ff51c6ba4ad2a76f055705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ec:22:8d:3e:ee:42:33:56:9d:d2:40:64:38:
38:b0:e1:52:e3:78:8f:a1:cf:f5:b0:fb:a7:5c:4c:
81:d7:ba:72:fa:ac:e2:69:d7:8b:5f:f0:ad:13:8d:
38:e0:fe:15:1f:2c:c2:d0:0b:0b:f5:9c:3c:19:3c:
2b:d8:fc:75:72:76:fc:ef:df:20:8d:6a:89:bb:74:
fc:1c:4d:86:f4:85:c5:c6:c1:f3:c5:e0:8c:26:c0:
95:8b:37:3a:1d:bc:a2:b4:82:32:86:2a:13:29:88:
77:e8:1d:93:49:a4:3c:69:c8:7f:5f:09:28:94:0b:
4f:d4:62:7e:1a:5f:b6:4c:ff:3e:2d:5d:98:7e:62:
cd:29:e9:fd:60:19:5b:64:8b:65:de:c8:55:69:ba:
c0:a8:eb:70:93:57:e7:05:ff:ff:d9:57:16:2d:82:
a5:c0:9c:e4:d2:ae:ad:d9:39:2c:b4:bd:15:0e:9f:
11:91:0d:21:eb:4c:4a:d2:32:53:8e:66:11:8f:4f:
a3:73:47:e5:b7:a5:ac:b5:fd:1d:1c:b7:24:19:74:
20:87:65:c9:de:85:ee:94:21:ca:39:10:3c:b0:3c:
55:52:ee:3f:65:7e:9e:61:a8:db:9c:8c:df:ec:9a:
91:71:98:89:53:94:ae:24:c6:00:e4:74:ca:e8:cb:
28:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:FA:E7:DE:FB:0D:75:CB:D2:FF:51:C6:BA:4A:D2:A7:6F:05:57:05
X509v3 Authority Key Identifier:
keyid:49:17:58:77:3A:99:E7:71:B9:0C:A9:BB:22:F7:FC:AD:BF:B6:32:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:b8:bd:01:c2:a9:ee:c2:a9:30:86:c1:ac:ba:7e:a7:f9:90:
76:9d:15:63:49:52:2f:d0:a8:05:0d:4e:f7:5a:ac:ab:fb:93:
4c:4c:4f:c6:22:09:9b:00:73:6c:5b:3c:22:b5:23:5b:7e:53:
29:2f:36:37:1a:4c:97:c6:f5:ca:bc:8a:a4:d0:06:90:96:c5:
95:0e:cd:ea:ce:8e:a3:18:0a:64:e8:6e:b1:c0:2f:13:2c:f8:
85:a9:97:2d:ae:d4:f1:6e:fb:13:cb:6a:c3:be:0c:c8:11:4f:
6a:83:24:81:76:1a:14:7d:cb:9b:67:0c:9f:5b:6c:fa:59:57:
d3:c4:98:58:15:d7:dc:d4:fd:e5:4f:b3:88:aa:5f:1d:6e:c9:
ed:e6:a4:07:fd:48:1c:6b:86:30:aa:ff:61:78:e5:aa:9f:2b:
ca:5a:1e:99:7f:98:3d:f1:c7:4e:e4:24:91:c2:3b:83:53:f9:
c4:12:ac:20:23:66:ab:90:9e:aa:11:68:30:2a:d5:17:09:91:
6b:16:5f:26:fc:9b:f9:7c:9f:92:96:e2:7f:5a:cd:b0:13:9f:
ff:8f:14:20:26:fb:bb:45:2a:20:bb:7e:2e:8a:59:47:07:eb:
e4:0a:a2:ad:c3:d2:67:99:b7:dd:5f:67:13:23:60:78:8a:55:
12:0e:4a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:12:04 2026 by rpki-client