Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.mft
File: SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.mft (raw, json)
Hash identifier: zpVnVL+o0cw+Ufu4IjKwCoA1lMER5xcN9bHEoo4HC4w=
Subject key identifier: 09:C1:48:E6:A8:EA:A9:1B:F5:17:F5:EB:10:55:4B:C6:2F:1D:1C:85
Authority key identifier: 49:17:58:77:3A:99:E7:71:B9:0C:A9:BB:22:F7:FC:AD:BF:B6:32:48
Certificate issuer: /CN=491758773a99e771b90ca9bb22f7fcadbfb63248
Certificate serial: 019F10AE050420038D84EEB9F2F7CCB32F9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.mft
Manifest number: 0227
Signing time: Mon 29 Jun 2026 00:01:07 +0000
Manifest this update: Mon 29 Jun 2026 00:01:07 +0000
Manifest next update: Tue 30 Jun 2026 00:01:07 +0000
Files and hashes: 1: SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.crl (hash: XCWdVQ5Qst1KN/rAQ2pahJ03R7alwSlmOGka82uHZOc=)
2: Z1MLI8tNzY6d4mU0MA4vsliznRQ.roa (hash: Hb0AvXt+7YtqdooEE/7Fg18JAVs1ie9AUIwS/98EVJs=)
3: rMUucMZwyHqVe68VNeoN6D-FuLA.asa (hash: nVyVPJj6zrsI6p0L4gt0DztUXIz3kVI0kWZGXavJ6p4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 00:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:10:ae:05:04:20:03:8d:84:ee:b9:f2:f7:cc:b3:2f:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=491758773a99e771b90ca9bb22f7fcadbfb63248
Validity
Not Before: Jun 29 00:01:07 2026 GMT
Not After : Jun 30 00:01:07 2026 GMT
Subject: CN=09c148e6a8eaa91bf517f5eb10554bc62f1d1c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ee:07:d6:c4:7e:2b:50:c1:74:bd:4a:ca:8f:
6a:63:f1:93:c3:d2:c0:6f:c4:a4:db:df:50:59:6a:
63:0f:a1:5c:6b:18:16:dc:0a:34:cc:4f:f1:01:5e:
90:22:9b:22:3e:f0:e9:07:34:d2:da:dd:b9:15:74:
c3:f8:d5:09:8f:d7:f8:5b:b2:43:5a:d5:a6:e0:b2:
2c:79:14:34:f8:f9:36:20:df:d8:84:68:59:15:34:
4a:3b:c4:d5:88:e1:cc:c8:e7:d9:64:8b:2c:35:c8:
54:08:79:5c:4d:f8:9a:70:7b:3c:b1:26:b5:53:11:
83:d4:02:70:56:f8:db:9c:e4:07:82:9b:5a:4b:ac:
41:2f:39:52:88:31:12:1e:3f:3e:cb:d1:06:f7:54:
14:89:92:3a:b3:a4:6a:a1:c2:97:b8:be:8b:f9:1c:
19:1b:8f:a5:2b:28:79:f1:4e:de:45:75:8e:cb:ec:
5d:ac:d6:db:e7:19:04:9d:96:b1:37:16:87:45:52:
3d:38:0b:a7:2b:61:bc:69:bd:76:ea:3a:36:b7:64:
99:06:c3:78:61:82:68:7b:fd:07:1b:31:c9:46:42:
f8:65:e7:e2:82:ef:b5:18:b7:3f:91:b2:3a:46:ae:
60:cd:58:b8:c5:4a:ef:99:ce:d0:53:dd:c6:88:db:
fb:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C1:48:E6:A8:EA:A9:1B:F5:17:F5:EB:10:55:4B:C6:2F:1D:1C:85
X509v3 Authority Key Identifier:
keyid:49:17:58:77:3A:99:E7:71:B9:0C:A9:BB:22:F7:FC:AD:BF:B6:32:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:a1:99:6d:48:c2:db:94:27:86:b8:48:fb:b8:fd:2d:d1:e2:
4d:1f:62:76:69:d4:03:a8:bf:9c:5e:a0:0c:54:f4:bb:12:2d:
49:9b:c5:83:fe:f3:f6:61:1c:cb:4f:43:c1:6d:b0:e5:33:23:
12:ea:23:2f:b9:df:7a:ad:e4:6e:c4:3b:43:58:d6:9e:e2:4e:
25:60:e9:be:b5:29:28:dd:27:83:bc:bb:a2:24:a9:9d:9e:9b:
ee:4b:75:07:d0:94:f3:6a:85:05:50:a0:12:26:2a:2c:18:e9:
74:f1:ad:0a:0e:3c:7f:a3:1e:56:83:a7:d9:00:a1:93:13:94:
a6:1a:16:41:c4:69:b9:c1:93:dc:13:e0:f9:ee:ee:41:41:66:
87:26:df:d9:86:b2:91:7a:f3:40:85:1d:30:40:46:f6:a9:b2:
e0:0e:97:47:03:69:a0:48:17:4a:42:97:ad:b9:3f:5d:8a:d7:
e9:45:7e:3b:ef:78:df:3b:b3:87:c7:df:0c:bb:f6:0a:cf:94:
ad:7d:6b:62:3c:9e:4c:1b:1e:c4:3e:0f:de:96:84:3f:19:db:
6b:30:3d:d0:e8:eb:3c:b0:b0:88:da:b8:01:df:be:7e:bd:cd:
90:ba:b5:b3:6e:6f:39:74:12:79:a2:0c:2b:9d:1e:83:65:b4:
7b:a1:15:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:38:39 2026 by rpki-client