Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.mft
File: SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.mft (raw, json)
Hash identifier: tk7Ywy1NXj21uBDfLMKMuz+xERno6zL1Z1rtyPZtj5U=
Subject key identifier: EE:46:75:A5:4C:42:E4:56:4F:76:4D:EB:C9:73:F7:73:AE:A2:60:D8
Authority key identifier: 49:17:58:77:3A:99:E7:71:B9:0C:A9:BB:22:F7:FC:AD:BF:B6:32:48
Certificate issuer: /CN=491758773a99e771b90ca9bb22f7fcadbfb63248
Certificate serial: 01A186AD9FA9C6BECFE9B957435717AFC805
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.mft
Manifest number: 036E
Signing time: Thu 29 Oct 2026 08:01:27 +0000
Manifest this update: Thu 29 Oct 2026 08:01:27 +0000
Manifest next update: Fri 30 Oct 2026 08:01:27 +0000
Files and hashes: 1: SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.crl (hash: MFP5c7n0pGvLpbPxNfxoc9AaJHdvHdX1OgsdJlPj00s=)
2: Z1MLI8tNzY6d4mU0MA4vsliznRQ.roa (hash: Hb0AvXt+7YtqdooEE/7Fg18JAVs1ie9AUIwS/98EVJs=)
3: wqC_NxiWyjJgLTJPPHhovqD7_pk.asa (hash: aMbvgTbGGGUalP6tB5y93mWncuZ7x+8sG7VUvXoPA50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:ad:9f:a9:c6:be:cf:e9:b9:57:43:57:17:af:c8:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=491758773a99e771b90ca9bb22f7fcadbfb63248
Validity
Not Before: Oct 29 08:01:27 2026 GMT
Not After : Oct 30 08:01:27 2026 GMT
Subject: CN=ee4675a54c42e4564f764debc973f773aea260d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fc:ae:3b:65:f4:97:64:35:fc:bf:55:0d:a8:
c7:07:68:a8:81:e4:2d:cd:71:8d:89:97:a0:b3:94:
b4:79:ff:19:1c:d3:1c:c3:95:94:2e:b6:f5:dd:05:
b7:c3:39:80:9e:8d:79:95:92:50:8c:7a:c2:9c:2b:
39:33:bf:c4:a2:56:bc:55:0f:d0:4a:14:b5:2d:1c:
35:22:e0:a6:a7:5a:f7:50:43:e3:42:8e:a5:1d:49:
c4:bd:f7:92:3a:94:ee:13:31:8b:5a:11:2d:20:f6:
3c:57:29:f4:72:a8:95:86:13:4c:a5:e0:08:93:fe:
ac:61:82:65:dd:e1:cc:e4:8f:24:76:94:5f:b6:62:
24:ba:42:07:b5:55:7a:29:ee:bf:d2:15:2b:9a:cf:
dc:b4:f5:48:db:20:91:dc:7f:57:4c:43:4d:15:40:
1f:31:c6:6e:90:19:ff:dc:3c:ac:cd:9e:e5:30:02:
a6:77:f9:ca:07:dd:61:c4:4a:7f:91:53:57:9f:4b:
48:87:d3:9d:a4:0d:2c:60:20:c9:1f:92:08:29:ad:
6c:51:6a:f1:a7:5d:1f:4a:85:4c:fd:41:42:4e:e9:
98:fd:37:f3:80:ee:01:54:27:b7:b8:64:0e:6c:c1:
88:e8:25:99:c6:e1:20:23:b0:b8:77:06:79:08:42:
b1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:46:75:A5:4C:42:E4:56:4F:76:4D:EB:C9:73:F7:73:AE:A2:60:D8
X509v3 Authority Key Identifier:
keyid:49:17:58:77:3A:99:E7:71:B9:0C:A9:BB:22:F7:FC:AD:BF:B6:32:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:44:d6:73:6b:dc:ec:22:9d:38:b5:02:e7:5a:14:bf:a5:ee:
66:24:47:b1:5f:d1:f1:f5:54:c7:77:b2:1f:35:0a:54:ae:72:
69:4e:21:49:f7:b3:f0:93:89:69:40:58:75:f4:3c:00:2a:dd:
f2:8c:b6:43:a6:ee:f5:cb:ee:ae:38:72:f4:9e:30:f8:1a:78:
d8:21:d2:21:83:4b:45:b7:b2:de:13:26:0f:10:e3:be:c9:a4:
24:1d:84:33:a2:11:53:ab:35:af:32:20:39:b3:8e:bd:71:24:
b0:dd:13:c8:3f:6e:5b:7f:be:45:44:04:8c:da:e7:29:28:3d:
21:e4:69:ae:96:31:de:5b:75:6c:40:7f:80:2a:d8:38:c3:66:
43:ec:37:63:17:08:e1:21:fc:d9:cf:29:01:c3:94:8c:ae:23:
7a:86:03:bd:11:36:9e:e0:2e:42:4c:b1:17:06:e7:45:3e:56:
86:65:16:dc:12:58:e4:2f:a6:33:a0:8b:68:dc:1c:27:96:8e:
49:e9:64:aa:7e:6a:50:4e:ca:4e:77:d2:47:34:73:ca:09:9c:
a9:b9:8e:c8:dd:79:eb:1b:d1:78:88:e7:dd:7c:d9:22:24:3a:
e5:7c:12:e7:ef:34:41:48:bf:c4:36:8a:32:0a:18:b7:8b:32:
92:2d:04:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 15:57:59 2026 by rpki-client