Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.mft
File: SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.mft (raw, json)
Hash identifier: L9KUgka0cSMD0ZvSqah4LB2GksMibKt8WPJ0QKKwboc=
Subject key identifier: 72:C6:88:B2:C9:C9:10:06:B3:43:E3:F2:35:8A:D3:D5:9F:50:67:2A
Authority key identifier: 49:17:58:77:3A:99:E7:71:B9:0C:A9:BB:22:F7:FC:AD:BF:B6:32:48
Certificate issuer: /CN=491758773a99e771b90ca9bb22f7fcadbfb63248
Certificate serial: 01A03C71D656C45B9D7929B9A4940C966D9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.mft
Manifest number: 02C3
Signing time: Wed 26 Aug 2026 05:01:28 +0000
Manifest this update: Wed 26 Aug 2026 05:01:28 +0000
Manifest next update: Thu 27 Aug 2026 05:01:28 +0000
Files and hashes: 1: SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.crl (hash: 2xdeLWdkKB/oJpTSBTIGqS1Yks1ZSYnk0gAfEuXRBP8=)
2: Z1MLI8tNzY6d4mU0MA4vsliznRQ.roa (hash: Hb0AvXt+7YtqdooEE/7Fg18JAVs1ie9AUIwS/98EVJs=)
3: wqC_NxiWyjJgLTJPPHhovqD7_pk.asa (hash: aMbvgTbGGGUalP6tB5y93mWncuZ7x+8sG7VUvXoPA50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 05:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3c:71:d6:56:c4:5b:9d:79:29:b9:a4:94:0c:96:6d:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=491758773a99e771b90ca9bb22f7fcadbfb63248
Validity
Not Before: Aug 26 05:01:28 2026 GMT
Not After : Aug 27 05:01:28 2026 GMT
Subject: CN=72c688b2c9c91006b343e3f2358ad3d59f50672a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:45:01:82:f0:28:36:75:2f:45:bf:e9:23:71:
44:20:2f:84:3a:22:22:4e:8c:35:ff:52:c9:cc:10:
e1:60:06:c3:4f:1c:3e:ac:bc:9f:67:57:49:b4:03:
78:5b:72:e8:e0:bd:2e:d2:c1:2c:2b:7d:bb:75:0f:
7c:b8:2d:14:ae:e8:a9:4e:91:75:49:d7:84:f1:82:
ce:fb:a9:94:cc:f1:8d:0f:ef:3f:62:fe:4a:a3:40:
4b:f0:65:3d:62:47:b9:6b:1b:1d:e0:56:45:0a:3e:
d1:cb:99:67:80:c7:0b:71:88:3b:f5:fd:93:67:32:
a1:bf:41:a9:13:e9:d1:28:3f:e5:03:ae:0b:d9:de:
47:3c:0a:a6:99:14:90:b5:aa:7e:2a:e9:10:03:be:
0a:7d:f0:7e:82:09:b7:26:02:8d:82:ca:3f:d8:cc:
16:fc:a7:cb:b6:cc:8d:fd:a8:a5:9a:37:00:f1:c0:
c2:99:b1:5a:ea:8b:8a:fb:65:36:23:d6:f0:7f:6c:
22:32:e1:8e:a2:4e:cb:20:1b:ac:7d:a5:8d:a1:b2:
11:a9:20:4d:03:d4:6e:33:97:11:95:38:d6:79:f9:
73:82:59:bc:67:a6:c1:e1:ae:b7:ff:69:02:fa:3e:
3a:ce:8a:e1:eb:45:44:ba:f0:9b:bf:83:76:e8:c2:
58:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C6:88:B2:C9:C9:10:06:B3:43:E3:F2:35:8A:D3:D5:9F:50:67:2A
X509v3 Authority Key Identifier:
keyid:49:17:58:77:3A:99:E7:71:B9:0C:A9:BB:22:F7:FC:AD:BF:B6:32:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:94:b8:83:21:a9:f8:3b:c8:92:f9:6d:d8:61:22:8d:f7:61:
4e:20:13:11:d4:56:76:09:03:d2:ca:3f:97:30:6c:a0:36:c8:
71:06:7a:9c:76:5a:cf:34:af:ea:83:d8:25:d6:ce:d5:83:63:
8a:c7:62:6e:80:e1:dd:ff:cd:09:26:dd:2e:eb:8a:a7:4b:d9:
57:8f:15:e5:9c:74:61:42:e4:c7:04:39:d6:60:c2:b9:7a:0d:
ec:67:2c:37:fa:a8:27:9e:66:58:6c:c1:92:45:78:94:c4:c0:
51:30:d1:37:68:17:70:8d:e3:bb:e2:c4:bc:60:08:1f:54:cb:
9c:87:cd:03:87:6d:e8:1c:0d:05:97:3c:aa:66:d0:e4:bb:41:
a2:8c:c3:0b:b0:6e:79:10:69:79:ce:2c:6a:49:19:1d:9f:8b:
6f:b5:8f:c1:79:a6:aa:04:20:bf:8e:3a:2e:51:ef:9d:70:ad:
20:7d:c1:e6:5d:57:b3:4e:88:57:45:a4:1a:d1:de:93:19:50:
99:14:6c:75:b2:a8:f3:0a:0b:77:44:79:e9:ff:c1:bb:14:25:
b6:cc:f4:77:eb:d7:09:d9:5b:24:3e:db:20:74:17:dd:d3:74:
a3:2d:49:c6:a7:21:74:7e:6a:2b:25:27:12:78:71:c8:5c:83:
49:e9:53:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA8cdZWxFudeSm5pJQMlm2cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5MTc1ODc3M2E5OWU3NzFiOTBjYTliYjIyZjdmY2FkYmZi
NjMyNDgwHhcNMjYwODI2MDUwMTI4WhcNMjYwODI3MDUwMTI4WjAzMTEwLwYDVQQD
Eyg3MmM2ODhiMmM5YzkxMDA2YjM0M2UzZjIzNThhZDNkNTlmNTA2NzJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20UBgvAoNnUvRb/pI3FEIC+EOiIi
Tow1/1LJzBDhYAbDTxw+rLyfZ1dJtAN4W3Lo4L0u0sEsK327dQ98uC0UruipTpF1
SdeE8YLO+6mUzPGND+8/Yv5Ko0BL8GU9Yke5axsd4FZFCj7Ry5lngMcLcYg79f2T
ZzKhv0GpE+nRKD/lA64L2d5HPAqmmRSQtap+KukQA74KffB+ggm3JgKNgso/2MwW
/KfLtsyN/ailmjcA8cDCmbFa6ouK+2U2I9bwf2wiMuGOok7LIBusfaWNobIRqSBN
A9RuM5cRlTjWeflzglm8Z6bB4a63/2kC+j46zorh60VEuvCbv4N26MJYKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHLGiLLJyRAGs0Pj8jWK09WfUGcqMB8GA1UdIwQY
MBaAFEkXWHc6medxuQypuyL3/K2/tjJIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1JkWWR6cVo1M0c1REttN0l2ZjhyYi0yTWtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9lOGM2NzItZGExYS00MTMzLTkyMWUt
ZTdkYjk1ZTNiY2M0LzEvU1JkWWR6cVo1M0c1REttN0l2ZjhyYi0yTWtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9lOGM2NzItZGExYS00MTMzLTkyMWUtZTdkYjk1ZTNiY2M0
LzEvU1JkWWR6cVo1M0c1REttN0l2ZjhyYi0yTWtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMpS4gyGp
+DvIkvlt2GEijfdhTiATEdRWdgkD0so/lzBsoDbIcQZ6nHZazzSv6oPYJdbO1YNj
isdiboDh3f/NCSbdLuuKp0vZV48V5Zx0YULkxwQ51mDCuXoN7GcsN/qoJ55mWGzB
kkV4lMTAUTDRN2gXcI3ju+LEvGAIH1TLnIfNA4dt6BwNBZc8qmbQ5LtBoozDC7Bu
eRBpec4sakkZHZ+Lb7WPwXmmqgQgv446LlHvnXCtIH3B5l1Xs06IV0WkGtHekxlQ
mRRsdbKo8woLd0R56f/BuxQltsz0d+vXCdlbJD7bIHQX3dN0oy1JxqchdH5qKyUn
EnhxyFyDSelTPQ==
-----END CERTIFICATE-----
Generated at Wed Aug 26 16:10:42 2026 by rpki-client