Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft
File: sDmrgpj6NjroN-UwAolpzFy_EE4.mft (raw, json)
Hash identifier: pI+j6jddcPZOvGjPumPgflWBqetOPYzCcxSNoIPs1sI=
Subject key identifier: 40:55:14:97:D5:1F:28:63:A2:70:EB:44:45:DB:F2:E6:BC:46:BC:22
Authority key identifier: B0:39:AB:82:98:FA:36:3A:E8:37:E5:30:02:89:69:CC:5C:BF:10:4E
Certificate issuer: /CN=b039ab8298fa363ae837e530028969cc5cbf104e
Certificate serial: 019D382E76362B1DD8E4AAEF6EF9F31E891D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft
Manifest number: 06F1
Signing time: Sun 29 Mar 2026 06:01:02 +0000
Manifest this update: Sun 29 Mar 2026 06:01:02 +0000
Manifest next update: Mon 30 Mar 2026 06:01:02 +0000
Files and hashes: 1: pIFip_1IBLSOvbShbCzJqPR3ISA.asa (hash: km1Ndz8NVjDLwyeoYrd5hZq5MPQnd5mMrU9kZpY/Ge0=)
2: sDmrgpj6NjroN-UwAolpzFy_EE4.crl (hash: kwmp/zaL8gKK+yxMCrkVwejpmKqz9pUiiwaV/jIBOto=)
3: zfEmQThXQQemumuyrh4dc64Ljpo.roa (hash: l1StJqEcmI3IdHWyUspZlBSORRI1cMJESHxgjnRlaoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:76:36:2b:1d:d8:e4:aa:ef:6e:f9:f3:1e:89:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b039ab8298fa363ae837e530028969cc5cbf104e
Validity
Not Before: Mar 29 06:01:02 2026 GMT
Not After : Mar 30 06:01:02 2026 GMT
Subject: CN=40551497d51f2863a270eb4445dbf2e6bc46bc22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:db:95:de:d5:6b:ae:1d:2a:91:0d:fd:42:cf:
ef:0f:00:9a:e2:37:9d:16:51:6f:08:17:db:f7:72:
fd:e9:84:a7:f5:38:6f:c5:70:8f:a1:fc:5c:b5:d3:
1f:0f:ab:62:61:b8:69:81:85:18:4f:c9:c3:bd:95:
c7:0b:06:8e:a0:d1:c0:d3:39:1e:ee:48:e3:1e:50:
e8:a2:13:35:14:14:bb:e7:9f:0a:d5:29:40:3d:1e:
86:d7:eb:2d:28:80:b4:32:54:1d:d8:2b:af:96:72:
33:b6:1e:f4:dc:8c:90:31:d1:ba:e0:0d:39:66:54:
84:8c:1f:d7:cb:59:fa:bf:f8:9c:eb:a7:b3:17:57:
1b:7f:df:9a:51:0d:f8:d6:ad:ba:c0:a0:98:6a:f2:
60:08:a5:56:9a:23:82:b0:b9:b4:0c:9f:1c:cb:69:
85:2a:8b:b0:75:37:3a:4d:14:91:c9:61:70:55:55:
2a:0f:b2:c6:e0:ee:40:e5:74:87:92:4a:91:62:d4:
df:11:40:01:ee:de:cb:b7:f3:74:d8:96:86:4d:6c:
e9:85:10:9e:08:b1:9a:36:56:b1:91:73:5d:b3:eb:
89:0b:53:5e:7e:3f:69:3a:97:12:0e:27:2a:c1:99:
a9:af:d4:aa:9d:2e:0e:87:14:eb:80:5e:97:54:83:
d6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:55:14:97:D5:1F:28:63:A2:70:EB:44:45:DB:F2:E6:BC:46:BC:22
X509v3 Authority Key Identifier:
keyid:B0:39:AB:82:98:FA:36:3A:E8:37:E5:30:02:89:69:CC:5C:BF:10:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:63:f5:c4:90:46:6e:f6:17:60:9a:71:f1:e2:19:fb:41:c2:
64:3e:bb:3d:42:57:cc:1f:8f:8c:46:90:de:d7:12:6a:c3:a0:
b3:be:0e:d0:8a:ca:85:f6:27:38:c1:72:39:ac:20:95:a6:60:
a6:fe:77:e4:e2:da:f8:15:7c:73:35:95:4a:18:b4:91:f6:21:
51:44:7c:fe:73:f3:fb:f6:c7:cf:50:08:9c:07:4d:5d:39:66:
9c:de:8e:3e:ed:35:d0:55:82:47:4a:0e:c4:80:40:51:84:7a:
3b:44:88:dd:93:a0:a8:cf:1d:18:21:53:d6:12:0c:a1:75:54:
c8:5c:66:90:ed:88:1a:b3:da:ab:ea:5b:36:a3:b1:d3:f3:54:
43:66:53:7c:20:41:3e:f6:91:e5:c8:5b:9a:c9:a5:e2:43:9d:
56:f8:c1:90:12:4d:72:fc:13:59:63:ac:44:d4:03:81:6c:9e:
8e:d6:c5:e3:ba:3e:35:4a:aa:fd:b5:aa:50:36:c3:cf:5a:39:
5c:72:df:b8:09:58:68:4b:96:60:c9:38:33:0d:de:c4:3e:02:
f2:56:d2:fa:47:74:af:aa:7a:fd:73:89:c4:28:ef:bd:52:b1:
c4:4d:99:3f:ce:c4:da:a2:08:fe:f7:88:43:c3:53:fd:83:7f:
00:9e:83:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:48 2026 by rpki-client