Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/66cbc2-bc7b-4759-8726-ed75c6fb1694/1/srXfZQUs6Uo3qFB5R8Un8Mz_pSI.mft
File: srXfZQUs6Uo3qFB5R8Un8Mz_pSI.mft (raw, json)
Hash identifier: a6uOvRwV5o3tPCU8wFx+ajUSvmMokwQXJ2vlES08Wfc=
Subject key identifier: 53:89:EA:B3:BB:CC:5A:CC:F4:01:30:2B:93:33:30:26:CE:5E:0A:EB
Authority key identifier: B2:B5:DF:65:05:2C:E9:4A:37:A8:50:79:47:C5:27:F0:CC:FF:A5:22
Certificate issuer: /CN=b2b5df65052ce94a37a8507947c527f0ccffa522
Certificate serial: 019D38D3615FDD510E9540D9D9575254F0ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/srXfZQUs6Uo3qFB5R8Un8Mz_pSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/66cbc2-bc7b-4759-8726-ed75c6fb1694/1/srXfZQUs6Uo3qFB5R8Un8Mz_pSI.mft
Manifest number: 0182
Signing time: Sun 29 Mar 2026 09:01:10 +0000
Manifest this update: Sun 29 Mar 2026 09:01:10 +0000
Manifest next update: Mon 30 Mar 2026 09:01:10 +0000
Files and hashes: 1: LbCi_KsYmyO6E2-uQ716HAH-5w4.roa (hash: a6rDpMDbXgXlq+kjKeEf0WeU/+kUP8GdRzZOi1ik3SY=)
2: srXfZQUs6Uo3qFB5R8Un8Mz_pSI.crl (hash: X2Q1hRwS273jzYJNXgtBCMbATbZ0rD1fowYbTvr9KTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/66cbc2-bc7b-4759-8726-ed75c6fb1694/1/srXfZQUs6Uo3qFB5R8Un8Mz_pSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/66cbc2-bc7b-4759-8726-ed75c6fb1694/1/srXfZQUs6Uo3qFB5R8Un8Mz_pSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/srXfZQUs6Uo3qFB5R8Un8Mz_pSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:61:5f:dd:51:0e:95:40:d9:d9:57:52:54:f0:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2b5df65052ce94a37a8507947c527f0ccffa522
Validity
Not Before: Mar 29 09:01:10 2026 GMT
Not After : Mar 30 09:01:10 2026 GMT
Subject: CN=5389eab3bbcc5accf401302b93333026ce5e0aeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6c:8f:2d:b1:99:29:95:06:87:8b:b8:e5:be:
00:87:54:15:b5:9b:b2:67:c3:08:7c:0d:cd:61:d9:
34:0b:8f:4e:c2:61:0a:83:b8:da:da:15:23:fe:51:
a3:b5:68:dc:7d:2a:1e:1d:54:a2:2e:09:0e:c5:b6:
37:00:5b:ea:5c:df:2d:9f:cb:31:25:0c:7b:a3:00:
42:a4:ea:7a:ef:f0:fd:cd:1e:7c:51:13:6e:7c:11:
d2:3c:87:86:3b:b1:44:b6:5c:22:39:92:6f:01:b3:
45:c0:85:ed:fc:3a:01:28:cd:57:8e:c3:77:ac:31:
88:11:9f:a3:8e:07:36:75:8c:b3:d5:6d:70:8a:5c:
05:d8:76:91:31:86:07:8b:81:36:72:6a:e8:73:26:
8f:fe:6a:b4:fb:1c:ba:48:b1:8b:da:ff:fd:3f:2a:
bd:da:64:86:08:a2:85:b5:ad:e2:3d:f5:7c:de:0a:
5a:1c:51:3e:71:26:8d:6f:93:0e:c6:cb:b5:c5:e4:
40:8e:8a:21:1f:e3:2b:09:f6:af:98:b1:02:e2:82:
8e:5c:08:5b:37:ed:a5:da:10:77:75:53:72:bc:e8:
cf:a5:fb:e3:c7:68:6f:41:89:5d:9d:6c:aa:a6:e0:
53:81:8a:01:ef:db:c1:50:6b:86:93:93:a1:a9:30:
8b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:89:EA:B3:BB:CC:5A:CC:F4:01:30:2B:93:33:30:26:CE:5E:0A:EB
X509v3 Authority Key Identifier:
keyid:B2:B5:DF:65:05:2C:E9:4A:37:A8:50:79:47:C5:27:F0:CC:FF:A5:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/srXfZQUs6Uo3qFB5R8Un8Mz_pSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/66cbc2-bc7b-4759-8726-ed75c6fb1694/1/srXfZQUs6Uo3qFB5R8Un8Mz_pSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/66cbc2-bc7b-4759-8726-ed75c6fb1694/1/srXfZQUs6Uo3qFB5R8Un8Mz_pSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:c7:c9:ec:2e:94:a3:a6:69:7d:f8:38:71:b8:21:d7:f2:bf:
5c:9d:ed:ff:d0:ee:43:95:73:78:bb:9c:49:a1:30:e8:37:5b:
18:b0:50:70:b5:95:13:58:8f:a6:2c:59:9d:ee:e7:da:63:c9:
da:cf:b6:dd:3e:aa:73:3f:7a:b5:d8:fd:cc:72:57:7d:86:e7:
bf:d6:0a:dd:38:83:48:7f:7e:23:98:84:75:11:aa:e8:78:c4:
4e:9f:42:97:97:35:a6:8c:ae:a5:04:d2:b0:85:ab:a1:a5:8c:
59:1f:4d:1e:14:46:2d:5b:c9:b6:7f:36:52:9f:ce:2e:ab:ac:
1c:f4:f7:d8:06:99:af:5a:d7:69:be:8b:c5:cf:d0:e4:6f:99:
cc:6e:26:17:53:52:3b:87:3d:17:4e:ea:ad:6c:86:da:fc:0b:
4b:59:2b:dc:6d:9b:9c:c0:45:20:4e:a0:2e:9d:0e:d9:3a:f8:
3b:6e:5d:e4:4f:09:55:2f:df:74:1b:ad:c3:01:e2:f1:ba:ec:
e0:85:70:20:d5:db:78:8e:56:ea:7b:b7:14:b4:c5:cc:30:78:
54:12:8b:b0:77:28:2e:cd:0e:5f:fe:bf:4a:e4:84:21:70:b0:
be:53:82:2a:f0:ff:66:90:0f:34:9c:2a:e2:eb:b1:27:8b:87:
96:77:c7:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:39 2026 by rpki-client