Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/027208-40dc-412a-b64c-38bf1e942a64/1/sRI3DKJgErTR0BVM73IwvYmluV0.mft
File: sRI3DKJgErTR0BVM73IwvYmluV0.mft (raw, json)
Hash identifier: ymWBtHwdO0wTln8ss2EpyYBIzQY1TemD9XIgsDl/rFc=
Subject key identifier: D6:61:FC:A0:8E:B8:FE:02:51:89:04:4E:89:E6:7F:B0:08:DB:20:12
Authority key identifier: B1:12:37:0C:A2:60:12:B4:D1:D0:15:4C:EF:72:30:BD:89:A5:B9:5D
Certificate issuer: /CN=b112370ca26012b4d1d0154cef7230bd89a5b95d
Certificate serial: 019F5AEC8E3253CB3181F8FD5F67EA012AAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRI3DKJgErTR0BVM73IwvYmluV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/027208-40dc-412a-b64c-38bf1e942a64/1/sRI3DKJgErTR0BVM73IwvYmluV0.mft
Manifest number: 0168
Signing time: Mon 13 Jul 2026 10:01:19 +0000
Manifest this update: Mon 13 Jul 2026 10:01:19 +0000
Manifest next update: Tue 14 Jul 2026 10:01:19 +0000
Files and hashes: 1: JQHbkZiCoz_ArYL3K_jRaitcYso.roa (hash: LSS9szWjmAex/d/OuZRvWyhXy/Z+aR2BRiVKGpC62GY=)
2: sRI3DKJgErTR0BVM73IwvYmluV0.crl (hash: n5NGZ720bxYzML19/omPrIirT2eFYIvqRaVniQ58Z5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/027208-40dc-412a-b64c-38bf1e942a64/1/sRI3DKJgErTR0BVM73IwvYmluV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/027208-40dc-412a-b64c-38bf1e942a64/1/sRI3DKJgErTR0BVM73IwvYmluV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sRI3DKJgErTR0BVM73IwvYmluV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Jul 2026 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5a:ec:8e:32:53:cb:31:81:f8:fd:5f:67:ea:01:2a:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b112370ca26012b4d1d0154cef7230bd89a5b95d
Validity
Not Before: Jul 13 10:01:19 2026 GMT
Not After : Jul 14 10:01:19 2026 GMT
Subject: CN=d661fca08eb8fe025189044e89e67fb008db2012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:88:bb:87:79:a4:58:25:1e:0c:ce:70:ed:56:
8b:1a:73:9f:b9:01:6f:f9:e7:ee:4f:8a:fe:32:db:
3a:00:de:13:ed:87:1a:90:c3:ce:6d:39:13:01:cc:
3c:a5:80:99:ca:4f:9e:3a:37:ca:9c:aa:ef:a8:69:
f8:68:8a:de:e0:1b:93:ab:72:c2:27:3e:57:61:0c:
90:55:88:92:7e:6d:a3:f3:18:37:bd:55:47:da:38:
3c:8e:3f:51:12:86:a8:61:6d:6a:ec:35:ce:dd:fd:
e7:35:ea:81:c7:c0:4b:36:cc:25:86:ba:6c:3e:e0:
49:0b:00:c0:7a:78:4b:2f:3c:77:4c:b2:ca:1e:59:
4a:01:e7:ef:04:de:7b:82:9d:c5:39:b3:a1:f1:99:
dc:62:a4:18:f4:57:89:4c:bc:85:9b:78:83:ed:86:
4b:c5:27:b3:c5:50:e2:5f:55:bc:25:aa:d2:f5:25:
ac:71:1a:4e:52:e5:13:55:7d:b1:f1:2f:c5:d5:42:
70:6d:82:98:ae:6b:8c:ce:99:66:08:73:be:38:0b:
61:2d:e1:f6:00:ea:f8:8b:6a:96:19:87:12:38:68:
24:41:70:e2:92:a6:dd:16:ca:81:e2:4b:c4:a0:2a:
ba:9a:d8:ac:a8:fa:e8:b5:da:d9:f8:af:52:a9:ff:
31:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:61:FC:A0:8E:B8:FE:02:51:89:04:4E:89:E6:7F:B0:08:DB:20:12
X509v3 Authority Key Identifier:
keyid:B1:12:37:0C:A2:60:12:B4:D1:D0:15:4C:EF:72:30:BD:89:A5:B9:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRI3DKJgErTR0BVM73IwvYmluV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/027208-40dc-412a-b64c-38bf1e942a64/1/sRI3DKJgErTR0BVM73IwvYmluV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/027208-40dc-412a-b64c-38bf1e942a64/1/sRI3DKJgErTR0BVM73IwvYmluV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:d1:b8:a0:41:87:b3:fd:6b:4d:86:e3:34:e9:fe:c9:2b:03:
ed:5d:d6:20:ff:89:24:a6:fe:d1:b9:3f:d3:7b:d7:87:57:24:
db:72:72:53:b1:fa:ed:97:c2:2c:81:81:85:8e:88:d1:88:8d:
c3:65:9f:73:08:68:77:68:42:0d:21:e6:2c:39:df:19:0a:4c:
50:83:a0:87:c2:fb:ae:13:bb:ec:3d:a5:e2:82:3b:04:29:15:
4d:f8:5b:99:04:6a:56:98:f8:0f:5a:ba:23:1d:15:d1:0a:f6:
a6:69:2b:fc:81:7f:c7:e0:e1:9d:5a:ff:2e:84:54:69:ab:01:
ab:48:90:46:0e:09:8f:78:71:7e:df:7e:7f:41:10:b0:17:89:
2b:0e:3b:df:e5:b7:f8:6e:6a:66:9c:2c:d0:41:2a:4f:65:f5:
c0:4c:70:fa:1e:1f:9d:ec:4e:73:38:e1:26:b7:1f:cd:2f:48:
01:e9:c3:e6:55:6b:ba:3c:90:83:ff:5f:e7:5e:98:12:3e:35:
fb:7d:3f:39:29:fe:fe:6f:fe:76:c2:74:94:bd:40:06:41:09:
7f:bf:f3:4b:86:3c:53:d5:4b:a2:b9:8c:a9:25:a0:21:8e:35:
88:08:11:70:06:e5:9c:fe:b4:20:45:7f:e8:ce:50:f7:6a:10:
b0:72:e3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 13:50:04 2026 by rpki-client