Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.mft
File: SrfcA3ifWGIbJejdDZJdyRtKWqI.mft (raw, json)
Hash identifier: 65cKCeLus4AKy6a8P/CTlBH6PFL9YMvOhkbFOyrbEh8=
Subject key identifier: 53:70:74:8F:7A:3E:F2:D7:3A:47:DC:A4:4C:44:2A:70:02:DE:B8:F0
Authority key identifier: 4A:B7:DC:03:78:9F:58:62:1B:25:E8:DD:0D:92:5D:C9:1B:4A:5A:A2
Certificate issuer: /CN=4ab7dc03789f58621b25e8dd0d925dc91b4a5aa2
Certificate serial: 01A06FF1EA252E47335E3F9D275F1498D966
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SrfcA3ifWGIbJejdDZJdyRtKWqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.mft
Manifest number: 0EDF
Signing time: Sat 05 Sep 2026 05:02:00 +0000
Manifest this update: Sat 05 Sep 2026 05:02:00 +0000
Manifest next update: Sun 06 Sep 2026 05:02:00 +0000
Files and hashes: 1: PsulLIoJ2K5yIXwpqDT_vBbetoI.roa (hash: g6k+9r2f7VE361y/QPPTNZq47JKvyoKEVsQ41jGm2AM=)
2: SrfcA3ifWGIbJejdDZJdyRtKWqI.crl (hash: 6YcIiG/1OqXvW9vsB26Sp6JPXufkyy8/osaEtopqbLQ=)
3: xPJTQ1B0b58IM-swEMoKUaok-jY.roa (hash: 8WLFOKN87EOL1HNV9YM46I3DeHkcz7BwooQlJCjXH2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SrfcA3ifWGIbJejdDZJdyRtKWqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:f1:ea:25:2e:47:33:5e:3f:9d:27:5f:14:98:d9:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ab7dc03789f58621b25e8dd0d925dc91b4a5aa2
Validity
Not Before: Sep 5 05:02:00 2026 GMT
Not After : Sep 6 05:02:00 2026 GMT
Subject: CN=5370748f7a3ef2d73a47dca44c442a7002deb8f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:3e:86:38:f3:57:18:e1:84:2e:5f:24:6f:7c:
94:47:e0:e8:17:7f:6b:66:ae:34:57:e2:f0:e4:f0:
b1:5f:b4:22:f8:c6:fe:59:be:83:20:fd:5b:b0:05:
2a:f8:11:6c:7c:9d:10:30:01:16:7e:74:b3:82:5f:
ad:fa:65:e3:5b:8a:9d:2b:3d:16:dc:e4:e7:d7:45:
93:83:76:7b:fb:8a:a4:45:47:e8:2e:dc:81:2b:02:
05:76:ef:58:b1:ee:38:ab:f1:e4:a8:0e:1f:3c:56:
03:04:11:a7:9a:90:51:15:38:66:fa:9b:3b:3a:99:
f0:b1:91:30:c3:80:2a:54:ac:20:00:0d:b1:97:4b:
8b:c5:81:f0:74:d7:34:6d:5b:c8:1d:05:48:db:ec:
f3:66:80:00:71:25:df:ac:63:d6:a2:76:c8:bb:0b:
32:77:08:46:e0:54:31:cc:bc:c9:7a:23:41:5c:a9:
a6:9b:9c:b8:41:bc:64:39:ec:e2:26:0e:a1:0d:e2:
9e:bc:5c:a9:18:96:3a:47:bb:d5:69:f5:8c:2d:3d:
60:d4:2c:9a:e4:af:9d:ab:24:41:32:19:52:ca:13:
13:50:1c:73:65:86:f4:9a:7a:a6:81:b3:49:68:6f:
3e:1f:b2:fd:ae:92:cc:59:a6:55:f1:bd:36:1e:ef:
a6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:70:74:8F:7A:3E:F2:D7:3A:47:DC:A4:4C:44:2A:70:02:DE:B8:F0
X509v3 Authority Key Identifier:
keyid:4A:B7:DC:03:78:9F:58:62:1B:25:E8:DD:0D:92:5D:C9:1B:4A:5A:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SrfcA3ifWGIbJejdDZJdyRtKWqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:fe:1f:76:98:c5:ee:f6:c0:80:43:e9:cb:52:47:21:bf:dc:
6d:aa:04:00:fe:5a:e3:7e:b6:87:a0:5a:77:40:27:3b:e0:0b:
70:7d:bb:73:a7:89:39:3d:af:98:ab:0f:07:bb:aa:ea:45:21:
86:65:2a:eb:80:d1:70:f1:50:12:ab:20:f3:ed:4a:0a:49:c6:
2e:0b:4a:a3:d2:4c:e6:c7:37:ae:8a:7d:ba:d8:62:b8:2f:41:
7d:da:4a:87:f7:47:cf:78:09:9f:e3:84:be:fc:dc:ef:95:c6:
22:d5:c3:04:55:97:3d:1e:27:24:8b:d3:dd:8a:2b:4d:f2:ea:
ab:ae:b3:37:53:e7:d6:b0:c5:ec:fc:22:a3:31:58:1a:53:8d:
dc:12:86:c3:1a:bc:36:27:ac:b0:5e:48:71:fb:65:96:43:be:
17:4a:d1:79:80:48:17:3a:44:08:ea:7d:f5:0b:3a:ae:af:6c:
0b:fd:c9:2a:1d:c0:3d:5f:ae:3a:5c:1a:07:ba:b7:1b:58:78:
31:3c:0a:20:2e:71:e9:b9:2c:a7:cd:64:58:31:39:10:8a:a9:
0c:bc:54:7f:c5:f9:77:62:28:af:39:15:32:25:92:6b:73:5c:
99:0e:05:bc:04:b9:28:03:fc:0c:e1:4a:e4:f6:ef:ea:e5:dc:
aa:7a:71:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 09:36:33 2026 by rpki-client