Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft
File: SvrK0nmIVvDwZaJloQlwaUGsqOo.mft (raw, json)
Hash identifier: zyDJpkVqEH0vH8s3Dq3mchJh9pwP9GpeshNiaoXmR4A=
Subject key identifier: A7:2D:8D:42:2A:E8:8F:10:DA:5B:4F:02:85:C7:03:B6:0E:96:92:DD
Authority key identifier: 4A:FA:CA:D2:79:88:56:F0:F0:65:A2:65:A1:09:70:69:41:AC:A8:EA
Certificate issuer: /CN=4afacad2798856f0f065a265a109706941aca8ea
Certificate serial: 019CE5237ECEA9374C766BC9FC698F6979D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SvrK0nmIVvDwZaJloQlwaUGsqOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft
Manifest number: 13FD
Signing time: Fri 13 Mar 2026 03:00:34 +0000
Manifest this update: Fri 13 Mar 2026 03:00:34 +0000
Manifest next update: Sat 14 Mar 2026 03:00:34 +0000
Files and hashes: 1: D0z_b7e-rsQh7ZbCT6eQYmgthJ0.roa (hash: XLv+C72GwzVUJmQsJo6uNUU5zA5BClnc8om305/wq6I=)
2: SvrK0nmIVvDwZaJloQlwaUGsqOo.crl (hash: BKuQU5SQbn/62GKnEed+b2pbWzIRV1L9tcxLfURocsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SvrK0nmIVvDwZaJloQlwaUGsqOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:23:7e:ce:a9:37:4c:76:6b:c9:fc:69:8f:69:79:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4afacad2798856f0f065a265a109706941aca8ea
Validity
Not Before: Mar 13 03:00:34 2026 GMT
Not After : Mar 14 03:00:34 2026 GMT
Subject: CN=a72d8d422ae88f10da5b4f0285c703b60e9692dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:96:8e:9e:08:3e:55:e8:62:27:d0:65:8c:b5:
f6:bc:ff:76:a3:6b:67:df:24:2f:6d:e6:21:b9:c2:
67:da:fc:ef:f8:07:3e:95:10:67:ab:16:9e:35:32:
6d:71:7b:5e:6c:68:06:7a:af:3a:5f:ae:cb:ea:ff:
a6:17:7e:ac:b4:11:57:b1:03:86:80:cd:7d:95:dc:
15:e6:24:1b:23:ec:81:1f:0a:24:3b:30:3f:91:8a:
8f:7e:e8:66:e4:b9:ef:fc:e0:69:6d:2e:70:7a:b4:
ae:e2:61:05:3b:69:02:20:aa:72:b6:65:2f:88:92:
97:5e:61:73:fc:00:43:ac:f2:af:1c:8f:a7:d7:03:
9f:60:d8:83:79:9e:56:79:88:41:7b:dd:a8:cd:3c:
b0:e0:75:2f:3f:5d:71:22:cb:61:f6:0d:93:63:7e:
fa:5f:e4:15:8d:b1:79:ea:03:12:f0:0e:10:f1:ae:
79:5e:4d:de:55:86:ee:fe:b9:4d:4f:64:c7:b5:26:
6e:f8:96:2d:ac:c2:f5:b9:a3:26:f8:cd:98:22:0a:
52:2d:2e:04:f3:61:9c:17:fb:2b:18:ff:ba:7a:52:
a4:b4:36:bb:86:2b:6a:89:95:81:e2:98:c8:75:0e:
10:00:9e:96:01:86:09:a6:d6:9b:62:65:ed:ec:e6:
d0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:2D:8D:42:2A:E8:8F:10:DA:5B:4F:02:85:C7:03:B6:0E:96:92:DD
X509v3 Authority Key Identifier:
keyid:4A:FA:CA:D2:79:88:56:F0:F0:65:A2:65:A1:09:70:69:41:AC:A8:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SvrK0nmIVvDwZaJloQlwaUGsqOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:39:89:29:55:f1:2a:9c:61:12:3f:fc:51:ba:4c:55:16:9f:
a1:0c:29:af:c9:54:10:7f:91:5c:da:2a:f3:67:47:ac:31:b0:
b6:fc:cb:9a:39:47:48:a6:d5:ff:80:97:13:f1:19:c1:54:31:
34:0b:3c:87:2c:2f:61:25:43:a6:39:da:81:7a:34:98:bc:26:
84:62:e2:71:be:b0:dd:e9:4d:bc:61:92:5d:95:7a:fd:58:09:
ec:7b:05:cb:ac:3a:8f:b2:44:ce:38:14:0c:32:c9:fa:9e:4f:
3b:88:08:2a:b6:c7:6c:ba:d2:be:b6:a8:e1:71:a5:80:cf:a6:
dd:8a:7a:49:ba:d1:7a:82:8b:ce:93:4d:3d:d0:e6:53:30:c6:
cd:93:4b:97:c2:71:53:91:03:4a:00:88:89:4d:a7:e2:c9:f2:
38:d8:e3:d4:3a:d8:22:60:61:c3:b0:06:06:da:95:9a:fa:d6:
28:e5:5d:49:36:b5:46:90:c7:35:87:ab:a1:5f:21:18:98:93:
c9:77:11:17:3d:56:9e:e1:2f:8f:ed:b8:35:27:93:e9:35:79:
96:ae:17:ca:36:3b:bf:c0:7c:71:ae:57:1b:b1:ba:9d:89:80:
1f:1c:77:75:92:12:53:e3:bf:3a:18:03:06:19:64:73:e1:5b:
de:f2:ff:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzlI37OqTdMdmvJ/GmPaXnSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhZmFjYWQyNzk4ODU2ZjBmMDY1YTI2NWExMDk3MDY5NDFh
Y2E4ZWEwHhcNMjYwMzEzMDMwMDM0WhcNMjYwMzE0MDMwMDM0WjAzMTEwLwYDVQQD
EyhhNzJkOGQ0MjJhZTg4ZjEwZGE1YjRmMDI4NWM3MDNiNjBlOTY5MmRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZaOngg+VehiJ9BljLX2vP92o2tn
3yQvbeYhucJn2vzv+Ac+lRBnqxaeNTJtcXtebGgGeq86X67L6v+mF36stBFXsQOG
gM19ldwV5iQbI+yBHwokOzA/kYqPfuhm5Lnv/OBpbS5werSu4mEFO2kCIKpytmUv
iJKXXmFz/ABDrPKvHI+n1wOfYNiDeZ5WeYhBe92ozTyw4HUvP11xIsth9g2TY376
X+QVjbF56gMS8A4Q8a55Xk3eVYbu/rlNT2THtSZu+JYtrML1uaMm+M2YIgpSLS4E
82GcF/srGP+6elKktDa7hitqiZWB4pjIdQ4QAJ6WAYYJptabYmXt7ObQ9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKctjUIq6I8Q2ltPAoXHA7YOlpLdMB8GA1UdIwQY
MBaAFEr6ytJ5iFbw8GWiZaEJcGlBrKjqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3ZySzBubUlWdkR3WmFKbG9RbHdhVUdzcU9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9lODJkMmEtNDA0MS00ODExLTg3YTUt
NzgzNDY5MjY5YjM1LzEvU3ZySzBubUlWdkR3WmFKbG9RbHdhVUdzcU9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9lODJkMmEtNDA0MS00ODExLTg3YTUtNzgzNDY5MjY5YjM1
LzEvU3ZySzBubUlWdkR3WmFKbG9RbHdhVUdzcU9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYTmJKVXx
KpxhEj/8UbpMVRafoQwpr8lUEH+RXNoq82dHrDGwtvzLmjlHSKbV/4CXE/EZwVQx
NAs8hywvYSVDpjnagXo0mLwmhGLicb6w3elNvGGSXZV6/VgJ7HsFy6w6j7JEzjgU
DDLJ+p5PO4gIKrbHbLrSvrao4XGlgM+m3Yp6SbrReoKLzpNNPdDmUzDGzZNLl8Jx
U5EDSgCIiU2n4snyONjj1DrYImBhw7AGBtqVmvrWKOVdSTa1RpDHNYeroV8hGJiT
yXcRFz1WnuEvj+24NSeT6TV5lq4XyjY7v8B8ca5XG7G6nYmAHxx3dZISU+O/OhgD
Bhlkc+Fb3vL/Uw==
-----END CERTIFICATE-----
Generated at Fri Mar 13 09:59:03 2026 by rpki-client