Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft
File: SvrK0nmIVvDwZaJloQlwaUGsqOo.mft (raw, json)
Hash identifier: hAfzz4RZJjT1tZ2bpcIN8K8/zUSyHFS+IS7iZURTR/A=
Subject key identifier: 44:0A:51:42:F5:9A:98:48:FD:68:FB:3A:F7:78:6C:9E:63:62:10:E2
Authority key identifier: 4A:FA:CA:D2:79:88:56:F0:F0:65:A2:65:A1:09:70:69:41:AC:A8:EA
Certificate issuer: /CN=4afacad2798856f0f065a265a109706941aca8ea
Certificate serial: 019DD0BECFB67FEDD3E4C7FF41DF0E3089D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SvrK0nmIVvDwZaJloQlwaUGsqOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft
Manifest number: 1477
Signing time: Mon 27 Apr 2026 21:00:59 +0000
Manifest this update: Mon 27 Apr 2026 21:00:59 +0000
Manifest next update: Tue 28 Apr 2026 21:00:59 +0000
Files and hashes: 1: D0z_b7e-rsQh7ZbCT6eQYmgthJ0.roa (hash: XLv+C72GwzVUJmQsJo6uNUU5zA5BClnc8om305/wq6I=)
2: SvrK0nmIVvDwZaJloQlwaUGsqOo.crl (hash: vJanEk0cUHY8YF4nm+rV87d38BuVftu7OoDIosgndds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SvrK0nmIVvDwZaJloQlwaUGsqOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:be:cf:b6:7f:ed:d3:e4:c7:ff:41:df:0e:30:89:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4afacad2798856f0f065a265a109706941aca8ea
Validity
Not Before: Apr 27 21:00:59 2026 GMT
Not After : Apr 28 21:00:59 2026 GMT
Subject: CN=440a5142f59a9848fd68fb3af7786c9e636210e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f0:d2:f8:e5:bf:64:86:64:c1:f1:30:a9:f2:
af:a2:11:ca:dd:cc:72:85:a1:1c:0c:27:6d:35:b5:
5d:8b:dc:dd:2c:30:4f:20:6e:3f:6a:87:e8:1d:a7:
db:b5:45:d4:02:97:d7:00:1a:b4:05:e2:80:10:d1:
ab:5f:d7:18:14:27:68:a6:27:63:1f:b8:73:95:8b:
57:1a:f0:e4:94:cf:83:30:f7:4b:17:9a:7a:34:54:
c9:0c:b3:5c:33:e8:c9:ee:c1:85:5f:55:a3:b2:f8:
98:b2:fd:d9:7d:ac:4f:cc:8c:a1:a8:07:78:41:7a:
73:db:2a:9b:5e:2d:5d:1e:5b:56:23:2f:a7:7c:c7:
56:14:61:e6:06:95:61:af:a8:af:be:f8:b5:96:28:
99:e3:a0:43:b7:fd:7b:9b:e7:53:2e:66:ba:47:04:
64:7c:e3:4d:96:30:c6:33:76:df:64:13:e2:8c:44:
50:e9:37:89:f0:6d:21:83:2f:0a:6a:0a:e9:e6:f0:
7b:2b:20:68:67:33:91:3a:13:99:dd:f8:7d:2d:09:
97:a5:41:8e:89:3f:03:4d:58:3d:f0:8a:c8:15:76:
5c:f4:c1:e7:5d:8e:58:92:a1:11:47:94:ac:d4:cc:
2d:b3:9c:3e:5e:ec:67:b9:9b:eb:d2:3a:40:cd:14:
54:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:0A:51:42:F5:9A:98:48:FD:68:FB:3A:F7:78:6C:9E:63:62:10:E2
X509v3 Authority Key Identifier:
keyid:4A:FA:CA:D2:79:88:56:F0:F0:65:A2:65:A1:09:70:69:41:AC:A8:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SvrK0nmIVvDwZaJloQlwaUGsqOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:d8:92:85:47:b1:91:1f:ef:6c:ba:a3:78:d0:0d:fe:25:1d:
e3:a7:d7:52:1e:17:e7:91:d0:4c:ec:5b:7b:95:80:e4:6a:5f:
1b:45:fd:fe:5c:db:3b:28:dd:35:a4:70:23:5d:6d:d6:42:02:
ce:8d:11:bc:93:51:67:c6:fd:9d:9d:7c:57:dc:c5:e0:62:49:
a1:a0:d2:3e:c7:a8:c3:bf:db:ca:4b:2e:0a:e8:c2:4c:29:85:
04:e1:04:b6:e1:c4:2d:a7:69:2e:30:ce:44:8d:5d:18:5a:7f:
61:52:ab:1b:bb:d3:3e:59:65:4a:23:47:60:0f:74:8e:dd:2b:
2c:87:94:3f:f4:7e:c5:f4:02:c2:af:ef:80:29:ec:16:ef:c2:
fd:50:09:2d:71:0c:ca:d1:ff:a6:f5:9b:53:f3:21:c2:7e:03:
f8:e3:c8:ad:49:11:f6:14:95:e3:51:a6:87:69:b2:b3:44:4d:
6a:be:03:3f:43:d8:f1:be:74:6e:52:01:c5:fc:9c:ac:7f:c8:
51:47:4f:8d:0e:64:0f:6c:59:a9:9c:3d:6c:3c:dc:87:b5:e3:
a4:38:69:6a:d7:fb:98:fa:3f:32:17:3b:41:fe:0b:83:16:e5:
3a:d2:9c:33:77:02:ab:68:39:5b:04:4e:6c:4a:11:3b:3b:ea:
6a:f0:ad:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 00:54:01 2026 by rpki-client