Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/4a559f-dd5f-4d01-b082-b07889eb8e93/1/sURkGfXmsb7Ze59nGGiggstykPA.mft
File: sURkGfXmsb7Ze59nGGiggstykPA.mft (raw, json)
Hash identifier: c7ZHXjViq8WZvUsp4o82X8+yiF9ljW4R1PPl0O/UcvA=
Subject key identifier: BB:92:70:EF:2A:12:18:D9:F4:65:F1:2E:D8:1B:35:D6:1B:83:ED:A2
Authority key identifier: B1:44:64:19:F5:E6:B1:BE:D9:7B:9F:67:18:68:A0:82:CB:72:90:F0
Certificate issuer: /CN=b1446419f5e6b1bed97b9f671868a082cb7290f0
Certificate serial: 019DDC554F72A1B9296B04FCC7195AE1E102
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sURkGfXmsb7Ze59nGGiggstykPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/4a559f-dd5f-4d01-b082-b07889eb8e93/1/sURkGfXmsb7Ze59nGGiggstykPA.mft
Manifest number: 1E
Signing time: Thu 30 Apr 2026 03:01:11 +0000
Manifest this update: Thu 30 Apr 2026 03:01:11 +0000
Manifest next update: Fri 01 May 2026 03:01:11 +0000
Files and hashes: 1: l-aEHGRr6mSwaOOPXptMqOfSa6g.roa (hash: oYGqjiujvvcpv0QPtMiNNXBDknKaO4zREWr9HxsSg3Y=)
2: lIV0OLq5vZmpNkImZ3IfIzUlakw.asa (hash: GoXOVmTlMc0X832ucVGmd5nO2/93OWcyKlbli6Jdw2c=)
3: sURkGfXmsb7Ze59nGGiggstykPA.crl (hash: m/L0Xk3RQW1JNeZUsi9F/+aF1azswWkxG5XLrQbqvJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/4a559f-dd5f-4d01-b082-b07889eb8e93/1/sURkGfXmsb7Ze59nGGiggstykPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/4a559f-dd5f-4d01-b082-b07889eb8e93/1/sURkGfXmsb7Ze59nGGiggstykPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sURkGfXmsb7Ze59nGGiggstykPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 03:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dc:55:4f:72:a1:b9:29:6b:04:fc:c7:19:5a:e1:e1:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1446419f5e6b1bed97b9f671868a082cb7290f0
Validity
Not Before: Apr 30 03:01:11 2026 GMT
Not After : May 1 03:01:11 2026 GMT
Subject: CN=bb9270ef2a1218d9f465f12ed81b35d61b83eda2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ef:cb:fd:a4:d4:06:48:80:ab:7d:fd:5e:69:
79:1f:ef:60:d1:32:cf:ef:84:ea:46:2f:04:bf:e7:
83:15:c9:b5:a3:d5:80:f1:5d:07:38:83:91:62:91:
b4:ec:2c:6a:64:ba:62:22:8c:96:6b:9a:44:1e:bb:
3f:d0:7e:00:c5:97:80:53:d6:2d:7e:41:cf:30:88:
98:f4:bf:2b:4a:b9:61:1b:42:01:42:59:55:46:a9:
dd:fb:4b:83:4f:70:0c:9f:c0:9c:33:a4:99:8d:77:
bf:e7:8b:b2:b0:6f:0f:1e:72:8b:ce:6f:1b:56:b5:
68:94:bf:f2:02:76:bd:f4:52:86:7c:d4:d2:eb:dc:
65:1e:a8:78:d7:d5:26:6f:24:8b:e7:08:24:7a:64:
ea:6f:51:e8:e2:5d:98:5e:9b:71:52:cf:c1:1f:de:
8c:70:53:a2:33:90:84:2f:cf:03:05:02:6d:24:75:
50:37:40:f0:4e:74:52:b9:9d:2a:d2:b8:a9:f1:f2:
66:0e:97:04:6e:c4:62:39:e4:de:ae:bb:77:73:c8:
8d:32:5b:d8:cb:ad:ca:f9:a2:da:d4:f8:b9:6e:40:
1a:ed:83:55:79:6a:dc:09:d2:f9:14:b2:eb:1f:01:
5d:b7:69:e6:ff:ff:1c:ac:7a:26:66:22:9c:16:e7:
cb:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:92:70:EF:2A:12:18:D9:F4:65:F1:2E:D8:1B:35:D6:1B:83:ED:A2
X509v3 Authority Key Identifier:
keyid:B1:44:64:19:F5:E6:B1:BE:D9:7B:9F:67:18:68:A0:82:CB:72:90:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sURkGfXmsb7Ze59nGGiggstykPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4a559f-dd5f-4d01-b082-b07889eb8e93/1/sURkGfXmsb7Ze59nGGiggstykPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4a559f-dd5f-4d01-b082-b07889eb8e93/1/sURkGfXmsb7Ze59nGGiggstykPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:77:6e:e7:ff:58:e6:82:cc:8d:c5:00:be:dd:d2:8a:80:8a:
87:56:a3:74:08:06:c1:d8:34:a9:0c:fc:9c:ef:09:9c:4c:fc:
95:2f:d3:f8:f4:58:37:7d:d3:6e:c5:99:be:cd:4d:3f:d9:ba:
38:24:c3:83:ba:7c:7a:2d:47:1b:3b:1b:2c:dd:34:fd:a7:0f:
c6:70:04:5c:f0:94:8e:62:1d:5a:c6:7c:a9:dc:33:d0:ff:63:
5a:9e:7e:c9:71:f9:69:b7:7e:08:5c:ae:c6:21:49:5a:c4:b6:
93:11:dc:69:96:ac:8d:b9:4c:70:b3:0f:c3:3d:74:60:d1:f3:
89:a8:7d:79:8f:41:ba:28:26:f1:00:77:e1:2a:6e:c1:1a:90:
3b:bc:26:b1:34:af:ce:20:20:05:49:c2:97:65:51:af:24:fb:
65:bb:ae:d6:35:07:c3:f5:8b:76:44:60:bd:bc:22:f7:0c:e8:
c0:25:7d:50:c5:81:5e:6a:5d:9f:48:b7:f6:94:38:01:12:ac:
15:7c:9e:27:f8:e4:17:69:2d:9a:0c:8c:32:bb:55:5b:00:4a:
d6:06:b1:a9:f1:62:2f:b2:67:f5:ef:4b:de:0a:f7:ae:d1:72:
a4:59:9e:53:b4:9d:52:a0:ca:37:97:fc:d8:36:b4:bb:d0:1d:
9d:6e:f2:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 12:46:22 2026 by rpki-client