Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/4a559f-dd5f-4d01-b082-b07889eb8e93/1/sURkGfXmsb7Ze59nGGiggstykPA.mft
File: sURkGfXmsb7Ze59nGGiggstykPA.mft (raw, json)
Hash identifier: jQcvg7BIYsSfuZ3oQA1faGO90TkhCAzGKryjKLdQi9k=
Subject key identifier: 4C:CA:89:29:8F:5F:61:F4:10:B8:B2:79:1D:CF:F6:43:9B:C0:3D:67
Authority key identifier: B1:44:64:19:F5:E6:B1:BE:D9:7B:9F:67:18:68:A0:82:CB:72:90:F0
Certificate issuer: /CN=b1446419f5e6b1bed97b9f671868a082cb7290f0
Certificate serial: 019FF86C5EA83F04A0F1E502F67469612F3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sURkGfXmsb7Ze59nGGiggstykPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/4a559f-dd5f-4d01-b082-b07889eb8e93/1/sURkGfXmsb7Ze59nGGiggstykPA.mft
Manifest number: 0136
Signing time: Thu 13 Aug 2026 00:01:19 +0000
Manifest this update: Thu 13 Aug 2026 00:01:19 +0000
Manifest next update: Fri 14 Aug 2026 00:01:19 +0000
Files and hashes: 1: _klIEgNXjNLrjq0AntRvKPJg8cQ.roa (hash: N8TiDW/8kVRpYH8qFr2ikVHK1WBz/CBEaBf5JoLgSGQ=)
2: lIV0OLq5vZmpNkImZ3IfIzUlakw.asa (hash: GoXOVmTlMc0X832ucVGmd5nO2/93OWcyKlbli6Jdw2c=)
3: sURkGfXmsb7Ze59nGGiggstykPA.crl (hash: Xj4MrAs+K6nenwFn+Z7YOtPc+JlYW3xhOQKit21VDB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/4a559f-dd5f-4d01-b082-b07889eb8e93/1/sURkGfXmsb7Ze59nGGiggstykPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/4a559f-dd5f-4d01-b082-b07889eb8e93/1/sURkGfXmsb7Ze59nGGiggstykPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sURkGfXmsb7Ze59nGGiggstykPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 00:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f8:6c:5e:a8:3f:04:a0:f1:e5:02:f6:74:69:61:2f:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1446419f5e6b1bed97b9f671868a082cb7290f0
Validity
Not Before: Aug 13 00:01:19 2026 GMT
Not After : Aug 14 00:01:19 2026 GMT
Subject: CN=4cca89298f5f61f410b8b2791dcff6439bc03d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:dc:c2:60:4b:59:78:ed:c0:e0:c8:28:78:96:
41:d4:17:04:30:21:2a:91:ac:ca:14:20:24:b0:5a:
c1:73:f9:9c:45:b8:9e:d6:9f:fe:b5:a9:73:c8:89:
7e:80:42:3c:70:46:4d:d6:c7:a1:00:69:c3:46:01:
75:df:4c:5f:cc:c2:e2:6f:93:40:16:9e:9e:6c:fb:
38:6d:af:98:6e:c1:9d:cb:af:33:5f:fd:74:fc:0c:
aa:d6:d3:2d:e6:8e:1d:64:75:07:f4:b2:ea:a1:90:
6c:70:7f:9c:22:80:cd:72:d4:0f:65:00:d6:b7:d2:
45:9f:82:94:3d:df:25:67:13:3a:7f:ac:4d:da:8d:
13:1c:36:64:d1:76:c7:29:29:f9:63:32:9e:3b:b7:
8a:83:b3:15:1d:45:25:f7:57:de:ac:6c:55:cc:3b:
43:30:d1:10:a8:a2:ec:79:7b:bb:cf:65:8c:4e:bd:
a2:e5:f5:31:41:d9:30:d7:3b:b2:7f:4e:a5:5a:eb:
46:61:38:e7:69:90:20:b3:67:ff:b6:45:6d:9a:a2:
31:17:8a:8d:a8:35:c6:eb:68:ec:9a:c6:7e:6b:b7:
66:53:57:a6:fa:08:77:82:b9:49:08:f7:2a:de:40:
ec:fb:53:ac:11:bf:c8:11:aa:c8:02:e3:5b:5e:f7:
db:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:CA:89:29:8F:5F:61:F4:10:B8:B2:79:1D:CF:F6:43:9B:C0:3D:67
X509v3 Authority Key Identifier:
keyid:B1:44:64:19:F5:E6:B1:BE:D9:7B:9F:67:18:68:A0:82:CB:72:90:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sURkGfXmsb7Ze59nGGiggstykPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4a559f-dd5f-4d01-b082-b07889eb8e93/1/sURkGfXmsb7Ze59nGGiggstykPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4a559f-dd5f-4d01-b082-b07889eb8e93/1/sURkGfXmsb7Ze59nGGiggstykPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:f7:7b:06:33:ed:30:79:84:9c:69:20:58:8f:80:35:e1:09:
83:df:c6:5c:4a:bd:c2:78:46:c9:66:c0:5b:d7:a4:d9:c1:02:
1b:7a:08:59:76:d0:03:55:4e:e1:ab:0b:7a:57:49:34:d2:6b:
f4:40:96:50:f3:be:b2:7d:3b:47:2d:02:4a:1b:10:5a:f9:31:
83:12:3e:4d:fb:6a:7c:b5:0a:1e:50:67:83:14:7c:77:be:bd:
37:bd:6d:44:9b:ba:e2:f2:98:b1:fd:fb:85:fe:7d:9d:12:1a:
79:76:c8:9f:b4:3f:84:87:41:60:03:f3:74:8c:14:6e:dc:e0:
cc:63:96:02:46:a1:61:28:27:fe:c6:03:cf:df:69:a9:14:30:
84:25:7f:2b:18:41:5e:1a:da:e0:58:38:fe:29:3f:dd:1d:f1:
5f:73:7b:4a:c5:fd:5e:16:40:5b:aa:a3:dd:eb:8e:59:96:60:
ea:3e:b3:ca:11:e2:2f:c8:d7:a5:a2:80:93:2a:fe:b1:a4:2f:
7d:72:73:c0:db:a6:7a:55:34:fe:8d:22:fa:5c:d6:bc:bb:b7:
e6:12:cc:3d:db:69:86:27:bd:15:6f:0d:7e:5e:62:72:26:9b:
36:48:62:cd:3f:dd:00:4d:e7:1d:76:27:97:56:20:45:5e:00:
5a:40:c1:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:01:42 2026 by rpki-client