Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft
File: 201SqwmxbXL0w-SMxLSQJdCDZ20.mft (raw, json)
Hash identifier: EQD6peY9j6zyl1P1ENI3P1xOEhxUsfv7AW783lmfkDc=
Subject key identifier: 91:17:5F:59:95:EB:12:4E:6C:D6:A6:1B:D0:8C:6C:67:90:6E:3C:07
Authority key identifier: DB:4D:52:AB:09:B1:6D:72:F4:C3:E4:8C:C4:B4:90:25:D0:83:67:6D
Certificate issuer: /CN=db4d52ab09b16d72f4c3e48cc4b49025d083676d
Certificate serial: 01A001DCFA356D32D9531A1499E5BA4A8A5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/201SqwmxbXL0w-SMxLSQJdCDZ20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft
Manifest number: 1A04
Signing time: Fri 14 Aug 2026 20:00:54 +0000
Manifest this update: Fri 14 Aug 2026 20:00:54 +0000
Manifest next update: Sat 15 Aug 2026 20:00:54 +0000
Files and hashes: 1: 201SqwmxbXL0w-SMxLSQJdCDZ20.crl (hash: qE82w6IW2Zw/lqY1KhY1gG1Mdp9lLoHwlFW+II9whcc=)
2: DcpoOaI5WCtrBzEek9x3MtAQl4Q.roa (hash: LNpYxCyPAZU/q4OugE8iiZ5AnBZFDBNN2UC960my6+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft
rsync://rpki.ripe.net/repository/DEFAULT/201SqwmxbXL0w-SMxLSQJdCDZ20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dc:fa:35:6d:32:d9:53:1a:14:99:e5:ba:4a:8a:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db4d52ab09b16d72f4c3e48cc4b49025d083676d
Validity
Not Before: Aug 14 20:00:54 2026 GMT
Not After : Aug 15 20:00:54 2026 GMT
Subject: CN=91175f5995eb124e6cd6a61bd08c6c67906e3c07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f7:29:c5:73:da:cc:0f:ca:fa:4e:31:8b:c1:
b3:c7:7c:e1:47:31:49:dc:84:ae:93:0c:f8:99:00:
0f:84:0a:b5:a3:18:7e:78:f4:ce:43:9d:9c:51:ee:
59:c5:e2:3b:eb:14:7f:a7:d6:48:6e:b0:cc:aa:cb:
9b:5e:53:6f:65:3d:b3:ab:b9:0f:a8:58:a5:cd:53:
37:c4:a9:8a:7b:67:f3:31:2e:30:bf:52:40:9b:ad:
d3:74:24:7b:34:63:d2:11:31:31:0d:83:c4:62:67:
69:9e:11:a0:e1:13:ae:75:1d:6e:4b:74:0d:f0:9c:
d7:e1:c1:ac:56:62:18:5e:84:1a:7f:f5:91:d9:4d:
5b:a4:dc:33:89:e8:9d:45:bb:98:32:f5:84:b7:b6:
ee:21:46:07:c2:6e:7e:4a:c3:ee:a4:90:0e:5d:8c:
ab:d6:c4:17:e9:1f:bc:29:e6:21:1d:66:a1:b0:52:
f3:bb:53:97:e2:75:03:14:a1:8c:a2:20:de:fa:6d:
e5:6a:fd:3a:c3:a4:6d:68:28:df:3e:a5:88:5c:0e:
9a:2b:2f:3e:e4:ad:e5:3d:28:91:20:e3:9f:62:41:
ad:6b:f5:94:31:40:3a:94:05:b4:ff:53:c1:99:cb:
94:c5:dd:96:62:32:8c:9c:14:70:ab:a1:67:29:6a:
26:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:17:5F:59:95:EB:12:4E:6C:D6:A6:1B:D0:8C:6C:67:90:6E:3C:07
X509v3 Authority Key Identifier:
keyid:DB:4D:52:AB:09:B1:6D:72:F4:C3:E4:8C:C4:B4:90:25:D0:83:67:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/201SqwmxbXL0w-SMxLSQJdCDZ20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:ca:f1:81:c1:44:7b:b9:8f:98:f0:28:aa:4c:2a:3c:4c:5e:
ac:32:f8:8a:4b:6a:c6:03:64:e4:19:e2:06:ac:83:ba:a0:31:
d2:95:6c:66:80:dd:35:e7:f6:35:50:92:8b:34:30:86:e6:08:
53:5c:47:d7:70:57:93:06:79:9b:08:20:aa:4e:ba:38:dc:10:
01:6d:b8:74:54:2d:6e:ac:47:fb:43:55:7d:1f:1c:94:da:0a:
5d:49:5a:85:9c:4a:4b:59:47:ea:4c:64:20:c4:ba:fa:3d:b8:
82:9d:6e:83:ee:12:57:61:32:9f:23:48:2e:5d:ea:d0:37:29:
9c:1e:9c:98:9b:5a:99:db:7c:da:86:6b:79:36:e2:2a:f5:a4:
4e:62:dd:a8:7a:1e:c2:fc:71:30:34:54:f1:38:d0:5d:cd:ec:
a5:9b:91:08:60:da:44:f2:28:9b:8a:5b:fb:d3:4a:71:e2:78:
10:fa:cc:68:83:a5:52:b3:e7:19:20:99:e5:45:e0:1f:33:ce:
de:9f:b0:46:54:21:a3:d8:fa:42:5a:4d:e3:48:dd:56:d8:c5:
f9:6f:c2:4e:dc:dc:94:5a:11:90:4b:b2:2b:78:2d:2d:92:e8:
89:ff:15:4a:8d:ad:60:47:61:cd:1c:62:0f:dd:58:65:7b:d1:
b8:4b:f6:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:28:20 2026 by rpki-client