Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/adfa7b-cf37-49d2-96af-bd7caf0541b8/1/SRdsODQdjHE7eV5Y9QAupnUFlyg.mft
File: SRdsODQdjHE7eV5Y9QAupnUFlyg.mft (raw, json)
Hash identifier: +7w5Ah4TTbOalwugcWHj/rodqfEC/7fOkyIBYPZNXW4=
Subject key identifier: 64:3E:80:49:B8:E1:2C:73:7E:0A:FC:B3:24:EF:23:91:C8:DC:CF:11
Authority key identifier: 49:17:6C:38:34:1D:8C:71:3B:79:5E:58:F5:00:2E:A6:75:05:97:28
Certificate issuer: /CN=49176c38341d8c713b795e58f5002ea675059728
Certificate serial: 019E2882030A4C342BE5C79CF69D5D1C7ABF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SRdsODQdjHE7eV5Y9QAupnUFlyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/adfa7b-cf37-49d2-96af-bd7caf0541b8/1/SRdsODQdjHE7eV5Y9QAupnUFlyg.mft
Manifest number: 0119
Signing time: Thu 14 May 2026 22:01:09 +0000
Manifest this update: Thu 14 May 2026 22:01:09 +0000
Manifest next update: Fri 15 May 2026 22:01:09 +0000
Files and hashes: 1: RQ5Cbf5xDKk_APMnlbM6ZHm4l7Q.roa (hash: l7hYvOlaLLwFZOpMeD6wZKlD7HWG7TlnqA+KkK5p5ho=)
2: SRdsODQdjHE7eV5Y9QAupnUFlyg.crl (hash: YfH9ezSQygUXye5xdqL1KEtiMkyZ1x17cAj71Ag9FSo=)
3: WQHG1u9PCPjDbr0POILKlVvCtIo.asa (hash: BrveTBrYvbvgxputKeZw7R7kBDu/ApcK0fbWPjyFnTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/adfa7b-cf37-49d2-96af-bd7caf0541b8/1/SRdsODQdjHE7eV5Y9QAupnUFlyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/adfa7b-cf37-49d2-96af-bd7caf0541b8/1/SRdsODQdjHE7eV5Y9QAupnUFlyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SRdsODQdjHE7eV5Y9QAupnUFlyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 22:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:82:03:0a:4c:34:2b:e5:c7:9c:f6:9d:5d:1c:7a:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49176c38341d8c713b795e58f5002ea675059728
Validity
Not Before: May 14 22:01:09 2026 GMT
Not After : May 15 22:01:09 2026 GMT
Subject: CN=643e8049b8e12c737e0afcb324ef2391c8dccf11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8e:2c:97:9f:83:ee:8b:08:4a:e5:3e:3e:47:
09:31:99:59:25:54:df:f7:97:73:ce:fb:e0:86:d3:
49:e7:81:c4:ef:66:15:bd:be:ab:d8:44:a0:37:a5:
dc:bf:0d:e8:b2:c9:24:99:fc:76:22:2a:60:39:48:
aa:65:cc:1c:09:f0:2c:2f:47:33:d8:45:66:e8:51:
d0:9a:77:c7:1c:a2:b9:fa:4e:a7:23:73:a0:9c:af:
3c:25:c1:d8:77:1b:50:ab:d8:f1:25:1b:9f:fa:33:
00:e5:29:35:5c:51:b1:1f:09:3f:b5:13:14:57:63:
62:e9:1f:0f:af:56:09:3f:61:26:6a:d0:82:ce:26:
32:8e:8a:65:82:3d:e5:ee:92:41:e8:63:c7:fd:43:
ab:92:f9:53:d7:b9:0f:ee:7e:55:4a:a9:a8:ce:7a:
72:ae:43:72:ee:2a:8e:8d:99:93:69:18:d7:5e:cb:
99:33:e8:54:0b:51:c9:47:19:ba:68:ef:91:71:87:
91:72:52:86:d2:2f:75:fc:dc:6d:aa:44:fa:df:d0:
21:ca:ad:69:0e:a1:5e:4f:90:99:13:3b:3b:0a:d0:
a4:b1:02:70:0b:7d:6e:13:5f:ae:cc:d0:4c:85:38:
40:f3:94:bb:c5:d8:f1:24:c6:1c:b9:64:c7:bd:95:
28:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:3E:80:49:B8:E1:2C:73:7E:0A:FC:B3:24:EF:23:91:C8:DC:CF:11
X509v3 Authority Key Identifier:
keyid:49:17:6C:38:34:1D:8C:71:3B:79:5E:58:F5:00:2E:A6:75:05:97:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SRdsODQdjHE7eV5Y9QAupnUFlyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/adfa7b-cf37-49d2-96af-bd7caf0541b8/1/SRdsODQdjHE7eV5Y9QAupnUFlyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/adfa7b-cf37-49d2-96af-bd7caf0541b8/1/SRdsODQdjHE7eV5Y9QAupnUFlyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:7e:5a:e6:e5:3d:d8:c2:4a:bd:60:45:35:25:70:52:9a:6c:
21:7e:1e:eb:11:cb:81:25:35:6f:fe:8a:27:33:83:5e:53:10:
c5:57:a9:a0:bd:dc:58:22:2b:30:1f:cd:47:f9:b0:be:99:50:
3c:c8:3d:fd:9a:87:01:85:c6:47:75:6d:a6:c0:d6:70:a6:9a:
8d:6b:8f:cf:aa:86:11:b3:9a:48:99:d8:69:34:8d:7f:9c:71:
01:a1:c7:a8:4e:a3:f4:dc:e2:e6:ab:81:5f:2d:c9:82:0a:1a:
fc:d9:d2:50:c7:dc:90:6a:f4:a7:8d:a2:86:22:2b:78:67:c7:
8e:84:71:d1:2a:f3:b2:f5:4b:c2:9b:78:82:6e:8f:73:cc:14:
19:1c:6f:f9:82:9a:8f:8e:33:2b:f7:be:33:dc:ea:1b:bf:b5:
9b:8d:44:66:80:c2:fc:65:11:c5:d4:12:16:9c:25:ad:48:cd:
d0:b4:16:82:44:a1:5f:5c:0c:ae:6d:c9:69:7f:58:26:b6:8a:
10:39:f3:43:d4:3c:b4:4e:4e:e1:f4:a1:16:c9:24:64:69:9b:
a4:ba:38:d9:5b:57:99:be:73:ed:aa:77:90:f1:d2:f6:81:d5:
29:b0:7d:68:50:e1:8f:72:1d:8c:e5:cd:09:23:77:f5:c6:92:
cf:8d:6a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:19:43 2026 by rpki-client