Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/adfa7b-cf37-49d2-96af-bd7caf0541b8/1/SRdsODQdjHE7eV5Y9QAupnUFlyg.mft
File: SRdsODQdjHE7eV5Y9QAupnUFlyg.mft (raw, json)
Hash identifier: A3HTbSHMFl3eCN+DnERGEq9/diAyIVf0eSIzvyzw48g=
Subject key identifier: 07:3F:36:15:4B:8D:D1:F4:1A:85:85:AA:AB:CF:BF:4D:19:10:BC:C5
Authority key identifier: 49:17:6C:38:34:1D:8C:71:3B:79:5E:58:F5:00:2E:A6:75:05:97:28
Certificate issuer: /CN=49176c38341d8c713b795e58f5002ea675059728
Certificate serial: 01A03D840D000563D7B5402C111E0027FF22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SRdsODQdjHE7eV5Y9QAupnUFlyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/adfa7b-cf37-49d2-96af-bd7caf0541b8/1/SRdsODQdjHE7eV5Y9QAupnUFlyg.mft
Manifest number: 022D
Signing time: Wed 26 Aug 2026 10:00:59 +0000
Manifest this update: Wed 26 Aug 2026 10:00:59 +0000
Manifest next update: Thu 27 Aug 2026 10:00:59 +0000
Files and hashes: 1: RQ5Cbf5xDKk_APMnlbM6ZHm4l7Q.roa (hash: l7hYvOlaLLwFZOpMeD6wZKlD7HWG7TlnqA+KkK5p5ho=)
2: SRdsODQdjHE7eV5Y9QAupnUFlyg.crl (hash: FrjCKZv7lbCbYMAUW03SaymaQZlT941uEjYR6UcwIWw=)
3: WQHG1u9PCPjDbr0POILKlVvCtIo.asa (hash: BrveTBrYvbvgxputKeZw7R7kBDu/ApcK0fbWPjyFnTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/adfa7b-cf37-49d2-96af-bd7caf0541b8/1/SRdsODQdjHE7eV5Y9QAupnUFlyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/adfa7b-cf37-49d2-96af-bd7caf0541b8/1/SRdsODQdjHE7eV5Y9QAupnUFlyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SRdsODQdjHE7eV5Y9QAupnUFlyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 10:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3d:84:0d:00:05:63:d7:b5:40:2c:11:1e:00:27:ff:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49176c38341d8c713b795e58f5002ea675059728
Validity
Not Before: Aug 26 10:00:59 2026 GMT
Not After : Aug 27 10:00:59 2026 GMT
Subject: CN=073f36154b8dd1f41a8585aaabcfbf4d1910bcc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:54:fc:b5:49:fb:b0:a0:78:29:20:56:d2:bd:
80:61:98:e5:b5:17:cd:22:e0:fa:08:14:38:9c:ac:
43:77:d0:51:c4:83:40:0b:a6:56:6d:ef:06:76:10:
bf:c2:76:c2:ba:44:d8:db:75:c5:1c:74:63:9c:85:
70:58:ad:d5:3b:28:2c:33:b8:36:86:43:20:41:a9:
f1:1d:6f:92:25:aa:b7:03:50:46:03:f0:4b:89:04:
71:22:cd:5d:8c:79:a1:3c:0e:9a:40:80:80:80:9f:
15:56:be:a9:56:34:bf:4d:75:bf:d6:24:d0:fa:1e:
b9:dd:ad:fd:24:dd:66:3e:34:c3:c8:06:e0:bb:0d:
ab:1e:0f:a9:09:dd:9c:ad:73:00:58:ce:3f:53:35:
13:36:a9:c1:22:46:b7:ae:d5:95:be:4d:25:97:c8:
87:66:c8:9b:30:2e:15:f7:f5:83:7f:98:81:e0:1d:
a5:7c:19:ac:45:d1:40:c4:1f:d8:14:dc:da:16:b0:
1a:6c:5b:14:2e:6c:17:f5:75:55:e5:74:8d:d7:25:
0b:30:fc:8d:a7:f7:03:86:f1:00:4d:80:e8:2a:c5:
3c:12:30:3e:45:ca:2b:44:73:2e:4f:9f:ce:47:64:
72:c1:1c:ea:ff:22:45:5e:77:d1:90:41:21:cf:79:
b0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:3F:36:15:4B:8D:D1:F4:1A:85:85:AA:AB:CF:BF:4D:19:10:BC:C5
X509v3 Authority Key Identifier:
keyid:49:17:6C:38:34:1D:8C:71:3B:79:5E:58:F5:00:2E:A6:75:05:97:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SRdsODQdjHE7eV5Y9QAupnUFlyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/adfa7b-cf37-49d2-96af-bd7caf0541b8/1/SRdsODQdjHE7eV5Y9QAupnUFlyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/adfa7b-cf37-49d2-96af-bd7caf0541b8/1/SRdsODQdjHE7eV5Y9QAupnUFlyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:f8:77:27:ee:cd:39:0a:ef:df:84:20:c0:49:00:5e:ce:2c:
9b:ab:e8:33:05:46:4a:54:98:76:73:7a:35:e9:ba:79:e3:0b:
b3:d2:26:a2:e7:6a:d2:9e:6f:a0:d6:6a:95:04:ca:9b:33:e4:
61:a3:dd:0a:8e:05:c3:08:bb:f1:19:79:4c:e1:61:06:12:45:
93:88:ca:96:99:59:42:12:1e:87:6a:08:df:36:0d:85:5d:6c:
5b:6f:93:c7:21:44:1a:ce:aa:6f:21:54:b5:bf:32:e2:be:93:
cd:65:e2:49:c9:bb:64:93:c0:e6:36:ad:2c:7e:c4:ac:50:57:
86:d6:3f:f7:72:30:72:f6:50:ab:3e:bd:76:72:94:ee:2e:11:
d4:dd:12:f0:e4:59:61:77:f0:c6:08:1a:f5:3b:92:75:2e:66:
50:9f:eb:c5:34:4d:c6:84:d7:c7:5b:fb:d7:a6:26:19:11:fe:
65:72:92:f0:4e:dc:31:70:a5:1d:8f:fc:e6:40:30:8f:d2:10:
9d:50:a3:4a:e7:cc:28:be:a2:94:7b:2e:e3:6c:a6:3b:24:fe:
a3:8c:f4:2b:66:1b:2e:e3:a3:1e:aa:96:1e:ef:1c:df:7c:a6:
0b:bf:d6:8d:e3:34:98:ce:c6:cf:b8:3e:6a:fb:ca:14:45:97:
d7:b4:ee:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 16:10:08 2026 by rpki-client