Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/adfa7b-cf37-49d2-96af-bd7caf0541b8/1/SRdsODQdjHE7eV5Y9QAupnUFlyg.mft
File: SRdsODQdjHE7eV5Y9QAupnUFlyg.mft (raw, json)
Hash identifier: kJMPjp2BnrRQB1zIJsuqTDkJnIA6W+oVDMLnwmcpKp0=
Subject key identifier: 8F:01:64:B7:37:64:1C:19:51:C4:A7:C4:D4:63:E1:23:B7:F5:96:96
Authority key identifier: 49:17:6C:38:34:1D:8C:71:3B:79:5E:58:F5:00:2E:A6:75:05:97:28
Certificate issuer: /CN=49176c38341d8c713b795e58f5002ea675059728
Certificate serial: 019F122E3F06553A4CEABB549654549AD363
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SRdsODQdjHE7eV5Y9QAupnUFlyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/adfa7b-cf37-49d2-96af-bd7caf0541b8/1/SRdsODQdjHE7eV5Y9QAupnUFlyg.mft
Manifest number: 0192
Signing time: Mon 29 Jun 2026 07:00:48 +0000
Manifest this update: Mon 29 Jun 2026 07:00:48 +0000
Manifest next update: Tue 30 Jun 2026 07:00:48 +0000
Files and hashes: 1: RQ5Cbf5xDKk_APMnlbM6ZHm4l7Q.roa (hash: l7hYvOlaLLwFZOpMeD6wZKlD7HWG7TlnqA+KkK5p5ho=)
2: SRdsODQdjHE7eV5Y9QAupnUFlyg.crl (hash: W2lBs5TGSJDt2YvZHfZ+BHC7s0fMC79BtF0Nhmqqm4Y=)
3: WQHG1u9PCPjDbr0POILKlVvCtIo.asa (hash: BrveTBrYvbvgxputKeZw7R7kBDu/ApcK0fbWPjyFnTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/adfa7b-cf37-49d2-96af-bd7caf0541b8/1/SRdsODQdjHE7eV5Y9QAupnUFlyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/adfa7b-cf37-49d2-96af-bd7caf0541b8/1/SRdsODQdjHE7eV5Y9QAupnUFlyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SRdsODQdjHE7eV5Y9QAupnUFlyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:2e:3f:06:55:3a:4c:ea:bb:54:96:54:54:9a:d3:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49176c38341d8c713b795e58f5002ea675059728
Validity
Not Before: Jun 29 07:00:48 2026 GMT
Not After : Jun 30 07:00:48 2026 GMT
Subject: CN=8f0164b737641c1951c4a7c4d463e123b7f59696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6a:a6:46:14:9a:91:45:ed:dd:18:83:06:84:
94:5f:c7:bc:12:89:39:9e:7c:40:c3:53:40:e0:e4:
2c:3b:84:e0:43:db:5a:f0:de:bd:e9:5a:31:2b:26:
97:63:e5:9f:90:3d:73:a4:7b:7f:ee:25:af:7c:53:
a0:8a:12:a9:9e:83:7c:57:52:04:b2:05:ce:ba:1e:
d7:2b:ab:69:bd:6c:68:22:3f:30:1a:dc:0e:08:2b:
40:67:8a:ba:aa:1c:70:09:d4:d3:62:e0:23:2b:90:
42:85:7a:c6:10:39:aa:d0:a3:85:70:b0:1d:6f:c2:
93:f8:58:45:fa:83:00:0d:6a:04:ec:54:03:e9:d9:
7d:84:e3:13:c1:13:0d:f2:8a:67:a9:df:16:77:a0:
76:39:b0:ec:f4:a7:6f:7f:98:97:89:11:ca:cf:b3:
34:d7:17:4c:d3:a7:6b:bc:37:ef:63:b9:b4:c2:cf:
b3:9d:ab:e9:59:c8:4a:38:84:21:f0:c9:c1:9f:9b:
e3:1b:2d:e9:65:78:de:42:dc:cf:bd:d3:b8:4d:17:
e6:3a:cd:8a:81:09:12:c7:9b:fa:a5:02:7a:88:c5:
1a:6e:ff:fc:c2:17:34:d4:e0:00:37:d7:d6:0c:cb:
6a:83:fe:ef:39:60:8e:fe:69:17:b3:59:90:dd:8f:
64:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:01:64:B7:37:64:1C:19:51:C4:A7:C4:D4:63:E1:23:B7:F5:96:96
X509v3 Authority Key Identifier:
keyid:49:17:6C:38:34:1D:8C:71:3B:79:5E:58:F5:00:2E:A6:75:05:97:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SRdsODQdjHE7eV5Y9QAupnUFlyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/adfa7b-cf37-49d2-96af-bd7caf0541b8/1/SRdsODQdjHE7eV5Y9QAupnUFlyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/adfa7b-cf37-49d2-96af-bd7caf0541b8/1/SRdsODQdjHE7eV5Y9QAupnUFlyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:12:63:ff:46:73:93:f5:48:f2:83:9b:30:8c:0b:f7:12:8e:
8d:3c:ce:e2:59:0f:42:be:40:92:14:d5:42:33:c9:2d:1e:fa:
20:9a:14:97:16:d9:59:c7:fb:86:76:51:c7:82:04:5c:64:39:
72:4f:d0:6a:c7:2f:52:1e:f0:29:7a:7c:68:5a:a8:d4:ae:ae:
8d:ad:9c:ac:fd:dd:2c:64:7b:03:29:64:a4:9f:9d:20:51:fc:
9d:91:01:8d:2a:fa:09:b6:ea:49:9f:0d:09:83:cc:2b:4e:7e:
ae:7c:16:dc:e4:8d:86:f9:39:e3:9b:64:a8:fa:e9:5c:d0:ca:
8a:bc:60:8a:b1:64:de:ab:eb:1b:79:43:89:4f:7d:cd:dc:05:
e7:d8:2a:a9:d1:0b:80:81:c1:be:ff:ab:03:64:62:79:6d:f7:
11:76:8f:8e:5e:e4:7f:09:36:1a:96:9d:a6:62:84:14:97:80:
31:94:49:f1:50:e0:9b:f8:e5:21:a4:ea:1d:8d:b6:78:de:ca:
e3:56:83:e3:8b:5a:64:30:73:8a:87:14:da:dd:3d:e7:ee:b8:
48:1f:56:4f:38:bc:cf:33:b1:fa:61:e3:1b:7f:e5:9f:5b:21:
49:42:3a:4d:1b:26:c6:8d:47:fd:c4:be:ae:d8:e8:ca:62:8c:
b7:ab:a9:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:35:32 2026 by rpki-client