Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.mft
File: srQdL319OFfgdfKk8vnT4ETy5TY.mft (raw, json)
Hash identifier: p/sYiI1BsnJPydjJe0M0/gOcFoH/eneptlKlkh9KJxM=
Subject key identifier: 88:FC:D0:1C:B5:66:3B:87:5D:B8:EE:7C:38:39:9F:29:A9:C5:33:38
Authority key identifier: B2:B4:1D:2F:7D:7D:38:57:E0:75:F2:A4:F2:F9:D3:E0:44:F2:E5:36
Certificate issuer: /CN=b2b41d2f7d7d3857e075f2a4f2f9d3e044f2e536
Certificate serial: 01A11E63E73A5D58044C19F4A747E442333F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/srQdL319OFfgdfKk8vnT4ETy5TY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.mft
Manifest number: 0A89
Signing time: Fri 09 Oct 2026 02:00:26 +0000
Manifest this update: Fri 09 Oct 2026 02:00:26 +0000
Manifest next update: Sat 10 Oct 2026 02:00:26 +0000
Files and hashes: 1: ccbRYfaOrZiuEkrHIrVKv3yTTRQ.roa (hash: 1rXo/TMh24GMi4wocJm7kbtdLJ4+9i/olXhRctAE2ME=)
2: srQdL319OFfgdfKk8vnT4ETy5TY.crl (hash: VgBlSj4vbZ2bJLiL6m+bza2VEI0pBJltSxuMfaCNoiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.mft
rsync://rpki.ripe.net/repository/DEFAULT/srQdL319OFfgdfKk8vnT4ETy5TY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1e:63:e7:3a:5d:58:04:4c:19:f4:a7:47:e4:42:33:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2b41d2f7d7d3857e075f2a4f2f9d3e044f2e536
Validity
Not Before: Oct 9 02:00:26 2026 GMT
Not After : Oct 10 02:00:26 2026 GMT
Subject: CN=88fcd01cb5663b875db8ee7c38399f29a9c53338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:aa:41:c8:83:a0:20:8f:41:05:45:08:8c:cb:
65:5b:89:25:3f:76:52:a0:33:fb:92:4b:98:fc:6a:
09:a4:36:51:1b:65:fb:35:c1:ca:c1:d9:3a:2d:9d:
3d:08:7c:1b:f4:8e:1a:75:08:76:5b:65:4a:93:69:
88:f2:94:51:97:89:2d:24:f2:8b:7e:53:d6:1a:ee:
85:35:43:f3:16:54:a5:bd:60:b0:66:d9:3f:72:5a:
dc:a8:d4:48:4b:9b:37:9c:e7:d6:a6:87:46:6d:1a:
77:08:34:4b:49:be:f7:47:16:fc:61:e7:3a:6c:20:
47:57:5b:1c:b5:ed:75:2f:de:97:a0:86:98:44:71:
45:c5:9c:fe:53:cd:79:ab:87:22:6c:bb:00:68:bc:
38:64:7a:5b:8c:0a:35:f1:4d:e3:f7:08:fd:b3:f3:
83:f5:f2:dd:00:3e:07:dc:10:bd:32:66:d8:59:84:
1e:60:97:1a:42:70:b6:03:e4:14:30:94:86:95:9e:
35:b8:95:5b:e1:02:27:a6:de:36:7a:a9:f0:89:6e:
61:87:fe:c8:79:77:5e:0e:89:c9:34:31:b4:99:0e:
ad:b5:08:84:0a:63:50:9d:8a:14:4c:b1:ad:dd:d3:
30:00:77:1b:be:53:03:a9:82:6b:7d:ac:12:04:4b:
c6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:FC:D0:1C:B5:66:3B:87:5D:B8:EE:7C:38:39:9F:29:A9:C5:33:38
X509v3 Authority Key Identifier:
keyid:B2:B4:1D:2F:7D:7D:38:57:E0:75:F2:A4:F2:F9:D3:E0:44:F2:E5:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/srQdL319OFfgdfKk8vnT4ETy5TY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:89:8e:cb:f5:4b:ad:c1:00:76:e0:8f:05:55:ff:9d:f8:55:
55:67:f3:f8:39:0c:d5:4e:df:a4:68:06:32:10:b9:d0:c0:dc:
3a:7d:d9:97:2d:c5:53:17:5c:1a:42:31:18:62:bd:91:c2:60:
2b:a0:b3:e6:13:f7:dc:e5:d3:bb:ca:bb:85:7c:15:b5:95:de:
38:c6:a8:43:3c:14:1e:94:01:4e:ce:cc:8e:b0:52:34:3e:80:
90:d0:0d:03:0f:be:94:20:9e:57:74:20:a7:5a:eb:a8:a2:be:
ab:fb:65:ba:8d:76:1a:d3:b4:6c:b2:dc:c8:4b:ed:e4:81:36:
d9:84:ed:a0:49:57:2e:42:81:81:77:c8:9d:c2:a2:04:e1:37:
1a:51:f5:53:ec:42:47:45:9d:48:07:f9:bc:e4:07:e0:16:b6:
ac:e1:3e:f2:6a:c0:06:f6:46:04:b1:7a:ab:a8:11:2b:c4:61:
db:e4:93:04:c0:34:c9:98:4a:30:3c:a9:18:dd:96:18:9b:e8:
90:03:61:18:52:d4:a9:1d:70:e0:bf:7a:22:c0:27:7d:12:60:
74:6c:8a:0e:ea:26:cd:6d:47:41:30:a0:2f:82:d4:84:71:11:
81:b7:d2:15:de:d4:98:7c:ee:a7:5c:e0:9c:6b:37:48:92:80:
98:49:d5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 16:13:45 2026 by rpki-client