Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/Srn5ALphi-jnySCWPN91e5BQ5Qk.mft
File: Srn5ALphi-jnySCWPN91e5BQ5Qk.mft (raw, json)
Hash identifier: YzIcMtrGYqcK5B5GUxva5OjvehJJk5Z/Xoi+gXyG5vg=
Subject key identifier: 5D:97:46:BE:2B:E3:13:B6:CB:8A:88:5B:A0:4A:44:35:36:27:08:72
Authority key identifier: 4A:B9:F9:00:BA:61:8B:E8:E7:C9:20:96:3C:DF:75:7B:90:50:E5:09
Certificate issuer: /CN=4ab9f900ba618be8e7c920963cdf757b9050e509
Certificate serial: 01A11418046D8EA92A2C381A8203D5E41970
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Srn5ALphi-jnySCWPN91e5BQ5Qk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/Srn5ALphi-jnySCWPN91e5BQ5Qk.mft
Manifest number: 1A8D
Signing time: Wed 07 Oct 2026 02:01:20 +0000
Manifest this update: Wed 07 Oct 2026 02:01:20 +0000
Manifest next update: Thu 08 Oct 2026 02:01:20 +0000
Files and hashes: 1: Srn5ALphi-jnySCWPN91e5BQ5Qk.crl (hash: YeJV+DrMqG2LX2733vx8wli0+MJleDHlvXUEvWH70Ew=)
2: TKiySKsrDB9cF93wGZALmPNCai4.roa (hash: tc1pUMByW6R2FInLyIj5FqB3NbTIk6zZRQsKK64hyM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/Srn5ALphi-jnySCWPN91e5BQ5Qk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/Srn5ALphi-jnySCWPN91e5BQ5Qk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Srn5ALphi-jnySCWPN91e5BQ5Qk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:14:18:04:6d:8e:a9:2a:2c:38:1a:82:03:d5:e4:19:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ab9f900ba618be8e7c920963cdf757b9050e509
Validity
Not Before: Oct 7 02:01:20 2026 GMT
Not After : Oct 8 02:01:20 2026 GMT
Subject: CN=5d9746be2be313b6cb8a885ba04a443536270872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:98:b6:cc:3f:2b:cd:d0:b7:7a:1c:88:58:da:
08:6b:48:a9:20:e9:96:9b:17:4a:4b:1c:06:79:b2:
21:d8:9f:bf:b8:ed:d7:b0:8c:aa:3e:54:ad:29:c7:
4d:63:f4:62:45:e2:19:3b:0d:00:d7:02:aa:e2:01:
66:ea:44:90:71:47:a9:d2:c5:38:ad:b4:79:0e:57:
25:01:1a:81:74:aa:30:f1:63:b4:e8:b4:0e:7d:4c:
22:33:17:b1:49:91:f7:0c:1a:94:9f:38:59:93:f0:
75:e2:d1:1e:96:17:1a:aa:a9:5a:9c:89:e8:18:51:
e4:79:c8:e2:b5:4e:da:01:4d:bf:ed:ea:ce:38:76:
27:c9:3d:97:b8:de:69:51:ed:8e:3a:d4:13:e5:6d:
7d:92:39:5e:36:75:f1:6b:05:eb:50:97:bd:45:74:
3b:dc:1f:c2:e5:5b:57:05:b9:63:8c:4d:bd:2b:07:
08:74:db:3c:43:ae:e1:92:63:dd:53:a5:e1:32:fa:
ad:c3:3f:00:a1:cd:68:c9:bb:8d:1a:4c:c5:9f:0c:
9c:61:ad:46:a6:90:71:7f:f8:40:80:42:70:f3:b2:
d1:86:ac:7f:a9:e5:9e:34:db:6e:bb:78:dc:b8:d2:
ee:1c:e3:02:a0:c4:47:b3:cc:c3:5a:20:9e:3e:92:
69:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:97:46:BE:2B:E3:13:B6:CB:8A:88:5B:A0:4A:44:35:36:27:08:72
X509v3 Authority Key Identifier:
keyid:4A:B9:F9:00:BA:61:8B:E8:E7:C9:20:96:3C:DF:75:7B:90:50:E5:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Srn5ALphi-jnySCWPN91e5BQ5Qk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/Srn5ALphi-jnySCWPN91e5BQ5Qk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/Srn5ALphi-jnySCWPN91e5BQ5Qk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:11:50:65:70:8e:ec:6a:c2:62:e4:12:f0:36:90:58:00:70:
16:b4:04:52:80:12:63:e2:03:4a:df:87:9c:6d:b5:55:07:5e:
1c:05:c2:8d:a0:9f:e1:da:2e:39:59:44:4f:8a:7f:73:94:f5:
cd:0c:f3:48:9f:7a:cd:52:f4:7d:6b:d8:8f:bc:85:9a:fc:c0:
13:0b:ea:ea:dc:24:20:69:a1:c6:b8:6e:df:23:4e:74:04:c4:
b4:fe:63:17:ea:90:8d:e6:53:17:62:aa:9b:87:bc:92:f3:ca:
56:bb:a5:f6:84:3b:dc:59:d4:27:b2:ce:7e:6f:3b:b4:d2:db:
72:7d:7d:97:a9:b4:13:27:ea:8e:6c:82:4b:09:92:e9:98:36:
d5:84:06:00:32:58:3b:7d:93:a8:95:40:5e:ef:55:12:8f:2e:
bb:f4:0a:27:16:1c:80:8c:4d:80:da:b4:a2:89:16:45:7a:21:
8a:2a:27:d6:1d:ec:06:ac:b9:5e:a3:7f:30:1d:14:9e:90:4f:
be:40:1c:9e:fa:94:6c:02:11:c7:ed:e9:f7:cd:65:98:6e:52:
c1:68:9c:e9:a8:5c:6c:60:71:c9:c3:0b:02:10:fd:a1:05:35:
f6:fe:d0:83:e1:8f:49:6a:a9:ae:88:11:82:51:b5:70:78:60:
e3:3e:97:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 05:05:06 2026 by rpki-client