Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.mft
File: SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.mft (raw, json)
Hash identifier: QLwm0qoN8iQdoJU3vAezdbnglQLGf6GR7CWFwEnNgXU=
Subject key identifier: 8C:15:12:F2:71:17:5E:22:DD:38:5E:CE:88:63:51:08:7C:D6:24:50
Authority key identifier: 49:17:58:77:3A:99:E7:71:B9:0C:A9:BB:22:F7:FC:AD:BF:B6:32:48
Certificate issuer: /CN=491758773a99e771b90ca9bb22f7fcadbfb63248
Certificate serial: 01A0D50232DEA2296978529F5CC52259A37F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.mft
Manifest number: 0312
Signing time: Thu 24 Sep 2026 20:01:25 +0000
Manifest this update: Thu 24 Sep 2026 20:01:25 +0000
Manifest next update: Fri 25 Sep 2026 20:01:25 +0000
Files and hashes: 1: SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.crl (hash: pkUKDlh6gDa5SGp3wiuHW3HoXgVxRrKOiYh4E3UFcqk=)
2: Z1MLI8tNzY6d4mU0MA4vsliznRQ.roa (hash: Hb0AvXt+7YtqdooEE/7Fg18JAVs1ie9AUIwS/98EVJs=)
3: wqC_NxiWyjJgLTJPPHhovqD7_pk.asa (hash: aMbvgTbGGGUalP6tB5y93mWncuZ7x+8sG7VUvXoPA50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 20:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:02:32:de:a2:29:69:78:52:9f:5c:c5:22:59:a3:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=491758773a99e771b90ca9bb22f7fcadbfb63248
Validity
Not Before: Sep 24 20:01:25 2026 GMT
Not After : Sep 25 20:01:25 2026 GMT
Subject: CN=8c1512f271175e22dd385ece886351087cd62450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:90:d2:2b:a7:f1:61:66:5a:73:20:91:a0:5a:
11:82:3c:40:ce:05:0f:9e:82:21:33:57:b3:1a:aa:
22:18:76:59:7d:e2:6e:40:20:3f:c2:8a:c9:41:f2:
0e:b1:33:31:93:c1:a4:06:c8:03:24:51:37:4f:1d:
f7:85:a7:2a:f5:c5:24:c0:10:ba:ee:e2:7c:7a:c9:
42:a1:d0:a6:3a:09:d9:76:2c:b4:35:ee:30:64:26:
53:04:0c:73:8f:ff:ef:08:b7:50:70:19:e5:b2:4d:
93:31:b3:8c:d4:24:24:2b:89:5f:2d:82:ac:47:5b:
5e:29:0e:10:7d:27:64:f3:d0:c7:ce:a0:69:29:1d:
d5:03:a2:fb:b4:7b:da:34:13:0d:c7:40:e7:d5:79:
41:d6:4b:1c:51:60:6c:78:38:ef:8c:94:f3:fd:44:
fe:4c:66:40:5d:62:e9:43:f1:a6:24:ef:96:5b:e0:
a4:5e:f2:2a:08:e8:bd:6e:7c:44:4c:8d:ad:6c:a0:
80:1f:0a:cb:8a:1e:35:17:9d:06:4b:9f:15:f6:e5:
67:71:47:19:1b:0a:44:ca:7f:e4:ac:92:64:e4:47:
a7:ae:93:b9:de:e5:ee:0f:4c:08:a8:6d:8c:60:93:
8c:e6:46:1d:90:39:25:fd:e5:56:7f:b3:90:6c:31:
9e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:15:12:F2:71:17:5E:22:DD:38:5E:CE:88:63:51:08:7C:D6:24:50
X509v3 Authority Key Identifier:
keyid:49:17:58:77:3A:99:E7:71:B9:0C:A9:BB:22:F7:FC:AD:BF:B6:32:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:ff:b9:cb:52:b5:dd:b8:a4:6b:58:d6:d5:75:eb:0e:c3:f6:
99:ac:c0:56:e0:aa:fa:3b:ab:2d:79:96:6f:07:39:0e:f7:ac:
c4:e0:9e:22:40:60:fa:49:41:dc:67:49:92:4f:cb:13:93:ab:
98:0d:76:9f:10:17:ec:1b:81:97:ca:0c:07:bb:20:85:08:bc:
70:53:92:d3:32:8e:eb:7e:40:b3:7d:da:f7:6f:7e:2a:8f:9e:
36:b1:a3:cc:d8:ec:fc:fe:30:4c:de:6f:37:ec:c3:db:32:f4:
db:18:95:6d:b3:11:e0:06:ba:6c:9d:e9:bd:e6:75:49:25:d2:
cf:75:08:9e:9d:b6:72:bd:ac:1a:8d:cc:31:b3:81:78:0a:27:
1b:0c:4a:f4:13:3b:b2:37:99:14:0b:56:d0:6e:9a:78:7c:17:
df:a4:00:24:c2:b7:78:8b:2a:7c:1d:9b:c5:6d:42:60:df:f4:
f2:cf:37:ca:b1:32:31:31:b6:36:67:6d:12:90:3c:30:2b:65:
59:38:e7:94:78:3c:11:d6:cf:a2:a4:d0:16:d0:92:c5:a3:e7:
f5:b7:78:26:0d:b1:a6:da:ea:8b:e5:b8:a8:d7:42:c0:e9:72:
b3:65:ed:42:4a:0a:65:ff:1a:0c:4e:f4:e8:e0:3d:db:ad:b6:
95:95:7b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:42:04 2026 by rpki-client