Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.mft
File: SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.mft (raw, json)
Hash identifier: FAxepnrd23aHqIDXZKmVd9odvM0b9lpIY8D1s7WpT2I=
Subject key identifier: 27:14:CA:D2:F0:F3:8C:3D:58:F5:17:8A:1D:62:D5:70:65:F1:5B:96
Authority key identifier: 49:17:58:77:3A:99:E7:71:B9:0C:A9:BB:22:F7:FC:AD:BF:B6:32:48
Certificate issuer: /CN=491758773a99e771b90ca9bb22f7fcadbfb63248
Certificate serial: 019E1D59E217C8B1B2340D26B885AF95B30F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.mft
Manifest number: 01A9
Signing time: Tue 12 May 2026 18:01:30 +0000
Manifest this update: Tue 12 May 2026 18:01:30 +0000
Manifest next update: Wed 13 May 2026 18:01:30 +0000
Files and hashes: 1: SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.crl (hash: hZ653lbWgzV10hpQxcmpZrVirqi3/x5LQQgT6JPWzMw=)
2: Z1MLI8tNzY6d4mU0MA4vsliznRQ.roa (hash: Hb0AvXt+7YtqdooEE/7Fg18JAVs1ie9AUIwS/98EVJs=)
3: rMUucMZwyHqVe68VNeoN6D-FuLA.asa (hash: nVyVPJj6zrsI6p0L4gt0DztUXIz3kVI0kWZGXavJ6p4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:e2:17:c8:b1:b2:34:0d:26:b8:85:af:95:b3:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=491758773a99e771b90ca9bb22f7fcadbfb63248
Validity
Not Before: May 12 18:01:30 2026 GMT
Not After : May 13 18:01:30 2026 GMT
Subject: CN=2714cad2f0f38c3d58f5178a1d62d57065f15b96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e4:a2:dc:48:1e:b5:54:a7:bb:01:68:1f:de:
39:3d:81:d9:db:2b:56:af:7b:7e:17:7e:e6:a9:0c:
f3:4c:88:ba:54:fd:1d:33:32:71:2e:ba:19:b4:b4:
47:20:21:3f:c3:39:ad:9f:d5:8f:dc:36:50:e2:af:
b2:35:e4:59:3a:d0:c1:ad:8d:a2:1c:72:17:c5:e4:
bc:a7:69:e0:44:e9:ff:41:de:fa:e7:c2:16:d7:d8:
c5:37:18:a8:4e:9c:25:87:d1:42:6f:f2:87:c5:43:
65:26:af:bf:f9:85:21:d8:d6:f3:f2:6b:94:41:b9:
db:d8:c7:6b:60:7c:28:6d:e7:0b:12:d2:47:66:c2:
28:12:80:a5:42:e5:dd:5b:aa:30:3b:6c:5c:32:9c:
79:ff:7a:62:98:0c:be:4a:67:5f:36:22:23:12:e1:
6d:b9:0e:3e:e6:65:33:bf:56:64:10:72:58:83:11:
2b:c8:64:7d:4c:72:f4:5e:5a:eb:10:e3:63:72:9f:
d2:e4:0b:1e:08:d8:90:db:a2:31:78:4e:ea:79:5d:
56:20:00:11:a1:c4:1c:d7:86:c1:3b:4a:49:88:5f:
2e:1b:b9:bf:7f:36:a0:de:cc:dc:cf:35:98:e3:d4:
19:a6:31:ad:73:fa:f6:cd:dc:99:91:93:3b:25:2a:
05:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:14:CA:D2:F0:F3:8C:3D:58:F5:17:8A:1D:62:D5:70:65:F1:5B:96
X509v3 Authority Key Identifier:
keyid:49:17:58:77:3A:99:E7:71:B9:0C:A9:BB:22:F7:FC:AD:BF:B6:32:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:8e:41:6b:74:0c:cd:9d:cb:ae:60:40:ae:04:e2:a3:35:6e:
c7:bf:e7:a6:48:b1:92:19:36:30:b7:37:37:51:24:9a:fc:b3:
da:40:7e:8c:b3:c1:96:e4:9e:0e:c3:5f:e6:f2:57:6e:55:31:
83:6f:48:25:08:55:bb:18:15:9b:f0:fe:ba:91:cb:99:fe:2d:
57:df:19:05:a3:fe:34:e8:df:05:08:84:53:bf:7e:6f:ab:9f:
b0:77:17:3d:f1:84:f5:cd:64:c1:68:1c:89:8f:80:20:29:33:
1c:d8:d0:a5:9d:e0:7e:11:c6:dd:c1:d5:72:a2:be:b2:6d:6b:
05:21:d4:eb:77:fa:d7:e2:f5:4b:37:bb:91:87:71:97:02:1b:
69:dd:19:d2:18:a8:9c:bf:28:62:11:02:f9:ae:92:7e:b5:69:
cf:ba:81:95:ca:eb:ca:be:c9:60:00:5c:bd:f7:ba:bb:45:52:
e3:ed:87:94:5f:c4:7e:be:9f:17:d7:e1:fa:fa:ff:74:2e:8f:
12:49:ca:48:71:bd:fe:15:c1:63:99:20:d1:8a:fa:4f:d3:fd:
d8:01:75:d1:7b:83:88:9a:a0:84:6b:94:40:76:37:f8:4a:d1:
c9:55:a2:28:f1:77:55:8c:67:9f:69:ab:92:a3:6c:da:fe:f2:
a1:a8:04:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:12:20 2026 by rpki-client