Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.mft
File: SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.mft (raw, json)
Hash identifier: trBBZ5IAty1dm4hxna0KMUxKBJbqqLfWpnzsdj/oScA=
Subject key identifier: 12:3E:47:91:FF:74:8C:16:B4:CC:23:F1:D3:C9:80:52:40:4C:D6:F8
Authority key identifier: 49:17:58:77:3A:99:E7:71:B9:0C:A9:BB:22:F7:FC:AD:BF:B6:32:48
Certificate issuer: /CN=491758773a99e771b90ca9bb22f7fcadbfb63248
Certificate serial: 019F927FB9F9EA25F4C6FEA76EA3DD1AB5F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.mft
Manifest number: 026B
Signing time: Fri 24 Jul 2026 05:01:11 +0000
Manifest this update: Fri 24 Jul 2026 05:01:11 +0000
Manifest next update: Sat 25 Jul 2026 05:01:11 +0000
Files and hashes: 1: SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.crl (hash: aL3dt6JQkfCiD5N7flRORwaRT8LtDS66IcGie00XA2Y=)
2: Z1MLI8tNzY6d4mU0MA4vsliznRQ.roa (hash: Hb0AvXt+7YtqdooEE/7Fg18JAVs1ie9AUIwS/98EVJs=)
3: wqC_NxiWyjJgLTJPPHhovqD7_pk.asa (hash: aMbvgTbGGGUalP6tB5y93mWncuZ7x+8sG7VUvXoPA50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:b9:f9:ea:25:f4:c6:fe:a7:6e:a3:dd:1a:b5:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=491758773a99e771b90ca9bb22f7fcadbfb63248
Validity
Not Before: Jul 24 05:01:11 2026 GMT
Not After : Jul 25 05:01:11 2026 GMT
Subject: CN=123e4791ff748c16b4cc23f1d3c98052404cd6f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5d:b2:33:62:11:fd:84:5e:eb:36:d9:a3:33:
1a:0a:97:82:e2:3e:12:43:0e:73:b4:76:41:7c:cf:
1d:40:c6:9c:63:20:07:e4:54:f1:a7:41:86:59:bb:
bd:5b:ed:4a:73:35:5d:30:ea:c7:5a:61:cd:7a:0a:
2b:3a:ad:a8:d9:ee:28:86:23:98:cf:08:f8:20:0e:
0e:98:0d:55:38:fb:bf:aa:ca:71:d5:e7:76:8a:0a:
3e:8b:bb:c6:a0:7a:79:55:3d:25:c2:b2:40:a4:76:
d1:8a:e9:4f:4e:6e:b4:38:f3:5c:59:98:34:db:65:
4c:33:57:b0:32:d6:65:ce:da:8d:03:a9:e1:ae:da:
c1:20:d5:65:b3:8a:81:64:16:b9:e3:56:7f:63:99:
6f:17:23:a0:c5:39:9d:d6:17:1e:dc:9c:77:3c:36:
3e:d6:b7:42:30:09:10:2a:24:5c:b1:71:85:1b:0a:
44:bf:a2:c7:33:d7:d7:f5:85:40:0c:fa:a8:82:ea:
83:c4:7d:68:d4:32:f8:0c:ce:54:f7:7e:72:39:b4:
25:3e:50:e8:8e:bc:1e:d4:c3:e3:29:d4:66:c3:54:
df:66:77:93:16:e0:70:9c:b4:3a:a0:cc:dd:20:b4:
c2:61:2e:4a:76:a6:9a:22:ff:46:79:16:f2:a8:05:
9c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:3E:47:91:FF:74:8C:16:B4:CC:23:F1:D3:C9:80:52:40:4C:D6:F8
X509v3 Authority Key Identifier:
keyid:49:17:58:77:3A:99:E7:71:B9:0C:A9:BB:22:F7:FC:AD:BF:B6:32:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:35:e6:0c:f5:81:f6:87:c6:7f:3d:8a:cf:df:77:78:07:eb:
12:b2:69:09:0b:21:60:5d:32:86:2f:5b:c7:93:a4:11:43:20:
8b:36:ec:5b:86:04:33:57:05:a4:9c:de:5d:ed:d9:0b:35:5f:
ff:cd:66:86:3b:73:fa:22:9f:58:78:20:cb:ca:ba:17:ca:82:
9b:51:ae:ee:0f:47:c9:a7:4c:0f:99:27:a8:ed:07:d9:d1:35:
28:71:73:26:d1:bf:47:2b:f8:18:e0:a2:ba:63:f4:41:e9:7d:
94:c0:0d:6c:e0:ef:a8:30:f3:b8:93:0b:26:d0:b7:82:c4:99:
5d:10:63:14:5e:47:be:3f:ac:59:0e:7b:1b:11:55:8b:cc:8e:
16:1f:d1:5e:f3:f7:75:41:66:df:f7:76:f1:35:f4:81:ac:eb:
b1:dc:8c:15:e2:dd:d2:b8:bd:cf:b5:e4:34:c0:27:48:63:ef:
3f:d0:8c:dd:22:7d:b9:99:23:a0:9f:1d:d1:21:4d:27:df:73:
f7:11:92:1e:83:57:7a:1f:a6:31:cb:e6:dd:ac:61:bf:69:b8:
a0:67:46:ad:88:0e:3b:2f:66:0a:d4:5d:90:69:76:fb:c8:6e:
b1:5a:2e:cf:e5:2a:ea:52:74:61:cc:b7:6d:ac:66:2f:67:c7:
2d:9d:97:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Sf7n56iX0xv6nbqPdGrX4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5MTc1ODc3M2E5OWU3NzFiOTBjYTliYjIyZjdmY2FkYmZi
NjMyNDgwHhcNMjYwNzI0MDUwMTExWhcNMjYwNzI1MDUwMTExWjAzMTEwLwYDVQQD
EygxMjNlNDc5MWZmNzQ4YzE2YjRjYzIzZjFkM2M5ODA1MjQwNGNkNmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoF2yM2IR/YRe6zbZozMaCpeC4j4S
Qw5ztHZBfM8dQMacYyAH5FTxp0GGWbu9W+1KczVdMOrHWmHNegorOq2o2e4ohiOY
zwj4IA4OmA1VOPu/qspx1ed2igo+i7vGoHp5VT0lwrJApHbRiulPTm60OPNcWZg0
22VMM1ewMtZlztqNA6nhrtrBINVls4qBZBa541Z/Y5lvFyOgxTmd1hce3Jx3PDY+
1rdCMAkQKiRcsXGFGwpEv6LHM9fX9YVADPqoguqDxH1o1DL4DM5U935yObQlPlDo
jrwe1MPjKdRmw1TfZneTFuBwnLQ6oMzdILTCYS5KdqaaIv9GeRbyqAWcNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBI+R5H/dIwWtMwj8dPJgFJATNb4MB8GA1UdIwQY
MBaAFEkXWHc6medxuQypuyL3/K2/tjJIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1JkWWR6cVo1M0c1REttN0l2ZjhyYi0yTWtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9lOGM2NzItZGExYS00MTMzLTkyMWUt
ZTdkYjk1ZTNiY2M0LzEvU1JkWWR6cVo1M0c1REttN0l2ZjhyYi0yTWtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9lOGM2NzItZGExYS00MTMzLTkyMWUtZTdkYjk1ZTNiY2M0
LzEvU1JkWWR6cVo1M0c1REttN0l2ZjhyYi0yTWtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbTXmDPWB
9ofGfz2Kz993eAfrErJpCQshYF0yhi9bx5OkEUMgizbsW4YEM1cFpJzeXe3ZCzVf
/81mhjtz+iKfWHggy8q6F8qCm1Gu7g9HyadMD5knqO0H2dE1KHFzJtG/Ryv4GOCi
umP0Qel9lMANbODvqDDzuJMLJtC3gsSZXRBjFF5Hvj+sWQ57GxFVi8yOFh/RXvP3
dUFm3/d28TX0gazrsdyMFeLd0ri9z7XkNMAnSGPvP9CM3SJ9uZkjoJ8d0SFNJ99z
9xGSHoNXeh+mMcvm3axhv2m4oGdGrYgOOy9mCtRdkGl2+8husVouz+Uq6lJ0Ycy3
baxmL2fHLZ2XQw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:47:34 2026 by rpki-client