Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft
File: sDmrgpj6NjroN-UwAolpzFy_EE4.mft (raw, json)
Hash identifier: lgUmNL4klVv3UXGwOn1AzgIp+33quQ8JqIhNKagblfI=
Subject key identifier: 6C:3E:A5:63:58:B8:5E:5F:6B:7F:D2:BE:97:75:25:49:FE:C9:15:4E
Authority key identifier: B0:39:AB:82:98:FA:36:3A:E8:37:E5:30:02:89:69:CC:5C:BF:10:4E
Certificate issuer: /CN=b039ab8298fa363ae837e530028969cc5cbf104e
Certificate serial: 01A0CB59BA3A057170093F9CA71BE4EC090B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft
Manifest number: 08CB
Signing time: Tue 22 Sep 2026 23:00:50 +0000
Manifest this update: Tue 22 Sep 2026 23:00:50 +0000
Manifest next update: Wed 23 Sep 2026 23:00:50 +0000
Files and hashes: 1: pIFip_1IBLSOvbShbCzJqPR3ISA.asa (hash: km1Ndz8NVjDLwyeoYrd5hZq5MPQnd5mMrU9kZpY/Ge0=)
2: sDmrgpj6NjroN-UwAolpzFy_EE4.crl (hash: 9VvUMJFODnB3VWqpbq9Pu0VCqh8sTmapHWpSMvs27iY=)
3: zfEmQThXQQemumuyrh4dc64Ljpo.roa (hash: l1StJqEcmI3IdHWyUspZlBSORRI1cMJESHxgjnRlaoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:59:ba:3a:05:71:70:09:3f:9c:a7:1b:e4:ec:09:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b039ab8298fa363ae837e530028969cc5cbf104e
Validity
Not Before: Sep 22 23:00:50 2026 GMT
Not After : Sep 23 23:00:50 2026 GMT
Subject: CN=6c3ea56358b85e5f6b7fd2be97752549fec9154e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:2d:32:81:4f:b7:1b:f3:6e:f7:21:67:8f:51:
c5:b9:7e:ce:0b:8c:c2:94:26:d7:d4:8d:ea:20:2f:
63:e9:74:58:57:77:a7:79:14:6a:ff:c1:9f:fe:a0:
88:a0:95:94:3b:e9:ed:8a:f8:e9:c5:29:d4:60:65:
ee:a6:19:51:57:44:cb:76:ec:03:3b:3d:d1:cd:02:
36:ba:d1:47:5d:3a:b1:f8:09:80:aa:75:5c:db:89:
85:74:25:32:9f:5c:b0:a8:6b:1e:29:cd:78:f8:6d:
0d:e8:eb:0d:f7:ee:07:a0:1b:4a:33:2e:e5:4d:ec:
91:c9:e6:2a:23:40:02:c1:cb:28:8d:45:9d:62:02:
9f:2c:0e:fa:eb:c8:50:73:b9:31:52:c1:64:a3:59:
88:ed:ed:ad:95:94:92:f1:d4:08:5c:10:c5:28:5d:
f4:61:82:2d:f1:ab:e0:ee:a9:90:66:1d:f4:4c:44:
6b:f5:88:5d:e1:87:d2:f5:75:96:87:37:97:79:17:
79:45:15:76:f5:67:b7:9c:28:33:6c:16:b3:5e:81:
d1:a4:84:8f:58:b5:c3:96:e9:d1:f8:8e:65:a1:d6:
49:16:3d:a6:4b:6b:54:e7:79:af:f6:97:6b:06:7d:
c4:60:22:c4:ab:b7:69:76:9b:e3:6a:8b:4c:4c:a5:
e5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:3E:A5:63:58:B8:5E:5F:6B:7F:D2:BE:97:75:25:49:FE:C9:15:4E
X509v3 Authority Key Identifier:
keyid:B0:39:AB:82:98:FA:36:3A:E8:37:E5:30:02:89:69:CC:5C:BF:10:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:a7:4d:42:62:35:b9:8c:b7:a5:e8:a6:30:81:aa:3d:3e:3c:
d7:5c:3d:fb:95:de:45:d7:c2:4a:11:98:44:fd:0f:ce:fa:5b:
3b:df:de:16:a3:3f:b4:1a:b0:5d:58:2c:b2:38:11:e6:f1:47:
c7:d5:32:36:e6:83:c1:f4:bf:57:9b:4b:5a:f9:a1:0e:87:29:
dc:21:36:b5:d5:c9:52:d8:b5:b4:11:a4:c5:bb:0e:93:e7:2a:
f9:b8:a4:b7:c9:0f:9a:78:39:2d:9f:9e:ee:8e:8f:27:ae:91:
79:9a:6d:55:ee:5e:0c:41:50:93:44:44:d3:f6:d4:7d:0f:84:
38:7a:9e:45:a8:75:9b:f6:17:44:57:17:38:fd:ce:23:1b:11:
83:3e:fe:e9:85:48:30:2d:a7:69:8e:dc:76:8a:e6:43:da:d9:
98:b4:1f:91:ce:dd:4b:a1:82:2b:4b:bc:af:6b:16:e6:06:de:
a3:e6:56:70:52:94:4d:85:37:3f:0a:4f:db:81:98:46:3d:bf:
2f:f1:ab:87:12:f0:a0:59:fe:eb:e2:1f:d3:92:56:60:07:ec:
7b:ab:42:ab:c9:2c:a2:d2:15:8d:88:5c:dd:bb:81:88:c0:a3:
fc:ec:38:93:f8:64:cc:51:19:16:d0:4f:d6:41:0a:af:f3:dc:
a0:10:e8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:04:59 2026 by rpki-client