Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft
File: sDmrgpj6NjroN-UwAolpzFy_EE4.mft (raw, json)
Hash identifier: WX+sXDQhy5LUYrmjPIiHD+nEWF+QAQuVktNWIaZVw2I=
Subject key identifier: A2:5A:19:09:89:26:7F:88:32:57:F1:46:B5:E9:A5:F0:13:F7:23:0C
Authority key identifier: B0:39:AB:82:98:FA:36:3A:E8:37:E5:30:02:89:69:CC:5C:BF:10:4E
Certificate issuer: /CN=b039ab8298fa363ae837e530028969cc5cbf104e
Certificate serial: 019E1DFEE661675C7C6A2D76CF6C8F4B47EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft
Manifest number: 0768
Signing time: Tue 12 May 2026 21:01:44 +0000
Manifest this update: Tue 12 May 2026 21:01:44 +0000
Manifest next update: Wed 13 May 2026 21:01:44 +0000
Files and hashes: 1: pIFip_1IBLSOvbShbCzJqPR3ISA.asa (hash: km1Ndz8NVjDLwyeoYrd5hZq5MPQnd5mMrU9kZpY/Ge0=)
2: sDmrgpj6NjroN-UwAolpzFy_EE4.crl (hash: VtEddDv/VKKuASRNsxshoiM7My0lbfNodvHZLZa8KO0=)
3: zfEmQThXQQemumuyrh4dc64Ljpo.roa (hash: l1StJqEcmI3IdHWyUspZlBSORRI1cMJESHxgjnRlaoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:e6:61:67:5c:7c:6a:2d:76:cf:6c:8f:4b:47:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b039ab8298fa363ae837e530028969cc5cbf104e
Validity
Not Before: May 12 21:01:44 2026 GMT
Not After : May 13 21:01:44 2026 GMT
Subject: CN=a25a190989267f883257f146b5e9a5f013f7230c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2a:49:f8:05:56:c7:e3:20:13:1d:c1:a4:59:
35:53:ba:ce:fc:3f:06:30:fa:59:9e:d8:77:4e:b2:
69:4d:1d:90:70:b6:56:09:46:f6:bc:9b:cd:30:30:
ba:20:57:13:d2:99:ef:74:65:5d:18:a8:b3:c3:81:
bb:c0:36:d8:76:e4:26:72:09:a4:8d:bc:f2:8d:c1:
e7:d4:40:b7:07:e5:7c:96:b6:24:30:88:16:fd:5b:
ae:17:b1:4f:e1:a6:17:b3:c1:d1:7d:3d:e5:13:a7:
5b:91:66:5a:b9:44:0d:77:c5:8c:3c:21:68:3d:bf:
81:6d:76:56:a3:44:9e:e4:a1:0f:de:28:e8:8f:e8:
58:ef:67:f4:73:80:4f:b0:0f:10:5d:33:85:9c:e7:
9a:ce:f8:08:07:41:4f:fd:98:3b:08:78:ca:fd:ec:
11:0d:68:ca:83:69:26:10:7f:13:c7:f0:f2:bf:ff:
44:76:b8:45:1e:c8:2e:c7:a2:b1:8c:6a:7f:fb:df:
6e:82:c9:26:ab:02:1c:fd:91:58:03:d2:29:c6:8e:
bf:57:b0:00:f2:30:2c:5e:ee:99:fc:94:4a:20:82:
ab:c2:20:6d:72:c2:8d:d2:71:a8:cf:53:a4:ca:02:
cb:02:52:7e:77:d9:bd:92:bf:cb:58:26:b4:cd:ab:
10:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:5A:19:09:89:26:7F:88:32:57:F1:46:B5:E9:A5:F0:13:F7:23:0C
X509v3 Authority Key Identifier:
keyid:B0:39:AB:82:98:FA:36:3A:E8:37:E5:30:02:89:69:CC:5C:BF:10:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:f4:12:38:5a:e1:dc:f7:2f:37:ac:19:22:4e:9f:37:ed:89:
98:90:02:33:7e:2f:e6:64:05:d1:30:cf:43:00:d1:9b:24:3b:
70:68:96:a3:fe:7b:b3:ec:9c:3e:3b:59:4c:30:7c:2e:af:fa:
85:66:11:a4:0d:77:45:0d:ec:6f:51:44:8c:09:02:17:8e:22:
37:64:7c:f6:8e:6c:9b:99:99:6e:2d:3d:5f:f3:08:71:8d:09:
f8:a5:57:07:b4:85:e8:53:10:cd:18:7f:df:2e:e9:4e:a6:6d:
72:df:9f:d4:f1:1a:87:93:25:ed:2f:07:f4:36:53:87:28:d2:
ff:dc:f3:f3:97:7d:48:79:0e:aa:3d:8f:95:32:da:b6:f3:1b:
28:5c:22:59:06:0e:d3:07:f7:c9:35:35:c1:be:f5:32:80:18:
a2:cf:d2:9b:3e:0f:13:50:92:d1:7a:bc:de:7d:22:87:95:14:
67:1b:1b:47:73:cf:29:c5:3c:d6:57:8d:3c:57:77:a4:37:53:
bd:da:bd:0c:bb:b2:38:90:43:75:13:da:f0:45:ee:ce:16:6c:
b7:09:1d:94:e0:70:21:14:31:2d:f7:0f:82:23:1d:13:b6:ae:
67:68:18:9a:7b:d8:e4:bf:cf:d7:d5:5b:b6:3b:81:b0:9f:e7:
35:00:b0:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:21:37 2026 by rpki-client