Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/027208-40dc-412a-b64c-38bf1e942a64/1/sRI3DKJgErTR0BVM73IwvYmluV0.mft
File: sRI3DKJgErTR0BVM73IwvYmluV0.mft (raw, json)
Hash identifier: 0LHYAFGzR9wAfM5q+roHLqCGFECZWDt8+DjWCMU0lqM=
Subject key identifier: 75:38:60:A3:8F:C3:D1:9D:CC:09:1C:3B:A6:B2:CD:7A:6D:99:A9:89
Authority key identifier: B1:12:37:0C:A2:60:12:B4:D1:D0:15:4C:EF:72:30:BD:89:A5:B9:5D
Certificate issuer: /CN=b112370ca26012b4d1d0154cef7230bd89a5b95d
Certificate serial: 019F92ECC9017BAABA79F96AED6F8E4A55F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRI3DKJgErTR0BVM73IwvYmluV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/027208-40dc-412a-b64c-38bf1e942a64/1/sRI3DKJgErTR0BVM73IwvYmluV0.mft
Manifest number: 0185
Signing time: Fri 24 Jul 2026 07:00:19 +0000
Manifest this update: Fri 24 Jul 2026 07:00:19 +0000
Manifest next update: Sat 25 Jul 2026 07:00:19 +0000
Files and hashes: 1: JQHbkZiCoz_ArYL3K_jRaitcYso.roa (hash: LSS9szWjmAex/d/OuZRvWyhXy/Z+aR2BRiVKGpC62GY=)
2: sRI3DKJgErTR0BVM73IwvYmluV0.crl (hash: OiCPE6QG4fdbYJZZ9JoV5gs4RJevYw30XMDsXjrHB3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/027208-40dc-412a-b64c-38bf1e942a64/1/sRI3DKJgErTR0BVM73IwvYmluV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/027208-40dc-412a-b64c-38bf1e942a64/1/sRI3DKJgErTR0BVM73IwvYmluV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sRI3DKJgErTR0BVM73IwvYmluV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ec:c9:01:7b:aa:ba:79:f9:6a:ed:6f:8e:4a:55:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b112370ca26012b4d1d0154cef7230bd89a5b95d
Validity
Not Before: Jul 24 07:00:19 2026 GMT
Not After : Jul 25 07:00:19 2026 GMT
Subject: CN=753860a38fc3d19dcc091c3ba6b2cd7a6d99a989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:02:e4:c2:9c:6c:ed:45:24:c1:53:a3:cc:4a:
c5:a3:e2:2d:97:f5:06:5b:17:f7:0d:c1:19:32:02:
d1:5c:b7:dc:6f:b3:36:43:20:9a:2a:b7:1e:41:4c:
fb:0c:29:b2:87:93:fc:1d:5d:80:59:2b:6f:ef:3c:
7a:0e:9a:73:f4:1e:aa:c1:09:a1:b5:2e:9a:30:74:
cd:db:3b:c3:9c:b3:8b:41:0a:c0:fb:e9:ab:c4:35:
00:d3:f6:84:ae:0e:04:78:2f:e1:56:86:3f:23:57:
79:4a:28:82:3a:4b:c6:d2:81:51:3a:f6:56:11:99:
1e:29:d1:ce:ca:79:c1:8e:b8:d8:61:25:42:63:76:
ec:bc:af:07:a4:d1:36:ad:fd:e4:f1:f0:c5:b8:df:
5b:69:99:c7:bb:81:7f:16:1f:c4:a1:c4:a9:25:3d:
b0:4a:00:21:71:3d:7b:8c:23:b1:44:17:65:a3:72:
bd:e5:58:f0:9c:68:5e:5e:e9:43:b1:e5:60:a9:8e:
c3:6d:16:b0:39:80:1c:55:0f:25:af:23:46:25:8d:
42:62:01:61:ce:b8:e9:2c:5e:fc:f6:45:63:ad:bd:
ae:c7:e1:f6:a3:ba:27:41:61:a8:e9:7c:f9:75:cf:
57:78:9d:e7:07:17:e9:8c:1e:3d:ba:b9:52:98:5f:
31:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:38:60:A3:8F:C3:D1:9D:CC:09:1C:3B:A6:B2:CD:7A:6D:99:A9:89
X509v3 Authority Key Identifier:
keyid:B1:12:37:0C:A2:60:12:B4:D1:D0:15:4C:EF:72:30:BD:89:A5:B9:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRI3DKJgErTR0BVM73IwvYmluV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/027208-40dc-412a-b64c-38bf1e942a64/1/sRI3DKJgErTR0BVM73IwvYmluV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/027208-40dc-412a-b64c-38bf1e942a64/1/sRI3DKJgErTR0BVM73IwvYmluV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:81:60:c9:0b:8e:62:f6:1f:ec:40:bb:7a:26:5b:c1:6f:32:
39:7f:b4:7c:c6:35:4f:19:38:ae:b0:74:4a:52:cb:56:f9:3a:
f8:cb:d4:8c:07:e0:8b:47:fe:78:db:df:68:47:02:3e:c2:0d:
97:c7:ca:0f:e8:39:52:02:1c:db:61:ff:fe:7f:48:68:f3:54:
23:5a:02:5d:4e:a9:ce:85:fd:a7:ba:7e:c5:dc:3f:ac:75:ec:
cf:d5:7f:c0:37:53:af:a3:1e:e9:2d:a2:57:32:5f:7d:c8:4e:
12:62:36:0e:5e:c8:88:3a:84:db:bb:81:05:01:8c:1c:86:2a:
cb:f6:16:06:fb:32:78:5f:d7:20:d6:d1:cc:64:f9:31:0f:6e:
c4:d8:d9:40:e2:66:3b:82:fb:cb:c4:a1:e5:76:f2:e2:cb:5d:
8c:58:88:a3:c3:4e:24:bc:fa:89:9c:a9:e8:56:3f:31:66:ff:
38:ef:35:ba:7e:66:7c:b1:02:2d:6c:96:bc:1f:f4:2a:09:4e:
83:d8:d5:59:77:d3:a0:6b:1c:00:5f:17:44:3d:db:57:45:b1:
87:b7:09:c2:dc:99:2f:0a:00:00:17:df:17:d8:96:60:be:1e:
e1:74:7f:bc:e6:33:05:18:7a:8b:f5:cc:a3:24:bb:eb:fb:c3:
a1:8d:ff:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:53:49 2026 by rpki-client