Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/027208-40dc-412a-b64c-38bf1e942a64/1/sRI3DKJgErTR0BVM73IwvYmluV0.mft
File: sRI3DKJgErTR0BVM73IwvYmluV0.mft (raw, json)
Hash identifier: KTnr3spH+YIemDed3ecXFULf0s3bIZeEJuNc+3wb5Ds=
Subject key identifier: 5D:8C:79:98:2B:A5:68:1A:6D:A2:F7:2E:08:55:EA:2D:5A:00:94:94
Authority key identifier: B1:12:37:0C:A2:60:12:B4:D1:D0:15:4C:EF:72:30:BD:89:A5:B9:5D
Certificate issuer: /CN=b112370ca26012b4d1d0154cef7230bd89a5b95d
Certificate serial: 01A0FDFE2CBF743C4F45B3333970287B5C6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRI3DKJgErTR0BVM73IwvYmluV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/027208-40dc-412a-b64c-38bf1e942a64/1/sRI3DKJgErTR0BVM73IwvYmluV0.mft
Manifest number: 0241
Signing time: Fri 02 Oct 2026 19:01:28 +0000
Manifest this update: Fri 02 Oct 2026 19:01:28 +0000
Manifest next update: Sat 03 Oct 2026 19:01:28 +0000
Files and hashes: 1: JQHbkZiCoz_ArYL3K_jRaitcYso.roa (hash: LSS9szWjmAex/d/OuZRvWyhXy/Z+aR2BRiVKGpC62GY=)
2: sRI3DKJgErTR0BVM73IwvYmluV0.crl (hash: Zm2bUQWId2oFt0n72Azs6/ZpGqV8fUiO8yuKu8LDh3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/027208-40dc-412a-b64c-38bf1e942a64/1/sRI3DKJgErTR0BVM73IwvYmluV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/027208-40dc-412a-b64c-38bf1e942a64/1/sRI3DKJgErTR0BVM73IwvYmluV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sRI3DKJgErTR0BVM73IwvYmluV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 17:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fd:fe:2c:bf:74:3c:4f:45:b3:33:39:70:28:7b:5c:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b112370ca26012b4d1d0154cef7230bd89a5b95d
Validity
Not Before: Oct 2 19:01:28 2026 GMT
Not After : Oct 3 19:01:28 2026 GMT
Subject: CN=5d8c79982ba5681a6da2f72e0855ea2d5a009494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:38:a4:71:62:2e:b6:db:44:2f:fe:6d:ee:dd:
27:ee:2f:1a:16:9a:8f:95:3b:bd:8a:63:61:66:fd:
37:ac:9b:a8:90:23:f4:f0:af:18:f4:07:84:65:be:
af:3f:02:08:5d:45:cf:70:e1:77:19:a1:a3:b7:dd:
62:fc:23:78:35:87:45:f7:cb:88:36:d2:f0:d9:71:
67:28:4a:8d:e2:73:90:07:8b:4d:98:74:49:a2:b5:
8d:56:38:54:fd:a8:3f:d4:b2:a6:10:04:3f:64:c6:
96:f7:0b:25:52:2c:25:45:b6:1b:97:a9:81:d9:5b:
99:7c:8c:8b:4c:64:31:ae:c7:58:5e:88:38:3e:08:
8f:bb:66:c5:c1:f4:cb:d1:08:65:5f:10:6c:b9:ac:
fa:b1:56:7e:90:e4:7d:69:ee:55:4f:a0:5c:e8:2e:
59:bb:d5:27:c3:2c:25:8d:76:e5:79:45:6f:66:c1:
2c:e4:c3:f5:41:a1:ec:db:25:de:d7:cb:25:57:f9:
53:14:8b:c8:e9:49:40:d7:ce:3b:87:40:f1:77:04:
10:0d:2c:64:a5:a3:1d:5e:8e:fe:51:95:cc:57:29:
fd:d2:b5:ef:7c:fb:25:13:97:a5:6d:db:72:d2:d8:
31:0a:bd:4a:fa:1e:e4:14:e4:b5:87:bb:03:cb:10:
1b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:8C:79:98:2B:A5:68:1A:6D:A2:F7:2E:08:55:EA:2D:5A:00:94:94
X509v3 Authority Key Identifier:
keyid:B1:12:37:0C:A2:60:12:B4:D1:D0:15:4C:EF:72:30:BD:89:A5:B9:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRI3DKJgErTR0BVM73IwvYmluV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/027208-40dc-412a-b64c-38bf1e942a64/1/sRI3DKJgErTR0BVM73IwvYmluV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/027208-40dc-412a-b64c-38bf1e942a64/1/sRI3DKJgErTR0BVM73IwvYmluV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:3d:ea:11:b6:82:b6:c6:6b:c6:06:ae:08:be:17:21:18:0e:
69:9b:e8:3a:e1:e2:6e:dc:c7:e3:d6:13:80:4d:3a:23:2b:87:
93:bc:1e:27:48:1d:ee:43:2d:6a:bc:f2:ff:d8:8c:47:8f:70:
93:14:9f:9b:0f:96:4c:5d:1e:32:a9:b3:92:25:e0:92:60:bf:
5b:5c:cc:f0:07:4f:60:ea:57:81:71:85:f9:43:47:95:d5:ae:
0e:aa:fc:d4:af:20:52:1e:7d:9c:b5:51:a4:aa:fd:cd:a7:0b:
b2:e5:34:fc:f8:04:4b:ec:0a:d4:41:c3:b0:56:e4:42:a5:f1:
b6:d5:c8:f1:e0:42:76:26:ee:2c:f3:ba:18:88:d2:17:20:39:
2e:11:1f:31:38:a1:77:85:24:6a:61:14:74:39:82:26:69:41:
3a:48:00:b6:a9:c3:b0:88:aa:1d:02:53:d8:84:19:15:09:b6:
88:b3:2b:0c:a0:fc:45:93:ba:2e:fb:1c:6c:db:c0:b2:4c:26:
65:5f:71:e9:fc:fd:07:cc:94:3a:26:e4:5f:d9:b4:2c:32:4e:
d1:69:53:e2:bc:fc:e0:89:de:02:39:5d:9d:5f:81:6d:ae:b3:
0a:7e:f4:ad:45:1c:26:fe:b4:5b:47:bc:2d:e2:6f:f2:4e:0c:
08:c6:06:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 06:02:58 2026 by rpki-client