
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/d568ed-1780-4d60-a6f7-5a8360dea3a3/1/sdLmgf8j3d89UXhY4cZKHa0phyk.mft
File: sdLmgf8j3d89UXhY4cZKHa0phyk.mft (raw, json)
Hash identifier: xmH+Nfacop+qmUaqltpu4vMGa5XbCSrKDmQYuSLZylg=
Subject key identifier: 12:77:19:26:F8:C5:26:6D:7C:A6:AB:65:67:4F:09:07:3B:A7:79:51
Authority key identifier: B1:D2:E6:81:FF:23:DD:DF:3D:51:78:58:E1:C6:4A:1D:AD:29:87:29
Certificate issuer: /CN=b1d2e681ff23dddf3d517858e1c64a1dad298729
Certificate serial: 019E20C8924BB852DD6E454673271399ED96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sdLmgf8j3d89UXhY4cZKHa0phyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/d568ed-1780-4d60-a6f7-5a8360dea3a3/1/sdLmgf8j3d89UXhY4cZKHa0phyk.mft
Manifest number: 1755
Signing time: Wed 13 May 2026 10:01:15 +0000
Manifest this update: Wed 13 May 2026 10:01:15 +0000
Manifest next update: Thu 14 May 2026 10:01:15 +0000
Files and hashes: 1: bLRsbjwrHl85CS_7pV5-UUKmgDU.roa (hash: wRWPjMaqEtjkWAV9xCnB4Aq9mP2pz2n/Qg6SuBrxsSE=)
2: sdLmgf8j3d89UXhY4cZKHa0phyk.crl (hash: 1HUjFVmlPjWbJau35cfwRPbG7Rhnc+hRMztxfsVVRnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/d568ed-1780-4d60-a6f7-5a8360dea3a3/1/sdLmgf8j3d89UXhY4cZKHa0phyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/d568ed-1780-4d60-a6f7-5a8360dea3a3/1/sdLmgf8j3d89UXhY4cZKHa0phyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sdLmgf8j3d89UXhY4cZKHa0phyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 10:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:c8:92:4b:b8:52:dd:6e:45:46:73:27:13:99:ed:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1d2e681ff23dddf3d517858e1c64a1dad298729
Validity
Not Before: May 13 10:01:15 2026 GMT
Not After : May 14 10:01:15 2026 GMT
Subject: CN=12771926f8c5266d7ca6ab65674f09073ba77951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b5:80:69:37:e4:5e:aa:51:e4:2a:21:dc:88:
9c:4b:b2:c8:b6:c4:0e:25:1f:3c:d2:e0:00:f4:a5:
cf:d3:96:8e:65:98:7a:2b:81:7e:02:6f:f5:0f:7e:
cb:16:f9:37:3b:bf:f7:eb:c8:da:9b:0f:68:cd:03:
53:f6:d4:c9:7f:a3:21:b6:e7:f4:9e:83:89:fe:9f:
30:3a:9b:a7:4f:ee:56:8f:33:8a:b0:72:6c:40:1f:
7e:24:37:72:1e:25:f5:c1:44:43:f5:2a:97:88:82:
b0:e3:4b:b5:b2:9a:6d:47:07:a4:ff:b5:1f:4c:62:
1b:0a:63:99:b0:e8:0f:80:09:5f:af:ca:00:be:fc:
8f:86:15:fa:a8:ed:42:7d:ae:b3:60:38:bb:38:a4:
28:ad:86:85:40:19:d0:fe:ee:1f:56:bd:03:29:8e:
01:fb:0c:05:d0:9d:fe:a0:05:10:46:44:d3:6f:b3:
7e:45:38:15:90:73:b9:27:26:71:39:db:65:a0:d9:
bd:f6:4d:8a:c0:2d:a1:86:a5:89:0a:dd:15:e2:e6:
3e:8d:cd:1f:be:42:5c:38:17:84:27:2f:88:62:66:
61:47:23:ba:d3:33:a2:6e:91:10:f6:75:01:26:a6:
44:19:00:22:49:78:2f:bb:26:b0:57:86:6e:e5:17:
1a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:77:19:26:F8:C5:26:6D:7C:A6:AB:65:67:4F:09:07:3B:A7:79:51
X509v3 Authority Key Identifier:
keyid:B1:D2:E6:81:FF:23:DD:DF:3D:51:78:58:E1:C6:4A:1D:AD:29:87:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sdLmgf8j3d89UXhY4cZKHa0phyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d568ed-1780-4d60-a6f7-5a8360dea3a3/1/sdLmgf8j3d89UXhY4cZKHa0phyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d568ed-1780-4d60-a6f7-5a8360dea3a3/1/sdLmgf8j3d89UXhY4cZKHa0phyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:73:03:03:0f:1f:d6:21:b2:05:44:c0:fd:4b:20:5a:eb:bd:
77:d0:99:12:e3:92:a8:e5:38:69:8a:50:85:2b:5f:2d:7a:61:
6a:e2:37:6e:ca:ac:28:56:1d:22:f8:87:21:a6:b3:b8:4e:b2:
9c:41:7a:7b:80:4f:0c:a8:54:be:15:b7:4e:8e:f9:ef:e4:13:
6b:83:01:0d:e4:50:8e:cf:be:92:c9:ef:4a:13:27:57:3a:53:
f2:19:e8:69:f6:1f:45:fc:b2:f4:8a:64:43:5c:a2:f4:20:27:
6e:c8:b2:8c:8f:fe:67:d2:c2:6e:55:21:97:ca:f9:0a:82:e4:
aa:47:2b:7c:cc:70:38:b7:e1:96:98:d8:68:c8:74:4d:09:5d:
4a:e3:fe:77:52:02:fd:f7:c6:7b:bf:90:6a:bb:03:6c:2c:9d:
dd:f5:f4:0a:cf:c0:3c:fb:15:ac:06:85:19:92:e7:94:2d:a5:
85:c2:f1:2e:ff:b4:aa:ba:b8:ca:ad:fe:4e:b6:04:56:b1:2b:
5d:1d:33:ee:6f:3f:02:c3:7e:1c:0c:76:19:fc:0f:45:34:51:
aa:94:a8:40:7b:38:f0:ba:08:bf:37:e4:f3:5f:ae:e5:c1:60:
21:71:14:dd:78:2e:61:86:fc:2c:cb:51:f9:b9:28:11:54:71:
f4:03:da:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:49:01 2026 by rpki-client