Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/d568ed-1780-4d60-a6f7-5a8360dea3a3/1/sdLmgf8j3d89UXhY4cZKHa0phyk.mft
File: sdLmgf8j3d89UXhY4cZKHa0phyk.mft (raw, json)
Hash identifier: AeS27a62+oZR3R9cmo+Tts4fD17aqmrvdp9qz1LoapA=
Subject key identifier: E5:40:89:B4:59:A6:D0:1B:3F:30:C4:F7:B0:65:4E:6E:9B:27:4E:32
Authority key identifier: B1:D2:E6:81:FF:23:DD:DF:3D:51:78:58:E1:C6:4A:1D:AD:29:87:29
Certificate issuer: /CN=b1d2e681ff23dddf3d517858e1c64a1dad298729
Certificate serial: 019F9391DC6D58364137E1DA79B8C09090DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sdLmgf8j3d89UXhY4cZKHa0phyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/d568ed-1780-4d60-a6f7-5a8360dea3a3/1/sdLmgf8j3d89UXhY4cZKHa0phyk.mft
Manifest number: 1815
Signing time: Fri 24 Jul 2026 10:00:37 +0000
Manifest this update: Fri 24 Jul 2026 10:00:37 +0000
Manifest next update: Sat 25 Jul 2026 10:00:37 +0000
Files and hashes: 1: bLRsbjwrHl85CS_7pV5-UUKmgDU.roa (hash: wRWPjMaqEtjkWAV9xCnB4Aq9mP2pz2n/Qg6SuBrxsSE=)
2: sdLmgf8j3d89UXhY4cZKHa0phyk.crl (hash: kRULKabKEr1eIZJfjhHzVxgDnNwaUjucEunV2qro4kE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/d568ed-1780-4d60-a6f7-5a8360dea3a3/1/sdLmgf8j3d89UXhY4cZKHa0phyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/d568ed-1780-4d60-a6f7-5a8360dea3a3/1/sdLmgf8j3d89UXhY4cZKHa0phyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sdLmgf8j3d89UXhY4cZKHa0phyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 10:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:dc:6d:58:36:41:37:e1:da:79:b8:c0:90:90:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1d2e681ff23dddf3d517858e1c64a1dad298729
Validity
Not Before: Jul 24 10:00:37 2026 GMT
Not After : Jul 25 10:00:37 2026 GMT
Subject: CN=e54089b459a6d01b3f30c4f7b0654e6e9b274e32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:84:78:07:f6:00:35:80:77:12:3a:71:8f:77:
be:a7:85:84:8b:15:58:47:b8:b2:9b:05:37:df:6c:
2e:8e:6a:f9:25:4c:64:cf:7e:98:84:dc:f1:13:9c:
dc:8f:79:a1:73:2f:33:5a:00:31:98:84:4a:91:93:
d6:98:d4:f2:72:f1:6b:c0:98:58:8d:20:e0:54:75:
a7:e7:da:40:06:71:a1:ee:3b:7b:d2:22:63:68:99:
dc:ba:b2:71:52:cf:12:85:fb:d7:a4:fb:1d:72:c4:
f1:8e:a5:34:21:93:86:a4:a8:33:68:64:7c:33:ad:
af:2f:8f:ed:05:7c:32:ff:ba:3e:5d:77:5b:7b:7f:
e1:f1:ae:b0:a1:79:18:c7:13:12:9c:d8:a1:51:86:
8c:68:29:fc:0b:2a:84:75:6f:c7:95:ab:29:6a:69:
5f:88:0d:a6:3c:b7:f1:20:04:46:6e:c0:4a:3e:d3:
53:a7:6f:56:e8:43:cc:d6:79:24:27:11:10:b9:79:
de:9f:d9:e5:df:82:e1:35:c6:48:de:0b:60:e9:34:
aa:5f:75:df:5f:fa:59:46:e2:a3:53:fb:22:82:c0:
ee:cf:a4:1a:09:dd:43:b4:1f:ac:54:37:6c:40:5a:
71:a4:9e:1e:5e:bf:7e:8c:e2:a9:95:57:5b:9f:a2:
88:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:40:89:B4:59:A6:D0:1B:3F:30:C4:F7:B0:65:4E:6E:9B:27:4E:32
X509v3 Authority Key Identifier:
keyid:B1:D2:E6:81:FF:23:DD:DF:3D:51:78:58:E1:C6:4A:1D:AD:29:87:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sdLmgf8j3d89UXhY4cZKHa0phyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d568ed-1780-4d60-a6f7-5a8360dea3a3/1/sdLmgf8j3d89UXhY4cZKHa0phyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d568ed-1780-4d60-a6f7-5a8360dea3a3/1/sdLmgf8j3d89UXhY4cZKHa0phyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:bf:36:88:4a:2d:c4:48:48:7a:5c:72:29:56:55:58:8c:f3:
e3:16:26:ce:3d:37:17:d2:02:1d:b2:e9:98:cd:1a:23:bd:da:
ce:86:8e:65:03:c1:dc:e6:9d:60:4b:71:3b:43:ca:79:00:d2:
04:d2:36:82:1d:28:ca:05:81:b3:3e:0c:31:cf:7b:81:55:e6:
04:09:a2:d6:d7:7d:4c:58:9b:63:df:34:10:6b:38:e4:c8:17:
4e:87:c4:3d:a2:58:76:63:b1:8e:23:f3:14:9c:76:ec:c4:98:
6a:cc:82:c2:7c:43:f4:02:14:19:4d:68:17:43:70:da:30:c3:
bc:c2:e4:a1:74:65:99:d7:2d:41:d0:65:54:ee:34:10:9d:47:
2b:d4:7e:6b:2f:bb:9a:19:23:5d:97:48:65:83:08:55:7b:2b:
f1:fb:1c:ac:62:e5:b7:bb:ac:b7:2c:15:dd:9e:85:95:ab:52:
e0:8a:7b:5c:4a:23:5e:07:cc:48:3d:e8:d8:5f:9e:02:fe:81:
01:25:54:68:4d:31:3b:8f:46:18:02:b9:6a:c6:2c:03:44:eb:
cc:84:39:fc:ba:12:1d:f4:3b:49:17:0f:85:fc:51:16:81:f3:
d7:04:25:da:a8:e6:ca:13:d3:bf:ac:77:e1:c1:3a:72:70:12:
06:8d:27:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:47:22 2026 by rpki-client