Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/d568ed-1780-4d60-a6f7-5a8360dea3a3/1/sdLmgf8j3d89UXhY4cZKHa0phyk.mft
File: sdLmgf8j3d89UXhY4cZKHa0phyk.mft (raw, json)
Hash identifier: W7+53W3GKisFv+z/gQNutjH5LNlZCDTkL8zAGvDCd/Q=
Subject key identifier: 6B:71:64:8C:D9:0A:2D:58:3E:42:2A:31:EE:EF:4D:FF:5B:EE:80:C6
Authority key identifier: B1:D2:E6:81:FF:23:DD:DF:3D:51:78:58:E1:C6:4A:1D:AD:29:87:29
Certificate issuer: /CN=b1d2e681ff23dddf3d517858e1c64a1dad298729
Certificate serial: 01A1291EDA032A519A80BDD5DBB55502C2BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sdLmgf8j3d89UXhY4cZKHa0phyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/d568ed-1780-4d60-a6f7-5a8360dea3a3/1/sdLmgf8j3d89UXhY4cZKHa0phyk.mft
Manifest number: 18E7
Signing time: Sun 11 Oct 2026 04:00:49 +0000
Manifest this update: Sun 11 Oct 2026 04:00:49 +0000
Manifest next update: Mon 12 Oct 2026 04:00:49 +0000
Files and hashes: 1: bLRsbjwrHl85CS_7pV5-UUKmgDU.roa (hash: wRWPjMaqEtjkWAV9xCnB4Aq9mP2pz2n/Qg6SuBrxsSE=)
2: sdLmgf8j3d89UXhY4cZKHa0phyk.crl (hash: +8hqxlUHdKXjCaCw+DOLwWA8QsjieFPvLdUQNM1P2Nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/d568ed-1780-4d60-a6f7-5a8360dea3a3/1/sdLmgf8j3d89UXhY4cZKHa0phyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/d568ed-1780-4d60-a6f7-5a8360dea3a3/1/sdLmgf8j3d89UXhY4cZKHa0phyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sdLmgf8j3d89UXhY4cZKHa0phyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:1e:da:03:2a:51:9a:80:bd:d5:db:b5:55:02:c2:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1d2e681ff23dddf3d517858e1c64a1dad298729
Validity
Not Before: Oct 11 04:00:49 2026 GMT
Not After : Oct 12 04:00:49 2026 GMT
Subject: CN=6b71648cd90a2d583e422a31eeef4dff5bee80c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f7:aa:a8:f3:53:71:f1:20:82:c9:57:13:44:
d2:f3:2a:79:29:9c:a3:19:bd:59:6c:96:32:de:37:
f2:cf:07:50:85:c0:c3:70:7b:4d:7a:e8:a8:ae:36:
54:95:de:ab:46:9f:5f:cd:ef:ff:fd:4b:c3:bd:e3:
06:60:62:1c:1c:19:ac:7b:b0:88:c8:c8:ee:33:97:
ce:2f:ee:d4:22:e8:f3:6b:28:cd:cd:e9:9d:bd:57:
5d:a1:41:3e:87:f1:08:89:2c:35:79:68:e9:45:c0:
88:c4:1c:e5:d2:6a:b2:60:c0:ec:71:ce:bb:1d:fd:
3c:e3:5e:e4:d4:c6:1c:48:57:c8:97:bd:06:74:b3:
93:c4:5f:87:22:c1:b9:d8:37:09:84:76:18:e9:29:
1a:ad:0c:c0:ef:a5:eb:76:91:95:c1:50:3a:91:a9:
84:22:35:2b:29:1d:d5:b0:b3:a4:ff:4b:eb:3b:83:
05:8a:bf:56:6b:77:6d:23:7b:21:9d:ff:c6:1c:58:
dd:f2:50:30:7e:8c:5a:51:b9:81:28:3b:9e:08:c3:
f3:59:06:c2:7c:46:9f:1f:f8:bb:62:3a:a5:f3:a8:
59:c2:4b:46:67:93:da:a1:65:ca:65:e1:2b:94:70:
e1:81:db:61:07:0c:23:a3:ae:13:c2:6e:9e:f7:b2:
d5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:71:64:8C:D9:0A:2D:58:3E:42:2A:31:EE:EF:4D:FF:5B:EE:80:C6
X509v3 Authority Key Identifier:
keyid:B1:D2:E6:81:FF:23:DD:DF:3D:51:78:58:E1:C6:4A:1D:AD:29:87:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sdLmgf8j3d89UXhY4cZKHa0phyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d568ed-1780-4d60-a6f7-5a8360dea3a3/1/sdLmgf8j3d89UXhY4cZKHa0phyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d568ed-1780-4d60-a6f7-5a8360dea3a3/1/sdLmgf8j3d89UXhY4cZKHa0phyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:8a:97:e7:94:66:c8:a5:a8:83:b2:e0:72:34:b1:df:7d:2b:
8a:48:15:1d:27:10:71:21:5e:54:cf:33:93:6a:4b:62:3f:f5:
e7:f4:77:80:e1:56:1d:2d:3d:af:b3:14:22:fc:e1:42:9d:63:
4c:4d:0b:7a:1c:7f:d0:46:e1:d2:96:23:f7:3a:d3:20:f8:71:
d2:a4:c9:b5:45:01:59:06:12:b8:90:2b:19:d2:d8:99:f1:fd:
0a:3f:8b:33:d8:f9:ce:e9:e7:db:8e:e9:d1:0b:b5:2e:d8:91:
1c:56:d4:5d:54:d6:92:43:2f:5b:e7:a1:6d:70:c7:38:42:57:
2d:9d:0e:f4:10:24:5c:5f:c8:96:fa:9b:6d:51:21:93:fd:60:
c5:bd:2a:3f:19:76:4e:ec:2f:17:c7:6a:5f:b4:22:d4:7d:1d:
f2:f7:08:ba:0d:9e:fc:24:93:ed:74:47:0f:a6:6b:31:47:d1:
d5:aa:53:fb:3c:d1:3d:24:78:1e:76:b1:47:51:c8:c2:88:a8:
64:89:fd:ca:e1:c4:59:e5:96:cb:2f:80:fe:7a:33:c2:f0:a4:
dd:50:25:23:21:9d:b8:b0:27:69:83:1d:09:81:be:34:b2:08:
87:11:46:15:44:7a:ad:1f:04:87:a0:b4:02:2a:cf:67:17:c4:
1e:13:16:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 12:40:57 2026 by rpki-client