Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.mft
File: SrfcA3ifWGIbJejdDZJdyRtKWqI.mft (raw, json)
Hash identifier: XY7BJdshnjHARUZ3z9izqD9Ne2S82/QAZ4GNKfb/mto=
Subject key identifier: 56:BF:DA:CC:24:25:C4:49:83:6D:36:B1:E0:C5:59:4E:95:0A:EC:09
Authority key identifier: 4A:B7:DC:03:78:9F:58:62:1B:25:E8:DD:0D:92:5D:C9:1B:4A:5A:A2
Certificate issuer: /CN=4ab7dc03789f58621b25e8dd0d925dc91b4a5aa2
Certificate serial: 01A0D45DE7AC106ED7DA80B7DBB3FBB7AB1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SrfcA3ifWGIbJejdDZJdyRtKWqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.mft
Manifest number: 0F13
Signing time: Thu 24 Sep 2026 17:01:58 +0000
Manifest this update: Thu 24 Sep 2026 17:01:58 +0000
Manifest next update: Fri 25 Sep 2026 17:01:58 +0000
Files and hashes: 1: PsulLIoJ2K5yIXwpqDT_vBbetoI.roa (hash: g6k+9r2f7VE361y/QPPTNZq47JKvyoKEVsQ41jGm2AM=)
2: SrfcA3ifWGIbJejdDZJdyRtKWqI.crl (hash: 3rYW+y3fVw0B7X+QxCoL2v6S6H7Td175d654xytDxog=)
3: xPJTQ1B0b58IM-swEMoKUaok-jY.roa (hash: 8WLFOKN87EOL1HNV9YM46I3DeHkcz7BwooQlJCjXH2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SrfcA3ifWGIbJejdDZJdyRtKWqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:5d:e7:ac:10:6e:d7:da:80:b7:db:b3:fb:b7:ab:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ab7dc03789f58621b25e8dd0d925dc91b4a5aa2
Validity
Not Before: Sep 24 17:01:58 2026 GMT
Not After : Sep 25 17:01:58 2026 GMT
Subject: CN=56bfdacc2425c449836d36b1e0c5594e950aec09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:22:b1:85:82:8b:b4:21:8d:a1:13:03:15:6f:
93:78:b4:dc:ee:9b:83:56:97:6a:2d:aa:43:89:32:
d3:a2:3f:a2:1c:eb:d7:d7:63:2d:ed:6f:3a:e4:d1:
43:a7:3f:06:2c:bf:b7:b2:83:0c:07:7f:e8:88:0c:
bc:e5:71:4b:f4:d3:20:19:bd:bd:cb:92:b0:25:c8:
a9:3e:a2:b0:86:2c:9c:c5:af:a6:35:97:0f:de:61:
ca:04:87:d4:06:b6:7f:91:17:22:44:57:ab:70:54:
d2:ab:a0:43:aa:5b:39:0c:7d:6c:25:37:f7:db:70:
67:ad:66:4e:75:69:ad:6a:f4:86:8b:9d:d5:31:13:
14:24:57:79:56:98:90:81:23:69:f5:69:1d:f8:37:
7a:d9:85:74:f5:56:7c:47:6e:39:11:62:64:c2:90:
b1:66:7a:ed:d0:de:13:03:a8:8a:ee:f0:2b:8c:21:
22:6a:15:b4:ad:d0:ec:f1:33:bf:ba:d6:1c:25:c0:
5a:44:b1:0b:94:ee:c2:6e:28:cc:28:36:42:6c:5e:
47:d7:38:8b:2f:5c:c0:c5:80:40:07:d8:ed:e6:17:
e4:08:05:1e:24:96:a5:3a:02:b8:f7:51:31:f2:f1:
c3:53:04:e7:2b:ae:63:5c:19:43:a9:01:59:6d:54:
67:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:BF:DA:CC:24:25:C4:49:83:6D:36:B1:E0:C5:59:4E:95:0A:EC:09
X509v3 Authority Key Identifier:
keyid:4A:B7:DC:03:78:9F:58:62:1B:25:E8:DD:0D:92:5D:C9:1B:4A:5A:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SrfcA3ifWGIbJejdDZJdyRtKWqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:56:76:ca:02:83:92:73:0b:1b:95:5f:17:5e:fd:aa:1a:8a:
f6:26:84:68:ba:d1:59:cb:e3:9b:85:3d:cf:0d:38:13:4d:11:
57:54:a8:c0:38:70:ea:dd:22:da:26:23:95:97:a5:53:49:71:
0a:4d:a2:22:db:01:33:e0:dc:a4:81:36:2d:8d:9f:31:74:17:
8e:2a:b0:da:5e:8f:59:11:16:25:8f:49:76:b1:a4:bf:fb:43:
72:32:b7:e9:7d:a3:9e:e8:c0:4d:a5:9d:65:b0:8e:c5:85:f9:
59:37:22:eb:2f:37:e1:58:d9:3c:4c:99:d9:93:a1:51:23:0f:
78:63:7c:17:52:16:4a:14:e1:af:8d:ec:82:d9:69:48:89:32:
dc:20:90:99:5b:09:1f:68:e8:e9:ea:5a:23:37:15:11:10:ba:
ef:8e:fd:ae:05:46:ff:a3:a4:f5:93:bd:4f:6d:c1:28:3b:d9:
43:a8:01:b6:c2:46:30:a8:5d:c0:49:34:09:c5:a8:49:44:96:
e5:a5:3e:4c:38:1c:d8:82:cd:db:71:9b:f8:75:84:f4:16:86:
da:bb:30:1a:8b:a5:d8:60:12:71:11:86:69:b7:97:00:2b:4d:
05:da:b4:db:1e:3d:6e:d3:1e:42:da:24:11:83:96:fc:c5:4d:
9c:44:d1:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:00:48 2026 by rpki-client