Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/9befa4-093c-4a6d-93ed-3223435280f2/1/SRt60E7vCzE-bS4ia5Lq8neu-Fs.mft
File: SRt60E7vCzE-bS4ia5Lq8neu-Fs.mft (raw, json)
Hash identifier: fWiT7VQ+/N4pLFdLN46bk5V0q2eXJSNuIi1DHaq2r8Q=
Subject key identifier: F7:84:C1:F4:CD:64:02:72:8A:94:C2:51:88:05:E3:71:25:38:59:0E
Authority key identifier: 49:1B:7A:D0:4E:EF:0B:31:3E:6D:2E:22:6B:92:EA:F2:77:AE:F8:5B
Certificate issuer: /CN=491b7ad04eef0b313e6d2e226b92eaf277aef85b
Certificate serial: 01A0D3B8422377DF95E6929C125B12424EF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SRt60E7vCzE-bS4ia5Lq8neu-Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9befa4-093c-4a6d-93ed-3223435280f2/1/SRt60E7vCzE-bS4ia5Lq8neu-Fs.mft
Manifest number: 0147
Signing time: Thu 24 Sep 2026 14:01:02 +0000
Manifest this update: Thu 24 Sep 2026 14:01:02 +0000
Manifest next update: Fri 25 Sep 2026 14:01:02 +0000
Files and hashes: 1: SRt60E7vCzE-bS4ia5Lq8neu-Fs.crl (hash: XPNBZnEIsdJwL45tjAJyp8IYpCd1tVr6/PJjtYTj66g=)
2: gBi5xtmED4TG3jUX37mYjraoscw.asa (hash: apBbLvMbeJiiPpO51fdXIrt4IofHYn/vGC5rF3XziIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/9befa4-093c-4a6d-93ed-3223435280f2/1/SRt60E7vCzE-bS4ia5Lq8neu-Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/9befa4-093c-4a6d-93ed-3223435280f2/1/SRt60E7vCzE-bS4ia5Lq8neu-Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SRt60E7vCzE-bS4ia5Lq8neu-Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:b8:42:23:77:df:95:e6:92:9c:12:5b:12:42:4e:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=491b7ad04eef0b313e6d2e226b92eaf277aef85b
Validity
Not Before: Sep 24 14:01:02 2026 GMT
Not After : Sep 25 14:01:02 2026 GMT
Subject: CN=f784c1f4cd6402728a94c2518805e3712538590e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3b:0a:c6:ae:60:c7:da:99:96:1f:5a:a1:7d:
21:aa:73:b9:8a:b0:b6:3b:c1:08:b4:86:54:ed:4f:
ea:44:e7:e7:6b:f0:7a:15:0d:b2:80:b4:dd:9b:f7:
1d:43:fa:8f:a5:1a:5e:51:ec:43:3b:36:22:24:32:
bb:f9:e9:98:f4:f1:9b:72:0a:f9:f7:6f:0c:e6:2c:
5e:75:79:f7:ea:c9:58:70:27:dc:e8:da:9b:1f:c6:
4a:a1:d5:8a:90:ba:3c:0d:15:34:5e:6d:a4:94:20:
ea:16:f7:70:2f:3a:a1:3b:1f:38:ce:e2:c0:4d:fe:
7a:44:f8:02:2c:76:85:2c:3d:34:1f:64:7a:ac:03:
01:48:d8:16:0e:47:53:aa:0c:af:e6:3a:3e:fa:23:
2e:a7:21:6c:a2:69:53:3d:e6:a5:91:25:88:bb:b9:
0f:b1:6e:fa:43:c6:0c:b3:46:c1:87:9f:b9:d5:68:
cc:a4:03:82:a9:cc:80:81:03:db:c9:bd:ff:f2:bd:
25:54:e8:ca:30:e2:08:3a:ae:b8:15:07:a3:1f:bb:
80:b4:b6:dc:c5:88:a9:99:fd:d9:4a:a3:74:e0:0b:
2c:6a:f8:9c:b5:d7:89:6d:4e:f6:b4:84:6f:45:7e:
20:ee:09:54:ab:df:7c:19:d4:80:79:fe:a4:96:bb:
5d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:84:C1:F4:CD:64:02:72:8A:94:C2:51:88:05:E3:71:25:38:59:0E
X509v3 Authority Key Identifier:
keyid:49:1B:7A:D0:4E:EF:0B:31:3E:6D:2E:22:6B:92:EA:F2:77:AE:F8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SRt60E7vCzE-bS4ia5Lq8neu-Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9befa4-093c-4a6d-93ed-3223435280f2/1/SRt60E7vCzE-bS4ia5Lq8neu-Fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9befa4-093c-4a6d-93ed-3223435280f2/1/SRt60E7vCzE-bS4ia5Lq8neu-Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:15:37:0c:7b:e1:8d:a5:09:3e:3e:32:d3:10:19:28:f3:36:
21:6e:18:f6:a1:03:4f:d4:c2:1d:cd:1a:38:59:90:37:d9:23:
c7:eb:e5:1a:46:67:6a:28:5c:34:ad:40:73:8b:81:af:1b:82:
ab:49:ba:c8:05:cb:ba:24:72:0d:e9:e5:7c:85:30:ca:8a:68:
90:51:bf:e4:0e:a5:6f:89:5c:7f:b3:35:7f:5b:59:1f:c1:f9:
41:0e:1f:57:5a:e6:ee:c9:51:00:36:78:84:c1:d4:92:d8:66:
f5:6c:b1:fa:6d:29:6c:8f:79:cb:de:ab:ab:5a:3a:d3:3d:82:
27:14:a8:f9:e4:59:a6:e3:69:c6:e6:bc:8b:ac:7a:89:9e:8e:
b1:b3:9b:c2:60:27:7e:1e:0a:11:b0:d9:0f:46:f3:18:b8:66:
b0:07:a8:f4:7e:7b:97:e3:60:39:9b:11:14:07:83:e8:dd:1b:
df:59:48:57:88:b9:0d:00:05:98:74:1f:55:72:9b:47:6a:0b:
f9:d9:d3:08:8f:33:41:a7:3a:d7:54:23:22:a8:1c:32:94:b3:
5f:ca:6e:81:b3:0e:5f:46:ab:d0:36:5f:db:9e:81:40:76:31:
dd:3d:a9:58:9f:2b:b9:ad:08:88:3e:f3:89:56:33:3e:10:4e:
7e:dc:01:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:06:16 2026 by rpki-client