Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/6b4a18-07bc-4353-b7ea-19ca50cf34ab/1/sd-OADfxroL3viI1rmEsQBD2_pE.mft
File: sd-OADfxroL3viI1rmEsQBD2_pE.mft (raw, json)
Hash identifier: QSle0B+BaJaZJLikJV4YLO4Zoci1a0AEbo5O4qHzW2s=
Subject key identifier: E3:40:67:94:9A:C4:E9:F8:CD:78:7F:62:17:DE:D4:18:75:01:D9:DE
Authority key identifier: B1:DF:8E:00:37:F1:AE:82:F7:BE:22:35:AE:61:2C:40:10:F6:FE:91
Certificate issuer: /CN=b1df8e0037f1ae82f7be2235ae612c4010f6fe91
Certificate serial: 019F946DC92471BE566FBA717AF6A8859D8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sd-OADfxroL3viI1rmEsQBD2_pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/6b4a18-07bc-4353-b7ea-19ca50cf34ab/1/sd-OADfxroL3viI1rmEsQBD2_pE.mft
Manifest number: 04DE
Signing time: Fri 24 Jul 2026 14:00:50 +0000
Manifest this update: Fri 24 Jul 2026 14:00:50 +0000
Manifest next update: Sat 25 Jul 2026 14:00:50 +0000
Files and hashes: 1: 9TrF8CvIENAUqcixyxTQa2bps6c.roa (hash: 45f33UvxirhWF+GLCEMK1OB/89v95KaqtgcQX1BWw+8=)
2: sd-OADfxroL3viI1rmEsQBD2_pE.crl (hash: 1QX0+i7ArkKuSy/sGBUNeoC4rxMzoFQPMcj0ijKYCBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/6b4a18-07bc-4353-b7ea-19ca50cf34ab/1/sd-OADfxroL3viI1rmEsQBD2_pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/6b4a18-07bc-4353-b7ea-19ca50cf34ab/1/sd-OADfxroL3viI1rmEsQBD2_pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sd-OADfxroL3viI1rmEsQBD2_pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:c9:24:71:be:56:6f:ba:71:7a:f6:a8:85:9d:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1df8e0037f1ae82f7be2235ae612c4010f6fe91
Validity
Not Before: Jul 24 14:00:50 2026 GMT
Not After : Jul 25 14:00:50 2026 GMT
Subject: CN=e34067949ac4e9f8cd787f6217ded4187501d9de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:70:04:a7:72:fe:cc:24:65:3d:ae:9b:48:e0:
58:38:f6:c7:2d:2f:4e:f5:f7:fb:1e:5e:65:3f:14:
eb:60:5c:79:18:21:e1:66:61:fd:17:5d:78:bb:75:
fc:96:df:7d:63:a7:de:98:3f:11:1e:c3:bd:7e:50:
ff:d2:6b:ba:fa:57:b7:0d:80:2d:70:98:e7:72:d1:
44:85:22:76:44:8f:37:c9:d6:cc:fd:85:ff:4b:59:
e6:21:49:c8:30:d7:ef:67:90:b2:4f:cf:a5:b2:cd:
25:4e:32:4b:d9:33:93:d4:d1:5f:82:07:9d:c2:ff:
53:ba:69:47:f4:71:7b:ed:01:95:70:9b:de:a2:42:
64:f3:d5:8b:9d:00:9b:dc:8f:9a:e9:8d:92:f7:23:
17:b6:25:75:4b:b5:4d:5c:e1:4a:89:0e:6d:6d:7c:
0a:87:15:5e:f8:2b:ba:0c:4f:16:95:24:68:93:e9:
cb:cb:3c:ca:d8:98:79:e7:82:24:fd:fb:c2:6f:64:
01:a7:a8:bf:5c:fb:38:c0:16:f5:be:ab:f8:d3:d0:
d1:87:8e:ff:9d:e8:19:36:b0:12:f7:0c:b2:be:58:
01:49:fa:86:3a:20:b3:83:c9:28:fb:59:5a:76:7a:
3e:11:67:ad:30:0a:d6:61:97:ac:d7:6a:73:1f:77:
a3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:40:67:94:9A:C4:E9:F8:CD:78:7F:62:17:DE:D4:18:75:01:D9:DE
X509v3 Authority Key Identifier:
keyid:B1:DF:8E:00:37:F1:AE:82:F7:BE:22:35:AE:61:2C:40:10:F6:FE:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sd-OADfxroL3viI1rmEsQBD2_pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6b4a18-07bc-4353-b7ea-19ca50cf34ab/1/sd-OADfxroL3viI1rmEsQBD2_pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6b4a18-07bc-4353-b7ea-19ca50cf34ab/1/sd-OADfxroL3viI1rmEsQBD2_pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:2f:11:53:63:46:61:06:7c:51:ad:ae:da:92:e8:4e:5f:f6:
b5:8b:4c:40:ea:1c:a5:26:a4:8a:d3:e2:17:45:d9:93:e2:00:
c4:f7:0f:de:3e:43:19:33:52:56:fd:d7:19:29:1a:8c:c1:ca:
4b:ab:31:9f:04:f8:5a:e9:89:46:26:e4:bc:49:69:93:83:85:
5e:ab:6c:b1:ff:43:da:08:f1:79:fb:7d:c5:f4:0f:29:1c:ba:
36:c0:86:d5:5c:42:11:ec:19:ce:dd:5f:d9:91:b6:63:4f:14:
f7:59:bc:52:33:fd:d7:ab:05:d0:65:83:90:63:9f:42:59:ed:
a0:cd:0c:ef:7f:b1:50:b9:57:a8:a8:13:47:45:47:10:ef:f4:
f1:5e:92:17:61:a7:45:f6:d1:78:c7:ef:43:dc:2f:42:ef:bc:
53:58:19:5c:93:5f:74:8c:60:11:f1:90:ce:38:ce:db:5b:3a:
71:2d:f6:5b:c8:6c:0e:d5:90:4d:d0:be:1c:91:49:ba:ca:9c:
dc:bd:dc:bc:f9:43:61:6c:5c:b4:a7:ed:ca:ca:05:ad:50:56:
a4:90:c6:f6:82:94:fa:1a:ba:57:20:de:14:3a:82:de:31:d3:
9a:7b:b6:b5:ef:e5:90:d0:5c:92:c4:6f:fd:29:3c:af:82:dc:
44:99:fd:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:49:12 2026 by rpki-client