Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft
File: SvrK0nmIVvDwZaJloQlwaUGsqOo.mft (raw, json)
Hash identifier: H4x6CdHIgAhLmtqQoeswNSiNYhAtNTu3j/GmjeWuJhs=
Subject key identifier: 6F:A1:03:BE:A6:8D:DB:22:90:F8:1C:F6:26:87:E0:3E:28:92:E1:54
Authority key identifier: 4A:FA:CA:D2:79:88:56:F0:F0:65:A2:65:A1:09:70:69:41:AC:A8:EA
Certificate issuer: /CN=4afacad2798856f0f065a265a109706941aca8ea
Certificate serial: 019D2AA9F264E534C769E9A47B0E07DC5B1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SvrK0nmIVvDwZaJloQlwaUGsqOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft
Manifest number: 1421
Signing time: Thu 26 Mar 2026 15:01:13 +0000
Manifest this update: Thu 26 Mar 2026 15:01:13 +0000
Manifest next update: Fri 27 Mar 2026 15:01:13 +0000
Files and hashes: 1: D0z_b7e-rsQh7ZbCT6eQYmgthJ0.roa (hash: XLv+C72GwzVUJmQsJo6uNUU5zA5BClnc8om305/wq6I=)
2: SvrK0nmIVvDwZaJloQlwaUGsqOo.crl (hash: zuqehHteGvTHcPBT4iud24/47sfp0Xcn9Lwz8ZRlhDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SvrK0nmIVvDwZaJloQlwaUGsqOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:f2:64:e5:34:c7:69:e9:a4:7b:0e:07:dc:5b:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4afacad2798856f0f065a265a109706941aca8ea
Validity
Not Before: Mar 26 15:01:13 2026 GMT
Not After : Mar 27 15:01:13 2026 GMT
Subject: CN=6fa103bea68ddb2290f81cf62687e03e2892e154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:27:89:a2:3b:fb:f1:1a:c4:c4:50:e2:bc:a1:
ce:f1:4e:89:a6:68:20:aa:a9:31:9e:04:4b:27:47:
6f:2e:bd:2c:32:a5:80:f6:5a:a7:55:28:af:c7:00:
a5:8a:2b:6d:2f:06:cc:0e:3c:6b:84:d5:8a:d4:42:
de:52:5b:1d:43:26:8a:c1:82:40:3b:9b:88:ab:cf:
95:41:98:a1:0f:48:7e:ff:b0:3e:d9:f0:a0:68:84:
fc:10:8a:31:1f:ce:03:1c:b1:17:dc:25:78:b8:42:
1c:bb:2a:6e:73:bf:93:f0:ec:c0:0d:39:70:70:13:
ad:5d:88:9c:f0:ef:59:42:0f:31:a3:b8:d8:bd:16:
20:d9:a7:0d:a9:4d:2c:00:c2:e5:ca:eb:a3:8e:c5:
3f:1e:d8:96:66:6e:59:69:24:fd:13:66:12:77:a1:
07:b9:0e:ee:d4:ee:0d:d2:a6:49:80:fe:c6:05:23:
c8:d6:50:83:74:83:c6:c2:29:cb:d4:28:53:c1:e7:
a2:c6:7b:06:73:7f:8f:2c:ef:3d:a5:5a:af:ef:96:
69:52:4e:5e:9b:cf:48:5c:cc:77:8e:a4:2f:dc:23:
00:07:8a:1c:f8:99:c8:9a:35:e6:18:26:7e:48:6a:
54:f9:50:0d:6c:00:67:c9:69:c2:11:42:9f:21:e0:
47:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:A1:03:BE:A6:8D:DB:22:90:F8:1C:F6:26:87:E0:3E:28:92:E1:54
X509v3 Authority Key Identifier:
keyid:4A:FA:CA:D2:79:88:56:F0:F0:65:A2:65:A1:09:70:69:41:AC:A8:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SvrK0nmIVvDwZaJloQlwaUGsqOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:6a:97:6c:21:a0:ea:08:41:87:9b:50:54:19:89:19:cb:ac:
4f:9b:e8:13:db:25:9f:d1:e9:16:64:98:94:f5:bb:b6:80:d2:
b1:88:c8:68:f0:61:d0:c7:ce:16:08:17:26:f9:11:9c:cb:96:
ee:55:9c:c5:c9:a4:da:9c:93:60:35:74:9f:b0:56:82:92:0c:
23:c7:d4:c7:e5:13:74:2c:34:2a:91:46:97:1e:da:75:be:2b:
da:19:74:0f:18:a3:d7:64:5c:2f:ab:c5:0b:57:1c:c1:a4:44:
b4:80:33:68:63:77:2a:64:fa:c2:9f:c7:ed:40:db:df:22:26:
56:6d:b6:2b:25:87:90:df:e8:42:74:e7:91:01:40:e5:42:87:
42:9e:7d:57:02:74:55:70:3f:b6:05:6d:a8:ee:d3:d7:f1:20:
65:08:78:e7:be:08:f5:b9:29:0d:be:9e:63:d3:93:d3:39:7c:
88:1c:7c:3e:83:f9:2f:24:53:53:c7:68:9c:6d:82:5e:dd:21:
9a:33:39:b0:f0:ff:5b:00:40:db:0d:f3:24:78:96:26:d0:2b:
84:81:92:2c:2a:d3:45:0a:d7:5a:2c:fc:12:3c:af:ff:3a:1e:
89:1e:12:32:2b:3b:4a:3e:a9:b4:50:13:be:3f:72:70:a9:e7:
ad:da:79:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:37:06 2026 by rpki-client