Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft
File: SvrK0nmIVvDwZaJloQlwaUGsqOo.mft (raw, json)
Hash identifier: N9+A0kooGwVfMJd8wMs7C7cS+mX+qdMuoVFNPxXfU6A=
Subject key identifier: 22:14:43:30:61:F7:FF:F2:59:3B:0B:61:65:05:BF:AB:B5:97:B4:F7
Authority key identifier: 4A:FA:CA:D2:79:88:56:F0:F0:65:A2:65:A1:09:70:69:41:AC:A8:EA
Certificate issuer: /CN=4afacad2798856f0f065a265a109706941aca8ea
Certificate serial: 019E1FECF65FB94D8CF8D88D27A731DB02BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SvrK0nmIVvDwZaJloQlwaUGsqOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft
Manifest number: 14A0
Signing time: Wed 13 May 2026 06:01:23 +0000
Manifest this update: Wed 13 May 2026 06:01:23 +0000
Manifest next update: Thu 14 May 2026 06:01:23 +0000
Files and hashes: 1: D0z_b7e-rsQh7ZbCT6eQYmgthJ0.roa (hash: XLv+C72GwzVUJmQsJo6uNUU5zA5BClnc8om305/wq6I=)
2: SvrK0nmIVvDwZaJloQlwaUGsqOo.crl (hash: PjW8uwRPnIdUk0POPBLdFTruxTPxqfykh2toNQafTDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SvrK0nmIVvDwZaJloQlwaUGsqOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ec:f6:5f:b9:4d:8c:f8:d8:8d:27:a7:31:db:02:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4afacad2798856f0f065a265a109706941aca8ea
Validity
Not Before: May 13 06:01:23 2026 GMT
Not After : May 14 06:01:23 2026 GMT
Subject: CN=2214433061f7fff2593b0b616505bfabb597b4f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:50:96:bc:77:6e:a1:54:b6:a5:a5:2d:a8:ab:
2c:8c:a0:f5:a6:fe:bd:e8:fa:c1:af:18:86:28:c1:
0a:cd:9a:99:a8:44:17:34:a0:d0:55:df:e1:85:bb:
14:97:8d:f7:74:38:b6:46:7c:d7:21:10:fa:26:1b:
b3:ba:67:1c:cf:24:67:3e:97:43:24:68:ca:00:51:
af:81:f1:f3:1b:87:22:bb:3a:cf:a9:07:9b:b3:ac:
06:fe:8b:37:61:d8:c0:03:22:50:be:28:04:9d:de:
5f:46:58:db:8d:31:bb:6a:c9:b0:12:b1:dc:96:3c:
4e:8a:b1:a9:c4:6c:36:98:8d:1d:60:ae:17:1c:01:
63:43:91:47:24:fc:11:3e:9a:89:bd:80:7d:75:4d:
96:12:39:3f:c5:5d:d1:ba:a9:34:c0:df:c9:e1:7e:
c9:bd:db:03:f0:01:0c:a7:b4:82:60:59:3e:cd:ef:
a7:22:bf:bf:df:cd:91:21:97:4c:fb:37:9c:da:a8:
8c:84:a6:5e:5e:8e:3a:53:20:94:dc:d6:1b:41:76:
6b:ea:32:bc:0d:b9:7d:e0:8a:61:12:6c:65:95:fd:
af:5a:20:2b:ec:6e:14:e7:37:fe:24:e3:46:95:b5:
c5:73:c3:0c:c6:4b:4d:30:3c:a5:03:a6:8f:6f:30:
40:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:14:43:30:61:F7:FF:F2:59:3B:0B:61:65:05:BF:AB:B5:97:B4:F7
X509v3 Authority Key Identifier:
keyid:4A:FA:CA:D2:79:88:56:F0:F0:65:A2:65:A1:09:70:69:41:AC:A8:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SvrK0nmIVvDwZaJloQlwaUGsqOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:e0:5e:42:91:c2:29:cb:ff:b0:d4:74:b1:8b:31:c1:e2:af:
d8:6d:6d:80:50:64:54:7b:07:b0:24:ab:37:93:f4:1f:43:0e:
ba:96:4a:f6:a3:4d:7a:01:33:9f:16:cf:4e:46:1f:8d:be:3b:
1e:ec:fa:2c:54:ab:60:e0:b6:66:91:4e:0c:f9:b7:22:54:db:
8e:8e:da:96:30:e4:06:76:10:d1:d7:c3:f2:e1:ae:2c:b5:7d:
a4:97:95:3c:b3:2e:0a:72:b2:3a:17:d0:79:6a:31:40:2b:96:
d5:2a:da:e3:7b:03:94:1b:22:78:1a:7a:90:d2:bc:42:5a:4b:
6c:33:54:76:75:94:4e:92:ac:14:27:d1:82:8b:17:d1:8d:7b:
90:7b:12:1b:c1:f3:97:18:91:34:09:01:54:e8:0b:25:00:23:
57:05:5c:64:f9:c5:b5:b8:cd:31:33:6b:09:4c:dc:cb:9a:f1:
32:d1:a2:22:9b:6c:25:07:43:a8:58:14:a9:96:1f:b5:a8:98:
9b:8e:33:54:1f:1c:79:6c:1a:b9:3a:84:42:64:be:03:03:3d:
5a:c7:1d:f7:fe:36:ac:1d:3e:26:5f:44:fe:43:2b:5c:cd:6d:
df:dd:11:11:59:41:13:9b:a2:ba:fc:3c:35:60:32:25:b4:f8:
f7:47:2b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:45:46 2026 by rpki-client