Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft
File: SvrK0nmIVvDwZaJloQlwaUGsqOo.mft (raw, json)
Hash identifier: NrXnztT/yLHOWy8t5vtmfRCtXGTIFBN3MbHUDrMnhDA=
Subject key identifier: F8:07:E8:95:EB:DB:9D:52:53:14:39:EA:EE:FC:8C:00:8B:64:4A:7F
Authority key identifier: 4A:FA:CA:D2:79:88:56:F0:F0:65:A2:65:A1:09:70:69:41:AC:A8:EA
Certificate issuer: /CN=4afacad2798856f0f065a265a109706941aca8ea
Certificate serial: 01A139A43F590E7F4AEDF760A5B8444657DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SvrK0nmIVvDwZaJloQlwaUGsqOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft
Manifest number: 163B
Signing time: Wed 14 Oct 2026 09:00:27 +0000
Manifest this update: Wed 14 Oct 2026 09:00:27 +0000
Manifest next update: Thu 15 Oct 2026 09:00:27 +0000
Files and hashes: 1: D0z_b7e-rsQh7ZbCT6eQYmgthJ0.roa (hash: XLv+C72GwzVUJmQsJo6uNUU5zA5BClnc8om305/wq6I=)
2: SvrK0nmIVvDwZaJloQlwaUGsqOo.crl (hash: 9MBpGa4MQguT5QB3av5pBgxbzR7Fk+qBVG8Xx4ziP1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SvrK0nmIVvDwZaJloQlwaUGsqOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 07:28:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:a4:3f:59:0e:7f:4a:ed:f7:60:a5:b8:44:46:57:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4afacad2798856f0f065a265a109706941aca8ea
Validity
Not Before: Oct 14 09:00:27 2026 GMT
Not After : Oct 15 09:00:27 2026 GMT
Subject: CN=f807e895ebdb9d52531439eaeefc8c008b644a7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a4:4a:6e:c9:68:ab:ac:99:4f:1c:b3:62:70:
ae:1a:24:f5:f1:fe:42:ac:c8:bb:ad:35:80:e4:ef:
4f:1e:29:27:86:11:3d:08:b5:ae:7d:22:82:5c:04:
85:93:bf:38:bd:ec:78:8b:b8:e7:a7:ab:0e:4c:88:
ac:e1:c7:be:1c:32:cb:10:8a:0c:30:a7:a1:8e:93:
82:05:89:e4:e5:c7:ff:5b:36:38:d9:19:1e:ad:ca:
3f:53:a3:71:56:ff:f7:4e:73:01:22:92:dd:50:a0:
7c:1b:69:47:c0:9c:e1:57:c6:03:c8:b2:c8:70:61:
29:65:34:10:85:f2:59:2b:d4:31:f5:e0:cf:da:64:
12:d4:89:ff:f2:cf:d6:4b:39:be:7e:26:be:ea:d1:
47:a9:a0:b6:a8:65:27:e4:f6:e6:e9:4d:d2:c8:1a:
8d:1f:18:e6:eb:21:8e:a0:a9:56:10:32:cd:4e:3d:
76:ad:9c:3d:ef:30:7e:30:c9:ae:8e:a8:ac:7c:60:
0f:ac:70:c3:c4:82:1e:a7:2a:b6:93:34:08:bd:23:
95:3b:49:ea:08:39:32:e9:5d:12:89:87:6d:ea:6b:
75:4a:39:d0:46:63:26:c6:67:2e:bb:c8:fa:2d:41:
0b:9b:36:32:74:3c:2b:ac:c3:05:9a:53:78:aa:19:
3f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:07:E8:95:EB:DB:9D:52:53:14:39:EA:EE:FC:8C:00:8B:64:4A:7F
X509v3 Authority Key Identifier:
keyid:4A:FA:CA:D2:79:88:56:F0:F0:65:A2:65:A1:09:70:69:41:AC:A8:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SvrK0nmIVvDwZaJloQlwaUGsqOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:a8:fc:38:5d:93:04:02:fa:84:8d:f7:0b:c5:41:03:b3:b5:
12:00:df:63:fc:37:12:a7:73:a0:3a:a6:73:75:5a:7c:2d:13:
35:b8:4e:54:ef:9d:51:9d:02:d8:70:3d:44:c0:af:a1:63:9a:
1b:ea:58:82:f1:b2:e0:e7:dc:ff:ce:39:f3:f5:05:d2:b0:fb:
72:ad:e0:79:94:c2:77:5a:5f:30:66:2e:4c:6b:6a:22:bd:02:
12:87:08:b5:44:b4:de:87:76:83:b6:d6:0f:ba:84:1e:9d:68:
32:73:ff:d4:5d:29:54:6c:a7:fb:a8:01:47:85:ee:cb:c9:f0:
2e:25:69:b8:e3:aa:da:38:45:27:42:d2:8c:c6:cc:ec:a0:67:
76:0a:1d:4c:fc:9d:75:a9:10:d5:18:3e:22:85:d5:63:26:5e:
83:f7:f4:b8:77:aa:10:a8:0e:cf:e2:1e:b5:50:77:61:44:6c:
db:ae:df:3b:db:cb:28:fb:3b:ac:94:7a:1e:51:80:57:05:7e:
23:b2:44:48:33:d4:fd:6d:c4:df:cd:93:50:a3:94:c2:f3:29:
d9:07:4e:dd:31:14:7b:f4:24:df:1b:de:40:9f:e1:0f:66:05:
5b:18:6a:de:b8:ba:85:be:c7:b9:dd:6c:cb:fc:e2:64:c0:33:
23:6e:34:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 16:56:50 2026 by rpki-client