Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/4a559f-dd5f-4d01-b082-b07889eb8e93/1/sURkGfXmsb7Ze59nGGiggstykPA.mft
File: sURkGfXmsb7Ze59nGGiggstykPA.mft (raw, json)
Hash identifier: TDONd6kbiLWdwUggJiMPbdkT8ZBo9m4YqNML1MvwlS8=
Subject key identifier: 79:5C:FD:04:15:5F:1D:A4:2B:0A:3C:31:E0:F3:7B:18:80:12:89:69
Authority key identifier: B1:44:64:19:F5:E6:B1:BE:D9:7B:9F:67:18:68:A0:82:CB:72:90:F0
Certificate issuer: /CN=b1446419f5e6b1bed97b9f671868a082cb7290f0
Certificate serial: 01A0D493EC3257853ECCABE91FDA6DC1EFAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sURkGfXmsb7Ze59nGGiggstykPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/4a559f-dd5f-4d01-b082-b07889eb8e93/1/sURkGfXmsb7Ze59nGGiggstykPA.mft
Manifest number: 01A8
Signing time: Thu 24 Sep 2026 18:00:58 +0000
Manifest this update: Thu 24 Sep 2026 18:00:58 +0000
Manifest next update: Fri 25 Sep 2026 18:00:58 +0000
Files and hashes: 1: _klIEgNXjNLrjq0AntRvKPJg8cQ.roa (hash: N8TiDW/8kVRpYH8qFr2ikVHK1WBz/CBEaBf5JoLgSGQ=)
2: lIV0OLq5vZmpNkImZ3IfIzUlakw.asa (hash: GoXOVmTlMc0X832ucVGmd5nO2/93OWcyKlbli6Jdw2c=)
3: sURkGfXmsb7Ze59nGGiggstykPA.crl (hash: xPjZWKfZVMYUALVcZtkIfhDOjIrCZPIi9GxJE2tFTXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/4a559f-dd5f-4d01-b082-b07889eb8e93/1/sURkGfXmsb7Ze59nGGiggstykPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/4a559f-dd5f-4d01-b082-b07889eb8e93/1/sURkGfXmsb7Ze59nGGiggstykPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sURkGfXmsb7Ze59nGGiggstykPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:93:ec:32:57:85:3e:cc:ab:e9:1f:da:6d:c1:ef:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1446419f5e6b1bed97b9f671868a082cb7290f0
Validity
Not Before: Sep 24 18:00:58 2026 GMT
Not After : Sep 25 18:00:58 2026 GMT
Subject: CN=795cfd04155f1da42b0a3c31e0f37b1880128969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:64:19:0c:fc:c0:7e:e2:a6:7c:b7:49:ff:c9:
29:83:ae:68:04:32:4e:f3:3e:45:b7:b3:3a:79:bc:
ca:01:c8:3e:94:83:9f:06:35:a4:90:3f:6a:1f:39:
e7:b8:c3:73:99:eb:54:94:60:8a:f4:a3:b9:1e:f7:
b1:3b:96:61:e5:a4:5c:e8:cf:d4:ea:f2:7c:4d:64:
e2:f1:29:10:22:21:01:7f:f1:20:b6:6d:51:24:c0:
67:0e:eb:dd:19:91:47:6a:44:19:48:c9:43:99:b6:
a6:8a:54:e1:2f:cf:04:bd:2d:6f:f5:d5:5d:b9:cf:
ec:be:ca:f7:8b:9e:29:59:c4:f6:2c:4f:20:68:85:
58:2f:be:37:3c:92:12:6e:58:d9:a8:e9:f7:4e:a5:
ca:7e:34:4f:20:cf:27:df:67:7f:e0:3d:bd:7f:aa:
f0:ae:72:df:43:41:09:ba:91:7e:72:8e:4c:34:69:
5d:d5:1e:b8:d5:5b:f7:fa:3e:8b:5c:e6:4c:88:18:
40:f5:54:77:e7:22:d4:f2:5c:bf:6c:ec:ea:19:0f:
fd:cd:76:99:a8:40:c3:7b:34:56:90:b9:99:23:5e:
c0:f3:27:8e:97:ce:27:b1:6f:b3:23:0f:dd:48:aa:
cc:d2:8b:d0:67:f9:7a:e2:f9:d9:95:7f:75:4d:23:
61:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:5C:FD:04:15:5F:1D:A4:2B:0A:3C:31:E0:F3:7B:18:80:12:89:69
X509v3 Authority Key Identifier:
keyid:B1:44:64:19:F5:E6:B1:BE:D9:7B:9F:67:18:68:A0:82:CB:72:90:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sURkGfXmsb7Ze59nGGiggstykPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4a559f-dd5f-4d01-b082-b07889eb8e93/1/sURkGfXmsb7Ze59nGGiggstykPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4a559f-dd5f-4d01-b082-b07889eb8e93/1/sURkGfXmsb7Ze59nGGiggstykPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:56:6b:d7:af:48:76:fc:c0:53:87:15:fc:68:40:98:4e:f9:
a9:2e:d9:47:cb:6d:49:5e:16:3a:d3:8b:b7:2e:a4:3a:23:b5:
8a:43:ab:44:ab:b9:f5:4a:4b:31:e4:ed:01:5b:0a:85:26:d2:
a7:3e:63:3a:a2:f4:5f:aa:fc:4f:fc:a6:db:35:26:b1:6d:1f:
cb:e0:47:d1:48:2a:50:66:ef:36:5d:4b:4c:7f:e5:58:e0:42:
90:3b:fa:72:f8:12:f5:3e:4d:11:14:c5:0e:e1:e7:2b:b5:75:
eb:2d:43:fa:60:e5:94:fb:92:a0:7b:46:e0:97:0b:2a:a1:f2:
9b:2f:a0:25:d0:bc:37:a4:80:2d:e2:74:1b:7e:bd:12:bc:31:
e7:90:b4:60:22:c3:9b:46:be:c7:32:4d:92:ec:4d:f7:44:a9:
ef:8a:75:79:54:fb:39:f2:40:70:14:39:09:ce:8c:cf:5a:dd:
e7:00:e7:6e:ae:b7:19:8f:ec:8b:72:ff:36:65:2e:f3:6c:93:
3d:1d:1d:59:3b:da:ac:81:82:fc:98:1a:07:f9:91:33:75:7d:
5b:7c:9c:a1:2a:91:42:93:8f:ac:4b:b7:f8:ff:02:25:32:1e:
f4:33:f2:11:d3:6d:16:f7:43:fd:15:1e:16:c3:06:38:e9:66:
dc:c4:ff:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:19:38 2026 by rpki-client