Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/4a559f-dd5f-4d01-b082-b07889eb8e93/1/sURkGfXmsb7Ze59nGGiggstykPA.mft
File: sURkGfXmsb7Ze59nGGiggstykPA.mft (raw, json)
Hash identifier: npe+gZVp7Nv8cEtncGJHwt7UNR4DpSJcYbGd/CjbJLs=
Subject key identifier: 67:A7:D9:93:70:CE:07:09:21:4B:30:4F:07:6F:75:FC:6F:52:C0:EB
Authority key identifier: B1:44:64:19:F5:E6:B1:BE:D9:7B:9F:67:18:68:A0:82:CB:72:90:F0
Certificate issuer: /CN=b1446419f5e6b1bed97b9f671868a082cb7290f0
Certificate serial: 019E1C0FC18D4B89F00D286C419FAD5FE267
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sURkGfXmsb7Ze59nGGiggstykPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/4a559f-dd5f-4d01-b082-b07889eb8e93/1/sURkGfXmsb7Ze59nGGiggstykPA.mft
Manifest number: 3F
Signing time: Tue 12 May 2026 12:00:54 +0000
Manifest this update: Tue 12 May 2026 12:00:54 +0000
Manifest next update: Wed 13 May 2026 12:00:54 +0000
Files and hashes: 1: l-aEHGRr6mSwaOOPXptMqOfSa6g.roa (hash: oYGqjiujvvcpv0QPtMiNNXBDknKaO4zREWr9HxsSg3Y=)
2: lIV0OLq5vZmpNkImZ3IfIzUlakw.asa (hash: GoXOVmTlMc0X832ucVGmd5nO2/93OWcyKlbli6Jdw2c=)
3: sURkGfXmsb7Ze59nGGiggstykPA.crl (hash: E0iPVv5pQdrjtwLNd8yJlVCD/LU9Qn4l5U+JAd4mvto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/4a559f-dd5f-4d01-b082-b07889eb8e93/1/sURkGfXmsb7Ze59nGGiggstykPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/4a559f-dd5f-4d01-b082-b07889eb8e93/1/sURkGfXmsb7Ze59nGGiggstykPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sURkGfXmsb7Ze59nGGiggstykPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:0f:c1:8d:4b:89:f0:0d:28:6c:41:9f:ad:5f:e2:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1446419f5e6b1bed97b9f671868a082cb7290f0
Validity
Not Before: May 12 12:00:54 2026 GMT
Not After : May 13 12:00:54 2026 GMT
Subject: CN=67a7d99370ce0709214b304f076f75fc6f52c0eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3b:f6:d7:7c:1d:66:51:e7:5f:54:4f:64:bf:
2a:d0:a1:bc:79:ea:ef:01:e1:51:18:9b:ae:62:8c:
bc:ac:2a:3b:f9:37:88:c2:58:b6:89:bc:d1:4f:ef:
ff:38:cc:6b:d5:85:c3:5f:f3:6e:88:43:1b:43:0c:
e1:cf:21:96:a1:dc:7c:0c:8a:58:8c:ec:15:2a:b1:
81:17:c5:0c:d0:4f:47:0a:77:b8:e8:9d:2c:e3:58:
9f:16:89:01:16:43:16:d7:8a:54:13:a0:e8:ee:45:
79:40:10:d8:a7:aa:83:99:5b:c6:a9:7c:77:76:78:
74:8c:c3:bf:47:c1:4d:65:88:d0:5b:8c:37:4f:02:
f7:c6:31:cf:f6:89:ee:b1:f2:e1:9e:a6:03:e1:65:
2c:50:de:62:9a:c9:71:03:1c:22:f5:75:fe:ab:f5:
e7:d0:af:62:e6:2c:24:5b:7d:d9:6a:b9:6c:c0:43:
52:a1:ef:7e:f0:83:3a:86:dd:76:4c:74:d0:e5:85:
fe:77:54:e3:d6:f3:df:f7:89:f1:c8:ef:d7:a3:e6:
7b:dc:2d:c1:5e:63:18:c4:29:68:f4:79:15:76:c1:
f3:62:f1:e8:4b:bc:70:b5:d9:98:e0:ae:66:4f:c0:
48:87:73:c0:e5:1f:39:28:d4:3b:7c:78:48:09:af:
e4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A7:D9:93:70:CE:07:09:21:4B:30:4F:07:6F:75:FC:6F:52:C0:EB
X509v3 Authority Key Identifier:
keyid:B1:44:64:19:F5:E6:B1:BE:D9:7B:9F:67:18:68:A0:82:CB:72:90:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sURkGfXmsb7Ze59nGGiggstykPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4a559f-dd5f-4d01-b082-b07889eb8e93/1/sURkGfXmsb7Ze59nGGiggstykPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4a559f-dd5f-4d01-b082-b07889eb8e93/1/sURkGfXmsb7Ze59nGGiggstykPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:5c:31:c9:79:00:95:c6:e2:0d:43:82:91:5c:7d:28:4a:af:
fc:49:af:58:a6:58:ae:35:38:a2:1f:b7:9a:d2:8a:1c:51:c4:
08:81:b3:55:7b:5a:31:18:86:86:5f:bf:1d:b1:63:61:61:89:
c9:6c:88:69:4f:d5:71:36:43:9a:9c:5a:70:02:65:32:c8:6a:
dc:d7:61:20:06:04:4f:ee:94:0b:8e:02:79:92:d4:43:34:32:
61:ba:26:d9:7f:1b:25:03:7f:bc:8a:a3:20:80:f3:e9:22:7c:
8b:8f:18:6b:20:0e:06:70:99:3b:20:31:27:5e:c3:3b:77:4b:
7e:81:59:7b:ee:1d:0d:73:e6:0a:b2:61:33:78:f2:84:60:16:
f8:49:93:3e:98:19:80:59:cd:fa:68:b2:a6:48:b9:52:55:b7:
48:90:d1:25:89:ba:2d:58:60:5a:95:60:1a:65:cd:e7:1e:43:
7f:75:8f:ae:3f:48:3e:66:cf:0e:56:db:0b:94:f6:d6:37:63:
eb:87:60:8e:c0:68:30:03:a8:9f:75:34:31:a6:ef:8a:58:bb:
bd:87:9b:13:68:3e:75:4b:5d:3b:29:92:5e:c6:95:2b:6e:61:
5e:63:57:10:67:38:8b:c1:d8:68:16:6d:33:b2:aa:ad:fa:93:
af:27:b4:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:39:26 2026 by rpki-client