Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/adfa7b-cf37-49d2-96af-bd7caf0541b8/1/SRdsODQdjHE7eV5Y9QAupnUFlyg.mft
File: SRdsODQdjHE7eV5Y9QAupnUFlyg.mft (raw, json)
Hash identifier: tzv9oGeqsgp245LGyOHBtKDEvw1EYttIQcOuuQrU0Jw=
Subject key identifier: CA:6B:62:F1:9A:C4:93:1D:68:2C:E8:38:9E:37:42:01:A6:82:3A:10
Authority key identifier: 49:17:6C:38:34:1D:8C:71:3B:79:5E:58:F5:00:2E:A6:75:05:97:28
Certificate issuer: /CN=49176c38341d8c713b795e58f5002ea675059728
Certificate serial: 019F8FB58AA1897CE8957D2DE3EFA40304E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SRdsODQdjHE7eV5Y9QAupnUFlyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/adfa7b-cf37-49d2-96af-bd7caf0541b8/1/SRdsODQdjHE7eV5Y9QAupnUFlyg.mft
Manifest number: 01D3
Signing time: Thu 23 Jul 2026 16:01:06 +0000
Manifest this update: Thu 23 Jul 2026 16:01:06 +0000
Manifest next update: Fri 24 Jul 2026 16:01:06 +0000
Files and hashes: 1: RQ5Cbf5xDKk_APMnlbM6ZHm4l7Q.roa (hash: l7hYvOlaLLwFZOpMeD6wZKlD7HWG7TlnqA+KkK5p5ho=)
2: SRdsODQdjHE7eV5Y9QAupnUFlyg.crl (hash: bB6PJtP3T7xc3wtPtZWf73HhR4lN81sRnGjgNPc9HyQ=)
3: WQHG1u9PCPjDbr0POILKlVvCtIo.asa (hash: BrveTBrYvbvgxputKeZw7R7kBDu/ApcK0fbWPjyFnTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/adfa7b-cf37-49d2-96af-bd7caf0541b8/1/SRdsODQdjHE7eV5Y9QAupnUFlyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/adfa7b-cf37-49d2-96af-bd7caf0541b8/1/SRdsODQdjHE7eV5Y9QAupnUFlyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SRdsODQdjHE7eV5Y9QAupnUFlyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:8a:a1:89:7c:e8:95:7d:2d:e3:ef:a4:03:04:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49176c38341d8c713b795e58f5002ea675059728
Validity
Not Before: Jul 23 16:01:06 2026 GMT
Not After : Jul 24 16:01:06 2026 GMT
Subject: CN=ca6b62f19ac4931d682ce8389e374201a6823a10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:85:4f:73:5f:2e:f1:91:61:3c:75:67:99:9f:
78:dc:ce:87:f7:74:da:a6:6e:39:c2:e4:95:44:06:
0b:85:91:e4:93:60:26:5a:37:b2:81:e5:96:a5:dc:
1e:c4:2f:59:0f:bd:44:08:9e:b8:bb:b8:37:44:d6:
d6:52:3a:1b:44:cc:d1:e7:a0:44:db:a7:37:1f:c7:
26:d9:c9:28:9d:6a:db:a4:d5:dc:33:3c:ac:e4:0d:
bf:09:e2:f9:66:fa:c8:6d:98:1e:64:26:f5:d8:7d:
69:b0:dc:ca:15:b8:76:ae:a0:1a:74:47:ce:d9:67:
1d:76:e5:62:6c:8b:80:c7:fd:0e:d4:03:3c:dd:0e:
b6:41:79:ee:2d:a4:a4:13:75:27:ec:ef:6d:91:9d:
7a:a6:ca:85:cd:60:ca:13:ae:5e:1b:d3:07:96:2e:
a5:b4:e9:ce:d0:5a:4d:38:af:1d:7f:bd:41:b7:45:
ad:fc:a9:e7:bf:ea:0c:a5:eb:6b:fd:c2:55:1a:8a:
21:74:4d:30:a6:c8:8d:42:a3:ab:da:12:e7:b8:a9:
45:78:95:23:6d:83:79:72:ee:39:c7:39:6a:8e:c6:
ea:3e:9a:2a:62:82:1b:28:32:1a:9c:77:10:06:b5:
e3:1e:57:8e:16:81:bd:5e:e3:e5:01:1e:b1:d4:b1:
23:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:6B:62:F1:9A:C4:93:1D:68:2C:E8:38:9E:37:42:01:A6:82:3A:10
X509v3 Authority Key Identifier:
keyid:49:17:6C:38:34:1D:8C:71:3B:79:5E:58:F5:00:2E:A6:75:05:97:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SRdsODQdjHE7eV5Y9QAupnUFlyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/adfa7b-cf37-49d2-96af-bd7caf0541b8/1/SRdsODQdjHE7eV5Y9QAupnUFlyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/adfa7b-cf37-49d2-96af-bd7caf0541b8/1/SRdsODQdjHE7eV5Y9QAupnUFlyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:b1:2e:88:87:b1:14:48:51:ab:0b:51:7b:e6:57:da:fb:ec:
e6:f7:57:85:37:40:08:69:56:a6:98:b8:24:75:c9:7a:65:f0:
bc:a9:84:06:67:9e:f2:2c:ee:70:d4:7e:c5:e3:21:e8:1b:b6:
a4:36:be:3e:bb:62:03:91:fe:b8:c1:43:86:bf:9f:2d:e8:a4:
0d:a3:14:c3:2d:2e:b8:94:28:e9:a2:37:7e:8d:a4:9b:52:10:
e0:99:4d:a0:d0:6c:4a:64:c6:48:04:f5:25:95:49:6c:8b:7c:
0b:64:8e:1f:94:d8:7f:74:d3:57:39:44:b5:be:bc:a7:05:a5:
c1:9d:6c:82:9c:a0:58:06:40:db:1d:b5:6f:b8:f0:93:3d:92:
50:0e:fa:8c:f8:6b:86:39:5d:0a:85:99:ad:d5:e0:f7:7e:16:
9a:35:4f:05:07:be:59:bd:2f:90:88:4d:05:f1:83:3a:bc:9f:
6a:e3:30:d0:7b:f0:49:8f:60:d4:8b:a6:68:88:96:46:ee:21:
3a:78:96:3a:79:db:ed:c7:68:5a:1e:08:ac:3c:5b:7e:ee:f8:
27:ce:f4:3e:b4:8a:0f:e1:17:6e:33:05:ea:d3:17:7c:87:a0:
a0:f5:24:1c:20:e0:bd:ed:21:f1:38:77:e3:c3:dd:64:17:5b:
61:c2:3b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:07:43 2026 by rpki-client