Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.mft
File: srQdL319OFfgdfKk8vnT4ETy5TY.mft (raw, json)
Hash identifier: +yqalRr3UFw9YIBeC2B+z4M937/WfZXAYjMwh8m7B9s=
Subject key identifier: 18:36:72:9B:D9:97:35:F9:50:26:5B:6C:0A:54:D8:2A:CC:D7:B8:FE
Authority key identifier: B2:B4:1D:2F:7D:7D:38:57:E0:75:F2:A4:F2:F9:D3:E0:44:F2:E5:36
Certificate issuer: /CN=b2b41d2f7d7d3857e075f2a4f2f9d3e044f2e536
Certificate serial: 019E1DFE6B4E17302E9CB4683F697CBEA6A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/srQdL319OFfgdfKk8vnT4ETy5TY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.mft
Manifest number: 08FB
Signing time: Tue 12 May 2026 21:01:13 +0000
Manifest this update: Tue 12 May 2026 21:01:13 +0000
Manifest next update: Wed 13 May 2026 21:01:13 +0000
Files and hashes: 1: Spy7lYm24U3zdnyHMnurxfa2T6k.roa (hash: JcDra+5Gb+YXgz7R5LBtufPmpQV8nA+XRnuojSfqw4U=)
2: srQdL319OFfgdfKk8vnT4ETy5TY.crl (hash: SCaIa/pXlXRwbJYOfyXDquuqJrxRfYm8YbMiLBbOntw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.mft
rsync://rpki.ripe.net/repository/DEFAULT/srQdL319OFfgdfKk8vnT4ETy5TY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:6b:4e:17:30:2e:9c:b4:68:3f:69:7c:be:a6:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2b41d2f7d7d3857e075f2a4f2f9d3e044f2e536
Validity
Not Before: May 12 21:01:13 2026 GMT
Not After : May 13 21:01:13 2026 GMT
Subject: CN=1836729bd99735f950265b6c0a54d82accd7b8fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a0:22:69:cb:e5:5c:21:4b:c0:12:8c:b9:04:
ca:10:9f:cf:56:c1:f5:c3:d2:80:00:cd:1f:16:dd:
0e:b0:2c:31:a0:b3:c5:82:0c:d3:47:ef:23:d4:60:
71:bd:9e:1e:2a:c1:43:71:3b:1b:0e:82:4c:f0:df:
dd:64:0c:cd:1f:b3:3d:69:9d:b5:17:fb:b4:ac:97:
8a:56:99:06:39:f9:0d:e2:76:95:cb:e4:53:81:93:
9e:4d:6c:56:b1:3e:7b:8c:5c:18:3d:ae:e5:4c:d1:
c9:3d:b8:ff:72:b2:1d:65:93:10:80:3f:1c:eb:be:
a6:7e:d7:49:45:27:c3:45:59:96:7f:00:86:88:d3:
b9:c8:bf:b9:91:c3:cc:d6:00:d5:da:9e:84:fd:ac:
b5:5d:1c:a8:95:44:7c:d1:ef:7b:a7:30:41:e3:66:
e4:89:e2:6b:aa:b2:67:c7:dd:2e:bb:8d:4f:76:9b:
5e:ab:ba:43:92:63:fd:58:ec:21:88:b6:97:ea:36:
78:dd:71:bc:df:3f:e2:06:c0:1d:e6:3f:a3:37:ec:
f4:90:c9:85:c4:82:f5:ed:66:32:b1:77:47:aa:13:
de:e2:db:6d:c3:22:ee:a2:81:00:ec:a2:a0:52:93:
5b:ad:f9:e7:12:dc:95:e2:1e:43:9d:5c:03:1f:48:
f5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:36:72:9B:D9:97:35:F9:50:26:5B:6C:0A:54:D8:2A:CC:D7:B8:FE
X509v3 Authority Key Identifier:
keyid:B2:B4:1D:2F:7D:7D:38:57:E0:75:F2:A4:F2:F9:D3:E0:44:F2:E5:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/srQdL319OFfgdfKk8vnT4ETy5TY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:1a:a8:86:4c:b7:09:b3:ee:44:f0:b0:ff:0e:5c:a9:60:8e:
37:01:83:fa:ae:df:1d:4e:50:ee:1a:1b:5c:1f:45:6a:2a:a4:
9a:db:52:4c:ba:76:4c:9d:c8:98:c5:a7:88:68:ad:51:85:5f:
aa:0c:f7:b2:ae:a5:6c:6a:c9:6f:3d:30:f2:b8:97:39:83:9a:
37:2d:03:4d:ad:bc:b9:4b:f2:0b:44:3f:e5:c1:8f:7f:ef:06:
ff:c1:62:df:78:70:ba:ba:47:02:d8:c9:a3:5a:9d:05:bd:93:
75:6a:f2:e6:ab:3b:74:f9:15:af:7b:27:49:c6:e3:e9:ef:14:
3a:94:86:76:3a:d9:98:42:7f:6c:b1:d0:e7:76:6a:fe:a4:32:
20:25:b0:56:7d:70:3f:8b:f5:2f:ac:fc:3c:0e:25:06:3a:cc:
05:ae:7a:7f:d9:c5:85:ba:b3:b5:b6:9f:dd:14:22:76:6a:cf:
37:81:e2:c7:63:b0:dd:02:bc:f7:23:ca:61:9e:8c:3d:2d:2c:
ed:72:b4:1b:06:6a:d0:8a:82:67:e4:99:5f:0f:df:1b:80:a7:
1c:8e:b9:86:e5:94:f1:ce:d4:77:e0:b1:1f:16:5e:68:57:a3:
a8:b9:72:1f:10:a2:7d:9f:23:c2:07:05:bd:94:99:58:5f:7a:
d8:79:cb:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:33:37 2026 by rpki-client