Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.mft
File: srQdL319OFfgdfKk8vnT4ETy5TY.mft (raw, json)
Hash identifier: OOn1XF9tY0AN8b4vi0uUKGhndgjGGVcJmRMxCm72aSk=
Subject key identifier: 4C:F7:82:41:F8:E6:08:C1:7C:0B:0B:F5:24:CE:3D:F3:11:71:59:7F
Authority key identifier: B2:B4:1D:2F:7D:7D:38:57:E0:75:F2:A4:F2:F9:D3:E0:44:F2:E5:36
Certificate issuer: /CN=b2b41d2f7d7d3857e075f2a4f2f9d3e044f2e536
Certificate serial: 01A1058038E36440C2CD11ABF00C607F44F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/srQdL319OFfgdfKk8vnT4ETy5TY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.mft
Manifest number: 0A7C
Signing time: Sun 04 Oct 2026 06:00:51 +0000
Manifest this update: Sun 04 Oct 2026 06:00:51 +0000
Manifest next update: Mon 05 Oct 2026 06:00:51 +0000
Files and hashes: 1: Spy7lYm24U3zdnyHMnurxfa2T6k.roa (hash: JcDra+5Gb+YXgz7R5LBtufPmpQV8nA+XRnuojSfqw4U=)
2: srQdL319OFfgdfKk8vnT4ETy5TY.crl (hash: 9El0f7I9GresJ/SSIq37nLc9LSz/MiQiezPAg6m9UtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.mft
rsync://rpki.ripe.net/repository/DEFAULT/srQdL319OFfgdfKk8vnT4ETy5TY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:05:80:38:e3:64:40:c2:cd:11:ab:f0:0c:60:7f:44:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2b41d2f7d7d3857e075f2a4f2f9d3e044f2e536
Validity
Not Before: Oct 4 06:00:51 2026 GMT
Not After : Oct 5 06:00:51 2026 GMT
Subject: CN=4cf78241f8e608c17c0b0bf524ce3df31171597f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:74:2d:03:1e:4b:71:f3:fc:eb:09:90:18:33:
c2:c2:98:68:b5:ac:12:84:6e:d1:cf:16:95:1a:4f:
e6:4a:84:4f:96:c9:58:c5:49:6f:d3:db:f7:7f:02:
1d:2b:87:0a:13:b4:db:49:22:61:f7:32:98:b9:93:
af:fa:07:60:e4:78:31:a1:b8:84:5e:cb:e0:78:81:
c2:14:9b:68:3e:05:3c:e0:73:ff:40:f4:55:f6:07:
7d:b3:af:3c:67:68:e7:5c:1e:6f:5c:f3:93:05:7c:
d5:10:07:fc:34:ef:4f:5a:37:89:e9:5b:39:fc:7b:
36:03:96:7e:97:73:91:c6:60:f8:5d:88:f5:68:30:
e9:0e:e7:a3:7d:f5:bb:53:46:40:d6:f2:a2:ba:32:
86:91:6d:7f:44:3e:29:96:25:24:87:b8:5d:b6:de:
6c:cc:9f:28:09:1e:ad:ec:73:c8:af:e2:c4:6f:64:
22:93:4a:63:e3:50:0a:63:45:07:76:f2:99:c6:f7:
a9:03:7c:79:d3:00:3c:2b:0e:44:58:c2:c3:8a:9b:
bc:81:dd:e6:af:2c:4b:26:00:f9:c8:52:83:ba:07:
b3:91:29:e1:f5:21:3c:7e:23:89:0f:83:16:31:ad:
f7:d6:2c:ed:0d:f0:9f:a8:66:79:a7:83:45:6d:90:
0d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F7:82:41:F8:E6:08:C1:7C:0B:0B:F5:24:CE:3D:F3:11:71:59:7F
X509v3 Authority Key Identifier:
keyid:B2:B4:1D:2F:7D:7D:38:57:E0:75:F2:A4:F2:F9:D3:E0:44:F2:E5:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/srQdL319OFfgdfKk8vnT4ETy5TY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:84:0c:1d:a6:d1:bc:93:ef:93:65:85:aa:f3:18:67:6d:2a:
d3:c4:31:fc:ba:1d:72:ec:c7:a0:ce:0c:a1:de:69:a9:61:53:
18:b2:e8:d2:d6:94:97:2e:4d:a9:0c:f6:6a:65:bc:4f:99:79:
d4:c2:10:20:b7:25:9c:3c:44:10:d9:78:dc:7d:d9:5d:07:87:
4a:8c:67:98:4b:7a:4e:14:9e:4c:21:09:2f:68:46:24:c2:d3:
d7:9f:66:fd:9a:34:a6:34:db:fa:59:98:86:98:a0:6a:dc:be:
60:22:7e:56:b0:b5:03:60:8a:68:45:8a:88:7e:c7:6a:20:7c:
95:45:c0:52:d9:2e:0a:a2:1e:47:b0:51:3b:c4:2b:4b:e8:74:
e6:94:83:8f:7f:87:4b:fe:22:4e:72:47:2a:0b:85:ed:7f:f4:
4a:c3:25:ab:de:b8:2e:0a:b3:2b:5f:0f:89:8c:5a:30:79:36:
9d:c5:8c:c9:28:b4:11:84:b2:9e:51:e4:51:28:0e:7d:b7:60:
f5:9f:4a:9a:7a:ba:d7:b0:2b:e3:08:7d:72:7b:bd:1a:29:a0:
ef:45:4f:be:93:8c:ae:5c:4e:0b:98:3e:cb:69:6d:8b:11:43:
c4:db:88:9b:28:82:ef:62:e0:97:68:99:40:81:74:68:b2:7a:
df:bf:f4:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 15:38:20 2026 by rpki-client