Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft
File: sDmrgpj6NjroN-UwAolpzFy_EE4.mft (raw, json)
Hash identifier: 677MSTVvkgHEIhnfbPW7JFqL7XD8K2DGS2AVMwwCmNU=
Subject key identifier: 6D:85:42:67:AD:0C:71:BE:FA:EC:68:6C:D5:AF:8E:F2:A2:FD:17:65
Authority key identifier: B0:39:AB:82:98:FA:36:3A:E8:37:E5:30:02:89:69:CC:5C:BF:10:4E
Certificate issuer: /CN=b039ab8298fa363ae837e530028969cc5cbf104e
Certificate serial: 019D9AAC2D141CB833ED8807114FEC076784
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft
Manifest number: 0724
Signing time: Fri 17 Apr 2026 09:01:08 +0000
Manifest this update: Fri 17 Apr 2026 09:01:08 +0000
Manifest next update: Sat 18 Apr 2026 09:01:08 +0000
Files and hashes: 1: pIFip_1IBLSOvbShbCzJqPR3ISA.asa (hash: km1Ndz8NVjDLwyeoYrd5hZq5MPQnd5mMrU9kZpY/Ge0=)
2: sDmrgpj6NjroN-UwAolpzFy_EE4.crl (hash: /XpRqnZb8G17NXtQv+m4U5p+QzJ6SPTCX64MDY9hT/Y=)
3: zfEmQThXQQemumuyrh4dc64Ljpo.roa (hash: l1StJqEcmI3IdHWyUspZlBSORRI1cMJESHxgjnRlaoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:2d:14:1c:b8:33:ed:88:07:11:4f:ec:07:67:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b039ab8298fa363ae837e530028969cc5cbf104e
Validity
Not Before: Apr 17 09:01:08 2026 GMT
Not After : Apr 18 09:01:08 2026 GMT
Subject: CN=6d854267ad0c71befaec686cd5af8ef2a2fd1765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:87:b1:fa:33:88:04:7a:94:de:68:bc:6b:24:
a5:e5:b4:17:f7:db:9f:41:ee:56:7c:63:c0:9c:58:
e8:3c:08:92:eb:04:1a:31:20:67:45:57:6a:85:d7:
90:b6:80:c8:10:b2:78:2c:26:16:d7:18:5e:a3:fe:
83:f6:a2:84:fc:db:9b:e5:1e:1b:61:52:7c:cf:84:
a5:6d:50:33:db:8e:7c:f1:61:3d:27:03:f5:55:3a:
cd:79:db:e7:43:6c:a8:b9:1e:23:53:f7:0a:b4:e9:
a2:12:09:82:5d:15:34:95:74:64:dc:c2:ea:f9:32:
ed:07:40:af:b8:e6:da:0f:42:4c:e8:f1:02:2c:e4:
19:8e:d2:49:24:de:9f:14:66:83:09:47:b1:e4:ff:
ca:7c:5a:c9:53:eb:2f:30:94:51:48:c6:c8:9d:c0:
05:b4:74:8f:db:ce:00:87:99:c7:c5:57:ba:34:c4:
88:54:47:96:34:fe:60:5f:fe:08:8f:db:f7:db:60:
6a:44:b2:10:18:c7:92:df:aa:75:04:c3:64:43:93:
67:bc:4c:3d:a7:62:2f:14:6f:39:eb:9f:24:38:61:
be:35:25:44:b1:f9:70:8d:73:df:fb:27:32:16:43:
1e:16:39:cd:de:6a:7b:c3:e3:de:b1:6d:03:c3:56:
54:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:85:42:67:AD:0C:71:BE:FA:EC:68:6C:D5:AF:8E:F2:A2:FD:17:65
X509v3 Authority Key Identifier:
keyid:B0:39:AB:82:98:FA:36:3A:E8:37:E5:30:02:89:69:CC:5C:BF:10:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:7c:4b:9b:08:36:a7:bb:91:c4:8a:0f:b0:ea:5f:8f:b4:65:
55:86:c4:03:0d:8b:90:74:94:41:79:95:b0:12:7f:ab:99:9e:
70:e1:c5:fc:6f:29:35:ec:e7:8c:3a:a5:73:c4:a6:27:f2:23:
ec:ab:eb:be:69:f6:39:97:a2:3f:6c:a1:ec:e6:b9:47:34:9b:
aa:42:67:6c:bc:06:cd:18:94:df:3c:e7:1c:51:4a:36:a5:df:
4e:8a:66:70:ac:97:4c:27:70:b5:3f:85:da:a5:22:13:bd:1b:
e2:82:32:47:fb:89:19:cb:31:b1:b6:ff:bd:22:ae:15:3f:d3:
20:34:fb:0e:ff:a2:33:70:41:9f:d5:f4:87:64:a8:a6:3c:92:
04:ba:ce:fd:e9:f4:dc:d0:4e:9d:57:d3:c1:1b:38:85:ea:c4:
0a:4a:d5:6b:75:c2:db:62:e9:0d:46:35:7a:6e:ed:d0:7c:31:
08:cc:41:02:d4:2b:c5:e6:ad:e1:11:86:3b:97:81:9a:55:84:
81:6d:52:2f:c6:36:b7:8a:22:36:47:90:86:8e:48:f0:de:ab:
d2:62:21:68:94:52:2a:66:ca:bd:65:fc:dd:b5:34:b4:3d:c4:
c8:a7:7d:c8:88:65:32:2f:4b:02:00:31:40:e7:df:ed:79:42:
08:82:0c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:24:46 2026 by rpki-client