Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft
File: sDmrgpj6NjroN-UwAolpzFy_EE4.mft (raw, json)
Hash identifier: Cj3hoHUyRAU0HbCu4udWqJ4JuUGfBD05HoCBRZZY34I=
Subject key identifier: 44:76:99:4C:34:17:BF:3A:A6:9E:3A:6D:C7:01:CA:69:51:25:15:3F
Authority key identifier: B0:39:AB:82:98:FA:36:3A:E8:37:E5:30:02:89:69:CC:5C:BF:10:4E
Certificate issuer: /CN=b039ab8298fa363ae837e530028969cc5cbf104e
Certificate serial: 019FA9ABB3C344E58BBBF658E656B073D035
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft
Manifest number: 0835
Signing time: Tue 28 Jul 2026 17:00:29 +0000
Manifest this update: Tue 28 Jul 2026 17:00:29 +0000
Manifest next update: Wed 29 Jul 2026 17:00:29 +0000
Files and hashes: 1: pIFip_1IBLSOvbShbCzJqPR3ISA.asa (hash: km1Ndz8NVjDLwyeoYrd5hZq5MPQnd5mMrU9kZpY/Ge0=)
2: sDmrgpj6NjroN-UwAolpzFy_EE4.crl (hash: 5ayAMynXbC2y4e9V2YZ+N8zVaddU4m48F+0jvpeggDk=)
3: zfEmQThXQQemumuyrh4dc64Ljpo.roa (hash: l1StJqEcmI3IdHWyUspZlBSORRI1cMJESHxgjnRlaoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:b3:c3:44:e5:8b:bb:f6:58:e6:56:b0:73:d0:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b039ab8298fa363ae837e530028969cc5cbf104e
Validity
Not Before: Jul 28 17:00:29 2026 GMT
Not After : Jul 29 17:00:29 2026 GMT
Subject: CN=4476994c3417bf3aa69e3a6dc701ca695125153f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d2:3d:55:86:c4:b6:ad:1f:bb:29:15:cf:81:
b0:e6:5d:85:02:bd:85:da:b5:d8:fc:d5:ab:93:75:
b8:64:0d:3a:ee:b9:2c:7d:43:53:ae:d9:fa:21:4e:
19:41:ed:f7:e3:9f:49:40:16:34:96:2d:74:2f:fd:
88:97:2b:c0:3a:51:2b:98:c5:8c:36:4d:f6:ba:16:
f1:c3:0e:a9:9e:0f:bb:08:7c:fe:86:04:80:fe:3f:
72:0f:ba:58:a3:ef:24:bc:09:ab:74:a2:3e:06:75:
36:2d:1e:70:61:07:f3:97:e0:a1:cb:bd:ba:9a:2a:
5c:1c:5d:85:21:13:77:76:e5:8e:58:e9:4e:f1:a5:
e3:0a:36:c5:78:1c:20:76:e4:47:7c:68:28:6a:39:
2b:8a:45:6d:81:f1:b6:61:56:1f:83:9e:8f:3e:62:
15:54:2b:9b:ff:33:09:8a:a2:16:8b:5b:23:47:43:
c1:6d:bb:bc:83:74:a0:53:ef:9d:cc:07:2c:5e:7e:
6c:ea:8e:e9:f0:62:32:c8:b8:60:77:89:d9:87:4e:
0e:ef:f2:a4:02:d8:b7:32:a9:8e:07:bd:fb:5e:58:
4e:f2:e5:4a:34:eb:60:b2:b5:e7:a5:a8:a6:02:4d:
a2:e2:cb:95:59:7e:1c:80:e2:f2:68:3d:c2:ca:31:
42:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:76:99:4C:34:17:BF:3A:A6:9E:3A:6D:C7:01:CA:69:51:25:15:3F
X509v3 Authority Key Identifier:
keyid:B0:39:AB:82:98:FA:36:3A:E8:37:E5:30:02:89:69:CC:5C:BF:10:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:65:29:68:78:e6:b8:91:67:c1:a8:67:3f:06:0f:8a:b2:85:
f6:d9:bb:b1:fb:c8:c6:22:43:a5:16:fd:e1:2d:cd:0e:06:8d:
a8:24:ed:0a:50:57:7b:6f:1d:d1:6c:5c:4e:ce:57:da:ab:e0:
bc:1b:09:9b:69:a9:a3:c6:e3:a5:c5:3e:8b:fb:84:4c:b7:5e:
c6:8e:c2:70:0e:bf:80:ba:53:44:90:32:a2:51:72:3a:87:c1:
01:a9:2f:88:07:d1:d2:e1:00:a5:20:61:61:87:d2:ab:fd:af:
93:78:41:6e:b0:8a:b7:27:27:45:17:bc:85:b8:a8:1c:79:b6:
3e:6d:a9:8f:57:0f:b7:8e:7b:d0:4c:bc:6a:a9:ad:72:91:d1:
c7:e5:4c:98:72:35:93:33:1a:a3:52:13:56:52:ff:73:8c:71:
25:1c:4c:d8:b9:6d:da:06:28:6e:2a:7b:7e:ae:2e:c4:e5:d8:
65:7e:72:e6:25:73:3f:68:f3:3a:29:90:a9:31:ee:c2:a7:3a:
74:8d:ad:61:fa:d3:3c:6d:44:6e:8f:16:5d:b3:00:0c:4d:47:
2a:e0:68:b2:00:6e:93:e7:d1:28:6e:21:81:19:e1:0d:4b:45:
f8:01:41:e3:12:96:93:d1:84:c6:10:28:8c:53:d0:99:87:89:
14:6c:4c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:54:05 2026 by rpki-client