Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft
File: sDmrgpj6NjroN-UwAolpzFy_EE4.mft (raw, json)
Hash identifier: 9LE6TJ06NgkqH9vTJjqRdVZI3pk8mIbZyMrXGxECRXo=
Subject key identifier: 47:2F:22:24:77:11:7C:0E:E8:64:50:B8:54:A0:DA:23:DD:AB:74:03
Authority key identifier: B0:39:AB:82:98:FA:36:3A:E8:37:E5:30:02:89:69:CC:5C:BF:10:4E
Certificate issuer: /CN=b039ab8298fa363ae837e530028969cc5cbf104e
Certificate serial: 01A0D8DEC694301617B12EC3604D09A820AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft
Manifest number: 08D2
Signing time: Fri 25 Sep 2026 14:01:13 +0000
Manifest this update: Fri 25 Sep 2026 14:01:13 +0000
Manifest next update: Sat 26 Sep 2026 14:01:13 +0000
Files and hashes: 1: pIFip_1IBLSOvbShbCzJqPR3ISA.asa (hash: km1Ndz8NVjDLwyeoYrd5hZq5MPQnd5mMrU9kZpY/Ge0=)
2: sDmrgpj6NjroN-UwAolpzFy_EE4.crl (hash: NLbLNz4bWp5pcitrWsdRTD0KMNMmXMnjfPJFCAmKYWU=)
3: zfEmQThXQQemumuyrh4dc64Ljpo.roa (hash: l1StJqEcmI3IdHWyUspZlBSORRI1cMJESHxgjnRlaoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:de:c6:94:30:16:17:b1:2e:c3:60:4d:09:a8:20:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b039ab8298fa363ae837e530028969cc5cbf104e
Validity
Not Before: Sep 25 14:01:13 2026 GMT
Not After : Sep 26 14:01:13 2026 GMT
Subject: CN=472f222477117c0ee86450b854a0da23ddab7403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:08:03:67:48:00:f1:b5:67:0f:79:ba:b5:00:
fb:06:85:d3:bc:28:b1:02:3b:75:6a:7a:e8:14:d8:
85:e5:af:31:cd:7b:e4:e5:36:dd:d8:4f:ae:b9:98:
53:ca:b4:10:cb:84:73:0a:e8:2d:3f:2b:a1:48:75:
ef:40:65:ad:a8:66:26:7e:ff:57:40:1c:bb:1b:04:
89:f6:e6:0c:7a:e4:18:c4:1b:27:81:f2:cb:02:14:
14:2f:a9:b7:d4:58:6b:ea:d1:6c:f9:f2:95:15:f5:
21:08:31:7f:57:57:9b:32:26:a4:6a:a2:f1:29:ae:
36:86:b7:62:5d:b7:40:e4:18:ad:78:3d:bc:a0:12:
f6:97:f0:31:42:af:d1:cc:eb:4b:ae:c7:3a:4e:1f:
be:0d:fa:57:57:f8:a2:84:3d:62:a5:b8:85:0e:10:
69:03:f7:07:f0:a2:2d:9b:12:3c:99:c3:47:b8:f8:
be:d6:36:df:e7:5b:ba:a0:31:08:a9:41:6a:96:49:
35:9b:f6:e9:7e:2f:62:2a:1a:5e:69:00:2e:36:68:
e5:ed:80:44:4d:ac:7f:e1:db:f6:c4:a4:5f:cc:7e:
84:e5:a9:c4:af:7f:86:1c:e2:0e:85:30:71:4f:bf:
3a:c0:29:aa:b1:64:52:f6:dd:0a:22:8e:4e:57:8e:
d0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:2F:22:24:77:11:7C:0E:E8:64:50:B8:54:A0:DA:23:DD:AB:74:03
X509v3 Authority Key Identifier:
keyid:B0:39:AB:82:98:FA:36:3A:E8:37:E5:30:02:89:69:CC:5C:BF:10:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:c7:4f:a5:95:af:fc:c4:fc:f4:82:c4:fd:b3:ca:12:8c:3d:
16:08:f1:55:59:cb:af:d9:80:47:07:6e:1d:81:cd:b4:da:74:
23:6a:af:2a:72:15:6f:bf:fd:1b:78:f1:d5:27:a9:3a:b3:98:
ff:79:81:e7:81:d4:7d:08:2a:01:aa:8b:cb:56:47:09:61:6f:
42:1e:39:a7:88:98:b8:ad:92:31:7c:f8:90:d2:96:99:0b:f2:
2d:e1:8e:a0:ea:a2:02:30:e0:27:13:ba:31:97:a3:c1:0d:d9:
03:b9:cc:4d:4d:35:38:18:2e:4d:92:40:15:86:52:e9:0b:08:
3d:e1:d0:8f:77:a4:44:2b:81:e1:c4:d0:c8:ca:5b:06:ed:b6:
a3:ca:58:37:ee:63:cd:0f:f0:23:83:f1:5c:67:4f:8d:9b:76:
8a:f5:b8:1b:1c:e0:ff:19:b6:11:8b:50:e1:77:4a:ba:e3:f9:
93:0d:f1:23:ac:b4:e0:b5:f8:05:cb:0a:10:15:e6:cb:69:11:
4f:ba:36:c0:00:39:87:94:30:6c:e4:99:f7:89:02:fa:f3:32:
23:82:2f:f2:c7:d4:03:5c:e9:42:b2:98:fc:4d:3e:e5:ca:e3:
77:e8:5c:d5:11:9e:a2:cc:5b:10:7a:06:1e:02:53:6b:87:b0:
7e:cd:78:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:27:14 2026 by rpki-client