Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.mft
File: SrfcA3ifWGIbJejdDZJdyRtKWqI.mft (raw, json)
Hash identifier: MTEjw9IfbQOccSQ7zcIT46GN/N+9zuCC6e1rIAJLwws=
Subject key identifier: 92:11:52:73:21:C2:C7:F3:58:D3:0A:07:76:11:02:66:1B:96:B2:A2
Authority key identifier: 4A:B7:DC:03:78:9F:58:62:1B:25:E8:DD:0D:92:5D:C9:1B:4A:5A:A2
Certificate issuer: /CN=4ab7dc03789f58621b25e8dd0d925dc91b4a5aa2
Certificate serial: 019EC148AC13336ACA9A9F253A6DCF2FDF1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SrfcA3ifWGIbJejdDZJdyRtKWqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.mft
Manifest number: 0E00
Signing time: Sat 13 Jun 2026 14:00:25 +0000
Manifest this update: Sat 13 Jun 2026 14:00:25 +0000
Manifest next update: Sun 14 Jun 2026 14:00:25 +0000
Files and hashes: 1: PsulLIoJ2K5yIXwpqDT_vBbetoI.roa (hash: g6k+9r2f7VE361y/QPPTNZq47JKvyoKEVsQ41jGm2AM=)
2: SrfcA3ifWGIbJejdDZJdyRtKWqI.crl (hash: bxEiFrvOAzc9YJipK2r0jY4Ua0K4t6/xG47TPRunin8=)
3: xPJTQ1B0b58IM-swEMoKUaok-jY.roa (hash: 8WLFOKN87EOL1HNV9YM46I3DeHkcz7BwooQlJCjXH2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SrfcA3ifWGIbJejdDZJdyRtKWqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:48:ac:13:33:6a:ca:9a:9f:25:3a:6d:cf:2f:df:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ab7dc03789f58621b25e8dd0d925dc91b4a5aa2
Validity
Not Before: Jun 13 14:00:25 2026 GMT
Not After : Jun 14 14:00:25 2026 GMT
Subject: CN=9211527321c2c7f358d30a07761102661b96b2a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:de:3d:80:db:b9:e5:3c:f2:d6:6b:94:86:2f:
6e:a7:50:1b:0d:8e:94:f8:1a:24:5c:17:99:cc:b5:
f4:e0:b2:51:86:30:0d:7e:49:60:7b:a8:91:b8:df:
29:3b:12:78:6f:e6:60:1a:d7:2e:57:62:44:83:f0:
0b:b2:53:72:92:80:39:00:34:2c:43:68:07:db:00:
c3:c9:8c:a8:c0:38:f4:7d:85:b6:26:a4:16:b7:39:
3d:a8:5f:d6:22:d6:77:01:89:47:bf:f8:fe:d7:5a:
aa:e7:66:50:f1:cb:5d:58:09:da:ec:ec:d1:bb:0d:
bd:f2:9f:f2:13:41:d7:7c:79:5b:5f:52:fe:6e:a1:
20:34:ac:5d:4d:70:fd:a5:72:7b:d5:1a:7a:d3:34:
a2:4d:5f:96:ab:00:ea:d5:fe:67:e9:e6:0c:e1:7f:
e6:be:62:16:4d:ce:73:8d:5b:97:4b:3b:d2:19:31:
4e:64:35:72:ea:ad:67:e0:fb:25:7d:26:0f:cd:b3:
87:88:ef:cb:0e:98:5d:7c:5a:63:7b:d3:21:fa:ea:
2c:5b:08:81:55:2f:95:08:9d:9c:ab:c7:c7:d5:e8:
0a:55:1f:1e:70:0f:3b:1a:43:80:a6:5e:7c:71:e5:
84:f7:b6:75:5d:9a:77:18:30:fa:c3:09:84:99:76:
8f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:11:52:73:21:C2:C7:F3:58:D3:0A:07:76:11:02:66:1B:96:B2:A2
X509v3 Authority Key Identifier:
keyid:4A:B7:DC:03:78:9F:58:62:1B:25:E8:DD:0D:92:5D:C9:1B:4A:5A:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SrfcA3ifWGIbJejdDZJdyRtKWqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:8a:f6:b4:fc:2c:a5:76:98:42:88:52:05:92:30:56:5b:6e:
60:c2:3d:10:92:9d:39:bd:25:ca:55:b4:a3:10:02:46:6f:4e:
37:0b:3e:1f:25:75:5e:fc:d2:4c:4c:88:c7:47:58:72:b8:0a:
35:be:40:09:e3:8f:cd:0e:75:c0:d1:5f:2b:e3:79:5c:9b:ca:
11:3b:c8:e7:60:2b:a2:d5:d2:97:02:2c:9d:16:cc:66:7e:88:
e6:01:da:8b:51:5b:0e:6e:af:bf:01:92:0c:f4:03:30:c6:0f:
13:dc:07:0f:fd:ad:8d:bc:d0:c6:31:5e:8b:fc:83:f6:0e:4e:
51:fb:de:3e:36:da:91:d4:ab:7b:4d:76:3e:2d:3b:9a:29:25:
85:0f:ce:51:42:22:d3:0f:e1:aa:3a:b8:5e:94:a9:52:7a:6d:
56:1d:6e:07:12:2c:dd:3e:23:87:7f:5e:e1:30:13:62:66:20:
f6:71:0f:f7:bf:f9:94:c2:2b:e8:9b:62:47:0b:16:bb:a9:a4:
89:04:75:89:04:71:3f:19:28:96:15:aa:ab:31:54:ec:6f:73:
d7:d4:72:73:9f:44:50:ce:8b:0b:91:f0:58:36:d8:12:c9:ad:
bd:31:7f:24:54:d2:6a:f8:8e:9f:fb:00:c1:12:66:b5:7f:27:
6e:2f:50:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:11:08 2026 by rpki-client