Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.mft
File: SrfcA3ifWGIbJejdDZJdyRtKWqI.mft (raw, json)
Hash identifier: RVm3N60YAQsTG5nAuzJlsJhDxyY+V08IQoVxdkuwzXQ=
Subject key identifier: 73:3B:87:04:43:0F:3E:04:9C:FA:39:9E:84:27:F3:6E:55:92:97:4F
Authority key identifier: 4A:B7:DC:03:78:9F:58:62:1B:25:E8:DD:0D:92:5D:C9:1B:4A:5A:A2
Certificate issuer: /CN=4ab7dc03789f58621b25e8dd0d925dc91b4a5aa2
Certificate serial: 019FAAF55307870CD0311DCCE7A942646490
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SrfcA3ifWGIbJejdDZJdyRtKWqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.mft
Manifest number: 0E79
Signing time: Tue 28 Jul 2026 23:00:31 +0000
Manifest this update: Tue 28 Jul 2026 23:00:31 +0000
Manifest next update: Wed 29 Jul 2026 23:00:31 +0000
Files and hashes: 1: PsulLIoJ2K5yIXwpqDT_vBbetoI.roa (hash: g6k+9r2f7VE361y/QPPTNZq47JKvyoKEVsQ41jGm2AM=)
2: SrfcA3ifWGIbJejdDZJdyRtKWqI.crl (hash: gltQeD2b5TpsIkmSBMb+wcjonrfIx9M1WPm9VtImSPA=)
3: xPJTQ1B0b58IM-swEMoKUaok-jY.roa (hash: 8WLFOKN87EOL1HNV9YM46I3DeHkcz7BwooQlJCjXH2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SrfcA3ifWGIbJejdDZJdyRtKWqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:53:07:87:0c:d0:31:1d:cc:e7:a9:42:64:64:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ab7dc03789f58621b25e8dd0d925dc91b4a5aa2
Validity
Not Before: Jul 28 23:00:31 2026 GMT
Not After : Jul 29 23:00:31 2026 GMT
Subject: CN=733b8704430f3e049cfa399e8427f36e5592974f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5d:72:24:27:ff:70:65:69:d4:7d:c0:41:3f:
91:d9:17:f9:a6:a9:2c:a4:ce:de:03:98:9e:f8:b7:
cf:72:35:90:56:0c:43:34:dd:5d:26:62:2d:23:e1:
07:c4:0b:4a:b7:2a:5a:c9:96:8f:24:20:74:27:ef:
6a:c0:78:c8:aa:9a:b1:66:b4:75:8d:b6:c6:0c:b1:
63:c6:56:55:d2:92:68:2a:25:42:13:3d:f6:3c:ce:
20:97:3a:f6:d1:0e:dc:99:98:fb:8a:5a:96:c7:59:
35:36:d5:6f:ff:2b:08:7e:72:53:e6:05:52:36:6d:
31:16:9f:82:7c:43:15:f2:b2:5c:06:4a:39:16:0d:
01:e0:80:1e:e8:22:38:98:80:a4:30:18:74:eb:f7:
3c:d9:34:93:78:a4:39:fc:18:fe:a4:40:f5:4a:1c:
31:38:4e:d4:a2:68:66:28:d3:bc:61:39:3f:01:be:
01:5c:7c:b8:f1:49:8a:ed:76:c5:e8:c2:c0:d9:51:
1f:b7:ea:84:26:8a:d0:32:0f:de:d7:2a:a5:6b:ef:
70:49:43:8d:58:f6:f0:5f:b5:9a:58:72:25:80:83:
20:95:5b:82:fd:eb:e1:4c:4b:9c:a1:0b:85:96:00:
dd:82:ab:bf:1c:2d:65:c8:ad:66:79:2a:3b:ce:1c:
cd:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:3B:87:04:43:0F:3E:04:9C:FA:39:9E:84:27:F3:6E:55:92:97:4F
X509v3 Authority Key Identifier:
keyid:4A:B7:DC:03:78:9F:58:62:1B:25:E8:DD:0D:92:5D:C9:1B:4A:5A:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SrfcA3ifWGIbJejdDZJdyRtKWqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:63:05:33:8f:45:b7:bb:f8:c6:40:58:fb:0b:23:5c:80:ae:
22:78:53:9d:2f:90:d5:f0:96:b1:27:45:1c:a1:81:f7:7e:4b:
d7:b0:e7:90:11:b8:4d:19:af:52:2c:c9:9c:fe:9d:54:58:4a:
b8:a9:18:d7:0f:c9:44:a5:40:8a:3f:9f:c2:63:92:ff:69:bf:
82:3e:2e:a3:1c:62:93:11:6d:e3:b1:75:e6:97:e3:c2:02:10:
b9:9e:ea:d0:86:46:2c:5a:bf:c9:c5:8b:08:54:f8:97:a4:e6:
d0:b9:53:ae:69:41:51:06:7d:03:4b:e1:24:ed:e3:38:6a:cd:
fc:42:c6:94:7b:4b:16:19:23:42:07:2f:8b:94:4f:36:b9:82:
48:6d:a9:e1:ab:f5:35:5d:81:33:ca:c8:c3:47:a9:f6:b9:40:
a1:71:fb:a4:18:97:a2:67:8d:6c:9a:ec:2f:fd:6a:77:2a:ee:
d5:61:64:93:a4:3f:d2:27:45:05:b9:10:65:bd:af:5b:38:77:
cc:6e:7b:c0:ba:1c:ae:1e:ae:c3:71:b0:93:37:ef:6c:05:cc:
01:42:10:da:0b:2f:66:04:2c:ef:51:9b:0a:d3:6d:54:02:8c:
ec:93:01:5f:3a:20:96:45:ed:9f:84:37:db:47:ff:11:e2:78:
ec:b8:ce:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:55:16 2026 by rpki-client