Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.mft
File: SrfcA3ifWGIbJejdDZJdyRtKWqI.mft (raw, json)
Hash identifier: BYZ2FIpdhUoe/vn8sM5JNkjlOua0o3hJ8LEpXehji7U=
Subject key identifier: 45:CE:F4:0B:2C:E0:DB:FB:B8:A0:21:F7:E7:5E:B7:D2:01:FB:66:41
Authority key identifier: 4A:B7:DC:03:78:9F:58:62:1B:25:E8:DD:0D:92:5D:C9:1B:4A:5A:A2
Certificate issuer: /CN=4ab7dc03789f58621b25e8dd0d925dc91b4a5aa2
Certificate serial: 019D99D01098186D591D836F9B15B693FFFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SrfcA3ifWGIbJejdDZJdyRtKWqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.mft
Manifest number: 0D67
Signing time: Fri 17 Apr 2026 05:00:42 +0000
Manifest this update: Fri 17 Apr 2026 05:00:42 +0000
Manifest next update: Sat 18 Apr 2026 05:00:42 +0000
Files and hashes: 1: PsulLIoJ2K5yIXwpqDT_vBbetoI.roa (hash: g6k+9r2f7VE361y/QPPTNZq47JKvyoKEVsQ41jGm2AM=)
2: SrfcA3ifWGIbJejdDZJdyRtKWqI.crl (hash: DWeDJn49kDFPmF9qRKmN8gPnaSnPT9VnrxLV9/EgqFY=)
3: xPJTQ1B0b58IM-swEMoKUaok-jY.roa (hash: 8WLFOKN87EOL1HNV9YM46I3DeHkcz7BwooQlJCjXH2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SrfcA3ifWGIbJejdDZJdyRtKWqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:10:98:18:6d:59:1d:83:6f:9b:15:b6:93:ff:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ab7dc03789f58621b25e8dd0d925dc91b4a5aa2
Validity
Not Before: Apr 17 05:00:42 2026 GMT
Not After : Apr 18 05:00:42 2026 GMT
Subject: CN=45cef40b2ce0dbfbb8a021f7e75eb7d201fb6641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7c:9b:f5:55:09:e3:1e:56:19:8c:b3:ef:20:
23:13:cc:99:e2:33:9c:16:01:6f:19:e4:58:7d:9e:
6f:3b:17:2c:c7:9b:72:26:71:70:8f:d5:18:0a:a6:
ae:46:75:af:39:62:f8:16:c0:f8:0a:e1:ee:eb:56:
dd:8c:a7:3e:d3:7b:29:c5:40:b2:43:e0:57:62:4f:
21:fb:5f:ea:6e:6b:2d:0d:96:a8:eb:20:54:d2:dc:
55:55:73:eb:fa:e5:be:c8:a8:3b:45:ac:d2:6c:78:
01:28:c9:e7:4d:e9:0c:3c:a3:19:d6:a6:7a:34:f0:
38:1c:99:1c:c9:ca:64:4a:b9:87:7a:3e:48:3d:95:
88:e2:a4:d3:76:56:52:e7:66:f7:89:d7:7d:eb:b7:
2f:60:81:d0:12:3c:6c:a2:24:d2:a0:87:05:1b:17:
ed:86:b0:a5:03:96:03:1c:29:a3:11:fc:ca:8f:c2:
c4:be:70:48:44:7c:9b:67:04:ec:c5:ca:e5:99:c5:
a5:99:8d:6b:56:34:69:57:35:6a:f6:7d:f5:f6:66:
33:de:04:78:6d:07:e4:20:b0:51:85:a1:ed:a9:03:
8c:13:72:2d:f4:1d:1e:5b:84:f2:ea:2b:bc:d4:7a:
e8:46:c4:31:94:6e:8e:e2:47:ed:40:0c:c1:d4:66:
9e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:CE:F4:0B:2C:E0:DB:FB:B8:A0:21:F7:E7:5E:B7:D2:01:FB:66:41
X509v3 Authority Key Identifier:
keyid:4A:B7:DC:03:78:9F:58:62:1B:25:E8:DD:0D:92:5D:C9:1B:4A:5A:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SrfcA3ifWGIbJejdDZJdyRtKWqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:fb:a6:9f:65:55:a2:d1:bc:00:14:4c:27:a7:94:d5:00:0d:
0a:58:1a:1a:fa:fe:ab:05:b0:08:f5:bd:dd:4e:33:41:c8:1e:
d0:18:e2:ff:7a:6a:06:85:a6:a6:cd:d4:51:f1:64:e0:b0:46:
c9:ab:f7:49:d6:fd:25:8e:b3:d0:c4:2f:e1:ae:c1:d7:29:02:
38:bb:87:8c:11:85:9d:3f:67:0a:ec:5b:d5:b4:8b:32:3c:1d:
0c:5a:94:c0:db:fd:f6:37:e7:02:ae:46:a0:1a:00:1d:d1:87:
25:c6:84:27:f6:29:53:e1:c4:13:6f:e7:f4:4a:76:c3:76:ab:
30:b0:39:5d:ef:dd:85:8a:da:b8:f0:1d:82:34:3e:88:50:5b:
4a:64:13:0b:ed:92:a4:fd:d1:f9:f8:df:37:15:5c:5c:3a:70:
a6:8e:36:39:63:b7:74:1b:e5:37:22:ae:11:07:f1:b7:c7:34:
85:fb:f5:5e:3d:5f:bc:90:c6:f1:72:93:ec:0a:8c:7f:96:0a:
99:1d:28:de:38:bd:29:92:01:1b:b7:b3:5f:d0:2a:5a:55:5f:
eb:51:87:40:80:ad:b5:a8:bc:a6:8b:8a:77:e7:66:29:5e:2e:
01:b6:de:94:e3:c4:96:1d:bc:03:d2:b2:af:a3:fd:25:e0:4f:
15:5a:16:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0BCYGG1ZHYNvmxW2k//9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhYjdkYzAzNzg5ZjU4NjIxYjI1ZThkZDBkOTI1ZGM5MWI0
YTVhYTIwHhcNMjYwNDE3MDUwMDQyWhcNMjYwNDE4MDUwMDQyWjAzMTEwLwYDVQQD
Eyg0NWNlZjQwYjJjZTBkYmZiYjhhMDIxZjdlNzVlYjdkMjAxZmI2NjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHyb9VUJ4x5WGYyz7yAjE8yZ4jOc
FgFvGeRYfZ5vOxcsx5tyJnFwj9UYCqauRnWvOWL4FsD4CuHu61bdjKc+03spxUCy
Q+BXYk8h+1/qbmstDZao6yBU0txVVXPr+uW+yKg7RazSbHgBKMnnTekMPKMZ1qZ6
NPA4HJkcycpkSrmHej5IPZWI4qTTdlZS52b3idd967cvYIHQEjxsoiTSoIcFGxft
hrClA5YDHCmjEfzKj8LEvnBIRHybZwTsxcrlmcWlmY1rVjRpVzVq9n319mYz3gR4
bQfkILBRhaHtqQOME3It9B0eW4Ty6iu81HroRsQxlG6O4kftQAzB1GaewwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEXO9Ass4Nv7uKAh9+det9IB+2ZBMB8GA1UdIwQY
MBaAFEq33AN4n1hiGyXo3Q2SXckbSlqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3JmY0EzaWZXR0liSmVqZERaSmR5UnRLV3FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC84YTU5ZGItNWFkOC00ZjNmLTk3YzIt
ZjM4YmNiZDkzMzkwLzEvU3JmY0EzaWZXR0liSmVqZERaSmR5UnRLV3FJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC84YTU5ZGItNWFkOC00ZjNmLTk3YzItZjM4YmNiZDkzMzkw
LzEvU3JmY0EzaWZXR0liSmVqZERaSmR5UnRLV3FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhvumn2VV
otG8ABRMJ6eU1QANClgaGvr+qwWwCPW93U4zQcge0Bji/3pqBoWmps3UUfFk4LBG
yav3Sdb9JY6z0MQv4a7B1ykCOLuHjBGFnT9nCuxb1bSLMjwdDFqUwNv99jfnAq5G
oBoAHdGHJcaEJ/YpU+HEE2/n9Ep2w3arMLA5Xe/dhYrauPAdgjQ+iFBbSmQTC+2S
pP3R+fjfNxVcXDpwpo42OWO3dBvlNyKuEQfxt8c0hfv1Xj1fvJDG8XKT7AqMf5YK
mR0o3ji9KZIBG7ezX9AqWlVf61GHQICttai8pouKd+dmKV4uAbbelOPElh28A9Ky
r6P9JeBPFVoWWQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:05:47 2026 by rpki-client