Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.mft
File: SrfcA3ifWGIbJejdDZJdyRtKWqI.mft (raw, json)
Hash identifier: 3bCFeB8EnVwK0ySgTV5l+YOWs3ujVXCoFdYrstpeU8w=
Subject key identifier: 93:B2:1B:77:1F:39:4F:E1:72:E2:25:6F:CF:DD:60:2B:4A:BB:72:99
Authority key identifier: 4A:B7:DC:03:78:9F:58:62:1B:25:E8:DD:0D:92:5D:C9:1B:4A:5A:A2
Certificate issuer: /CN=4ab7dc03789f58621b25e8dd0d925dc91b4a5aa2
Certificate serial: 01A0E7AF052D5B34EB196B9EA501E6E888D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SrfcA3ifWGIbJejdDZJdyRtKWqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.mft
Manifest number: 0F1D
Signing time: Mon 28 Sep 2026 11:03:22 +0000
Manifest this update: Mon 28 Sep 2026 11:03:22 +0000
Manifest next update: Tue 29 Sep 2026 11:03:22 +0000
Files and hashes: 1: PsulLIoJ2K5yIXwpqDT_vBbetoI.roa (hash: g6k+9r2f7VE361y/QPPTNZq47JKvyoKEVsQ41jGm2AM=)
2: SrfcA3ifWGIbJejdDZJdyRtKWqI.crl (hash: BpLb4kXLodiPFUhgbStEBgxkq+3oqhgx+CjW27A11L4=)
3: xPJTQ1B0b58IM-swEMoKUaok-jY.roa (hash: 8WLFOKN87EOL1HNV9YM46I3DeHkcz7BwooQlJCjXH2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SrfcA3ifWGIbJejdDZJdyRtKWqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 11:03:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:af:05:2d:5b:34:eb:19:6b:9e:a5:01:e6:e8:88:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ab7dc03789f58621b25e8dd0d925dc91b4a5aa2
Validity
Not Before: Sep 28 11:03:22 2026 GMT
Not After : Sep 29 11:03:22 2026 GMT
Subject: CN=93b21b771f394fe172e2256fcfdd602b4abb7299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a8:d4:7f:f8:b4:e6:8f:41:f6:93:9c:c9:bd:
34:a8:d9:91:3e:1c:f7:18:5a:44:cb:ca:cb:8f:15:
b0:26:9f:ea:81:f6:f1:65:15:de:09:f5:c7:67:34:
72:95:c0:60:9e:b2:5d:ee:f4:28:ba:c2:f8:43:06:
7a:17:47:1a:12:25:79:b4:0d:ce:be:ac:6e:02:7d:
c0:7d:3e:44:1e:4d:12:00:ed:d2:e4:52:43:bb:01:
f0:15:ad:a5:72:17:a4:9e:62:b7:87:57:90:65:14:
91:79:12:d8:b9:1c:8c:b0:98:6a:87:dd:3e:ec:2c:
e4:4f:79:48:28:d1:d9:b2:22:40:f6:75:86:38:d1:
c0:09:98:dc:6b:c9:da:15:24:83:24:43:21:16:81:
56:c9:bd:4e:f9:d9:c0:10:0b:80:b5:83:b7:75:2e:
00:0f:6f:58:56:b6:53:b0:2c:fb:64:ee:ca:37:8a:
d6:9b:07:f4:38:03:80:b3:2a:0e:bf:6e:0b:6c:c8:
1c:a6:7b:f8:a2:de:64:6d:40:54:36:7b:eb:e2:6e:
d7:d9:b4:b8:51:c9:5c:54:4b:b7:86:f9:14:a6:fd:
5f:d4:8d:cf:20:4a:67:85:84:81:5a:94:11:6e:1c:
46:a0:4c:65:a8:d9:2f:9d:2d:d6:0f:57:84:ed:84:
80:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B2:1B:77:1F:39:4F:E1:72:E2:25:6F:CF:DD:60:2B:4A:BB:72:99
X509v3 Authority Key Identifier:
keyid:4A:B7:DC:03:78:9F:58:62:1B:25:E8:DD:0D:92:5D:C9:1B:4A:5A:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SrfcA3ifWGIbJejdDZJdyRtKWqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:42:ba:f3:08:56:f1:1f:43:e4:99:8c:4a:50:3b:20:f6:ba:
2a:b0:a2:56:7c:84:00:b0:19:f0:ce:02:d0:81:58:62:c6:a3:
3e:e2:7f:f8:f9:14:bc:b5:a1:a2:da:28:28:67:9f:6a:29:ab:
49:cd:d2:e1:f4:0b:70:0e:33:89:63:35:9d:7f:18:0f:13:17:
86:d9:22:db:c6:d1:4a:6f:99:a7:6d:f5:a7:1c:a8:72:6b:1f:
6b:b3:b9:e1:c7:a9:94:87:61:99:9a:2c:93:bd:fb:07:d9:92:
6c:82:9d:af:64:3f:24:83:12:a0:78:20:a0:86:9c:9b:e0:04:
a7:37:54:86:7b:cb:f0:a8:f6:4d:30:83:b8:d4:03:62:6b:3b:
af:9f:48:53:68:a1:50:49:93:b1:d8:ef:39:61:66:f4:f2:a3:
71:d5:b4:5c:3e:dd:76:ba:b4:3e:d4:5d:e9:c2:30:8c:6c:4b:
f9:32:e7:75:7d:7a:47:60:05:b5:61:00:d7:66:4b:d3:c4:b3:
fa:f6:85:15:ab:56:00:da:35:e4:a0:29:0d:3e:d3:27:6d:51:
8a:56:06:bb:2e:31:0b:8c:c1:36:28:51:af:c3:51:70:eb:05:
05:f8:04:07:3d:7f:00:39:32:d6:de:3e:b9:e8:46:f1:f5:44:
58:6f:51:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 17:39:39 2026 by rpki-client