Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/9befa4-093c-4a6d-93ed-3223435280f2/1/SRt60E7vCzE-bS4ia5Lq8neu-Fs.mft
File: SRt60E7vCzE-bS4ia5Lq8neu-Fs.mft (raw, json)
Hash identifier: OQtBnz8CaAEx3sr4Tb91t9wEbP95DPXk2wRvl1KGva8=
Subject key identifier: 63:2A:F2:EA:38:DF:E4:EE:CA:9F:6C:2A:B1:3E:7D:1A:5A:46:BD:C7
Authority key identifier: 49:1B:7A:D0:4E:EF:0B:31:3E:6D:2E:22:6B:92:EA:F2:77:AE:F8:5B
Certificate issuer: /CN=491b7ad04eef0b313e6d2e226b92eaf277aef85b
Certificate serial: 01A0ECD381B304C994A13EB9AAC6980F5733
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SRt60E7vCzE-bS4ia5Lq8neu-Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9befa4-093c-4a6d-93ed-3223435280f2/1/SRt60E7vCzE-bS4ia5Lq8neu-Fs.mft
Manifest number: 0154
Signing time: Tue 29 Sep 2026 11:01:19 +0000
Manifest this update: Tue 29 Sep 2026 11:01:19 +0000
Manifest next update: Wed 30 Sep 2026 11:01:19 +0000
Files and hashes: 1: SRt60E7vCzE-bS4ia5Lq8neu-Fs.crl (hash: nXsZEMaC9PrcuSJmq302QWaWkCwEkxTERrS0Mfx9AlE=)
2: gBi5xtmED4TG3jUX37mYjraoscw.asa (hash: apBbLvMbeJiiPpO51fdXIrt4IofHYn/vGC5rF3XziIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/9befa4-093c-4a6d-93ed-3223435280f2/1/SRt60E7vCzE-bS4ia5Lq8neu-Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/9befa4-093c-4a6d-93ed-3223435280f2/1/SRt60E7vCzE-bS4ia5Lq8neu-Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SRt60E7vCzE-bS4ia5Lq8neu-Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 11:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:d3:81:b3:04:c9:94:a1:3e:b9:aa:c6:98:0f:57:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=491b7ad04eef0b313e6d2e226b92eaf277aef85b
Validity
Not Before: Sep 29 11:01:19 2026 GMT
Not After : Sep 30 11:01:19 2026 GMT
Subject: CN=632af2ea38dfe4eeca9f6c2ab13e7d1a5a46bdc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1d:1e:00:24:c8:87:e5:99:74:24:a0:3e:c3:
a6:b0:02:f7:f5:74:80:79:34:2d:a0:f3:aa:72:ea:
5c:6d:12:b4:e6:fd:69:f6:6c:c0:23:b7:f1:ed:ea:
b1:55:39:a5:fa:2a:a4:00:70:f5:d4:32:cf:b9:88:
fb:44:62:57:78:e8:0a:b0:1a:10:9d:d0:d1:4b:4c:
30:f0:49:e7:df:06:f1:43:db:f9:8a:3e:a9:96:25:
5b:db:0c:5e:33:dc:40:3a:33:7b:03:a2:dd:4f:83:
0d:d0:b7:e7:be:88:75:4b:b3:cf:06:45:97:14:13:
48:bf:67:58:a9:28:6f:5f:d8:33:15:57:ad:5d:81:
23:7c:22:dc:67:30:10:8a:6a:62:b6:4f:d4:a3:fe:
cd:ac:cf:2a:d0:0a:bd:e2:d1:10:73:27:ff:1b:64:
c7:ef:11:04:da:0d:f9:2a:0c:33:46:b1:70:78:e1:
a1:41:f8:ae:3d:f9:c4:c4:4e:67:e3:b3:9f:ff:35:
66:b6:c4:d5:e7:45:f2:b1:65:a8:98:1b:85:cc:27:
9f:50:87:e1:4d:af:e4:66:43:a6:77:f3:3c:8a:da:
37:54:34:ec:43:34:39:4f:dc:19:af:ef:8e:52:5d:
d1:39:e6:71:7d:da:bc:11:cf:f4:d3:72:55:b1:34:
b6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:2A:F2:EA:38:DF:E4:EE:CA:9F:6C:2A:B1:3E:7D:1A:5A:46:BD:C7
X509v3 Authority Key Identifier:
keyid:49:1B:7A:D0:4E:EF:0B:31:3E:6D:2E:22:6B:92:EA:F2:77:AE:F8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SRt60E7vCzE-bS4ia5Lq8neu-Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9befa4-093c-4a6d-93ed-3223435280f2/1/SRt60E7vCzE-bS4ia5Lq8neu-Fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9befa4-093c-4a6d-93ed-3223435280f2/1/SRt60E7vCzE-bS4ia5Lq8neu-Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:4c:20:39:64:78:2a:1c:0a:14:29:44:c1:09:4b:9f:3c:a1:
a5:12:f9:41:ce:59:44:14:e2:28:cc:b9:f9:f7:51:e4:62:09:
4f:fa:98:28:40:d2:fb:e6:d4:88:42:60:9a:08:ef:ef:3f:36:
31:c4:65:3e:37:ee:67:c6:c3:90:bb:24:b2:49:df:1a:08:b6:
d1:48:ce:cb:65:5c:97:00:51:48:08:9f:a8:30:0f:30:74:e4:
18:00:be:f7:93:4f:02:be:74:34:68:f7:08:a0:da:a8:16:be:
6b:58:5f:8a:91:79:67:3b:84:27:1f:02:5a:7e:73:fa:18:49:
a0:66:be:d6:4b:bb:c5:0c:52:52:b8:a6:b3:25:35:b3:25:90:
b3:6e:dd:5c:87:f1:de:a4:48:6b:a0:38:47:cc:de:e5:9e:07:
f4:bf:17:ca:59:8a:02:d0:b2:9a:d6:7f:b2:26:a1:05:b8:bb:
84:a6:7d:c5:d7:2d:dc:c5:9a:df:7e:bb:01:fb:a2:e6:0d:05:
fc:db:c1:f6:f0:97:b6:f3:57:fb:e3:c9:91:7e:45:f4:07:86:
fb:9c:09:c9:c9:e2:10:f8:eb:10:2f:2e:f2:4e:fe:59:27:46:
1a:ad:0b:f5:0b:8c:fa:90:c4:d9:e0:a5:db:ce:d5:1c:4d:41:
9f:11:5c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 23:33:13 2026 by rpki-client