Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/6b4a18-07bc-4353-b7ea-19ca50cf34ab/1/sd-OADfxroL3viI1rmEsQBD2_pE.mft
File: sd-OADfxroL3viI1rmEsQBD2_pE.mft (raw, json)
Hash identifier: JPfADa7RCjvXrefHNysM/bRoRY26QbIvWwRvTo3Ramk=
Subject key identifier: 33:AE:8D:30:A9:94:62:8D:5F:DC:88:BC:D3:F6:89:15:F3:88:69:FD
Authority key identifier: B1:DF:8E:00:37:F1:AE:82:F7:BE:22:35:AE:61:2C:40:10:F6:FE:91
Certificate issuer: /CN=b1df8e0037f1ae82f7be2235ae612c4010f6fe91
Certificate serial: 019FAB99F3F32C8A45796B80C54031C65C4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sd-OADfxroL3viI1rmEsQBD2_pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/6b4a18-07bc-4353-b7ea-19ca50cf34ab/1/sd-OADfxroL3viI1rmEsQBD2_pE.mft
Manifest number: 04EA
Signing time: Wed 29 Jul 2026 02:00:21 +0000
Manifest this update: Wed 29 Jul 2026 02:00:21 +0000
Manifest next update: Thu 30 Jul 2026 02:00:21 +0000
Files and hashes: 1: 9TrF8CvIENAUqcixyxTQa2bps6c.roa (hash: 45f33UvxirhWF+GLCEMK1OB/89v95KaqtgcQX1BWw+8=)
2: sd-OADfxroL3viI1rmEsQBD2_pE.crl (hash: x2go2ss9lu9HmG0zVVw+9rS3LpAZcU1Uui/zhS5dJuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/6b4a18-07bc-4353-b7ea-19ca50cf34ab/1/sd-OADfxroL3viI1rmEsQBD2_pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/6b4a18-07bc-4353-b7ea-19ca50cf34ab/1/sd-OADfxroL3viI1rmEsQBD2_pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sd-OADfxroL3viI1rmEsQBD2_pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 02:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:99:f3:f3:2c:8a:45:79:6b:80:c5:40:31:c6:5c:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1df8e0037f1ae82f7be2235ae612c4010f6fe91
Validity
Not Before: Jul 29 02:00:21 2026 GMT
Not After : Jul 30 02:00:21 2026 GMT
Subject: CN=33ae8d30a994628d5fdc88bcd3f68915f38869fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:24:ad:2e:a7:0c:64:49:6a:e6:3c:00:fb:b3:
c1:8c:b9:6e:42:96:e9:c2:8d:05:0f:09:90:fa:5e:
d5:e2:e3:59:64:aa:5f:d6:85:23:b1:6a:05:d6:8b:
fc:df:71:24:a1:23:5d:06:7d:7b:d2:c2:09:6e:c3:
b4:8d:fc:50:d8:18:2a:f3:3d:90:f2:b3:d4:a9:3f:
b4:6b:54:59:64:e0:4b:e5:f1:16:9c:b1:2a:6b:da:
58:33:2f:56:2b:4f:4d:67:a5:51:9e:18:15:9f:e0:
b2:b4:38:9d:15:29:35:77:57:43:43:ab:43:20:35:
75:04:2b:ad:71:a0:c2:4b:5f:64:af:3e:78:71:26:
00:62:35:0f:45:51:f4:4e:f6:74:ef:6d:1a:4c:5f:
5d:3e:d0:68:a0:3f:eb:c7:33:fd:42:0f:3b:c6:87:
7e:ab:a2:71:72:c8:81:cb:05:4b:e3:e4:94:9e:42:
35:a6:8d:7c:43:ca:0c:3f:5c:2a:93:78:74:44:55:
7b:3c:fe:cd:c8:39:da:b9:f1:70:a4:04:68:00:11:
b6:ea:a1:8e:7f:2a:6f:10:85:0c:b3:fb:1e:5d:5e:
b7:4c:f6:66:1c:2f:17:1d:b3:6a:b9:07:71:8a:d4:
c8:e4:0d:3a:54:05:19:30:26:20:c4:dd:95:21:03:
c3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:AE:8D:30:A9:94:62:8D:5F:DC:88:BC:D3:F6:89:15:F3:88:69:FD
X509v3 Authority Key Identifier:
keyid:B1:DF:8E:00:37:F1:AE:82:F7:BE:22:35:AE:61:2C:40:10:F6:FE:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sd-OADfxroL3viI1rmEsQBD2_pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6b4a18-07bc-4353-b7ea-19ca50cf34ab/1/sd-OADfxroL3viI1rmEsQBD2_pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6b4a18-07bc-4353-b7ea-19ca50cf34ab/1/sd-OADfxroL3viI1rmEsQBD2_pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:dc:19:7e:9a:f1:e8:48:0e:98:61:7d:c3:50:72:2b:cf:76:
9a:07:52:73:07:f0:4f:04:91:93:9b:56:54:f9:03:11:9e:b5:
5a:f2:d6:68:96:ba:e2:2a:ee:60:c7:ff:fc:6c:80:92:1f:37:
3a:ac:9a:61:e0:31:54:7f:c0:b1:fb:eb:9d:08:7c:82:ff:90:
53:fd:30:cf:a0:5e:14:5d:ea:29:9f:7c:e1:f8:4a:29:05:f3:
e6:78:4a:48:b5:68:cb:30:53:b8:ce:de:2e:e9:f7:a7:48:e8:
a6:1e:92:e5:3a:a9:69:c4:0c:d1:d5:5a:fd:6a:b9:f7:cf:2e:
7d:db:f6:af:32:69:72:84:ce:d2:c8:8e:2e:6f:af:80:f7:11:
83:a0:da:00:e2:97:82:30:57:b0:52:f3:86:c0:a1:f2:00:30:
7e:51:ce:6a:dd:07:5d:64:34:68:70:a0:32:f1:e5:16:a3:ef:
39:a2:ed:16:6c:43:96:49:88:9c:e8:eb:41:0d:73:d2:f0:a4:
07:01:60:9c:a5:76:3a:5d:c4:33:b9:30:d3:45:31:5b:00:e5:
e2:2b:43:ab:0d:c4:84:33:b4:ad:3a:ea:7b:c4:db:99:15:97:
ef:53:32:13:b0:cd:d3:24:61:05:bf:46:de:f7:33:7a:41:37:
57:cd:7b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:05:32 2026 by rpki-client