Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/6b4a18-07bc-4353-b7ea-19ca50cf34ab/1/sd-OADfxroL3viI1rmEsQBD2_pE.mft
File: sd-OADfxroL3viI1rmEsQBD2_pE.mft (raw, json)
Hash identifier: GczMf+PRGtmFRTkmJ/N7KeAKTMnvhQrkonmDkxvBsH0=
Subject key identifier: C5:06:42:DA:87:C6:4C:42:99:09:AD:A6:16:01:72:8D:D6:01:27:E7
Authority key identifier: B1:DF:8E:00:37:F1:AE:82:F7:BE:22:35:AE:61:2C:40:10:F6:FE:91
Certificate issuer: /CN=b1df8e0037f1ae82f7be2235ae612c4010f6fe91
Certificate serial: 01A0E852E9C2B24DC0B171349B6D90B645CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sd-OADfxroL3viI1rmEsQBD2_pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/6b4a18-07bc-4353-b7ea-19ca50cf34ab/1/sd-OADfxroL3viI1rmEsQBD2_pE.mft
Manifest number: 058E
Signing time: Mon 28 Sep 2026 14:02:22 +0000
Manifest this update: Mon 28 Sep 2026 14:02:22 +0000
Manifest next update: Tue 29 Sep 2026 14:02:22 +0000
Files and hashes: 1: 9TrF8CvIENAUqcixyxTQa2bps6c.roa (hash: 45f33UvxirhWF+GLCEMK1OB/89v95KaqtgcQX1BWw+8=)
2: sd-OADfxroL3viI1rmEsQBD2_pE.crl (hash: 9t2WCGVl58NogiCN9+x1dg7otb95u+KMZj+UdevDUZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/6b4a18-07bc-4353-b7ea-19ca50cf34ab/1/sd-OADfxroL3viI1rmEsQBD2_pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/6b4a18-07bc-4353-b7ea-19ca50cf34ab/1/sd-OADfxroL3viI1rmEsQBD2_pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sd-OADfxroL3viI1rmEsQBD2_pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:52:e9:c2:b2:4d:c0:b1:71:34:9b:6d:90:b6:45:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1df8e0037f1ae82f7be2235ae612c4010f6fe91
Validity
Not Before: Sep 28 14:02:22 2026 GMT
Not After : Sep 29 14:02:22 2026 GMT
Subject: CN=c50642da87c64c429909ada61601728dd60127e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:97:04:5d:01:75:9f:8b:e8:c5:57:bc:55:53:
c3:a8:6e:77:34:4f:c2:a8:eb:43:be:26:31:e9:1f:
f7:f3:eb:64:41:79:40:d4:b6:15:0d:e7:6a:d9:d9:
ac:9f:70:14:fb:4b:78:03:20:7a:b4:a7:83:bc:37:
02:19:ad:2a:84:fa:dd:ad:e6:d9:83:d8:4e:74:81:
6f:50:c4:98:99:ec:ea:7f:5f:92:cb:6b:96:99:eb:
14:ad:82:18:62:f3:17:fd:11:b4:de:1e:f4:e4:3b:
bc:03:40:e1:55:b1:8a:54:c9:90:63:b0:8a:86:55:
f8:db:37:73:d5:b1:2e:44:75:26:5a:8d:e8:f5:29:
22:04:e3:34:3d:02:d3:be:fd:d9:fa:53:ba:f7:bc:
75:9e:01:4d:3d:db:6b:59:fc:63:1a:eb:c1:79:e3:
96:7b:4a:ad:8b:57:e6:85:f9:15:c9:4d:d4:10:df:
54:9f:38:9b:58:8d:fb:88:32:fa:8e:84:0a:a3:03:
ca:58:ea:14:b0:9d:03:b3:dd:88:5a:9d:a1:77:f0:
4c:e7:5c:e5:07:37:0e:a9:fc:3f:dc:0c:7d:1b:1d:
a3:ce:9b:d0:28:77:13:48:45:55:28:54:26:ef:a6:
a4:38:10:21:06:8f:41:19:b8:93:9e:d2:b8:21:e4:
33:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:06:42:DA:87:C6:4C:42:99:09:AD:A6:16:01:72:8D:D6:01:27:E7
X509v3 Authority Key Identifier:
keyid:B1:DF:8E:00:37:F1:AE:82:F7:BE:22:35:AE:61:2C:40:10:F6:FE:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sd-OADfxroL3viI1rmEsQBD2_pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6b4a18-07bc-4353-b7ea-19ca50cf34ab/1/sd-OADfxroL3viI1rmEsQBD2_pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6b4a18-07bc-4353-b7ea-19ca50cf34ab/1/sd-OADfxroL3viI1rmEsQBD2_pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:86:e1:08:46:db:3e:6b:73:7d:6e:14:f1:4d:6e:c3:c3:ee:
6e:86:d0:16:45:36:2c:97:3f:ea:2c:91:4f:b6:f8:72:5a:31:
5e:09:6c:ca:52:3f:b9:67:3a:0a:ec:c9:14:f9:3d:41:72:a1:
43:e1:c1:fd:18:c6:88:36:0c:20:d2:b5:0e:86:9a:1c:89:63:
04:98:35:11:d3:34:e0:10:78:fc:c3:06:74:de:3d:37:2a:1d:
83:39:a0:9d:7a:56:34:dd:15:04:e5:da:fc:3c:97:cd:0b:aa:
85:77:6b:35:10:a6:df:0d:b1:13:e4:47:57:83:e3:9c:33:cf:
97:14:67:e0:6b:fa:52:0d:10:18:2a:14:e1:cf:11:19:b9:3e:
5d:5e:ed:41:d7:3d:89:b7:cb:bf:bb:96:27:91:14:8f:83:c8:
13:ce:c0:74:a7:a3:c2:4f:c8:ca:df:e2:9c:d6:b2:bb:d4:ea:
a5:bc:77:79:88:1c:ce:0d:94:9d:56:17:19:26:8d:97:f7:84:
df:23:65:11:bf:c4:f2:f3:b7:e1:64:2e:2d:c9:a6:cb:8c:10:
db:b0:0f:9f:fc:cd:25:b4:00:55:0c:45:0e:21:02:1c:69:aa:
da:fb:d0:8b:f6:e5:1a:78:4a:ae:1c:18:cc:0d:48:3b:1b:0e:
08:a6:19:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 00:57:50 2026 by rpki-client