Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/4a559f-dd5f-4d01-b082-b07889eb8e93/1/sURkGfXmsb7Ze59nGGiggstykPA.mft
File: sURkGfXmsb7Ze59nGGiggstykPA.mft (raw, json)
Hash identifier: TFnbFNtQXlL+ZMtUDsUrswP6q4+x9JCukmgajU7KpHM=
Subject key identifier: ED:BF:87:EB:ED:48:92:BB:B3:D5:05:6D:6D:AF:5A:2D:2B:22:45:B6
Authority key identifier: B1:44:64:19:F5:E6:B1:BE:D9:7B:9F:67:18:68:A0:82:CB:72:90:F0
Certificate issuer: /CN=b1446419f5e6b1bed97b9f671868a082cb7290f0
Certificate serial: 019FA93E185A1410D51B4E98E5232302435E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sURkGfXmsb7Ze59nGGiggstykPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/4a559f-dd5f-4d01-b082-b07889eb8e93/1/sURkGfXmsb7Ze59nGGiggstykPA.mft
Manifest number: 010D
Signing time: Tue 28 Jul 2026 15:00:46 +0000
Manifest this update: Tue 28 Jul 2026 15:00:46 +0000
Manifest next update: Wed 29 Jul 2026 15:00:46 +0000
Files and hashes: 1: _klIEgNXjNLrjq0AntRvKPJg8cQ.roa (hash: N8TiDW/8kVRpYH8qFr2ikVHK1WBz/CBEaBf5JoLgSGQ=)
2: lIV0OLq5vZmpNkImZ3IfIzUlakw.asa (hash: GoXOVmTlMc0X832ucVGmd5nO2/93OWcyKlbli6Jdw2c=)
3: sURkGfXmsb7Ze59nGGiggstykPA.crl (hash: 5U8PBKpG/VWbbNxuBeT1mZqSgSscqC2FU6/5ZWmE23Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/4a559f-dd5f-4d01-b082-b07889eb8e93/1/sURkGfXmsb7Ze59nGGiggstykPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/4a559f-dd5f-4d01-b082-b07889eb8e93/1/sURkGfXmsb7Ze59nGGiggstykPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sURkGfXmsb7Ze59nGGiggstykPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3e:18:5a:14:10:d5:1b:4e:98:e5:23:23:02:43:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1446419f5e6b1bed97b9f671868a082cb7290f0
Validity
Not Before: Jul 28 15:00:46 2026 GMT
Not After : Jul 29 15:00:46 2026 GMT
Subject: CN=edbf87ebed4892bbb3d5056d6daf5a2d2b2245b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f3:a8:e9:07:f7:40:b7:d4:08:6b:e7:67:09:
92:11:39:25:ae:e2:f9:a4:f6:0f:6c:82:81:b2:33:
53:df:33:da:ca:ba:dc:38:39:67:0e:ba:33:6f:78:
78:7a:fd:30:6b:6a:61:ff:de:6a:40:f1:87:44:94:
8a:90:30:69:a9:7c:65:43:52:72:cf:ed:af:9e:ba:
9b:29:b2:dc:b6:21:b8:9f:9f:99:b6:b4:d8:8c:3c:
1d:f4:9d:b8:90:c0:f5:01:a8:f8:9a:b8:91:6a:4b:
a8:21:76:83:8a:36:35:40:ad:3b:51:27:42:3a:05:
6b:26:9d:51:32:a9:53:5a:4c:28:f5:f9:b2:d0:3b:
11:95:4c:a5:db:5b:81:db:cf:e9:08:b7:33:77:36:
f2:46:79:b3:87:26:df:27:01:10:fb:c2:59:e1:42:
97:52:18:fe:d5:c4:cf:b4:a9:41:26:a3:45:a0:3b:
11:19:13:59:a9:43:76:62:bc:53:41:4e:62:52:2f:
00:6e:60:2a:e9:02:76:ad:0c:b2:45:92:0b:63:ae:
b4:23:eb:ed:69:9b:ed:f1:dd:6c:29:0b:46:bd:b2:
24:27:7d:e5:7a:c8:3c:76:95:14:97:55:56:82:d5:
b5:19:b0:a9:30:63:bb:2a:b6:a1:3a:3b:09:e4:a7:
2c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:BF:87:EB:ED:48:92:BB:B3:D5:05:6D:6D:AF:5A:2D:2B:22:45:B6
X509v3 Authority Key Identifier:
keyid:B1:44:64:19:F5:E6:B1:BE:D9:7B:9F:67:18:68:A0:82:CB:72:90:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sURkGfXmsb7Ze59nGGiggstykPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4a559f-dd5f-4d01-b082-b07889eb8e93/1/sURkGfXmsb7Ze59nGGiggstykPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4a559f-dd5f-4d01-b082-b07889eb8e93/1/sURkGfXmsb7Ze59nGGiggstykPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:7d:ef:74:18:8c:cb:1b:7f:fe:ce:a5:ab:d8:b0:08:b5:7f:
19:50:16:d3:bd:7a:59:33:7c:d9:b6:2f:73:00:1a:ce:fb:38:
0d:be:d4:d1:ac:87:ca:ff:bd:71:42:ed:10:72:d4:da:8e:90:
a9:71:31:b5:8b:a6:00:e1:1d:cd:5b:75:a2:89:32:8b:9e:2d:
c5:7e:a0:9f:75:a8:56:b3:29:4f:0a:ea:43:b9:4b:ae:75:54:
01:1f:81:e3:41:00:ed:21:f2:c2:5a:91:d8:1a:00:c5:a1:35:
92:ee:ba:4b:bb:12:75:67:60:df:bd:52:ef:e5:5c:68:21:15:
ef:f6:fb:68:a5:ac:fd:ad:5c:8a:26:9a:ab:9f:ab:0d:86:5d:
be:d1:e4:84:f7:d2:c7:4b:b4:37:a8:6c:10:c3:ad:ca:31:f7:
24:d5:77:fc:dd:87:8b:7d:89:0d:81:66:32:2c:fd:5c:69:24:
57:e0:98:6a:6d:94:da:ed:d7:c9:20:c6:ea:1b:5d:f7:29:b2:
cc:23:a4:00:0a:78:3b:6f:a5:33:1f:97:ca:82:52:65:f4:4d:
e9:f1:7c:cc:9e:a4:25:af:0a:ad:77:6b:2b:7c:2d:06:8a:77:
14:b2:2a:86:31:78:b5:6a:fb:0c:2d:a8:f0:31:f4:17:a6:5b:
2d:a3:cf:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:53:15 2026 by rpki-client