Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/adfa7b-cf37-49d2-96af-bd7caf0541b8/1/SRdsODQdjHE7eV5Y9QAupnUFlyg.mft
File: SRdsODQdjHE7eV5Y9QAupnUFlyg.mft (raw, json)
Hash identifier: mo6HlKcAsIoxFZo4WIxQL9Uen5w/S6x+0P9sSSeuZZk=
Subject key identifier: 98:8C:43:27:FA:EF:33:60:CF:B6:D8:27:0D:59:C0:B7:9C:8C:A8:CF
Authority key identifier: 49:17:6C:38:34:1D:8C:71:3B:79:5E:58:F5:00:2E:A6:75:05:97:28
Certificate issuer: /CN=49176c38341d8c713b795e58f5002ea675059728
Certificate serial: 019FAABF04AF1A8F162816217B8ACEB80A13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SRdsODQdjHE7eV5Y9QAupnUFlyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/adfa7b-cf37-49d2-96af-bd7caf0541b8/1/SRdsODQdjHE7eV5Y9QAupnUFlyg.mft
Manifest number: 01E1
Signing time: Tue 28 Jul 2026 22:01:12 +0000
Manifest this update: Tue 28 Jul 2026 22:01:12 +0000
Manifest next update: Wed 29 Jul 2026 22:01:12 +0000
Files and hashes: 1: RQ5Cbf5xDKk_APMnlbM6ZHm4l7Q.roa (hash: l7hYvOlaLLwFZOpMeD6wZKlD7HWG7TlnqA+KkK5p5ho=)
2: SRdsODQdjHE7eV5Y9QAupnUFlyg.crl (hash: W1x/jyb17r9bryIaAU1vtIEb9WVlA0xrRoWQpwwH8Hw=)
3: WQHG1u9PCPjDbr0POILKlVvCtIo.asa (hash: BrveTBrYvbvgxputKeZw7R7kBDu/ApcK0fbWPjyFnTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/adfa7b-cf37-49d2-96af-bd7caf0541b8/1/SRdsODQdjHE7eV5Y9QAupnUFlyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/adfa7b-cf37-49d2-96af-bd7caf0541b8/1/SRdsODQdjHE7eV5Y9QAupnUFlyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SRdsODQdjHE7eV5Y9QAupnUFlyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:bf:04:af:1a:8f:16:28:16:21:7b:8a:ce:b8:0a:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49176c38341d8c713b795e58f5002ea675059728
Validity
Not Before: Jul 28 22:01:12 2026 GMT
Not After : Jul 29 22:01:12 2026 GMT
Subject: CN=988c4327faef3360cfb6d8270d59c0b79c8ca8cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:09:72:3a:48:2e:87:e1:05:96:d3:e5:cc:53:
5a:d8:80:f3:bf:48:a3:04:c0:eb:25:20:ff:11:07:
7e:c4:e3:c8:ff:e3:5e:13:e8:29:3c:6c:36:26:31:
8d:81:f9:3a:b5:80:fc:7c:a9:f2:61:d4:fc:4f:9e:
04:f2:0a:af:c9:32:0c:b1:f2:30:09:f7:ad:e6:d7:
a9:02:a8:e0:92:88:aa:1a:75:12:61:b6:0c:0c:bd:
90:81:f8:4e:cb:d3:5e:40:d3:95:86:7b:f2:1c:7a:
31:43:a7:b7:b2:03:b6:f0:49:d5:23:28:f9:47:b6:
c7:33:fb:c5:d2:c2:e1:af:76:fb:8c:4b:79:8d:3b:
f4:60:4a:c3:87:b6:24:82:f8:61:0a:07:6d:b8:5d:
32:b2:f2:30:75:22:84:c3:6e:99:40:46:b2:22:37:
25:c4:80:0b:34:e9:be:ad:c0:c3:be:28:ab:b5:05:
01:9a:b8:37:73:4d:82:c7:de:e0:7c:ab:ee:ce:bb:
1a:02:0b:59:38:80:06:a6:68:4b:6d:4f:c2:9f:3c:
a2:73:14:94:ad:96:c2:32:67:f1:34:38:d8:dc:c5:
d8:58:8d:e5:00:d1:c3:cb:7b:5b:8c:78:d6:ed:4f:
8d:62:d3:fd:a7:d4:b4:f2:6e:a6:20:26:87:a4:0a:
bf:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:8C:43:27:FA:EF:33:60:CF:B6:D8:27:0D:59:C0:B7:9C:8C:A8:CF
X509v3 Authority Key Identifier:
keyid:49:17:6C:38:34:1D:8C:71:3B:79:5E:58:F5:00:2E:A6:75:05:97:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SRdsODQdjHE7eV5Y9QAupnUFlyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/adfa7b-cf37-49d2-96af-bd7caf0541b8/1/SRdsODQdjHE7eV5Y9QAupnUFlyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/adfa7b-cf37-49d2-96af-bd7caf0541b8/1/SRdsODQdjHE7eV5Y9QAupnUFlyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:ff:2d:b8:d1:a2:a3:62:70:56:0d:b1:b5:47:73:40:a4:c4:
c0:4f:61:ae:32:4f:63:32:1b:92:bc:67:3e:4b:95:00:e3:bb:
a1:a9:27:19:de:9b:c8:6d:38:46:e6:e1:8c:33:2c:77:f0:5a:
19:7d:ac:f2:64:60:98:7e:58:02:5c:68:9b:33:ac:66:50:ce:
58:29:7a:ea:e7:f6:f5:d2:02:8f:72:7b:d6:7b:e0:a5:9f:70:
45:69:06:79:33:7c:e6:58:0b:59:f8:2f:d2:ca:f4:f4:ac:2b:
18:16:89:ef:42:a2:05:04:fe:0a:dd:fe:45:ae:4a:2a:ae:d7:
b6:be:c9:1b:77:2e:6e:22:24:07:c8:01:e8:75:50:61:d7:f1:
1b:f7:72:64:df:fc:0d:2c:8d:2b:8a:ef:fd:f1:03:53:22:9f:
9e:f0:e6:18:d7:bf:03:58:8c:63:30:b0:fa:dc:50:7b:6a:0c:
d8:04:a3:08:50:14:37:f6:72:76:d9:54:7b:ef:42:af:7e:6c:
23:d6:32:f9:60:d5:a3:82:ef:9e:39:e2:0c:97:70:dd:ba:84:
87:fd:67:88:37:e0:80:2c:c5:c6:9f:b0:f9:98:a0:7b:a4:dd:
e1:d9:ec:ba:db:2f:be:55:d2:d6:1a:7b:3e:da:02:4d:bd:f7:
a4:85:ff:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:09:18 2026 by rpki-client