Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/adfa7b-cf37-49d2-96af-bd7caf0541b8/1/SRdsODQdjHE7eV5Y9QAupnUFlyg.mft
File: SRdsODQdjHE7eV5Y9QAupnUFlyg.mft (raw, json)
Hash identifier: MYtpgteJcZ3tlyQDjtMA8YIUFExb1QXELh4y/y81p5E=
Subject key identifier: EC:5D:E7:EF:84:16:CD:22:12:99:9E:DE:3A:4E:98:78:EF:BE:E1:A3
Authority key identifier: 49:17:6C:38:34:1D:8C:71:3B:79:5E:58:F5:00:2E:A6:75:05:97:28
Certificate issuer: /CN=49176c38341d8c713b795e58f5002ea675059728
Certificate serial: 019DA52FD9692BEEDC6CDBA2803D806A4FEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SRdsODQdjHE7eV5Y9QAupnUFlyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/adfa7b-cf37-49d2-96af-bd7caf0541b8/1/SRdsODQdjHE7eV5Y9QAupnUFlyg.mft
Manifest number: D5
Signing time: Sun 19 Apr 2026 10:01:09 +0000
Manifest this update: Sun 19 Apr 2026 10:01:09 +0000
Manifest next update: Mon 20 Apr 2026 10:01:09 +0000
Files and hashes: 1: RQ5Cbf5xDKk_APMnlbM6ZHm4l7Q.roa (hash: l7hYvOlaLLwFZOpMeD6wZKlD7HWG7TlnqA+KkK5p5ho=)
2: SRdsODQdjHE7eV5Y9QAupnUFlyg.crl (hash: Vqx7TgtIMu+d1CR0tV7ejjyLdzQaHYLipSMHYkP/xGo=)
3: WQHG1u9PCPjDbr0POILKlVvCtIo.asa (hash: BrveTBrYvbvgxputKeZw7R7kBDu/ApcK0fbWPjyFnTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/adfa7b-cf37-49d2-96af-bd7caf0541b8/1/SRdsODQdjHE7eV5Y9QAupnUFlyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/adfa7b-cf37-49d2-96af-bd7caf0541b8/1/SRdsODQdjHE7eV5Y9QAupnUFlyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SRdsODQdjHE7eV5Y9QAupnUFlyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:2f:d9:69:2b:ee:dc:6c:db:a2:80:3d:80:6a:4f:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49176c38341d8c713b795e58f5002ea675059728
Validity
Not Before: Apr 19 10:01:09 2026 GMT
Not After : Apr 20 10:01:09 2026 GMT
Subject: CN=ec5de7ef8416cd2212999ede3a4e9878efbee1a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:00:e1:54:6c:23:fe:33:51:07:d6:ca:a9:d9:
75:bf:ee:1d:0b:60:1a:82:ce:02:98:98:6a:2d:0f:
7d:94:02:46:ea:a3:83:45:f8:46:c1:7f:b0:c8:23:
14:1e:5c:87:67:1b:38:c5:a8:4c:bd:22:73:d1:59:
50:ec:04:71:46:68:22:14:dc:6c:21:d9:32:a9:6b:
e6:d5:13:00:ed:9b:6d:96:18:f9:f1:3f:31:6f:94:
02:0b:bc:ea:cb:2c:a6:a6:27:db:d3:c3:d6:86:b2:
00:75:49:48:04:7f:4b:07:a8:59:4a:94:5c:f6:a8:
e9:e0:9b:9c:19:de:3f:50:1e:80:3d:92:66:79:cf:
a1:85:d1:54:df:cb:08:b9:c3:86:5d:3a:ba:90:a4:
1f:a4:be:32:8b:9c:85:61:e0:b2:b8:5e:9e:9b:74:
54:3f:86:ce:fe:ee:68:0a:a7:cd:b2:a1:6e:dd:9b:
97:62:fa:9d:20:a5:66:52:86:bf:86:b8:5e:16:38:
de:b0:cf:a0:9d:76:1f:f3:70:60:2b:03:55:df:e6:
ff:0d:15:27:96:8e:29:b0:03:fc:ba:ec:7e:e9:e0:
dd:03:d2:90:02:57:d6:64:19:8f:e6:23:b7:c8:8e:
1e:e9:8e:ec:4d:b1:ee:56:eb:d8:92:a8:c2:b1:17:
9a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:5D:E7:EF:84:16:CD:22:12:99:9E:DE:3A:4E:98:78:EF:BE:E1:A3
X509v3 Authority Key Identifier:
keyid:49:17:6C:38:34:1D:8C:71:3B:79:5E:58:F5:00:2E:A6:75:05:97:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SRdsODQdjHE7eV5Y9QAupnUFlyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/adfa7b-cf37-49d2-96af-bd7caf0541b8/1/SRdsODQdjHE7eV5Y9QAupnUFlyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/adfa7b-cf37-49d2-96af-bd7caf0541b8/1/SRdsODQdjHE7eV5Y9QAupnUFlyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:47:d8:98:e7:51:45:39:96:89:dd:75:22:46:86:12:46:ff:
a4:2a:52:42:76:79:13:c3:6c:bc:8d:6f:8a:0c:6d:6a:b0:53:
66:70:11:c7:bb:5f:c3:9c:f1:e0:c3:55:35:85:31:29:86:c1:
a8:1d:09:c5:ab:2f:06:37:f1:0b:21:98:d0:1c:b3:37:bf:0e:
98:bc:12:5e:31:a3:6c:91:95:db:64:6a:dc:b8:a3:97:35:00:
8b:b3:4c:78:76:ff:9e:0b:6b:28:57:88:1e:2f:e3:7a:2b:c0:
ae:1d:bc:d5:c0:28:36:3c:0a:48:a6:af:46:35:f1:20:2f:a9:
8e:5b:a0:74:09:02:93:32:ed:ae:b5:98:c0:aa:48:74:53:37:
46:67:ce:24:8a:40:37:82:ee:1f:3b:ec:52:ae:97:a8:d2:a7:
14:65:7a:64:03:ad:b1:b7:6e:f4:7d:f6:e0:9a:25:8c:8a:5c:
f1:0e:00:70:74:2b:e9:a1:3d:e2:71:b4:9f:09:e6:b7:f4:b0:
c7:69:e5:0b:30:4b:b8:1a:ee:d2:b1:4d:02:16:42:8e:36:e3:
39:44:3f:85:ff:14:fd:a8:d3:ea:70:ca:ad:43:c5:1f:fe:69:
89:ef:f2:23:28:cb:c5:7c:81:58:81:01:dc:9d:51:02:0f:69:
09:10:d3:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:43:21 2026 by rpki-client