Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/adfa7b-cf37-49d2-96af-bd7caf0541b8/1/SRdsODQdjHE7eV5Y9QAupnUFlyg.mft
File: SRdsODQdjHE7eV5Y9QAupnUFlyg.mft (raw, json)
Hash identifier: 3jDgWeUDk5C9AqybN1skxDhSCZwdL7ajZ/9JYWpv2IU=
Subject key identifier: B2:8D:4B:77:12:22:EF:73:63:F9:D4:E5:61:F7:7F:B0:01:D3:71:F6
Authority key identifier: 49:17:6C:38:34:1D:8C:71:3B:79:5E:58:F5:00:2E:A6:75:05:97:28
Certificate issuer: /CN=49176c38341d8c713b795e58f5002ea675059728
Certificate serial: 019FA8D06526B838C8C033FA2DED7F82A1B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SRdsODQdjHE7eV5Y9QAupnUFlyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/adfa7b-cf37-49d2-96af-bd7caf0541b8/1/SRdsODQdjHE7eV5Y9QAupnUFlyg.mft
Manifest number: 01E0
Signing time: Tue 28 Jul 2026 13:00:57 +0000
Manifest this update: Tue 28 Jul 2026 13:00:57 +0000
Manifest next update: Wed 29 Jul 2026 13:00:57 +0000
Files and hashes: 1: RQ5Cbf5xDKk_APMnlbM6ZHm4l7Q.roa (hash: l7hYvOlaLLwFZOpMeD6wZKlD7HWG7TlnqA+KkK5p5ho=)
2: SRdsODQdjHE7eV5Y9QAupnUFlyg.crl (hash: RMoZcpCGPZmXVG1rdJrmSKsu0ZB93pZOH1Lzl2dIqHs=)
3: WQHG1u9PCPjDbr0POILKlVvCtIo.asa (hash: BrveTBrYvbvgxputKeZw7R7kBDu/ApcK0fbWPjyFnTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/adfa7b-cf37-49d2-96af-bd7caf0541b8/1/SRdsODQdjHE7eV5Y9QAupnUFlyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/adfa7b-cf37-49d2-96af-bd7caf0541b8/1/SRdsODQdjHE7eV5Y9QAupnUFlyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SRdsODQdjHE7eV5Y9QAupnUFlyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:65:26:b8:38:c8:c0:33:fa:2d:ed:7f:82:a1:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49176c38341d8c713b795e58f5002ea675059728
Validity
Not Before: Jul 28 13:00:57 2026 GMT
Not After : Jul 29 13:00:57 2026 GMT
Subject: CN=b28d4b771222ef7363f9d4e561f77fb001d371f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e1:24:19:6d:ce:b5:90:f7:b5:c5:a3:e3:e6:
67:37:18:30:d0:93:b9:9f:73:f6:65:59:54:fe:7b:
92:e5:ae:b1:79:27:13:63:94:ec:a9:7b:98:43:a3:
41:0c:2a:7c:66:32:f0:a7:82:4d:3f:16:0f:77:02:
fc:58:4d:65:e5:3f:31:9e:ad:ff:4c:56:d7:d0:d3:
0b:6f:82:66:dc:63:b8:54:9d:a3:ff:ae:38:a1:f1:
93:97:73:14:8a:79:f5:0e:e9:92:a4:d8:87:03:56:
c4:b6:f7:8e:ed:47:8d:4e:d3:3b:0a:23:90:d1:ec:
d8:a1:16:8a:0b:bf:00:17:61:69:f3:34:43:24:24:
68:c7:d6:91:6f:b5:36:f9:58:73:37:40:a9:6a:5c:
24:9f:6a:2e:15:5a:0c:9b:39:53:b8:5b:66:56:a8:
70:37:00:f2:e0:7d:36:dc:f5:2f:97:08:7d:bd:5a:
11:bb:21:50:15:98:e4:49:4b:ac:3b:3a:0e:0e:d6:
2e:fc:72:cb:3c:6f:3d:4d:ac:98:2d:49:c6:7a:9a:
d5:72:57:81:f3:61:44:31:ee:45:65:4a:68:36:b8:
45:69:10:6d:af:b8:ad:aa:ad:4d:06:e8:71:60:73:
39:12:5e:15:7a:0f:ef:a3:70:a5:66:e0:53:44:5d:
a3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:8D:4B:77:12:22:EF:73:63:F9:D4:E5:61:F7:7F:B0:01:D3:71:F6
X509v3 Authority Key Identifier:
keyid:49:17:6C:38:34:1D:8C:71:3B:79:5E:58:F5:00:2E:A6:75:05:97:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SRdsODQdjHE7eV5Y9QAupnUFlyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/adfa7b-cf37-49d2-96af-bd7caf0541b8/1/SRdsODQdjHE7eV5Y9QAupnUFlyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/adfa7b-cf37-49d2-96af-bd7caf0541b8/1/SRdsODQdjHE7eV5Y9QAupnUFlyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:26:29:fc:4a:63:ef:56:9b:7d:7a:2b:06:7a:e3:cb:5a:96:
e0:96:3f:92:67:01:1e:89:be:6e:fc:1a:73:b2:ac:46:87:c5:
68:2e:ca:3a:e7:db:10:c2:4f:28:ba:65:e0:45:63:36:1b:bf:
ed:a4:ce:b5:91:c7:c2:12:f9:78:8f:fa:25:28:57:16:31:cf:
37:6d:77:ac:14:5d:25:9f:a5:20:88:c5:4b:7b:a3:eb:6a:a0:
c2:03:a5:5d:c3:b9:77:69:39:67:dc:cd:87:e1:1b:42:d8:2e:
25:82:37:fc:6a:f8:de:28:83:5f:a4:a3:52:b7:23:4b:99:7c:
2d:ac:02:18:70:b2:d6:5e:69:f1:98:36:ad:2b:aa:8f:3b:0a:
f1:9e:7c:7c:72:8a:42:b3:08:dc:b6:b0:17:5b:62:35:1f:97:
13:ac:dd:e1:ae:5c:2b:51:3b:f0:dd:9a:c1:54:05:d4:b5:d0:
92:62:16:72:be:3f:7e:3b:85:3c:ce:61:c6:88:f8:c5:78:25:
58:24:49:d6:b6:f6:99:b3:c3:1d:f2:b8:50:f4:e2:42:f9:7d:
11:b8:70:3a:00:a1:ba:9a:ae:4c:4d:46:0a:33:57:f4:44:b1:
52:40:db:d0:32:63:4a:9a:65:2e:b6:c3:2d:32:4f:01:f9:e8:
38:2b:a5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:43:34 2026 by rpki-client