Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft
File: Sd2PGmKl1_gCEt4PPv51svozj_4.mft (raw, json)
Hash identifier: J1V6N5JMEwpzorRumnbLuhkTiMbgKjIh4XBstLHWt54=
Subject key identifier: 42:BA:87:9B:19:4C:94:24:DE:2F:5B:D0:41:9A:50:AF:1E:E7:79:E1
Authority key identifier: 49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE
Certificate issuer: /CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe
Certificate serial: 019D284DE3F8DAC5B10509F1FFF7170C031F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft
Manifest number: 0F45
Signing time: Thu 26 Mar 2026 04:01:26 +0000
Manifest this update: Thu 26 Mar 2026 04:01:26 +0000
Manifest next update: Fri 27 Mar 2026 04:01:26 +0000
Files and hashes: 1: J3ftbOoSMnWM1c7-tR371h6c2b0.roa (hash: wWCLwRHU1jrHGvG1xPKaED3mEcz7ye7TepNN+uTqE+U=)
2: Sd2PGmKl1_gCEt4PPv51svozj_4.crl (hash: 87Y73ktZiywn3J/h9Ibt3xs9iUdlGbdAmeQImcBzmyI=)
3: V78nEVrkCr-6qVq2YThSOW0v9hQ.roa (hash: xNhsyzIzttzlPtpbDSsbaMS/afTumd4QgcW09/sybCo=)
4: lVdlxcxfdOR97rVV-G0B9HJjtEk.roa (hash: X9flFhDc02YE6B0+b27kP29DD32mLA6vv1jvb9r/lds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:e3:f8:da:c5:b1:05:09:f1:ff:f7:17:0c:03:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe
Validity
Not Before: Mar 26 04:01:26 2026 GMT
Not After : Mar 27 04:01:26 2026 GMT
Subject: CN=42ba879b194c9424de2f5bd0419a50af1ee779e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:dd:6b:50:4c:14:a6:18:75:2f:32:05:f1:a5:
03:b0:cc:2e:4b:d1:8b:e0:e3:e7:02:fe:ce:65:b8:
a5:47:8b:5a:d4:13:e5:63:e8:ef:05:7b:46:55:9b:
15:d6:8f:53:61:b9:2d:fd:df:ef:a1:0a:43:e0:1c:
85:21:46:82:ba:68:3c:e7:4b:7d:6e:29:e1:df:da:
7a:6c:4e:c4:21:b8:af:9a:c5:41:1f:2a:dc:39:6b:
e3:ac:2a:a6:c4:12:af:bf:ee:98:92:63:83:e7:00:
da:30:67:4b:52:6b:ff:b5:cf:ac:2e:f4:aa:82:63:
e2:79:c8:f2:e1:cd:7f:65:2b:19:61:92:8f:7e:e5:
87:e5:c0:87:f1:b0:14:d0:35:68:85:d2:05:2d:a6:
04:69:fa:22:fd:4a:40:24:90:05:62:2c:18:18:c1:
a7:cd:e3:9b:14:b3:f0:bf:eb:bf:ee:1a:83:5d:8d:
b2:02:23:64:03:8e:20:9d:38:d8:8c:25:50:3d:11:
f8:6a:80:ce:72:3d:e1:ee:de:59:ff:38:67:28:b4:
64:30:ec:da:ff:ec:37:98:54:fd:e7:be:0d:cf:1e:
bb:8e:bf:3c:8d:af:27:18:e8:f5:8d:c4:4f:e3:b1:
03:dd:49:52:60:55:8b:dc:62:4f:70:00:09:c3:65:
a9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:BA:87:9B:19:4C:94:24:DE:2F:5B:D0:41:9A:50:AF:1E:E7:79:E1
X509v3 Authority Key Identifier:
keyid:49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:89:f8:f3:b7:7a:fa:9f:24:0f:6f:11:5c:0b:48:47:54:50:
ff:d5:b0:d8:77:f4:c8:e5:d4:67:e9:59:03:28:6a:db:d0:df:
76:dd:f2:9b:d1:ba:79:9c:ad:1f:64:a2:2c:ed:66:e1:1c:f2:
46:37:6b:07:3b:19:ad:3d:43:ae:f2:87:7c:fa:5a:2d:3d:21:
8e:e2:35:09:da:f8:2f:52:b6:ca:06:b2:82:22:b4:5a:ec:7a:
7b:15:1e:66:52:1b:43:bd:93:67:e2:ff:6e:5c:97:86:62:10:
f7:c7:68:57:65:83:d6:d4:99:87:83:1a:c5:b9:c5:a8:95:6d:
9d:15:2b:43:d2:c3:b1:c1:ed:78:cd:60:aa:3a:b1:d4:89:d9:
e5:d0:d9:5e:7a:a9:32:ce:6e:66:41:86:f6:85:ea:ce:b1:84:
0c:d7:0d:a5:f5:8d:78:01:df:22:e1:ee:69:8a:23:13:cd:17:
b0:6f:8c:58:14:7b:7a:96:5b:bc:10:17:96:06:7f:47:c3:23:
6d:bc:a6:de:7b:08:d9:7c:9f:33:4f:9e:92:d6:a8:a7:00:1a:
e8:ab:80:3a:34:cf:72:57:7e:d0:d0:4f:49:f4:ff:03:1e:df:
2b:30:1c:bf:3f:a3:64:f8:89:37:e6:dc:27:e4:34:7c:5d:07:
07:63:a0:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:14 2026 by rpki-client