Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft
File: Sd2PGmKl1_gCEt4PPv51svozj_4.mft (raw, json)
Hash identifier: oP8BjfK3TJH4TIY17VIeMNITaFCmQrlnVvJdIgdnl20=
Subject key identifier: A8:ED:38:A5:78:A2:CD:DF:C3:93:E9:5F:09:60:E5:1A:98:7D:5D:3F
Authority key identifier: 49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE
Certificate issuer: /CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe
Certificate serial: 01A0EAAE47BD6E43E47573F64805D936FCE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft
Manifest number: 1150
Signing time: Tue 29 Sep 2026 01:01:25 +0000
Manifest this update: Tue 29 Sep 2026 01:01:25 +0000
Manifest next update: Wed 30 Sep 2026 01:01:25 +0000
Files and hashes: 1: Sd2PGmKl1_gCEt4PPv51svozj_4.crl (hash: uMYVMKLm/fWIIvkntCm7gwvla0xZVdWTvhi/44RLCr0=)
2: V78nEVrkCr-6qVq2YThSOW0v9hQ.roa (hash: xNhsyzIzttzlPtpbDSsbaMS/afTumd4QgcW09/sybCo=)
3: a9gOs16S7E8yMt4OCaHGofZ5_Nk.roa (hash: STlb4G4+2zO56FQhlRnjRCZNYNouodVHaskNufokcfk=)
4: fyG8YWrUWtU-2CwYm7RHmuytZgY.roa (hash: OLZuds1LPzIbPXmmXR66rmWDIpMedNdDpp39Tl/U0KE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 01:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:ae:47:bd:6e:43:e4:75:73:f6:48:05:d9:36:fc:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe
Validity
Not Before: Sep 29 01:01:25 2026 GMT
Not After : Sep 30 01:01:25 2026 GMT
Subject: CN=a8ed38a578a2cddfc393e95f0960e51a987d5d3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:38:d7:5c:6d:3a:19:4a:d2:67:9c:39:82:ed:
1d:be:3c:e1:93:ef:f2:f3:d6:d1:09:91:25:fc:6e:
73:96:e7:9e:f2:5a:94:fe:30:b8:a4:08:46:98:2d:
d6:c9:75:f7:22:bd:e2:97:b9:b3:12:0e:87:01:b2:
ff:25:f9:39:11:27:2e:10:31:41:33:b2:65:ce:f9:
e2:cf:95:2f:ef:02:b0:7f:fc:72:99:20:d6:4c:a1:
0d:7f:4f:a6:21:06:77:41:87:06:f4:cc:c8:ed:fc:
7e:dd:f0:1c:0f:5e:8c:da:a3:89:5c:e4:d2:00:0e:
65:b5:fb:7f:7a:8f:53:90:62:7f:01:42:ad:5d:d1:
54:1a:02:60:e1:9a:88:9b:5d:d3:20:fb:45:92:54:
16:2f:ab:5a:51:0e:01:b4:d2:03:b3:38:35:c6:d4:
b6:79:95:51:5b:f7:e2:6b:a0:b5:f7:c2:78:23:ab:
b9:94:08:2c:73:39:50:d9:65:b2:60:26:dc:65:1f:
14:a3:2c:24:12:eb:cb:1f:8d:e1:f5:ff:48:e1:f2:
ae:da:eb:98:34:2f:42:5d:8f:6b:f1:e8:d0:7a:48:
7b:36:fd:b6:8c:51:8d:b0:ba:3b:9a:19:8f:0c:72:
ba:ae:c2:c8:44:89:0e:5e:d4:61:86:b2:61:8e:5b:
75:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:ED:38:A5:78:A2:CD:DF:C3:93:E9:5F:09:60:E5:1A:98:7D:5D:3F
X509v3 Authority Key Identifier:
keyid:49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:04:fb:ae:8d:ba:9f:f4:2c:95:d2:cc:a3:2d:55:97:74:76:
01:8d:04:a4:8a:6a:ab:3f:0c:89:87:54:86:c1:12:e6:81:65:
1c:86:86:24:19:10:49:95:27:38:21:d2:b4:a9:18:27:3f:26:
e4:15:9e:d7:9f:f4:d1:b7:91:61:36:42:71:7b:27:0c:1d:c1:
5e:f3:8d:9a:6e:b6:09:dc:20:26:02:a2:60:7b:be:7d:08:42:
5b:4d:e3:f8:ea:60:f4:63:71:03:95:b8:5e:d1:c1:67:11:45:
99:cb:b7:49:17:fe:04:2e:e2:8c:ee:58:b2:06:82:09:f3:7b:
93:09:98:1a:8d:ca:83:e9:70:03:a7:1f:fb:13:f7:91:90:73:
eb:83:d3:91:cb:07:26:c7:88:56:d3:30:5e:f1:8b:46:01:cc:
6b:2b:83:2d:b9:0d:ca:b3:e5:75:7a:99:a9:ab:06:30:d9:8c:
98:5d:e6:c8:14:87:10:09:f2:96:5e:b4:f6:87:92:41:d0:49:
cb:69:43:45:b0:8b:3f:8f:85:16:c0:db:aa:51:41:a9:99:3a:
2d:af:4d:f8:9a:e7:d0:d5:38:fe:01:0b:87:e0:e2:5b:de:4c:
58:cc:15:0c:4d:b9:6b:33:cf:0d:33:c7:58:0a:89:9e:d1:9a:
40:3c:9f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 12:31:33 2026 by rpki-client