Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/f0f5ff-a820-4dba-8ee1-cda57426de22/1/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.mft
File: SAQjqhfQT1bGkAQDRdZ2K7_R-Is.mft (raw, json)
Hash identifier: G2uUVVYBf8RPYhMpYUGLXzXbDtbEhospyN30InwvezM=
Subject key identifier: 61:DF:96:97:D3:F8:8C:CC:65:65:0A:8C:D9:51:D8:1D:8D:F3:84:FA
Authority key identifier: 48:04:23:AA:17:D0:4F:56:C6:90:04:03:45:D6:76:2B:BF:D1:F8:8B
Certificate issuer: /CN=480423aa17d04f56c690040345d6762bbfd1f88b
Certificate serial: 019D27DFE55E0F1E1C56B816F2A46E484586
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/f0f5ff-a820-4dba-8ee1-cda57426de22/1/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.mft
Manifest number: 133F
Signing time: Thu 26 Mar 2026 02:01:17 +0000
Manifest this update: Thu 26 Mar 2026 02:01:17 +0000
Manifest next update: Fri 27 Mar 2026 02:01:17 +0000
Files and hashes: 1: C3Hq4w7BM7_K6mHHdh-CUZ1B7D0.roa (hash: Ek13lasSbyTfirrWZx3Y8k/3TLG7Wg/4AVTy2yQF+F0=)
2: SAQjqhfQT1bGkAQDRdZ2K7_R-Is.crl (hash: Qg9QDw4jWe0t+63mVPiVWFglpVaj5UMTcBfEgXDZfnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/f0f5ff-a820-4dba-8ee1-cda57426de22/1/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/f0f5ff-a820-4dba-8ee1-cda57426de22/1/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:e5:5e:0f:1e:1c:56:b8:16:f2:a4:6e:48:45:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480423aa17d04f56c690040345d6762bbfd1f88b
Validity
Not Before: Mar 26 02:01:17 2026 GMT
Not After : Mar 27 02:01:17 2026 GMT
Subject: CN=61df9697d3f88ccc65650a8cd951d81d8df384fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:75:a0:ee:74:3e:9e:fe:48:7e:ee:5b:71:6b:
3c:cf:b2:40:58:77:12:c8:55:95:c3:a8:3b:9f:0a:
fb:cb:f6:e0:6e:8e:0d:40:46:ba:e5:2d:ce:1f:43:
9e:e4:c8:2c:c3:4e:d8:7e:b6:fe:7e:0d:84:cf:90:
6d:a5:63:39:a0:6b:0c:f3:96:e6:a4:b3:5d:6c:21:
88:86:f2:3b:fe:39:ef:4a:dd:d7:5b:99:82:31:77:
e9:88:cb:d1:4b:8c:17:58:6b:49:60:7a:45:33:9d:
34:5e:91:4a:12:99:b1:fa:9c:52:a4:ee:1c:5c:b0:
cc:5a:ed:c6:af:20:d2:36:a0:42:54:df:7d:46:1f:
40:6e:be:e5:8b:f5:1b:63:2e:53:f5:3d:a5:26:20:
56:bd:15:5a:d1:9c:c5:d9:11:47:b6:d1:df:8d:60:
34:9e:c3:18:f8:e3:18:71:d6:b6:5d:20:46:49:77:
d6:af:f1:bc:b1:ba:4c:ea:cb:e3:14:33:6e:6f:79:
53:42:20:74:fe:d0:3c:01:a9:1a:75:a1:69:68:ee:
21:ca:b0:a0:74:4f:68:8a:36:61:75:9c:fd:0d:7f:
42:90:2a:2a:ac:f7:01:f1:8e:3d:9b:77:35:32:31:
01:aa:1d:cc:8a:0f:0f:71:3c:1a:9f:71:fb:9b:73:
f0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:DF:96:97:D3:F8:8C:CC:65:65:0A:8C:D9:51:D8:1D:8D:F3:84:FA
X509v3 Authority Key Identifier:
keyid:48:04:23:AA:17:D0:4F:56:C6:90:04:03:45:D6:76:2B:BF:D1:F8:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/f0f5ff-a820-4dba-8ee1-cda57426de22/1/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/f0f5ff-a820-4dba-8ee1-cda57426de22/1/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:a5:e6:c7:b7:14:03:74:29:2f:70:35:45:ac:63:1c:0f:f9:
82:04:94:88:2c:fc:52:f0:ab:ba:d3:3f:9c:4e:9a:5d:03:4d:
70:15:99:a0:a2:9c:c4:fa:e7:a4:bd:a7:24:c4:7f:4a:cd:c7:
85:be:54:4e:ad:35:dc:f5:d5:d6:9e:4c:c0:e7:3c:c0:a8:f6:
ed:46:eb:48:36:5a:49:a3:ac:8d:ba:90:99:d0:3d:a4:63:df:
86:8d:c4:90:9d:a6:8c:29:82:57:80:21:f4:93:eb:de:54:3e:
e8:37:cc:df:ee:6d:b1:ea:3a:60:d4:75:08:f9:43:74:c8:46:
3d:18:bf:06:cb:a0:f4:ee:9e:88:1d:6d:24:66:6b:a4:08:db:
30:a1:ef:2e:84:9d:60:5d:6c:b0:d1:80:63:de:a0:3b:3b:9b:
d7:6d:31:d7:7e:e4:bf:ec:5d:d0:6a:c6:5f:a7:2e:5a:df:d6:
38:aa:2d:9e:ba:fc:26:02:bc:5e:e7:86:de:a8:02:03:d4:cf:
3c:69:ca:e0:71:4f:37:90:23:c2:25:a2:53:a8:52:77:57:f5:
48:61:f3:53:a8:d3:ce:54:96:3c:f7:bf:6f:70:84:4f:a2:91:
5a:4e:c9:75:dd:c8:d2:44:89:6c:41:b0:82:05:ab:95:1e:b3:
b6:1c:00:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:14:10 2026 by rpki-client