Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.mft
File: SAqutTeS1SAWm84oDD3Yb4N27GM.mft (raw, json)
Hash identifier: 6a4Pnwq+GV89JLJm9h73Z+7BlZuqqCCozyORpxU8/DQ=
Subject key identifier: 5E:3B:A8:D0:D1:92:B3:7E:D4:BF:2C:AF:F0:00:BF:46:C9:B7:F5:E3
Authority key identifier: 48:0A:AE:B5:37:92:D5:20:16:9B:CE:28:0C:3D:D8:6F:83:76:EC:63
Certificate issuer: /CN=480aaeb53792d520169bce280c3dd86f8376ec63
Certificate serial: 019D28BB3F4293C342FE4A7A78DF0BF5C9D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAqutTeS1SAWm84oDD3Yb4N27GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 06:00:53 +0000
Manifest this update: Thu 26 Mar 2026 06:00:53 +0000
Manifest next update: Fri 27 Mar 2026 06:00:53 +0000
Files and hashes: 1: 9tvrLOuk22Ddo6KLDQ-Y3Q9IR10.roa (hash: Rswszywt1klmr2sfCBkXn3BlffpWK6hyUCobDy1eOZ0=)
2: SAqutTeS1SAWm84oDD3Yb4N27GM.crl (hash: utuEqhOZ5/3iCzApt+oUjt1lRNtOU29101xO827etck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAqutTeS1SAWm84oDD3Yb4N27GM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:3f:42:93:c3:42:fe:4a:7a:78:df:0b:f5:c9:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480aaeb53792d520169bce280c3dd86f8376ec63
Validity
Not Before: Mar 26 06:00:53 2026 GMT
Not After : Mar 27 06:00:53 2026 GMT
Subject: CN=5e3ba8d0d192b37ed4bf2caff000bf46c9b7f5e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:29:37:43:16:ad:d4:7f:d8:a6:cb:93:22:16:
c3:7b:60:46:94:18:b9:39:9b:7f:8a:61:e3:9a:09:
07:ac:7e:7c:d7:88:ea:0b:6a:71:b8:5d:8a:4a:17:
0a:b4:f7:01:f3:e5:de:0b:8d:45:5a:d2:3d:56:9a:
a0:74:91:9f:62:bf:76:89:5c:73:30:8d:e8:b4:18:
13:40:60:ee:1c:6f:b6:7e:88:18:59:c8:9c:b9:f5:
41:f2:21:d3:12:67:49:a4:30:dd:8a:00:4d:bf:b5:
33:b0:5c:53:aa:b5:af:77:42:47:47:41:bd:cb:0d:
1c:97:b9:85:5d:d7:d2:68:54:ee:7f:69:6a:37:94:
f0:af:c3:cf:8d:8a:3a:68:87:ff:c9:1a:1b:4b:71:
62:4e:19:20:8d:91:3d:4c:b9:5d:47:40:ba:57:a0:
9b:2a:14:28:80:8d:9e:3c:8b:ac:3f:21:df:42:68:
85:68:90:f7:a0:b2:21:14:99:1d:08:d9:5a:d4:d3:
18:51:f1:11:76:cf:aa:3d:ef:a1:9d:32:b5:68:28:
8b:f5:a7:98:30:01:70:86:b8:f5:ce:4d:fa:a0:28:
40:7a:5d:77:0f:48:49:f0:a2:c8:33:b0:2b:e2:b2:
bb:fd:2f:bd:3f:6c:ba:07:23:ff:35:01:6e:3a:66:
9f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:3B:A8:D0:D1:92:B3:7E:D4:BF:2C:AF:F0:00:BF:46:C9:B7:F5:E3
X509v3 Authority Key Identifier:
keyid:48:0A:AE:B5:37:92:D5:20:16:9B:CE:28:0C:3D:D8:6F:83:76:EC:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAqutTeS1SAWm84oDD3Yb4N27GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:bc:65:d3:48:84:d4:b8:c0:76:19:72:e4:28:59:e4:da:3b:
f5:59:c1:2e:d9:e9:41:62:f6:37:55:2a:e8:5f:c5:a3:8a:e6:
ad:32:5d:4e:bf:7d:6c:b7:46:ca:b0:ed:92:cc:70:f9:88:80:
66:f4:ef:d0:8d:b8:9a:e4:66:6a:27:e3:f4:c4:0a:a2:fb:15:
ed:07:22:4f:aa:bf:7f:11:f0:cd:38:c6:fd:b7:5a:97:fe:37:
b7:a8:97:af:26:a8:8f:e5:1d:dd:15:1f:21:b5:9e:c4:1e:0c:
a5:0d:b7:82:11:ed:65:31:27:94:78:93:51:cc:dc:f2:4e:f4:
97:87:ae:e7:23:38:eb:85:24:2a:bb:f9:13:49:3e:cf:3d:e9:
ae:ab:cb:2c:dc:af:d8:68:01:61:d4:4d:2f:32:04:cf:97:8d:
e2:92:8f:eb:26:51:3e:aa:f6:0d:f1:8a:a0:82:6a:6d:a3:dd:
7f:51:4e:77:24:b4:0e:9a:4d:94:e4:9e:b2:9b:72:65:06:32:
8d:42:7c:df:7d:8e:fb:bf:dc:d9:f6:ef:08:d7:9f:a8:5c:e5:
b4:ff:58:17:a4:70:94:48:51:e7:c1:8b:c6:99:a2:04:12:fc:
fb:e7:d3:2e:2c:57:6f:54:61:51:2b:a7:49:15:12:17:e7:80:
64:b9:91:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:51:57 2026 by rpki-client