Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/727267-421a-404b-9523-7285814344f3/1/SACbRi9GjH0BDdZBirzzFxK-Qyc.mft
File: SACbRi9GjH0BDdZBirzzFxK-Qyc.mft (raw, json)
Hash identifier: loX3rHvaRTjo8rO46Muw8JhwvLrTF/qXD7WjQVsDgBc=
Subject key identifier: 8C:F2:A3:86:C1:EA:80:C3:23:CA:7B:63:DD:6C:C6:CE:12:3A:45:8E
Authority key identifier: 48:00:9B:46:2F:46:8C:7D:01:0D:D6:41:8A:BC:F3:17:12:BE:43:27
Certificate issuer: /CN=48009b462f468c7d010dd6418abcf31712be4327
Certificate serial: 01A1227842E08C2CE974FB2643C56791C3AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SACbRi9GjH0BDdZBirzzFxK-Qyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/727267-421a-404b-9523-7285814344f3/1/SACbRi9GjH0BDdZBirzzFxK-Qyc.mft
Manifest number: D6
Signing time: Fri 09 Oct 2026 21:01:09 +0000
Manifest this update: Fri 09 Oct 2026 21:01:09 +0000
Manifest next update: Sat 10 Oct 2026 21:01:09 +0000
Files and hashes: 1: RZ3tel9syTFm_FDnewv1LtVhGaE.asa (hash: ZEPAWlh3qs8XE61M2XfXTiI9UFnTCQ0FVnCjRwgvbfQ=)
2: SACbRi9GjH0BDdZBirzzFxK-Qyc.crl (hash: NNP6vydxUDBztttHEZRw+OUPVO9LF2m4hinDIdvE1ns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/727267-421a-404b-9523-7285814344f3/1/SACbRi9GjH0BDdZBirzzFxK-Qyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/727267-421a-404b-9523-7285814344f3/1/SACbRi9GjH0BDdZBirzzFxK-Qyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SACbRi9GjH0BDdZBirzzFxK-Qyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 17:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:22:78:42:e0:8c:2c:e9:74:fb:26:43:c5:67:91:c3:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48009b462f468c7d010dd6418abcf31712be4327
Validity
Not Before: Oct 9 21:01:09 2026 GMT
Not After : Oct 10 21:01:09 2026 GMT
Subject: CN=8cf2a386c1ea80c323ca7b63dd6cc6ce123a458e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5c:c2:72:cd:be:6c:04:06:71:af:8d:b7:d6:
41:5a:e2:32:d4:9d:90:0b:f1:8c:39:b9:83:0a:3e:
ff:84:5d:4f:a3:31:49:fa:c5:12:5d:5f:8c:69:00:
a3:af:a0:2c:33:df:90:d4:ef:c6:35:fe:98:90:55:
1a:58:ca:b2:73:1b:09:66:49:78:74:7a:9a:c0:b2:
d3:f8:e2:f1:82:44:7f:b9:90:a8:81:4f:90:7f:56:
e2:15:71:10:b5:38:1f:c0:a5:b7:4f:ff:e7:a3:38:
5a:04:d9:68:29:8a:e9:06:ab:a3:31:08:5a:37:2e:
99:5c:b6:b4:e0:14:26:81:6b:03:4f:1c:92:19:54:
de:1c:99:bb:ab:b5:a7:2c:4b:d0:15:77:dc:9b:f3:
5c:4c:9e:0a:ec:b6:d8:16:37:c5:4a:de:9a:99:a1:
29:6a:eb:d7:3e:dc:fc:3f:87:77:2c:24:9b:d7:fa:
d2:89:1c:11:84:19:1d:bf:89:1b:b0:c3:a6:ca:cd:
25:2e:46:91:ca:be:7e:5b:13:40:e8:18:34:56:a7:
97:eb:6a:22:29:19:ca:64:23:3d:85:b3:70:37:eb:
f2:6d:91:64:d2:c6:75:5a:74:f2:93:39:31:35:fe:
5a:5f:8c:de:14:7b:bf:b8:c3:77:ee:00:b2:5d:4b:
88:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F2:A3:86:C1:EA:80:C3:23:CA:7B:63:DD:6C:C6:CE:12:3A:45:8E
X509v3 Authority Key Identifier:
keyid:48:00:9B:46:2F:46:8C:7D:01:0D:D6:41:8A:BC:F3:17:12:BE:43:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SACbRi9GjH0BDdZBirzzFxK-Qyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/727267-421a-404b-9523-7285814344f3/1/SACbRi9GjH0BDdZBirzzFxK-Qyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/727267-421a-404b-9523-7285814344f3/1/SACbRi9GjH0BDdZBirzzFxK-Qyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:72:9e:17:9e:1f:7b:a8:17:1d:e7:59:41:26:52:e5:9b:0e:
28:d9:da:96:13:cd:e1:97:12:06:6e:2a:9c:c2:97:ef:09:2f:
aa:49:b1:d1:3d:96:02:09:64:ed:5d:d6:84:73:dc:8d:31:4c:
85:a4:6c:95:c7:52:b4:f6:ad:c6:91:8f:02:6e:38:0a:6b:f1:
66:66:52:32:d0:f5:e2:6c:25:83:c6:97:08:82:5a:e2:e4:68:
a0:1c:35:72:ba:64:bb:15:b2:8e:da:09:37:97:8b:3c:25:62:
18:d6:90:ea:18:bb:38:41:67:65:f8:e9:b1:f1:9d:0f:ee:a3:
a7:c3:ac:a5:21:a7:c5:a9:95:91:09:3e:c5:61:0e:81:44:5d:
54:86:58:9b:0b:78:ad:d1:f4:d2:8b:a4:6e:c6:41:ca:f6:77:
1d:79:d8:30:29:e9:17:65:98:6f:31:4f:4b:64:c7:41:ee:db:
f4:14:4a:ad:39:7e:20:13:f8:6f:b4:f7:bb:33:19:87:2d:72:
bc:a0:53:0a:0f:b0:f7:05:90:d3:bc:0f:bd:b8:72:93:46:ab:
56:ad:86:04:4d:5d:ae:72:78:73:dc:75:35:d2:93:1e:bc:90:
5b:f2:72:11:c0:2f:3c:a5:1d:a7:46:bd:7c:c3:12:b6:e0:df:
9f:5a:22:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 03:03:40 2026 by rpki-client