Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/727267-421a-404b-9523-7285814344f3/1/SACbRi9GjH0BDdZBirzzFxK-Qyc.mft
File: SACbRi9GjH0BDdZBirzzFxK-Qyc.mft (raw, json)
Hash identifier: Bqq8ypamJ89+BZ+5zqCYY5qFzAlEPXnkMq404vJMzWk=
Subject key identifier: C0:72:AC:F0:FA:F7:3D:16:BF:5E:9D:BE:B6:3A:22:53:13:BF:2C:68
Authority key identifier: 48:00:9B:46:2F:46:8C:7D:01:0D:D6:41:8A:BC:F3:17:12:BE:43:27
Certificate issuer: /CN=48009b462f468c7d010dd6418abcf31712be4327
Certificate serial: 019F8FEC58BD2BFCD286B39330E96490C406
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SACbRi9GjH0BDdZBirzzFxK-Qyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/727267-421a-404b-9523-7285814344f3/1/SACbRi9GjH0BDdZBirzzFxK-Qyc.mft
Manifest number: 05
Signing time: Thu 23 Jul 2026 17:00:58 +0000
Manifest this update: Thu 23 Jul 2026 17:00:58 +0000
Manifest next update: Fri 24 Jul 2026 17:00:58 +0000
Files and hashes: 1: QdmsIR_q76JEoiyIRUyIsIHre10.asa (hash: 5MqEaP2FsZvCce/Q2ZTtgOm7FxKQwr5pUd+B+FL4hhA=)
2: SACbRi9GjH0BDdZBirzzFxK-Qyc.crl (hash: t2wKwiIqsmY1WEM8Pnanm4XopOERIFIOJLaTDI1nYtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/727267-421a-404b-9523-7285814344f3/1/SACbRi9GjH0BDdZBirzzFxK-Qyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/727267-421a-404b-9523-7285814344f3/1/SACbRi9GjH0BDdZBirzzFxK-Qyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SACbRi9GjH0BDdZBirzzFxK-Qyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:58:bd:2b:fc:d2:86:b3:93:30:e9:64:90:c4:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48009b462f468c7d010dd6418abcf31712be4327
Validity
Not Before: Jul 23 17:00:58 2026 GMT
Not After : Jul 24 17:00:58 2026 GMT
Subject: CN=c072acf0faf73d16bf5e9dbeb63a225313bf2c68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e9:1c:7f:b0:3b:3f:cd:3d:68:a1:e1:e9:7c:
f0:d2:bb:ed:0b:fe:80:bf:68:55:19:ed:8a:b7:60:
1e:27:fb:e1:a4:f1:80:b9:d8:95:c1:f6:9f:d6:e8:
a4:17:40:79:07:ad:59:74:a0:73:8a:b0:ae:73:77:
c9:cd:46:65:6c:c7:7b:b7:00:50:18:bb:f6:5e:d3:
4c:5d:c7:c7:71:bb:ba:b1:79:67:93:b4:ca:5b:62:
4f:1f:2e:03:e4:de:6c:31:30:fc:e6:f8:c6:e3:c9:
b7:c2:a0:0d:67:9a:15:2d:f3:00:f2:09:2e:52:cc:
b8:23:c4:91:6c:36:a2:2e:4e:2c:72:a5:00:e4:e9:
43:e3:d0:2f:38:34:6b:65:2a:09:ec:50:c2:ab:53:
44:44:ab:57:00:44:d7:de:f9:20:7e:45:b7:6f:19:
a5:a9:c5:06:c8:22:6a:e6:aa:b0:c0:69:f5:4e:49:
a5:1f:96:04:b1:e1:e5:f9:64:19:b5:69:3a:eb:1d:
b9:bc:06:d1:29:9a:41:c8:44:64:c2:82:2d:1e:b4:
db:2f:e9:6e:f7:fc:37:d8:88:96:77:7d:9e:76:78:
41:3e:df:fb:7b:f6:74:c0:f0:ea:3c:6a:d7:a4:0d:
41:ca:be:e3:a5:80:3b:4c:1f:31:dc:0f:f4:53:9d:
d9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:72:AC:F0:FA:F7:3D:16:BF:5E:9D:BE:B6:3A:22:53:13:BF:2C:68
X509v3 Authority Key Identifier:
keyid:48:00:9B:46:2F:46:8C:7D:01:0D:D6:41:8A:BC:F3:17:12:BE:43:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SACbRi9GjH0BDdZBirzzFxK-Qyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/727267-421a-404b-9523-7285814344f3/1/SACbRi9GjH0BDdZBirzzFxK-Qyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/727267-421a-404b-9523-7285814344f3/1/SACbRi9GjH0BDdZBirzzFxK-Qyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:af:76:f6:9f:4d:63:2e:eb:32:9a:d2:78:28:b0:da:d0:33:
09:1a:a4:0f:0c:4a:36:ec:d8:c6:bf:ff:a8:9e:23:db:a6:ad:
1a:79:d6:cd:6c:00:53:87:20:c6:30:c8:ef:80:56:a9:ed:54:
c0:43:8f:10:f4:79:ac:22:5a:58:03:54:ae:7e:3a:e9:c7:a5:
51:71:89:82:77:1b:8f:6e:aa:8b:07:f4:a0:40:30:41:4a:e6:
8c:9f:af:56:ea:bc:c9:f8:ea:1d:5c:bc:1d:7f:25:f3:40:dc:
47:a3:cb:aa:b7:cc:3d:e0:57:cf:41:26:5a:62:f3:4c:5d:1c:
6e:b4:aa:ae:df:e1:e8:c1:6c:a2:13:02:89:85:b4:79:aa:16:
ae:c2:a6:84:dd:ac:ed:38:68:d5:45:07:d9:4e:74:37:a7:2f:
47:e4:d8:fc:fe:e7:a8:a7:75:db:78:b7:b8:e1:ed:55:db:3c:
89:f3:12:29:f3:ac:c1:47:d5:89:15:53:fd:b8:fa:c4:2c:7b:
44:fc:ca:6c:bd:6b:13:e0:18:b1:24:30:ef:62:b0:10:24:c0:
a1:33:63:74:8f:35:7d:c0:84:a3:62:3a:62:4c:91:de:18:27:
75:ff:32:a7:fe:a2:49:fd:a9:1f:4a:b5:1b:7a:47:eb:08:45:
cb:b2:8c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:00:16 2026 by rpki-client