Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/51b2ce-09aa-438d-9907-101b9e80e359/1/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.mft
File: SX7eN_KfQKcbHLKl_OUm6KPQ5eE.mft (raw, json)
Hash identifier: OAfUPVlrh9bsoMGd9l4tRtOgXH6j0+4qIHS0MzWUxpg=
Subject key identifier: BA:B8:04:13:0D:5C:14:A6:E7:45:82:CD:4A:04:60:E8:8F:D5:BB:9B
Authority key identifier: 49:7E:DE:37:F2:9F:40:A7:1B:1C:B2:A5:FC:E5:26:E8:A3:D0:E5:E1
Certificate issuer: /CN=497ede37f29f40a71b1cb2a5fce526e8a3d0e5e1
Certificate serial: 019D254C3C04F031D2971A2A9B2E5AAC3CC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/51b2ce-09aa-438d-9907-101b9e80e359/1/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.mft
Manifest number: 4F
Signing time: Wed 25 Mar 2026 14:00:46 +0000
Manifest this update: Wed 25 Mar 2026 14:00:46 +0000
Manifest next update: Thu 26 Mar 2026 14:00:46 +0000
Files and hashes: 1: FsZqIeW01RfaEApHUES0cB5ebyI.roa (hash: VCT9mMAi/Cn+09fCPNJ/y3SBfVeioqWO5E+XzvEA3FA=)
2: KfCvlR8vu0qoz40NwG_o9ivr0L0.asa (hash: 28KOqwH8/su8P6T5Q9zLgm8jJkLHgtcR+NYZ8WhN7qk=)
3: SX7eN_KfQKcbHLKl_OUm6KPQ5eE.crl (hash: juqjPwKtHjX+2PKfGBPiS9cXh/NpODUvVmW6+hMoN/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/51b2ce-09aa-438d-9907-101b9e80e359/1/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/51b2ce-09aa-438d-9907-101b9e80e359/1/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:3c:04:f0:31:d2:97:1a:2a:9b:2e:5a:ac:3c:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=497ede37f29f40a71b1cb2a5fce526e8a3d0e5e1
Validity
Not Before: Mar 25 14:00:46 2026 GMT
Not After : Mar 26 14:00:46 2026 GMT
Subject: CN=bab804130d5c14a6e74582cd4a0460e88fd5bb9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:77:20:07:6e:0b:44:83:73:0e:db:f1:dd:63:
00:fb:cb:84:2f:ef:13:26:dd:64:64:ff:99:0d:5e:
67:ae:7c:30:f9:3d:75:a2:f2:c2:c0:39:b8:7f:09:
71:84:80:3a:db:de:7c:35:d8:ab:a6:48:c2:6c:46:
1a:b5:58:f1:7f:20:52:ba:d5:f5:51:31:22:2a:57:
23:6d:6d:1d:4e:d3:5d:52:27:af:23:ae:98:1d:f1:
e9:47:44:62:d1:fa:e7:79:2d:5f:d0:39:33:b2:67:
f6:c8:d4:2e:49:34:80:0d:b2:91:56:4a:15:91:4f:
79:8e:f5:ee:85:de:6c:ae:6f:1c:b8:66:2c:3c:5e:
5d:01:f9:81:9c:bd:66:07:e3:d6:ee:bc:a1:34:67:
8c:7a:c9:4e:14:c2:82:e6:e3:5d:1e:a2:e7:63:c0:
f6:35:42:ba:f9:cf:0e:eb:a0:08:f7:22:6f:8e:bd:
17:e9:7b:96:06:9b:b5:7e:6c:af:ab:1a:79:1c:28:
8e:5c:8a:05:fb:0a:5a:bd:5d:50:59:b9:e8:c2:94:
1b:ab:59:47:94:80:13:34:64:95:f3:8a:d2:73:cb:
6b:34:e6:d5:4c:29:af:59:7f:f7:98:68:1c:b7:60:
26:3e:2f:16:14:56:5b:c4:8c:62:fb:f6:77:fc:b9:
6e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B8:04:13:0D:5C:14:A6:E7:45:82:CD:4A:04:60:E8:8F:D5:BB:9B
X509v3 Authority Key Identifier:
keyid:49:7E:DE:37:F2:9F:40:A7:1B:1C:B2:A5:FC:E5:26:E8:A3:D0:E5:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/51b2ce-09aa-438d-9907-101b9e80e359/1/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/51b2ce-09aa-438d-9907-101b9e80e359/1/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:95:3c:41:37:b6:7d:ca:cd:ab:53:2c:96:f4:88:1f:a3:a6:
5f:e0:6e:4f:a3:06:73:8e:7c:a8:86:7a:ae:ff:24:84:e6:9a:
7b:7e:61:81:3a:99:df:d0:b6:a4:d9:2b:a1:c2:6b:2f:ff:7a:
46:38:fd:3f:f1:52:81:bc:a6:bf:14:fe:e1:42:e0:13:2a:77:
01:4b:10:18:a5:6f:c3:4a:40:cc:0d:4c:d6:d2:c1:17:b3:3c:
e1:af:97:23:02:aa:b7:f8:31:72:d9:a5:e5:d6:c2:7b:d9:d4:
ce:36:bb:22:c3:71:22:84:26:56:92:d4:d4:2c:ff:70:69:74:
03:c8:8c:00:69:d7:e2:18:c1:4d:e1:e7:23:a4:fc:7d:65:dc:
a5:a9:eb:3d:62:23:93:0a:15:29:b5:bc:8a:f2:d8:bc:bb:cc:
d3:58:a2:ca:81:b9:f7:e7:f1:75:18:7e:65:c4:0b:20:e4:38:
b4:04:76:2b:bb:9d:fa:1a:62:0d:bc:56:a7:69:45:52:06:8c:
e4:79:64:f4:63:7a:33:ab:93:44:67:1d:35:83:ab:29:f7:27:
7d:c8:01:b7:87:50:fb:b6:d7:a2:48:25:68:6f:ba:11:6d:4d:
2b:c1:2a:31:a6:c8:e6:57:0a:04:25:51:9e:ae:23:8d:50:27:
12:6c:12:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:26:20 2026 by rpki-client