Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.mft
File: SepQocYggnYq_aAH1vyLS9sFdJ8.mft (raw, json)
Hash identifier: MDaTNXa5ytH76arzlnM82YuWoUApc7pG9gKnAJFICr8=
Subject key identifier: 69:69:FF:72:04:DF:4F:28:C4:11:EB:C9:B5:81:18:71:34:8B:2F:B8
Authority key identifier: 49:EA:50:A1:C6:20:82:76:2A:FD:A0:07:D6:FC:8B:4B:DB:05:74:9F
Certificate issuer: /CN=49ea50a1c62082762afda007d6fc8b4bdb05749f
Certificate serial: 019D29975B0BA63C3058F647F60274BF5370
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SepQocYggnYq_aAH1vyLS9sFdJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 10:01:18 +0000
Manifest this update: Thu 26 Mar 2026 10:01:18 +0000
Manifest next update: Fri 27 Mar 2026 10:01:18 +0000
Files and hashes: 1: PCmfaBCDc6kdDFKOLkKdXE8InlY.roa (hash: ZpImK0PiLtizwaLw2fhTrlKvfw3ZfWhio2/P51B+d/A=)
2: RwAyPd51yPKFVoNHbXXQGuR7_EY.roa (hash: SJOa0Y57+2jyYSq2obqvHcjbEVfI5zAybNhvZJSsELU=)
3: SepQocYggnYq_aAH1vyLS9sFdJ8.crl (hash: aFmJilfTO8zCu9E9spizkVFqJFeupf0QgUZJKb88Mv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SepQocYggnYq_aAH1vyLS9sFdJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:5b:0b:a6:3c:30:58:f6:47:f6:02:74:bf:53:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49ea50a1c62082762afda007d6fc8b4bdb05749f
Validity
Not Before: Mar 26 10:01:18 2026 GMT
Not After : Mar 27 10:01:18 2026 GMT
Subject: CN=6969ff7204df4f28c411ebc9b5811871348b2fb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:72:74:f9:91:60:c7:3e:5e:33:c9:6d:8a:dd:
96:12:24:28:a7:58:8f:63:12:cf:e0:93:72:95:0d:
62:95:e2:81:ec:1d:e8:f6:2a:b2:a4:4c:8e:2d:5e:
0a:a5:f2:54:20:40:cf:6d:dc:64:8a:9a:df:18:fc:
86:0d:87:a8:a8:82:c6:66:68:f5:22:22:88:5d:b7:
65:c2:31:8a:24:b4:62:90:e8:9c:e8:12:86:df:90:
4d:19:5b:26:09:ab:96:52:54:a3:73:f0:38:a9:f6:
da:58:8c:22:4d:4c:cb:05:b9:f6:34:51:ab:6c:ed:
01:a8:a8:1d:10:a4:a3:32:4f:7b:7e:be:b5:21:9b:
87:35:d3:03:08:ea:e7:f1:19:64:2c:6e:03:86:ab:
0c:0c:9a:49:34:2b:95:37:61:63:ee:fd:1f:48:64:
24:ae:53:31:43:d9:93:75:64:2a:d4:d7:56:14:cc:
60:c0:54:50:d2:c3:89:92:6c:02:a4:4b:59:b3:f5:
6d:8f:1b:70:54:46:c3:d8:16:56:29:c8:79:30:df:
6e:c6:6f:7f:93:f0:96:5d:3e:38:f4:4b:e0:cf:12:
04:65:32:59:11:2b:67:5e:65:84:22:d0:4b:20:45:
9c:b1:4f:83:b4:bd:c9:b3:64:06:f0:8d:45:12:b0:
49:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:69:FF:72:04:DF:4F:28:C4:11:EB:C9:B5:81:18:71:34:8B:2F:B8
X509v3 Authority Key Identifier:
keyid:49:EA:50:A1:C6:20:82:76:2A:FD:A0:07:D6:FC:8B:4B:DB:05:74:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SepQocYggnYq_aAH1vyLS9sFdJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:7b:ee:5f:7e:ae:f6:9c:2a:12:43:68:c5:df:f8:5c:dc:38:
59:42:f2:aa:d1:81:9c:a7:3b:1c:d9:6d:6a:d0:61:7b:58:bd:
c1:9f:ef:db:96:7f:ce:03:99:54:ed:db:21:be:da:7a:22:2f:
d9:0b:86:e9:de:66:09:83:fd:ca:88:a8:f3:d8:88:89:8d:72:
76:69:80:4f:a3:ed:70:23:a1:80:a6:00:fa:05:1f:9c:4b:55:
bc:3f:46:29:f9:f1:d3:4a:bd:4e:8e:a4:72:0c:60:79:6b:57:
36:f8:c5:78:e4:de:b7:e4:bb:1d:0a:ef:82:94:08:40:b7:3b:
8a:20:56:c4:6e:ae:9e:60:96:ed:25:f7:6c:10:75:dd:18:06:
7b:6a:66:03:fe:ba:00:84:61:73:90:87:a3:76:f5:94:32:cf:
1d:7e:70:01:c5:89:a1:6d:8f:35:c7:77:5f:0e:32:b3:2e:6a:
c6:b4:b5:82:a8:cc:55:34:6c:1a:91:e3:c5:a5:9d:c4:d1:b6:
18:35:5f:6f:13:66:71:e5:38:6a:bb:7d:d1:2a:56:79:6e:33:
a8:f6:a1:c7:97:89:5b:47:e0:da:be:7d:e8:e2:c4:d6:73:10:
27:41:3f:42:ea:3e:e5:3e:c3:65:9b:0f:e6:df:dc:15:dc:2a:
36:a0:6a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:40:31 2026 by rpki-client