Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft
File: Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft (raw, json)
Hash identifier: BWg0R6feuJb0CCE3shkfI2Wk/rhvxc7oueeA9MVXb8c=
Subject key identifier: 07:39:9C:36:79:83:D4:6D:47:A3:89:E1:C5:A8:FD:A3:83:8E:F4:AD
Authority key identifier: 49:DE:57:8D:AC:79:2D:95:E2:17:D9:87:1E:04:F6:69:73:BB:7E:B0
Certificate issuer: /CN=49de578dac792d95e217d9871e04f66973bb7eb0
Certificate serial: 019D284D36DDB9AAFAE80B0611A78ACF2953
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sd5Xjax5LZXiF9mHHgT2aXO7frA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft
Manifest number: 08B9
Signing time: Thu 26 Mar 2026 04:00:42 +0000
Manifest this update: Thu 26 Mar 2026 04:00:42 +0000
Manifest next update: Fri 27 Mar 2026 04:00:42 +0000
Files and hashes: 1: Sd5Xjax5LZXiF9mHHgT2aXO7frA.crl (hash: QchsqtbrX0FmnLb1HzEO8J19W0ELDV6QvUKIuf2tT6w=)
2: rGGWcglvMeSsvlJBXs2-o4-N8sw.roa (hash: xVXE+Qdew3w2sfea2qvXrMLGeuW+7MTsszSevinIA7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sd5Xjax5LZXiF9mHHgT2aXO7frA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:36:dd:b9:aa:fa:e8:0b:06:11:a7:8a:cf:29:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49de578dac792d95e217d9871e04f66973bb7eb0
Validity
Not Before: Mar 26 04:00:42 2026 GMT
Not After : Mar 27 04:00:42 2026 GMT
Subject: CN=07399c367983d46d47a389e1c5a8fda3838ef4ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f0:ba:3b:10:4b:40:e4:e7:0c:3e:3c:22:7b:
5c:e3:24:89:2a:70:61:12:1c:c1:02:bc:5b:d3:c1:
55:a7:b2:71:a4:43:56:d5:78:e4:e1:d7:65:37:98:
47:58:65:a0:b5:05:cb:6f:bd:3a:1c:ed:52:1c:47:
8f:ee:04:07:4b:25:f8:01:d0:f2:e0:4f:13:6b:83:
87:5d:f4:77:cb:b3:41:ba:81:35:bf:be:e1:39:be:
33:96:de:c9:ff:f9:a3:d4:3a:9a:41:ea:4a:51:d2:
6a:01:71:4a:88:94:e3:0f:d5:73:a8:18:a3:82:1f:
a1:28:80:31:b5:19:62:05:b3:a8:b5:36:1a:26:21:
cb:31:8c:e6:83:16:c1:92:f6:ab:1a:0b:c8:6d:c8:
ec:da:32:ff:83:c0:f7:b1:aa:35:ed:fa:14:3a:ce:
aa:fd:10:33:7f:3e:4e:43:f7:23:15:ff:1b:4d:7c:
e3:92:f0:ba:65:09:65:16:42:bb:a9:b6:ca:a7:d5:
14:44:1b:dc:24:16:18:56:77:04:b0:8a:e1:ef:9a:
72:3d:fe:60:72:30:4c:46:af:0d:5c:de:24:1b:bf:
52:87:be:1a:a1:a2:3b:1a:e9:f6:2b:34:04:9a:75:
ff:93:0b:b9:84:e4:6e:86:d5:64:c5:ae:a3:44:dd:
f0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:39:9C:36:79:83:D4:6D:47:A3:89:E1:C5:A8:FD:A3:83:8E:F4:AD
X509v3 Authority Key Identifier:
keyid:49:DE:57:8D:AC:79:2D:95:E2:17:D9:87:1E:04:F6:69:73:BB:7E:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sd5Xjax5LZXiF9mHHgT2aXO7frA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:03:30:b3:a5:fd:99:04:9d:24:40:09:cb:14:ae:35:78:61:
44:0b:f2:6a:cf:ac:f3:08:23:57:44:d4:b1:6c:9a:67:28:d5:
8d:23:06:1d:5b:b5:da:a9:ea:f3:69:5f:98:35:e6:16:86:4c:
64:07:b7:84:51:a9:b4:aa:37:a7:30:2e:89:00:c5:0d:2a:6e:
f7:f4:59:79:5a:15:39:69:a4:8f:98:7c:9f:61:ed:83:31:91:
07:55:dd:67:33:d3:6e:a8:aa:91:df:62:ae:98:9e:c8:d2:72:
22:a6:83:ed:67:66:48:f6:46:8d:fc:64:f8:b7:b1:16:4e:8a:
e5:6b:0d:0c:19:2c:2e:02:d4:a6:f1:0d:4c:65:6c:3a:24:66:
78:64:40:f4:88:aa:7f:3a:da:16:f2:56:b0:f1:e2:f3:f2:3e:
34:27:9f:6e:06:9f:dc:1d:5e:b3:e8:d4:e1:1e:57:f0:8c:3d:
9f:ca:4a:03:ef:78:68:39:9a:f1:d7:06:9f:96:bc:4e:c3:33:
f3:fb:0d:0f:e1:45:3b:1b:1e:e8:80:a9:b1:da:9c:47:06:28:
ec:c2:40:bb:4b:23:24:1b:ff:01:d8:25:8d:8a:dc:94:48:fa:
3a:5a:b9:b9:6b:24:cd:53:9d:ed:0a:1b:8c:dd:f0:25:cc:f6:
9c:9e:12:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:56:36 2026 by rpki-client