Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/SBcWctU_34slN3ZPU342Wlknva8.mft
File: SBcWctU_34slN3ZPU342Wlknva8.mft (raw, json)
Hash identifier: qCnlNH4orzdwMxgdMTuqJ2QwBTYS0aesidhwsiok3dY=
Subject key identifier: 26:73:1A:F8:F1:EE:BB:CC:92:78:E9:2D:58:CF:38:EB:E4:B1:2C:60
Authority key identifier: 48:17:16:72:D5:3F:DF:8B:25:37:76:4F:53:7E:36:5A:59:27:BD:AF
Certificate issuer: /CN=48171672d53fdf8b2537764f537e365a5927bdaf
Certificate serial: 019D273AB7B5662E30C082DE084AA797063B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBcWctU_34slN3ZPU342Wlknva8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/SBcWctU_34slN3ZPU342Wlknva8.mft
Manifest number: 1752
Signing time: Wed 25 Mar 2026 23:00:52 +0000
Manifest this update: Wed 25 Mar 2026 23:00:52 +0000
Manifest next update: Thu 26 Mar 2026 23:00:52 +0000
Files and hashes: 1: SBcWctU_34slN3ZPU342Wlknva8.crl (hash: JlZeOdhsRn84oXCbGYj25qAVcnQmSipUjeFnD6hSZYg=)
2: xJL3LbO6FjEYDhx-s72k1kI1pHg.roa (hash: REmb3R66F69GLpJdvueLEfiFvDg0KDHC5cx7Z3ZyPQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/SBcWctU_34slN3ZPU342Wlknva8.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/SBcWctU_34slN3ZPU342Wlknva8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SBcWctU_34slN3ZPU342Wlknva8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:b7:b5:66:2e:30:c0:82:de:08:4a:a7:97:06:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48171672d53fdf8b2537764f537e365a5927bdaf
Validity
Not Before: Mar 25 23:00:52 2026 GMT
Not After : Mar 26 23:00:52 2026 GMT
Subject: CN=26731af8f1eebbcc9278e92d58cf38ebe4b12c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:09:7e:8d:2a:c7:d2:33:ce:65:ed:6e:6c:fe:
0a:6e:58:34:5e:4c:46:53:41:54:2a:0a:9d:4e:fa:
ef:4c:b6:9f:41:69:e9:b7:b6:de:f7:4d:6c:d5:f4:
b9:8e:ce:c3:49:48:85:d9:9c:3c:83:bc:2f:38:45:
a0:01:19:85:00:91:0b:a5:41:2b:1e:2d:e7:19:50:
30:f6:6a:ed:44:d8:5c:95:46:f6:86:ae:07:1c:4e:
48:8e:1c:3a:11:ad:32:8a:fe:b9:10:a8:e5:1a:66:
43:3b:06:2f:6c:b9:5b:a1:d7:54:dc:e1:3d:d9:ee:
04:90:9d:7c:5d:83:d0:7a:70:02:fe:a6:35:54:2a:
af:f9:0b:ad:eb:6f:7d:ab:98:c6:ba:d5:e4:45:62:
20:65:78:f0:8d:d2:bb:8e:ec:b4:e4:1b:bb:f0:ff:
1f:e6:56:cc:f0:71:66:28:87:56:49:4f:6d:d0:87:
c3:22:96:f9:9b:61:97:1b:72:81:1d:ea:11:f8:69:
93:be:20:67:4c:d4:0a:1a:5b:93:c8:67:79:86:de:
e3:01:8a:2f:58:de:5c:af:91:02:72:19:da:ac:02:
35:d9:6a:76:16:9b:46:34:14:68:ca:99:19:6b:bf:
c7:fb:bf:f9:7f:bb:14:af:bd:c6:9f:34:54:08:db:
8b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:73:1A:F8:F1:EE:BB:CC:92:78:E9:2D:58:CF:38:EB:E4:B1:2C:60
X509v3 Authority Key Identifier:
keyid:48:17:16:72:D5:3F:DF:8B:25:37:76:4F:53:7E:36:5A:59:27:BD:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBcWctU_34slN3ZPU342Wlknva8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/SBcWctU_34slN3ZPU342Wlknva8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/SBcWctU_34slN3ZPU342Wlknva8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:5c:3b:a3:b9:bc:84:4b:be:51:d8:66:a3:7e:da:61:56:cb:
78:bd:ba:f1:f4:f0:c8:bf:b8:a8:ec:bb:7d:c9:63:f1:90:9c:
b9:36:1d:a6:9b:71:71:87:62:a0:f2:e3:a3:91:29:6b:90:5f:
bb:d7:81:37:81:16:ec:5e:4d:9e:cc:47:42:1b:67:d5:89:d6:
27:95:b5:e7:cf:7a:ec:32:bb:62:da:13:2b:ff:0d:fa:72:6b:
14:19:25:df:7e:98:a0:7b:a7:40:ce:38:da:f6:e2:95:0e:f8:
54:9b:0a:b6:d0:17:86:59:91:27:7b:68:0c:42:ff:f2:9f:11:
d4:76:bd:a2:c3:07:37:a1:dc:5e:45:aa:87:cb:a8:5d:47:26:
54:9b:e8:bb:1b:5c:6a:4b:d3:0c:70:1f:3d:5d:51:7f:c3:79:
e6:11:a0:d6:4b:23:4b:c8:c6:4a:d9:79:38:e0:ec:30:56:36:
d0:2e:7c:dc:e3:3e:d3:ec:58:33:be:94:c1:b5:32:68:f9:8b:
c4:19:93:b8:b7:73:9f:9e:98:80:ab:1b:1a:9c:20:89:be:af:
8b:1f:e9:66:d8:26:67:fa:57:89:dc:5a:7b:0e:b5:78:7e:ac:
9c:8e:63:54:ae:92:71:a2:96:fe:3f:60:ed:88:0e:40:2a:2d:
18:3f:bb:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:10:13 2026 by rpki-client