Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/SBaZwQuP-LkauQlAMU7pOyev3NY.mft
File: SBaZwQuP-LkauQlAMU7pOyev3NY.mft (raw, json)
Hash identifier: MhaJjLyKqFqdvVqXcKAjISMQg74eog94ePRtDN9WckY=
Subject key identifier: 28:9A:2D:93:B9:21:0B:68:D5:0D:32:42:1A:26:D4:27:35:5F:05:BA
Authority key identifier: 48:16:99:C1:0B:8F:F8:B9:1A:B9:09:40:31:4E:E9:3B:27:AF:DC:D6
Certificate issuer: /CN=481699c10b8ff8b91ab90940314ee93b27afdcd6
Certificate serial: 019D265F62D1314A4EE0F1E47EB0CEE4A272
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBaZwQuP-LkauQlAMU7pOyev3NY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/SBaZwQuP-LkauQlAMU7pOyev3NY.mft
Manifest number: 0ECA
Signing time: Wed 25 Mar 2026 19:01:18 +0000
Manifest this update: Wed 25 Mar 2026 19:01:18 +0000
Manifest next update: Thu 26 Mar 2026 19:01:18 +0000
Files and hashes: 1: N9xSU22seEj4Gls_lmMkrISNt44.roa (hash: 1sZ9jU2yxOzi9JbZQ0lqxHMOKu1AeSCdlUhQs7k0urM=)
2: SBaZwQuP-LkauQlAMU7pOyev3NY.crl (hash: SVf+hSYwdHxUTv9y+/mf0doRc7EH1XslJDv8mOFSnfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/SBaZwQuP-LkauQlAMU7pOyev3NY.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/SBaZwQuP-LkauQlAMU7pOyev3NY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SBaZwQuP-LkauQlAMU7pOyev3NY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:62:d1:31:4a:4e:e0:f1:e4:7e:b0:ce:e4:a2:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=481699c10b8ff8b91ab90940314ee93b27afdcd6
Validity
Not Before: Mar 25 19:01:18 2026 GMT
Not After : Mar 26 19:01:18 2026 GMT
Subject: CN=289a2d93b9210b68d50d32421a26d427355f05ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:63:12:70:83:c2:a6:65:47:1f:9b:99:9c:f0:
de:46:c5:45:ae:1b:f5:d0:b9:b1:4b:32:40:15:25:
1b:12:af:ad:4a:a6:71:5c:54:aa:fe:4a:bd:b5:fb:
4a:63:09:99:25:51:27:73:e9:5c:9c:d0:a6:21:75:
4b:89:05:33:bf:3a:d9:6c:af:fa:dd:af:13:e0:cf:
5a:2f:49:29:ab:3f:92:9f:3b:79:21:8b:59:90:4c:
a4:74:f7:a9:d7:2d:67:e9:ba:a7:f8:0b:2a:71:28:
90:14:9f:b5:de:ef:8b:ac:ac:2e:94:dd:5a:d0:0b:
1e:5a:f3:bc:c0:4b:1e:66:ad:a9:5a:2f:18:db:1d:
d7:32:2a:ea:2c:32:5f:cf:ad:3a:89:12:5d:da:42:
43:db:33:e7:a0:e1:b6:ab:c5:c3:44:84:62:7d:38:
8f:16:f9:3f:97:60:1c:c7:a3:08:9d:f5:cf:9e:20:
8a:58:93:d4:75:86:58:dc:c3:1c:ba:10:50:41:bd:
12:c3:52:d7:f2:ab:89:86:44:e2:e6:a9:78:84:69:
35:b5:ed:31:ec:db:95:b6:d4:66:6f:60:0e:08:d3:
e4:9e:a3:7b:45:62:71:4f:d2:47:17:ba:c9:40:a6:
9c:17:26:53:d5:d3:2a:83:48:28:3c:74:54:da:76:
a8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:9A:2D:93:B9:21:0B:68:D5:0D:32:42:1A:26:D4:27:35:5F:05:BA
X509v3 Authority Key Identifier:
keyid:48:16:99:C1:0B:8F:F8:B9:1A:B9:09:40:31:4E:E9:3B:27:AF:DC:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBaZwQuP-LkauQlAMU7pOyev3NY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/SBaZwQuP-LkauQlAMU7pOyev3NY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/SBaZwQuP-LkauQlAMU7pOyev3NY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:0e:39:f9:54:87:df:ec:f3:30:88:00:97:ef:3b:6e:ab:bd:
70:34:65:b2:da:69:8c:bb:66:5a:e1:f8:07:18:dd:9e:3e:42:
4a:2d:08:af:df:25:07:9b:66:a0:e0:32:47:0e:ef:b2:9f:32:
90:42:62:02:19:68:58:50:ee:9b:ea:f1:2f:27:ae:80:92:78:
e0:76:e3:ed:eb:7f:9a:6d:3f:ff:99:7c:55:08:26:cd:bc:90:
7d:3a:60:e4:41:2d:3d:04:38:f7:e4:0f:dc:2d:20:c4:6d:35:
d5:d8:25:f4:60:0c:b5:12:5d:ae:91:13:a3:de:4d:c6:2c:00:
af:be:73:ca:bd:bc:1e:b1:17:25:68:f9:86:5b:22:2e:48:91:
f7:9a:08:e3:0c:39:e9:19:31:a6:8a:16:28:24:96:ef:76:b5:
0b:c3:00:8f:7e:ce:c2:4c:ab:3c:92:a3:0f:92:04:f7:48:ef:
41:f1:81:8c:fd:83:ba:bd:5c:ea:ad:7c:82:ff:02:34:49:74:
be:69:ca:5e:22:63:a5:d0:8c:73:6b:2e:12:fe:ba:ea:4b:bd:
9a:75:66:c5:78:45:a1:15:60:2a:fd:a1:94:e4:bd:f2:58:0d:
85:82:56:bc:4b:a7:bb:9c:95:b1:27:b3:3b:c1:ec:8b:67:fc:
dd:46:15:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:21:45 2026 by rpki-client