Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/2a72ee-ec1f-40c6-ad9d-5a4df896fc3e/1/SAtOZTD1jbM45B1DTlwkjri0nrU.mft
File: SAtOZTD1jbM45B1DTlwkjri0nrU.mft (raw, json)
Hash identifier: RVWu1aPMc7VW9S8tQWea2VKZOlvMGCce52kl+s4E7tY=
Subject key identifier: 51:FC:13:71:B5:B5:81:C9:6D:18:85:D4:1B:93:ED:5E:8B:B4:AF:F9
Authority key identifier: 48:0B:4E:65:30:F5:8D:B3:38:E4:1D:43:4E:5C:24:8E:B8:B4:9E:B5
Certificate issuer: /CN=480b4e6530f58db338e41d434e5c248eb8b49eb5
Certificate serial: 019D2696048EC5457E29E4571FC934E554AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAtOZTD1jbM45B1DTlwkjri0nrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/2a72ee-ec1f-40c6-ad9d-5a4df896fc3e/1/SAtOZTD1jbM45B1DTlwkjri0nrU.mft
Manifest number: 0FE5
Signing time: Wed 25 Mar 2026 20:00:58 +0000
Manifest this update: Wed 25 Mar 2026 20:00:58 +0000
Manifest next update: Thu 26 Mar 2026 20:00:58 +0000
Files and hashes: 1: 4U4MbiSV6kmpKfL8B6L6VKqblTY.roa (hash: X9YwPhP7oKQF4wZpCPI7kZ8nWJ6qTuSADd5JFvye0ys=)
2: EyNcY5Z8gMCGSsUlurZ-vzlzRMk.roa (hash: WB7iGBNBwcsdOHeiUNEfNJNFo1bIzRxEZw4wIprpZOA=)
3: HlyQkRvIajic21yQ3EdpgC5Yqgg.roa (hash: DEi+PcIqXLpiPBIpLE3KgS4ClyQCr0Vig+hsaKKtuiM=)
4: SAtOZTD1jbM45B1DTlwkjri0nrU.crl (hash: VcCrpR9hxUleIbatNYQdn0y3pIQFrx6dLFwqddi5ioY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/2a72ee-ec1f-40c6-ad9d-5a4df896fc3e/1/SAtOZTD1jbM45B1DTlwkjri0nrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/2a72ee-ec1f-40c6-ad9d-5a4df896fc3e/1/SAtOZTD1jbM45B1DTlwkjri0nrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAtOZTD1jbM45B1DTlwkjri0nrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:04:8e:c5:45:7e:29:e4:57:1f:c9:34:e5:54:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480b4e6530f58db338e41d434e5c248eb8b49eb5
Validity
Not Before: Mar 25 20:00:58 2026 GMT
Not After : Mar 26 20:00:58 2026 GMT
Subject: CN=51fc1371b5b581c96d1885d41b93ed5e8bb4aff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:30:d4:03:30:34:c9:2b:be:44:d8:de:db:b8:
88:1b:d6:7e:e2:24:24:5c:70:23:37:a2:96:22:92:
85:73:80:b8:ac:a4:a4:b5:71:25:a6:85:8f:13:62:
67:6a:54:14:53:56:9a:08:51:09:5c:b0:ed:22:73:
2d:10:76:d4:8d:7f:4c:09:7f:90:58:ee:ec:47:86:
26:59:6c:1b:ea:4a:43:5f:80:3f:5c:c1:92:69:57:
fb:28:8c:e0:1a:11:3b:e7:6d:5a:69:46:86:41:c2:
06:00:0b:42:78:23:14:1b:e7:9a:44:30:f8:f6:6c:
06:94:f3:cb:27:5f:21:f2:25:41:d7:70:a0:5e:9d:
68:dc:e8:23:e9:12:6f:1c:af:9e:ad:f7:08:f2:2e:
e7:00:ed:24:c2:ef:5e:e1:90:18:89:0e:31:4d:86:
20:62:15:d8:75:97:13:5e:85:94:1d:e1:1b:2f:6a:
e9:ed:f2:bb:44:be:32:16:af:56:42:ba:af:b7:9f:
95:af:61:e1:c7:84:fb:d6:50:fe:4c:bb:5b:6d:3f:
1f:29:89:c3:a3:d0:a5:80:19:9a:65:0a:65:2f:84:
84:62:97:2e:8f:e6:f0:d3:47:48:5d:f6:76:d4:b3:
c5:88:a8:50:ee:76:28:00:aa:7c:77:9f:47:41:20:
89:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:FC:13:71:B5:B5:81:C9:6D:18:85:D4:1B:93:ED:5E:8B:B4:AF:F9
X509v3 Authority Key Identifier:
keyid:48:0B:4E:65:30:F5:8D:B3:38:E4:1D:43:4E:5C:24:8E:B8:B4:9E:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAtOZTD1jbM45B1DTlwkjri0nrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2a72ee-ec1f-40c6-ad9d-5a4df896fc3e/1/SAtOZTD1jbM45B1DTlwkjri0nrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2a72ee-ec1f-40c6-ad9d-5a4df896fc3e/1/SAtOZTD1jbM45B1DTlwkjri0nrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:2c:38:cf:c0:5b:10:33:30:bd:95:80:6b:45:66:d0:4f:02:
d1:95:6e:5c:ed:8e:8c:b6:fd:fd:21:48:94:1a:ef:dd:04:e1:
5f:55:3e:bd:75:bd:67:07:4f:db:6c:b5:69:e2:67:04:9d:4e:
b2:40:03:38:3f:c3:ef:78:ac:1f:7b:1e:ec:dd:1d:b7:14:0b:
a9:50:26:a7:ff:04:6f:c9:59:af:6f:ef:7f:0f:1e:67:1b:7f:
e3:76:da:9a:96:77:7b:79:4b:4f:8b:56:4b:af:f2:a9:80:cf:
9c:09:c8:bb:d6:4c:97:15:e5:b3:ec:78:01:0c:64:2d:96:50:
81:e9:97:5c:27:66:20:d9:9e:29:7b:a1:39:80:88:bb:10:d5:
e0:ea:db:1b:ca:21:71:c7:de:0e:52:7c:d3:2c:7f:89:05:52:
bc:7c:3e:d9:09:53:3f:52:65:83:1c:a6:97:eb:b4:a0:98:7b:
6b:69:11:0f:67:1d:fb:4c:bd:7e:3d:f5:63:5a:d6:c9:7a:40:
cd:d7:f6:35:5e:21:7a:29:1d:fa:57:80:25:ed:b7:f4:30:1e:
72:22:63:13:20:9b:89:31:85:08:6e:4f:dd:fb:30:78:35:a6:
b4:3e:9c:19:df:42:6a:53:d8:98:b1:5a:4d:de:1e:27:fa:8a:
2b:64:e6:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:51:19 2026 by rpki-client