Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.mft
File: SVbzCE2TEO-hvAfvMfk0spQfED4.mft (raw, json)
Hash identifier: I8ReHXbtu9nH/zlOtKDANElzNbdNoKPFiZRDZTQAGM4=
Subject key identifier: 36:15:AF:04:65:27:84:A6:14:17:E5:B6:CC:17:D5:E2:DC:31:BD:1D
Authority key identifier: 49:56:F3:08:4D:93:10:EF:A1:BC:07:EF:31:F9:34:B2:94:1F:10:3E
Certificate issuer: /CN=4956f3084d9310efa1bc07ef31f934b2941f103e
Certificate serial: 019D284D42C19AFEF40AF8F0C1277DD139F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SVbzCE2TEO-hvAfvMfk0spQfED4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.mft
Manifest number: 1884
Signing time: Thu 26 Mar 2026 04:00:45 +0000
Manifest this update: Thu 26 Mar 2026 04:00:45 +0000
Manifest next update: Fri 27 Mar 2026 04:00:45 +0000
Files and hashes: 1: 992ueHAMwJapVg3_GmGNX2NMidk.roa (hash: Sz2VdX1lXBUkLwnFivqLQpnj70LlExAPX1th350BNR8=)
2: SVbzCE2TEO-hvAfvMfk0spQfED4.crl (hash: ap3pql7DJu/w+2c3pDUISEKyVJupg6Qim3FgxyD2cSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SVbzCE2TEO-hvAfvMfk0spQfED4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:42:c1:9a:fe:f4:0a:f8:f0:c1:27:7d:d1:39:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4956f3084d9310efa1bc07ef31f934b2941f103e
Validity
Not Before: Mar 26 04:00:45 2026 GMT
Not After : Mar 27 04:00:45 2026 GMT
Subject: CN=3615af04652784a61417e5b6cc17d5e2dc31bd1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e9:83:90:5e:6f:6d:8a:7b:33:eb:2b:ae:02:
27:88:6d:43:92:54:30:fb:0f:4a:11:f1:bf:b1:cb:
2a:e3:b8:c1:3f:40:c5:ea:ec:b7:a6:ec:0d:b9:8d:
82:09:43:93:12:1e:7b:e8:9f:8f:14:8c:cc:bd:ec:
5e:2e:82:8c:05:b2:fc:60:2b:d7:fe:70:d5:a0:3a:
25:33:71:39:1c:2d:a9:e3:cd:59:b2:50:8b:72:be:
e5:c5:dc:b9:6d:90:ed:ca:c5:b1:68:46:92:00:5e:
3b:f3:20:ba:a5:95:ea:d0:a5:af:ce:04:67:49:cc:
c9:82:b4:10:17:2d:53:ba:39:31:2a:7d:e0:83:5e:
38:c8:17:1c:ea:54:7d:ec:f2:aa:27:cb:60:b8:0b:
05:84:60:63:77:39:0c:3c:51:63:81:1c:d2:88:b0:
d0:4c:a4:26:94:ea:fe:f2:a5:f2:a0:67:82:83:5c:
c7:a5:90:25:5b:ee:47:c5:c8:30:4a:c9:28:50:16:
28:4a:77:8f:77:f5:cf:1b:39:4f:90:37:85:80:d1:
61:80:16:66:5f:aa:52:34:ee:13:92:87:93:89:86:
09:04:46:ac:34:ec:5b:88:64:55:2e:a9:f6:08:4a:
cc:8b:77:35:39:4d:30:ca:7b:49:e2:d4:95:0e:81:
26:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:15:AF:04:65:27:84:A6:14:17:E5:B6:CC:17:D5:E2:DC:31:BD:1D
X509v3 Authority Key Identifier:
keyid:49:56:F3:08:4D:93:10:EF:A1:BC:07:EF:31:F9:34:B2:94:1F:10:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SVbzCE2TEO-hvAfvMfk0spQfED4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:7f:f8:09:61:a7:4e:25:22:25:b7:29:14:2e:0e:a5:80:97:
ca:21:be:28:91:cb:4d:e2:6f:c6:40:db:be:3a:01:10:59:c6:
35:f7:cf:53:e8:c3:d7:40:7e:d2:59:a0:42:91:5f:a0:c0:a8:
fd:6a:51:12:93:cd:26:0c:21:f4:8d:b6:40:87:fa:19:36:1c:
03:7b:02:81:2c:ca:57:22:77:ea:4a:26:80:a7:5a:bf:6a:29:
17:7c:1d:90:bd:5c:14:8c:a8:23:1e:39:91:54:f7:11:99:fc:
22:6e:4d:eb:76:84:6f:8b:6b:2a:54:0d:d1:fc:cb:45:8b:c2:
ec:73:4b:e6:28:dc:56:0d:08:2c:bc:47:3e:c6:54:cc:1c:f7:
bc:56:0d:a6:8b:30:86:0b:d6:43:0e:a9:ca:e3:bc:c1:51:2c:
1a:af:0a:47:c5:9c:0b:ef:3c:bd:7c:71:82:72:a7:0b:35:20:
b6:65:03:98:43:ae:4b:59:77:7f:4b:1a:4a:b9:25:83:89:a0:
a7:fc:07:88:0e:ce:11:70:26:7a:7c:43:47:17:34:27:37:c0:
8a:5d:02:d0:69:04:e3:27:95:16:42:f4:d7:39:78:bf:00:19:
ad:eb:95:61:1b:07:f9:c2:92:9d:00:e1:9b:b4:b2:59:e0:2e:
f1:c9:99:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:30:07 2026 by rpki-client