Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/556ad5-2e6b-4d51-856c-61c9c29c275d/1/SGbUAn3jwn6JfXKtsshth6t-WsI.mft
File: SGbUAn3jwn6JfXKtsshth6t-WsI.mft (raw, json)
Hash identifier: oHpJmT607qum8GQKdL1nYadnKV+yTAmyNe4Gp5dQxcA=
Subject key identifier: CB:5C:89:FE:6E:D5:C3:41:C5:30:D0:17:54:0B:6C:BC:B6:09:8D:CF
Authority key identifier: 48:66:D4:02:7D:E3:C2:7E:89:7D:72:AD:B2:C8:6D:87:AB:7E:5A:C2
Certificate issuer: /CN=4866d4027de3c27e897d72adb2c86d87ab7e5ac2
Certificate serial: 019D27DFEDA4BB003BF5967505F42CB2F845
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGbUAn3jwn6JfXKtsshth6t-WsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/556ad5-2e6b-4d51-856c-61c9c29c275d/1/SGbUAn3jwn6JfXKtsshth6t-WsI.mft
Manifest number: 1890
Signing time: Thu 26 Mar 2026 02:01:19 +0000
Manifest this update: Thu 26 Mar 2026 02:01:19 +0000
Manifest next update: Fri 27 Mar 2026 02:01:19 +0000
Files and hashes: 1: Fexpb8Mm1qldEMdDfjeahWE_FzM.roa (hash: beEp1xMiPmbPcQtZzifL9idgvv0u2YByV9XjHML5QxA=)
2: SGbUAn3jwn6JfXKtsshth6t-WsI.crl (hash: 5MwcirMFVOOolwAKbp4sGZnvZSeeHyJJIqRf2Ynpgdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/556ad5-2e6b-4d51-856c-61c9c29c275d/1/SGbUAn3jwn6JfXKtsshth6t-WsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/556ad5-2e6b-4d51-856c-61c9c29c275d/1/SGbUAn3jwn6JfXKtsshth6t-WsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SGbUAn3jwn6JfXKtsshth6t-WsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:ed:a4:bb:00:3b:f5:96:75:05:f4:2c:b2:f8:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4866d4027de3c27e897d72adb2c86d87ab7e5ac2
Validity
Not Before: Mar 26 02:01:19 2026 GMT
Not After : Mar 27 02:01:19 2026 GMT
Subject: CN=cb5c89fe6ed5c341c530d017540b6cbcb6098dcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bb:99:b9:9e:81:61:c3:d1:c6:49:e4:4f:fe:
fb:4a:1a:7c:72:0e:b2:7a:98:4a:a5:e2:30:40:7c:
65:c6:e2:7f:65:99:96:e0:d7:21:bd:55:55:e1:9c:
d4:fc:d0:39:46:e7:8f:27:4f:71:de:29:1b:a8:c3:
28:34:29:a3:ad:59:ae:14:ca:c1:41:52:a9:97:98:
8e:0e:25:ca:06:bc:29:6f:25:14:12:bf:05:7c:10:
e0:90:ea:b9:3f:43:79:8f:50:e8:1e:4c:80:b2:55:
e9:41:64:7c:ec:4e:ed:55:cc:fb:30:71:69:9e:84:
51:0b:1c:11:3a:a2:00:5c:2b:8a:28:69:ed:49:f0:
b4:92:81:7b:62:4b:41:de:e4:ba:29:ed:59:39:7d:
fc:4d:d4:7a:e9:91:4a:67:c1:4c:5a:b2:09:a2:9f:
69:8f:79:d9:ca:8d:6f:1d:2a:95:63:31:71:4b:02:
71:ff:11:2d:4d:1b:83:a6:a7:1b:a6:d4:5b:a9:9b:
42:72:35:dc:b1:c2:52:16:96:d7:b0:6b:12:2d:ce:
0f:6b:36:fc:a9:c4:d7:51:ff:bb:ca:13:1b:52:9c:
e8:05:48:cf:d6:dc:6f:50:69:5c:33:de:02:53:b7:
1d:9d:39:fa:90:75:34:59:67:53:69:74:ee:23:ff:
b9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:5C:89:FE:6E:D5:C3:41:C5:30:D0:17:54:0B:6C:BC:B6:09:8D:CF
X509v3 Authority Key Identifier:
keyid:48:66:D4:02:7D:E3:C2:7E:89:7D:72:AD:B2:C8:6D:87:AB:7E:5A:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGbUAn3jwn6JfXKtsshth6t-WsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/556ad5-2e6b-4d51-856c-61c9c29c275d/1/SGbUAn3jwn6JfXKtsshth6t-WsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/556ad5-2e6b-4d51-856c-61c9c29c275d/1/SGbUAn3jwn6JfXKtsshth6t-WsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:79:d4:b5:37:92:a1:7d:96:24:f9:b5:6c:3d:d8:bb:a5:bb:
37:d3:b4:e7:e4:26:8c:01:95:ae:cd:a3:ac:6e:62:d2:10:12:
ad:b2:6b:58:15:38:11:69:f1:c0:00:6f:a2:d8:3c:85:ef:0d:
98:78:b3:93:64:f6:a5:07:a4:e8:95:d3:95:13:02:7e:b2:99:
59:ce:94:10:53:2e:33:0d:be:ca:2b:14:ee:bf:58:84:3f:62:
66:3c:dd:61:e4:0a:e2:5c:26:4f:b4:e0:8e:cd:8a:9a:fd:eb:
b4:b9:dd:68:f2:65:41:da:7e:24:d1:13:f5:21:22:19:0b:5b:
d2:44:a2:2e:90:43:14:f2:ac:09:05:50:b0:53:09:a6:78:ce:
c0:ac:4b:f7:1e:e2:7e:83:96:5a:5e:59:e3:7b:35:0e:dd:3b:
94:67:9f:cc:51:34:30:a6:3e:bc:5f:c6:54:1b:21:cc:1a:82:
a6:a8:a7:e1:d6:70:19:f0:8d:a7:69:7a:d2:92:1b:1d:5c:af:
28:1b:bd:45:4b:12:b2:c6:f1:6c:33:a5:dc:e6:0b:a4:6f:ca:
f6:40:b1:3d:31:34:44:20:34:c5:9c:31:1e:ef:34:ec:7d:3a:
5b:ff:49:96:03:4e:0d:74:bb:ec:e2:52:f2:7b:2e:73:80:4b:
f0:e6:c8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:45 2026 by rpki-client