Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
File: SA488NEiV0x-ezvwNNDT0BPuvBU.mft (raw, json)
Hash identifier: R1bTE5DpUeB87D9oi7SkvbuUxYljbMhczP3CW3dcAWI=
Subject key identifier: DB:E5:25:CF:5D:6B:43:9F:77:48:6E:A4:FE:DC:87:BB:BE:6A:95:BB
Authority key identifier: 48:0E:3C:F0:D1:22:57:4C:7E:7B:3B:F0:34:D0:D3:D0:13:EE:BC:15
Certificate issuer: /CN=480e3cf0d122574c7e7b3bf034d0d3d013eebc15
Certificate serial: 01A0D5393384BF9B2CE6B0C311E7388492D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SA488NEiV0x-ezvwNNDT0BPuvBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
Manifest number: 0F76
Signing time: Thu 24 Sep 2026 21:01:30 +0000
Manifest this update: Thu 24 Sep 2026 21:01:30 +0000
Manifest next update: Fri 25 Sep 2026 21:01:30 +0000
Files and hashes: 1: 1-Jvy4cSjaj8AFJqw5ncsPjDeR28.roa (hash: +Ni2CLOoRpCVmzTI9f4DnaA4YvB7dZwIDsF6rECn1wA=)
2: LbwUBW6UnU18v-U18rNDE3l0xQQ.roa (hash: SkrwHdQX53t1+eW9cdOIIYqsrHJtmmj6qudznw4zEbg=)
3: SA488NEiV0x-ezvwNNDT0BPuvBU.crl (hash: pl2l35M4N5D3h3eNEPZImOANPbBzzGan2koWdpxZRFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SA488NEiV0x-ezvwNNDT0BPuvBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:39:33:84:bf:9b:2c:e6:b0:c3:11:e7:38:84:92:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480e3cf0d122574c7e7b3bf034d0d3d013eebc15
Validity
Not Before: Sep 24 21:01:30 2026 GMT
Not After : Sep 25 21:01:30 2026 GMT
Subject: CN=dbe525cf5d6b439f77486ea4fedc87bbbe6a95bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e4:62:56:72:d1:cb:12:2c:f3:8a:ab:97:0d:
e6:79:80:9c:3c:fd:54:6b:e2:4e:f2:a1:be:e5:71:
1c:cb:0a:5e:f5:94:98:cd:c4:9c:12:12:e9:e4:d4:
13:b2:43:19:fc:9a:d7:f1:85:5d:95:d1:4e:16:b6:
bf:c2:cc:2f:4e:d0:7a:74:cf:ac:69:22:65:b0:6c:
8f:e0:60:04:e8:69:df:c4:1b:c9:f4:72:f3:ec:43:
76:ff:49:83:f6:88:ee:1e:dc:9f:f1:c7:c0:e7:59:
c1:1b:f4:8a:8c:18:3c:99:01:ff:2a:d3:58:61:52:
19:4c:74:b6:0c:71:42:20:01:05:c3:22:dd:69:51:
db:86:22:ec:6d:d5:f7:aa:de:3b:14:c1:a5:81:34:
73:c5:c9:f0:28:4f:aa:de:00:59:c7:c6:31:76:8c:
a9:4d:e8:3f:4a:01:02:a4:76:7c:d3:2e:c1:91:30:
dc:2f:71:74:23:c2:a7:e9:4e:5f:c0:0d:e9:a5:96:
de:fc:b7:52:d6:a3:55:c8:68:2e:69:0a:f9:c7:9f:
5e:00:fe:42:31:8a:7e:03:2c:72:d9:3c:1c:7d:81:
b9:ab:a6:a8:22:13:74:71:8d:8e:54:5c:a4:f4:85:
cf:f7:68:ba:68:c1:fe:74:d3:a7:08:02:ac:4f:09:
14:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E5:25:CF:5D:6B:43:9F:77:48:6E:A4:FE:DC:87:BB:BE:6A:95:BB
X509v3 Authority Key Identifier:
keyid:48:0E:3C:F0:D1:22:57:4C:7E:7B:3B:F0:34:D0:D3:D0:13:EE:BC:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SA488NEiV0x-ezvwNNDT0BPuvBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:79:b4:6c:81:6a:a9:ad:37:e2:a9:a1:a0:8c:17:02:a1:19:
87:eb:eb:de:4b:90:ff:c7:16:ab:b7:fb:34:36:0a:2b:23:10:
4d:09:e7:00:52:08:5b:0f:d9:58:3d:76:ef:bc:c3:cf:ec:35:
df:ed:7f:32:c7:32:00:4a:ae:0d:3f:a3:de:0c:a6:0e:5c:8e:
8b:fc:d8:76:29:e1:99:4e:6e:e0:a9:29:55:e5:e8:7d:98:33:
e6:7a:cf:fe:18:78:b5:dc:03:e2:05:ba:53:19:be:77:a9:7a:
97:c1:44:56:06:98:b8:33:a0:0b:85:82:c2:94:95:e1:67:df:
a6:28:85:81:28:ad:30:67:8c:58:8e:fc:5d:0e:f5:9e:13:40:
95:e8:4e:05:28:12:6f:7a:b7:25:a6:33:80:23:bd:4d:de:de:
cd:6c:15:d8:e6:b6:95:60:b0:8c:5e:45:ce:f0:d6:f3:86:3f:
db:18:7f:4e:e6:c5:84:84:78:fc:52:39:be:9e:37:c5:49:ce:
0c:3b:02:1f:c0:2a:0a:69:d9:f4:7b:c5:0b:4e:38:93:cc:5a:
d9:ee:ec:ff:0d:a8:7e:05:9a:4f:8a:f4:a2:e4:f4:1e:72:98:
ca:fa:e0:bf:87:b1:81:ff:aa:a3:a4:ab:ce:10:ec:4d:ab:3e:
c9:25:99:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:42:13 2026 by rpki-client