Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
File: SA488NEiV0x-ezvwNNDT0BPuvBU.mft (raw, json)
Hash identifier: woboSAzSqVcT37W8yrKH0B6FU1Z+yaci6dTQKyrXQXs=
Subject key identifier: 68:77:E2:16:3A:50:E1:A6:14:AB:56:F5:EB:70:63:73:CB:40:3D:80
Authority key identifier: 48:0E:3C:F0:D1:22:57:4C:7E:7B:3B:F0:34:D0:D3:D0:13:EE:BC:15
Certificate issuer: /CN=480e3cf0d122574c7e7b3bf034d0d3d013eebc15
Certificate serial: 019E1DFE029860219CC83D99899950C360BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SA488NEiV0x-ezvwNNDT0BPuvBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
Manifest number: 0E0E
Signing time: Tue 12 May 2026 21:00:46 +0000
Manifest this update: Tue 12 May 2026 21:00:46 +0000
Manifest next update: Wed 13 May 2026 21:00:46 +0000
Files and hashes: 1: 1-Jvy4cSjaj8AFJqw5ncsPjDeR28.roa (hash: +Ni2CLOoRpCVmzTI9f4DnaA4YvB7dZwIDsF6rECn1wA=)
2: LbwUBW6UnU18v-U18rNDE3l0xQQ.roa (hash: SkrwHdQX53t1+eW9cdOIIYqsrHJtmmj6qudznw4zEbg=)
3: SA488NEiV0x-ezvwNNDT0BPuvBU.crl (hash: Yjq4pGBXU3wtMNNh66HcilAOvXfIx5YwKkWh4YEM128=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SA488NEiV0x-ezvwNNDT0BPuvBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:02:98:60:21:9c:c8:3d:99:89:99:50:c3:60:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480e3cf0d122574c7e7b3bf034d0d3d013eebc15
Validity
Not Before: May 12 21:00:46 2026 GMT
Not After : May 13 21:00:46 2026 GMT
Subject: CN=6877e2163a50e1a614ab56f5eb706373cb403d80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a4:a3:27:24:e9:4b:fd:98:3f:66:26:1c:f9:
8e:02:91:fa:82:bd:95:f8:87:ed:f3:00:9b:e0:80:
4b:e8:d2:88:27:64:7b:93:95:57:69:8e:16:de:95:
3d:a7:dc:c7:68:72:e9:bb:20:7e:04:12:18:2c:8d:
d9:3e:d6:91:97:ad:e8:35:9b:20:b0:fe:ca:ed:27:
78:6c:dd:c2:3f:19:95:fb:cb:07:c0:42:ae:fd:a7:
9e:6e:2a:3b:05:7a:3d:dd:a1:e8:80:3d:56:7c:e3:
5d:7e:57:a0:ce:a3:d7:cb:c6:04:80:e2:d8:a6:fe:
15:14:1e:23:8c:f7:7a:64:63:f8:41:c9:9a:01:0d:
16:6a:cc:d4:6c:0e:65:cf:aa:2b:9f:7c:7d:f7:7f:
fd:28:ae:ae:16:1a:cc:dd:b7:1c:11:c9:a3:e2:45:
11:0e:eb:4c:86:9a:be:83:71:20:98:3f:2d:1e:1a:
a2:fa:a8:bf:b7:f3:a5:b1:5a:99:a2:4c:55:cd:91:
b5:b1:a4:14:61:e7:b5:73:96:e4:85:56:ad:1c:29:
da:d1:eb:7e:05:61:74:c0:aa:0d:5f:1c:e1:e7:eb:
da:0f:f6:1a:4d:8a:40:34:21:4e:31:ef:5c:08:42:
0e:71:b7:f2:f7:71:a7:49:cb:38:e1:d6:f4:aa:f2:
51:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:77:E2:16:3A:50:E1:A6:14:AB:56:F5:EB:70:63:73:CB:40:3D:80
X509v3 Authority Key Identifier:
keyid:48:0E:3C:F0:D1:22:57:4C:7E:7B:3B:F0:34:D0:D3:D0:13:EE:BC:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SA488NEiV0x-ezvwNNDT0BPuvBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:67:bb:f6:2f:ed:12:c5:03:da:cb:35:80:9f:8e:1a:09:8d:
58:30:bd:66:0a:70:9a:90:11:73:cf:5f:db:64:61:99:9b:bb:
70:34:f2:3c:2c:7c:a6:27:53:61:9b:b0:7e:a2:22:cf:2e:ea:
a0:fe:ef:b5:5b:ef:88:28:95:36:dd:6f:d1:15:ed:d5:29:5f:
64:0a:ac:6b:bc:0b:b2:34:81:7f:b4:94:b2:11:3b:88:3a:4b:
cc:fd:c6:bb:8c:0c:75:c4:c6:7f:88:0b:9d:2e:ad:a7:5c:c1:
d4:66:d2:79:a4:e8:76:ba:5d:28:0b:91:8e:26:cc:84:7e:5d:
c1:f0:ac:ce:8c:83:5a:e5:10:00:be:32:91:d3:e7:ad:48:8f:
eb:ee:be:da:16:f2:6d:42:9b:a6:a9:fc:52:a5:72:61:08:6b:
96:c2:56:de:db:b9:65:3c:f5:19:7c:c1:96:c0:c1:ed:c4:97:
73:74:8c:c9:01:9e:4c:1e:25:fc:8b:1f:02:ec:0a:d1:0f:6d:
81:35:a3:6c:b7:ae:d6:d2:a6:e8:a9:a4:79:b8:2f:0b:3d:40:
70:a3:2b:c4:f7:f0:1a:9e:37:e6:47:7c:b3:f0:9a:26:03:e8:
81:53:2d:e5:e0:41:56:d9:b2:48:a7:37:40:aa:24:b8:c8:39:
7f:6e:31:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:34:10 2026 by rpki-client