Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
File: SA488NEiV0x-ezvwNNDT0BPuvBU.mft (raw, json)
Hash identifier: 8Al+dh31yXygDtNpaJSVo/UkStCl41VuuPznkPSQgdM=
Subject key identifier: BB:0D:93:75:E7:98:81:79:D0:94:2D:60:88:7A:6D:18:34:A6:F3:6E
Authority key identifier: 48:0E:3C:F0:D1:22:57:4C:7E:7B:3B:F0:34:D0:D3:D0:13:EE:BC:15
Certificate issuer: /CN=480e3cf0d122574c7e7b3bf034d0d3d013eebc15
Certificate serial: 019D28BB27D57790C963F07030FF98C77CA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SA488NEiV0x-ezvwNNDT0BPuvBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
Manifest number: 0D8F
Signing time: Thu 26 Mar 2026 06:00:47 +0000
Manifest this update: Thu 26 Mar 2026 06:00:47 +0000
Manifest next update: Fri 27 Mar 2026 06:00:47 +0000
Files and hashes: 1: 1-Jvy4cSjaj8AFJqw5ncsPjDeR28.roa (hash: +Ni2CLOoRpCVmzTI9f4DnaA4YvB7dZwIDsF6rECn1wA=)
2: LbwUBW6UnU18v-U18rNDE3l0xQQ.roa (hash: SkrwHdQX53t1+eW9cdOIIYqsrHJtmmj6qudznw4zEbg=)
3: SA488NEiV0x-ezvwNNDT0BPuvBU.crl (hash: TeiFSHgZ5dlH7ZmxnsMZwgGFKgpoN03u4Uim4uYCXm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SA488NEiV0x-ezvwNNDT0BPuvBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:27:d5:77:90:c9:63:f0:70:30:ff:98:c7:7c:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480e3cf0d122574c7e7b3bf034d0d3d013eebc15
Validity
Not Before: Mar 26 06:00:47 2026 GMT
Not After : Mar 27 06:00:47 2026 GMT
Subject: CN=bb0d9375e7988179d0942d60887a6d1834a6f36e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5a:69:e7:e7:75:99:ea:81:82:f8:41:e2:63:
5c:7d:55:ba:58:bb:2b:7b:7e:b3:23:ad:99:61:90:
13:9b:55:f6:da:a4:ce:25:97:a7:70:30:22:83:c2:
95:f1:e4:c8:1c:98:ec:f2:24:ef:8b:e0:3c:46:a3:
0a:cf:dc:45:43:e8:ac:f6:3f:d4:f8:62:ed:e4:40:
c1:c5:49:20:3b:ad:bc:38:48:09:e3:58:58:64:19:
81:41:11:54:55:26:01:d8:a6:3e:ab:64:e2:d6:18:
b7:74:fa:cb:b2:99:2b:ec:0a:88:d4:03:26:9b:ea:
dd:73:24:27:ff:d3:c4:e3:c4:2b:e8:59:b8:24:c8:
50:d5:3c:a0:6d:2f:55:be:1a:7f:d2:83:c5:c8:8a:
42:c3:7c:11:dc:5b:14:bf:ce:1a:57:0a:e2:33:77:
70:57:37:2c:e3:6f:d5:98:1a:f6:1c:b0:dd:a6:31:
c4:f0:aa:f4:cb:e3:11:6e:29:1e:b9:85:bd:51:5a:
56:d7:90:2d:80:4a:fb:7d:40:8c:9d:01:be:76:fe:
09:d8:d5:8d:e7:9b:00:a0:e3:3f:66:a4:c7:8b:3f:
d0:a8:e7:95:44:9c:9a:54:83:02:4b:4a:57:47:ff:
f8:3e:3c:27:b8:d3:b0:79:e0:90:d0:1e:a3:5b:c3:
ce:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:0D:93:75:E7:98:81:79:D0:94:2D:60:88:7A:6D:18:34:A6:F3:6E
X509v3 Authority Key Identifier:
keyid:48:0E:3C:F0:D1:22:57:4C:7E:7B:3B:F0:34:D0:D3:D0:13:EE:BC:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SA488NEiV0x-ezvwNNDT0BPuvBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:be:58:6f:8e:1d:e2:96:3c:c2:a4:e9:4d:0c:6f:50:c1:72:
30:38:db:23:5a:3f:e7:52:35:0f:db:d0:e6:d9:06:3a:30:9e:
b8:8c:3b:ec:0a:b0:0b:00:0c:0d:f0:7e:c9:1b:95:ca:99:4b:
f2:2b:06:23:1b:78:7c:e0:65:1e:ef:e9:67:9d:6e:cc:8e:58:
c9:27:50:72:b2:ca:ce:92:aa:43:a0:8d:3b:0e:6a:3d:ed:17:
71:8f:3f:16:24:2a:8f:72:a2:db:8c:36:a7:e4:8a:eb:7a:52:
04:68:71:87:d3:03:85:50:21:7c:51:45:17:e8:0c:92:ae:1b:
26:e6:a3:ef:5b:4a:f1:fc:b7:b3:07:e6:6a:7b:a5:4d:e8:d2:
cf:e2:c7:b9:7f:e5:6f:ae:aa:78:d0:4e:8d:d5:fa:33:ab:20:
eb:fb:50:57:96:99:9c:d5:a7:2c:82:7d:11:fe:30:a5:65:4f:
7e:2f:f3:db:98:52:db:c7:d0:3c:67:fe:92:ed:74:87:2a:91:
36:98:b2:4f:86:b0:69:3a:e4:4d:35:ba:1e:82:43:4c:d3:e3:
ca:f4:91:9e:17:d5:fb:ba:50:f7:04:9d:9b:b5:ac:57:75:cd:
91:79:ee:4a:8c:cc:bf:b0:4d:ad:53:e5:4c:25:07:f3:8a:c5:
bf:2f:a6:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:16:19 2026 by rpki-client