Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.mft
File: SN5GOMlyyM4ZxGaatX2yZq9yhbc.mft (raw, json)
Hash identifier: nV4AA53mi0qH5i6Xm3AeBXIg+8u52iMohPNjQQwSKKA=
Subject key identifier: DC:1C:89:95:40:D9:A5:D9:B3:5B:D8:60:DC:E9:63:B2:01:F6:9D:0A
Authority key identifier: 48:DE:46:38:C9:72:C8:CE:19:C4:66:9A:B5:7D:B2:66:AF:72:85:B7
Certificate issuer: /CN=48de4638c972c8ce19c4669ab57db266af7285b7
Certificate serial: 019D296124251A3ACC797B0B9A1B98B1D88B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SN5GOMlyyM4ZxGaatX2yZq9yhbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.mft
Manifest number: 0FA4
Signing time: Thu 26 Mar 2026 09:02:05 +0000
Manifest this update: Thu 26 Mar 2026 09:02:05 +0000
Manifest next update: Fri 27 Mar 2026 09:02:05 +0000
Files and hashes: 1: 6PNq7FkmkwoGvQ7nEoMTJLXDiKM.roa (hash: 3mSQiaXvNc3clXTT3+J9NGR/sfgLmFoq36+zVVtNRUY=)
2: SN5GOMlyyM4ZxGaatX2yZq9yhbc.crl (hash: nGxkqMcFlZk+7gxeUailQUnVh4shSEa/f3MNqL1UB1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SN5GOMlyyM4ZxGaatX2yZq9yhbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:24:25:1a:3a:cc:79:7b:0b:9a:1b:98:b1:d8:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48de4638c972c8ce19c4669ab57db266af7285b7
Validity
Not Before: Mar 26 09:02:05 2026 GMT
Not After : Mar 27 09:02:05 2026 GMT
Subject: CN=dc1c899540d9a5d9b35bd860dce963b201f69d0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a6:99:f6:08:b6:c0:e6:d6:74:22:64:d0:8b:
82:83:bc:16:0f:12:68:cc:bc:7c:27:c7:33:9c:b4:
1b:af:5d:dc:9c:a8:9c:e8:0c:29:70:cd:cb:db:e0:
c5:ed:66:53:da:a1:a4:30:3c:36:60:e9:1d:34:71:
1c:8e:40:c3:45:1d:59:af:b4:04:a0:d9:0f:9c:be:
44:ff:8b:cb:74:8e:05:1b:db:91:c1:7f:14:97:c8:
72:c8:8c:ef:ab:5c:8d:e5:7e:e2:b5:47:ab:5b:e5:
55:51:fd:73:34:53:d8:d2:4d:58:84:50:ab:ae:c8:
02:07:95:37:e3:8a:26:03:e6:1b:a8:78:60:80:39:
61:4a:9b:c1:84:c6:d8:2d:e0:da:d8:34:d4:33:da:
4e:8c:57:3b:f5:1c:e0:bb:95:a4:4d:3d:5e:a5:f3:
a3:e6:93:bd:d4:65:1a:58:f6:c8:d0:11:7f:c2:45:
73:0c:4d:9e:c7:e5:23:3d:64:48:3f:67:f3:c2:b0:
c1:fa:30:30:15:9b:a8:ef:1e:9b:ad:13:c7:89:a4:
01:5e:68:09:a8:95:5e:ed:1c:49:10:5b:0c:f1:a8:
4f:1f:59:51:b4:83:6e:80:73:86:ed:90:f1:fb:31:
98:40:0d:2a:59:94:22:42:98:5d:58:e3:6c:9b:86:
be:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:1C:89:95:40:D9:A5:D9:B3:5B:D8:60:DC:E9:63:B2:01:F6:9D:0A
X509v3 Authority Key Identifier:
keyid:48:DE:46:38:C9:72:C8:CE:19:C4:66:9A:B5:7D:B2:66:AF:72:85:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SN5GOMlyyM4ZxGaatX2yZq9yhbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:ae:16:5c:c6:0f:66:b9:23:93:11:73:03:02:4a:4b:6c:26:
62:79:50:71:0a:cc:84:f0:62:24:bd:6a:4c:84:26:2e:6a:6e:
c6:88:ed:6f:73:1e:39:2f:44:bf:f5:29:e0:ce:81:c3:de:e3:
9b:ca:51:65:e3:6b:b8:08:2c:70:de:eb:c8:79:32:45:be:d8:
72:f9:c6:62:be:42:c8:cd:32:60:e3:64:01:be:53:fd:42:4d:
74:6b:24:7c:35:bf:50:2c:0a:81:da:ed:09:2b:68:9a:f8:a4:
00:dd:1b:57:03:01:c8:0d:d2:41:57:db:80:4a:ed:ed:f4:70:
9e:91:26:9b:56:4c:cf:d7:71:69:70:13:cb:f1:95:21:d4:17:
19:05:42:21:7d:cb:ae:9b:8f:43:d7:d6:cd:bb:47:35:93:6a:
17:b4:20:a7:fa:80:29:db:13:76:63:27:0a:7d:10:bf:a6:18:
22:59:bb:a7:02:98:be:2e:79:80:18:30:e7:ee:5e:9c:4e:ea:
8a:9e:9c:40:93:d9:b9:6b:7c:c7:3d:1b:6f:fb:20:45:a3:59:
2c:40:9e:4f:37:be:95:82:94:4f:89:93:8d:ea:cd:7b:70:91:
12:02:83:bb:fe:83:88:93:44:35:66:99:09:85:81:65:9c:66:
d5:93:85:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:32:48 2026 by rpki-client