Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.mft
File: SffBpGd-t4JtrmneAaaZtiAdYkQ.mft (raw, json)
Hash identifier: th/FRTUyjFIyrPLyjGUAs3TTlmnaUNWJ989XYi7V/8M=
Subject key identifier: F1:FF:E1:EA:0A:6E:36:C3:DB:1D:5A:C0:BB:13:3B:05:9E:E5:9F:D7
Authority key identifier: 49:F7:C1:A4:67:7E:B7:82:6D:AE:69:DE:01:A6:99:B6:20:1D:62:44
Certificate issuer: /CN=49f7c1a4677eb7826dae69de01a699b6201d6244
Certificate serial: 019D2884C00C2D4D181F207C6AFDD5E45729
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.mft
Manifest number: 0A5F
Signing time: Thu 26 Mar 2026 05:01:21 +0000
Manifest this update: Thu 26 Mar 2026 05:01:21 +0000
Manifest next update: Fri 27 Mar 2026 05:01:21 +0000
Files and hashes: 1: 1Ydtwyp0RxTqwFwlZLQC9pjEjck.roa (hash: lddKsSWBtsmYYjZdvA43DNL49znHbCiLIeDmyKFXUS8=)
2: 7QrWs9jpQhmFY3PyZCr6-nEeMH8.roa (hash: SW0/y7KitZRJpYFxOpK/vsBcsStTykljR4R1T9PoZ4c=)
3: SffBpGd-t4JtrmneAaaZtiAdYkQ.crl (hash: 6c4RHUXAU4+wh0zc4CONwOYORhiR4nRJaziSFUq1RxA=)
4: poS62r2xc1Q0WW07fhDP8zECi4w.roa (hash: +zufayp/EjEAE4m8aJ8bI+p2tsBzidxT3ZMgA9RaLz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:c0:0c:2d:4d:18:1f:20:7c:6a:fd:d5:e4:57:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f7c1a4677eb7826dae69de01a699b6201d6244
Validity
Not Before: Mar 26 05:01:21 2026 GMT
Not After : Mar 27 05:01:21 2026 GMT
Subject: CN=f1ffe1ea0a6e36c3db1d5ac0bb133b059ee59fd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ae:da:39:b5:91:34:5d:f2:36:db:bd:94:df:
b1:9f:71:45:5f:c4:34:09:c4:2f:d0:5f:04:82:88:
88:e7:a5:14:b8:61:9a:d0:6e:53:1f:c8:eb:d7:ca:
60:d4:0c:b8:8c:e8:26:4e:09:ac:a9:b9:6a:34:f6:
af:0b:66:49:d0:6f:f1:1e:61:11:57:54:59:9b:56:
d1:9a:dc:a5:ae:65:e5:16:3b:a5:c5:47:74:26:a8:
3e:b8:79:4c:2d:c2:9c:32:15:1b:75:ff:a0:e0:7c:
f8:70:9d:f6:c2:8d:d0:03:51:63:ca:78:a1:ef:a5:
14:ce:8d:de:b8:e1:e8:c5:ea:85:98:36:dd:b7:fb:
09:cb:7f:09:af:6a:d6:58:2b:44:a7:29:c3:89:3b:
c0:f9:b3:20:e2:f8:fb:43:5c:1b:b6:98:5a:d4:f3:
0b:35:e5:3a:44:c6:37:b3:49:9b:4a:da:84:b2:47:
91:9a:6f:65:de:f3:f2:d6:19:3e:34:7d:ca:ca:6b:
00:a0:e4:ab:9c:77:6b:8d:26:4f:f2:30:f7:28:f6:
f8:ac:05:ac:93:ad:18:8a:25:54:c8:c6:41:54:81:
a6:60:c5:a1:83:08:a2:2d:d1:84:00:11:59:84:03:
6d:e2:b0:dd:f0:30:79:9e:b4:18:8d:06:c7:68:91:
34:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:FF:E1:EA:0A:6E:36:C3:DB:1D:5A:C0:BB:13:3B:05:9E:E5:9F:D7
X509v3 Authority Key Identifier:
keyid:49:F7:C1:A4:67:7E:B7:82:6D:AE:69:DE:01:A6:99:B6:20:1D:62:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:06:3a:07:e9:9c:7e:f9:e2:f7:49:8f:9c:ae:32:88:01:c5:
ea:a8:1b:b0:9c:25:ec:1f:ce:7b:d8:3b:4a:e6:1f:63:44:57:
99:0d:a0:2f:46:fd:05:bc:1c:2a:be:a6:fe:21:e2:fd:83:d2:
2d:c1:fb:47:c1:48:49:c7:4b:02:3b:24:b4:6b:99:2b:18:8c:
8b:3f:83:dc:65:84:a5:8a:2a:f4:25:48:93:dc:55:e7:d1:a2:
84:38:d6:1e:2b:3f:cd:23:e4:bf:47:c4:5f:9a:80:7f:b8:2c:
f4:c5:c2:36:6c:f0:ff:d0:7c:17:4b:47:50:47:f7:02:2d:8e:
e0:15:db:6a:2d:c5:04:6e:44:00:3e:19:8d:ca:24:84:b4:b1:
df:0f:3d:f7:62:e7:76:24:37:bb:43:03:6f:46:50:93:04:33:
ab:fc:5d:68:26:3b:30:64:fc:5d:3f:76:62:35:23:de:22:ad:
f4:61:3f:1b:f1:af:5d:c3:94:a7:2f:fb:2f:82:84:52:38:a8:
6b:08:b4:7e:95:06:4f:01:a9:7d:be:5b:47:5b:7e:8b:d8:4b:
0f:6d:ff:88:b9:a2:12:a4:0c:55:e8:77:c9:4f:f1:fc:df:e8:
64:ea:29:43:53:8d:63:5f:9f:30:c8:95:d6:b3:0f:cc:d7:a8:
1e:9a:db:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:17 2026 by rpki-client