Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.mft
File: SffBpGd-t4JtrmneAaaZtiAdYkQ.mft (raw, json)
Hash identifier: ER2DJBuLyOAzXjgmPYrqPfjuEd8sXv4IngK0Ds2W5CM=
Subject key identifier: 84:70:74:31:C1:6F:A8:57:F9:97:9A:A2:25:CE:E7:29:A1:52:41:EE
Authority key identifier: 49:F7:C1:A4:67:7E:B7:82:6D:AE:69:DE:01:A6:99:B6:20:1D:62:44
Certificate issuer: /CN=49f7c1a4677eb7826dae69de01a699b6201d6244
Certificate serial: 01A1DE02FA2CD9C4D646D25C8B9B0A35A9F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.mft
Manifest number: 0CD1
Signing time: Sun 15 Nov 2026 07:01:39 +0000
Manifest this update: Sun 15 Nov 2026 07:01:39 +0000
Manifest next update: Mon 16 Nov 2026 07:01:39 +0000
Files and hashes: 1: 1Ydtwyp0RxTqwFwlZLQC9pjEjck.roa (hash: lddKsSWBtsmYYjZdvA43DNL49znHbCiLIeDmyKFXUS8=)
2: QdsMUlVnLsMvAdw7ewc8SUwieSc.roa (hash: X2HS7Y9LD/hB1Jxjzd/iV3vbsuHNru/ctbOWx/7dWNg=)
3: SffBpGd-t4JtrmneAaaZtiAdYkQ.crl (hash: Mm2m0c06Q3XNgv8LlnI3a8v9lsk4JrA2D45A8wx679Y=)
4: XXeLHruP0nbsWvMm3V9G4Zn9HkY.roa (hash: 3E0IuQz+7noWLXA2NKJLU4OxDK/ASN3bJHJ0TXKIxpY=)
5: uZgV4-Ds1XzpLf-2ECMQ9ZRf4m8.roa (hash: zLg9ydgFE5EwTfAibsnbM8CO5leJWTWYdarpdW2Jxgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:02:fa:2c:d9:c4:d6:46:d2:5c:8b:9b:0a:35:a9:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f7c1a4677eb7826dae69de01a699b6201d6244
Validity
Not Before: Nov 15 07:01:39 2026 GMT
Not After : Nov 16 07:01:39 2026 GMT
Subject: CN=84707431c16fa857f9979aa225cee729a15241ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:dc:4f:c9:9c:56:75:b9:4c:83:96:e1:f3:d6:
bd:8e:77:4b:53:65:3e:55:1a:f4:aa:a9:9b:cb:ac:
31:42:37:98:e4:14:8f:3f:80:2d:47:d5:58:12:78:
a3:00:f3:2b:ab:cd:fc:36:1a:9b:33:e2:73:9a:c2:
1c:81:6c:3a:eb:a3:67:1b:96:08:96:8d:06:cd:02:
33:19:82:15:a0:c6:65:93:ca:a8:1b:05:88:2d:94:
3f:2e:2e:96:e6:84:68:13:34:b0:54:28:46:33:4c:
d7:e8:d0:07:7c:cd:bc:78:29:3e:32:60:66:e3:a2:
58:b7:61:6b:a9:66:83:13:89:22:c4:ea:90:84:dc:
94:c4:ad:6e:d1:f7:40:0c:9f:e7:07:e0:ce:58:7d:
fa:1d:48:b7:6c:6a:25:f5:61:ff:44:17:d0:69:37:
f6:8c:a0:34:e1:de:7d:b4:dc:78:66:70:a7:dc:6b:
f9:f8:af:57:b6:31:ab:72:c3:f9:6f:47:98:00:18:
8a:b0:b8:2b:2a:7c:81:e4:83:2b:86:10:5e:a2:3e:
33:28:90:f0:c0:77:4a:dc:5c:c9:f9:75:51:e0:d3:
c2:7c:17:4e:5e:bc:66:f4:3d:78:4b:8a:30:2f:d3:
32:6f:60:cb:04:7b:d0:ad:ce:0b:0b:83:fa:8d:cf:
db:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:70:74:31:C1:6F:A8:57:F9:97:9A:A2:25:CE:E7:29:A1:52:41:EE
X509v3 Authority Key Identifier:
keyid:49:F7:C1:A4:67:7E:B7:82:6D:AE:69:DE:01:A6:99:B6:20:1D:62:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:35:cb:fb:f2:5c:b9:5b:8f:06:05:d5:05:ba:09:2f:dd:a5:
1b:63:b9:32:b9:bf:19:94:9b:07:8a:e8:3a:7d:66:cf:3f:17:
f2:b3:69:96:70:7a:42:bc:e8:3f:ee:93:e1:cb:68:96:62:e4:
b4:06:ec:a6:2e:a8:aa:5e:22:a3:e0:2f:7e:b8:0c:12:9f:02:
97:d9:70:3d:2e:68:f4:c7:32:02:19:49:ad:4d:88:03:ce:a6:
66:61:7b:ca:31:dd:d0:8b:d3:51:50:1d:a9:89:a3:d8:68:32:
5b:b2:59:85:16:8c:1f:ec:b9:0b:96:ce:ef:37:ce:03:72:fb:
3a:7c:b6:50:a3:1a:77:06:a2:dc:00:50:46:db:5f:0b:91:0f:
a6:2c:93:9c:28:69:5b:5f:8c:a5:e7:64:1d:a0:af:76:3e:8f:
c4:59:8b:07:9b:73:7e:b4:ed:7f:00:d7:47:19:73:88:15:13:
27:2b:58:39:df:54:1c:23:9a:40:55:7b:04:69:b6:18:e3:43:
f6:0c:ea:a3:77:73:da:2a:c8:7c:59:ed:84:8d:21:ad:15:7f:
cc:b2:59:45:53:84:79:6e:8b:b4:06:de:0e:28:08:19:94:76:
ba:2d:fa:40:f8:a3:38:5b:62:65:1c:b6:d0:2a:f2:a3:c4:6e:
85:45:15:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:59:58 2026 by rpki-client