Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.mft
File: SffBpGd-t4JtrmneAaaZtiAdYkQ.mft (raw, json)
Hash identifier: oUGkKANlfhmnDysihfCtf53MeOmtku6+LpEE9YICKEY=
Subject key identifier: 32:7E:5D:2F:55:79:63:50:71:7D:E3:00:C1:B8:9B:1E:FE:D2:71:33
Authority key identifier: 49:F7:C1:A4:67:7E:B7:82:6D:AE:69:DE:01:A6:99:B6:20:1D:62:44
Certificate issuer: /CN=49f7c1a4677eb7826dae69de01a699b6201d6244
Certificate serial: 019E1DC70DE751F49A0720D4E1DD9E3B1F7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.mft
Manifest number: 0ADE
Signing time: Tue 12 May 2026 20:00:44 +0000
Manifest this update: Tue 12 May 2026 20:00:44 +0000
Manifest next update: Wed 13 May 2026 20:00:44 +0000
Files and hashes: 1: 1Ydtwyp0RxTqwFwlZLQC9pjEjck.roa (hash: lddKsSWBtsmYYjZdvA43DNL49znHbCiLIeDmyKFXUS8=)
2: 7QrWs9jpQhmFY3PyZCr6-nEeMH8.roa (hash: SW0/y7KitZRJpYFxOpK/vsBcsStTykljR4R1T9PoZ4c=)
3: SffBpGd-t4JtrmneAaaZtiAdYkQ.crl (hash: F3yXW5fyxe3jTEUO+6Yq3M4frsCFMVR2rXaElXsSrxA=)
4: poS62r2xc1Q0WW07fhDP8zECi4w.roa (hash: +zufayp/EjEAE4m8aJ8bI+p2tsBzidxT3ZMgA9RaLz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:0d:e7:51:f4:9a:07:20:d4:e1:dd:9e:3b:1f:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f7c1a4677eb7826dae69de01a699b6201d6244
Validity
Not Before: May 12 20:00:44 2026 GMT
Not After : May 13 20:00:44 2026 GMT
Subject: CN=327e5d2f55796350717de300c1b89b1efed27133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:84:de:a8:76:3c:2c:48:2e:76:df:43:64:ad:
63:a2:d2:7d:30:56:a2:fa:a5:86:bf:94:f9:5a:07:
ad:35:a2:d9:25:fe:30:bc:e9:f0:4a:5a:71:df:de:
af:65:25:96:8c:88:5a:38:b0:8e:8e:f7:80:b7:74:
e8:01:8c:14:c0:5d:5d:98:69:54:ad:77:ef:da:39:
38:c2:43:48:7c:b2:5a:21:1a:60:88:08:69:8a:9e:
db:f2:a3:6c:de:ae:d0:41:9a:2a:3b:83:76:7f:21:
70:bb:5a:ba:5b:bc:c7:ca:1b:12:23:c1:10:5f:9d:
5e:7e:22:cd:1f:c8:54:70:6f:94:3d:19:75:33:1d:
2c:34:38:dd:17:a3:c7:ac:a3:19:7c:c4:f8:da:fd:
e8:9c:0b:93:48:da:71:38:ab:f4:e0:37:90:90:9e:
a0:63:32:00:9a:61:bf:92:7f:2b:c4:76:26:98:b2:
c9:4d:32:cf:1c:06:c8:98:af:fa:11:3f:52:e2:c8:
9b:71:d6:d9:83:54:be:44:e1:a1:43:d3:75:8e:d0:
7f:65:06:60:a4:74:e1:de:e9:66:46:ec:19:d6:ea:
11:9a:01:77:04:53:c9:96:ed:ac:d9:28:d3:0b:b9:
6f:3d:15:66:21:98:25:24:3d:9a:5b:f3:92:50:5a:
57:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:7E:5D:2F:55:79:63:50:71:7D:E3:00:C1:B8:9B:1E:FE:D2:71:33
X509v3 Authority Key Identifier:
keyid:49:F7:C1:A4:67:7E:B7:82:6D:AE:69:DE:01:A6:99:B6:20:1D:62:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:74:6b:7f:fc:ee:48:41:6a:b2:4b:61:54:18:4f:82:8b:04:
7b:90:91:97:72:ab:46:92:c8:16:3e:ed:36:17:0d:ce:cb:db:
d5:7d:c4:a5:61:fd:53:45:0d:23:b6:88:26:36:35:68:27:01:
a9:f2:e8:24:db:79:d7:fe:78:56:62:88:ed:ba:40:be:4c:d1:
b9:f1:d0:75:8f:72:f6:97:48:6d:5e:76:7d:d3:db:e7:a6:cc:
b1:69:2e:aa:af:1c:67:44:ab:3f:df:d7:49:2c:31:47:99:4f:
df:f8:6d:f6:54:e8:da:31:d5:77:ad:64:55:b6:2d:33:ae:d7:
d0:07:75:b0:b5:78:73:ce:50:31:02:f4:bd:5c:2d:64:84:43:
81:e6:f6:96:92:91:b4:97:39:26:d3:85:d5:a8:ea:19:bf:b1:
f8:85:41:30:60:56:9d:64:ee:3a:97:d8:90:83:71:63:d2:cf:
27:a9:27:fa:e0:7e:35:f9:24:b2:56:03:c8:2d:d5:9e:bb:b4:
3a:a4:f0:70:6b:1a:c0:04:69:50:24:91:e2:3a:da:38:34:dd:
39:f8:40:a1:be:ba:5a:f4:b0:4f:8d:84:af:2c:53:56:24:51:
71:f8:91:5a:ab:6a:db:c9:99:bd:ae:37:89:ef:e2:af:9a:44:
8f:76:51:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:34:26 2026 by rpki-client