Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.mft
File: SdhmPTuWngJTom1UJb7hxdRDs2E.mft (raw, json)
Hash identifier: LfBnKHFOdh4jAs1fLUircbABO18AdAKqDcDAcFoBk2s=
Subject key identifier: A7:CB:2D:86:14:8E:89:F8:A1:94:36:F6:6F:EA:DC:9D:F2:DA:51:D9
Authority key identifier: 49:D8:66:3D:3B:96:9E:02:53:A2:6D:54:25:BE:E1:C5:D4:43:B3:61
Certificate issuer: /CN=49d8663d3b969e0253a26d5425bee1c5d443b361
Certificate serial: 019D2772221358F26A6D24F164B14687F2C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SdhmPTuWngJTom1UJb7hxdRDs2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.mft
Manifest number: 09E5
Signing time: Thu 26 Mar 2026 00:01:24 +0000
Manifest this update: Thu 26 Mar 2026 00:01:24 +0000
Manifest next update: Fri 27 Mar 2026 00:01:24 +0000
Files and hashes: 1: SdhmPTuWngJTom1UJb7hxdRDs2E.crl (hash: o6y3qthHV1a9FQ6EYWHZGsZpncDk3AuOtTVpDOmZlN0=)
2: ss_i7POqldkDP31KMdlVrzarBdE.roa (hash: WvsAUlRR+NRLn32GVVcoWQROpDNnn7tmpssNx6BwiVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/SdhmPTuWngJTom1UJb7hxdRDs2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:22:13:58:f2:6a:6d:24:f1:64:b1:46:87:f2:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49d8663d3b969e0253a26d5425bee1c5d443b361
Validity
Not Before: Mar 26 00:01:24 2026 GMT
Not After : Mar 27 00:01:24 2026 GMT
Subject: CN=a7cb2d86148e89f8a19436f66feadc9df2da51d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:00:81:52:43:fd:fa:47:e0:cf:d5:3d:e1:17:
d6:3b:18:53:13:4b:f3:4e:c2:61:b4:6e:1f:c1:48:
c1:fe:ce:9f:f9:3e:f6:b0:ba:cd:9a:0e:52:4a:dc:
f5:ec:41:61:1c:df:d0:1b:65:28:70:7f:e8:00:47:
ed:87:ed:2e:9e:4f:2a:75:20:49:33:da:ae:9d:88:
5e:48:66:79:a4:4f:ee:51:02:f6:e7:a9:70:d8:ab:
ba:62:13:7a:90:8e:cc:86:d7:33:bd:9b:d2:22:45:
b2:05:c8:7b:3e:ea:17:d0:b0:86:12:f5:70:3b:a1:
a0:17:29:fd:44:4e:aa:7a:40:25:3e:a8:6f:c2:1e:
aa:6f:4a:63:24:67:cf:ba:c5:24:06:4b:65:d2:be:
1c:b0:3b:50:9a:50:bc:01:db:39:76:0c:a4:42:bf:
81:79:0e:ae:bf:ac:b2:58:82:53:e4:09:fd:a5:37:
53:4e:1a:18:53:80:c7:82:7a:48:86:57:28:6a:fe:
cf:cc:11:35:fc:57:38:4b:5f:40:de:6b:7f:1b:03:
38:60:ca:bb:a8:4d:95:84:f1:b5:16:b8:91:4b:3d:
55:5b:2a:27:8e:ff:33:11:a0:f1:dc:9b:91:b9:30:
31:ac:1f:13:ab:89:9a:8c:46:be:3b:32:21:7d:77:
b3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:CB:2D:86:14:8E:89:F8:A1:94:36:F6:6F:EA:DC:9D:F2:DA:51:D9
X509v3 Authority Key Identifier:
keyid:49:D8:66:3D:3B:96:9E:02:53:A2:6D:54:25:BE:E1:C5:D4:43:B3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SdhmPTuWngJTom1UJb7hxdRDs2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:a1:51:1a:8a:07:f4:c1:60:75:e6:b0:49:10:c3:d0:26:83:
3e:c5:c5:84:93:89:85:24:f8:91:63:9c:44:e2:52:4a:1a:7e:
f9:4a:5e:ee:31:bd:13:25:60:16:b5:d4:bc:9b:79:dc:41:bf:
53:5f:7b:e2:28:b8:a9:65:97:62:1f:00:37:08:31:34:3d:37:
61:fb:86:32:82:91:59:74:51:b3:33:9d:40:76:f4:39:0f:a3:
c9:b7:77:53:26:74:06:80:b7:cb:e7:28:1c:a8:0a:de:90:8d:
3e:7d:62:37:53:e9:fc:65:1f:6c:73:55:c9:cc:01:4f:eb:6a:
88:34:af:46:f9:14:73:c3:b1:5a:4b:95:53:c1:37:db:c3:c2:
9b:df:de:46:b6:10:53:a0:70:b0:e7:d4:16:63:14:d6:df:bf:
ad:81:2f:f7:0d:b1:35:ab:88:4b:b9:37:e6:0b:f3:19:be:cb:
be:c3:36:3c:a3:26:f0:ff:23:17:0d:8f:74:83:af:21:df:50:
d5:22:6f:d9:d3:a5:97:2f:bd:3e:db:f9:a3:5b:b3:9d:df:31:
f1:f9:f6:4c:1d:4c:6b:5c:2b:31:16:88:5c:1f:d0:d7:70:7c:
cf:6c:3b:64:5b:fd:34:a1:5f:d1:b7:a9:d9:f1:21:f1:c6:46:
34:d5:4b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:29:36 2026 by rpki-client