Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.mft
File: SZ8D5I7WKpaEDrLy15w-whon8c4.mft (raw, json)
Hash identifier: 1N5Io9DuTOYFUYNqL9I3xhcsIQjhIohKBTMaNmEtKEQ=
Subject key identifier: A0:EF:32:D6:06:35:51:E5:7C:8A:22:45:91:89:99:3D:1C:2F:8E:CB
Authority key identifier: 49:9F:03:E4:8E:D6:2A:96:84:0E:B2:F2:D7:9C:3E:C2:1A:27:F1:CE
Certificate issuer: /CN=499f03e48ed62a96840eb2f2d79c3ec21a27f1ce
Certificate serial: 019D284E387504152B7DE67010860B88FE12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SZ8D5I7WKpaEDrLy15w-whon8c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 04:01:47 +0000
Manifest this update: Thu 26 Mar 2026 04:01:47 +0000
Manifest next update: Fri 27 Mar 2026 04:01:47 +0000
Files and hashes: 1: A5XOJbTaPmRGoTvKxuzub_rL6N0.roa (hash: FAOba0SQ0llUhsUnpDnHyFWPVUFSFyEFJ1WvGVy5f9I=)
2: SZ8D5I7WKpaEDrLy15w-whon8c4.crl (hash: kVRd2MuJDQjZ6CshgkYftR2WJIPGqQIaIJFfkKqpS1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SZ8D5I7WKpaEDrLy15w-whon8c4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:38:75:04:15:2b:7d:e6:70:10:86:0b:88:fe:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=499f03e48ed62a96840eb2f2d79c3ec21a27f1ce
Validity
Not Before: Mar 26 04:01:47 2026 GMT
Not After : Mar 27 04:01:47 2026 GMT
Subject: CN=a0ef32d6063551e57c8a22459189993d1c2f8ecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:75:68:8e:84:eb:f2:9b:0a:46:f4:a6:bf:33:
37:99:b3:3d:3a:10:41:01:e3:2b:4e:96:1d:11:88:
d7:df:90:39:d4:34:c5:9f:ea:98:28:74:ed:0c:80:
47:e5:88:ee:f8:42:e0:95:e1:f7:c0:5f:3a:5e:b2:
66:2c:dc:fe:d2:9e:e0:29:15:60:45:e9:b3:89:d8:
b1:84:15:a1:8f:a1:45:2d:30:28:76:22:ba:f7:2e:
35:b3:19:ac:2c:9d:b0:6d:66:10:2e:8a:81:aa:f4:
9d:c7:a3:05:05:bc:8d:67:78:d7:f4:20:0f:8d:ee:
90:0f:e8:96:53:85:2d:f8:5f:65:87:4f:94:ce:5e:
a8:c4:a8:0d:8a:9a:8c:01:b9:51:04:57:d7:e2:6b:
90:fe:75:67:36:fa:8b:81:97:cc:f9:95:bd:62:56:
b1:78:4a:7e:a6:12:7c:80:a7:26:41:6a:47:ab:f2:
c1:6f:5d:f8:a4:4f:aa:21:c1:09:a2:d0:33:0c:a7:
7f:ed:19:d6:71:9d:16:cc:32:06:45:b6:4c:51:07:
52:52:6e:10:40:d5:44:09:38:41:bc:2c:82:8d:d7:
07:4f:3b:c8:66:d3:49:d3:48:d7:e3:92:37:93:b7:
32:03:a4:e1:5b:ca:c8:a8:50:0e:9a:f7:7b:e9:35:
ec:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:EF:32:D6:06:35:51:E5:7C:8A:22:45:91:89:99:3D:1C:2F:8E:CB
X509v3 Authority Key Identifier:
keyid:49:9F:03:E4:8E:D6:2A:96:84:0E:B2:F2:D7:9C:3E:C2:1A:27:F1:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SZ8D5I7WKpaEDrLy15w-whon8c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:f5:f9:b1:11:af:b7:53:00:7d:e8:18:4c:e6:9b:55:ae:b8:
0e:8b:9d:7c:a4:93:4a:b6:1e:3c:09:33:6d:9e:87:fc:c6:79:
b4:77:49:39:c0:a8:9d:e6:2b:53:32:c9:5b:58:99:d6:c9:41:
ff:a2:36:be:bb:26:f1:2f:53:06:6d:97:45:aa:18:ee:2d:ca:
dc:27:80:95:b7:f4:c9:f2:9f:ac:fb:82:38:39:33:29:a7:e2:
98:1f:78:d0:93:d2:03:01:de:9f:ac:0a:0f:39:e6:0d:7e:2f:
4a:94:3a:e1:02:5c:55:7c:aa:15:5d:11:e2:26:61:7d:b4:eb:
39:36:4f:bc:1b:11:18:fb:94:ca:35:29:9f:91:b4:4a:a6:0f:
0a:d4:a9:68:56:97:42:5a:80:79:02:bb:de:80:2d:fa:df:b6:
15:59:37:a0:fc:1a:05:99:b6:2b:0a:db:99:14:d8:21:0e:a6:
b9:f6:13:46:b2:26:bd:2e:76:ef:24:a0:82:17:98:f8:62:19:
11:ff:98:0b:37:54:a0:7b:7b:bd:81:5c:07:73:7b:5e:a4:d1:
2b:fb:86:bf:18:f8:9d:c5:ce:04:17:d7:09:00:87:90:ba:b2:
6f:43:2c:cd:b6:04:8c:7a:a0:24:34:90:4a:1a:85:51:42:68:
83:3e:67:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:58:20 2026 by rpki-client