Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.mft
File: SAa55i8bAPLPmNDcxYMpKvrLUi8.mft (raw, json)
Hash identifier: V/sjelmqoFYQoXc2X5pS55RNCYI5MBz/19xKaYKcgbM=
Subject key identifier: 9C:DF:04:73:E4:D2:73:A2:15:59:EC:C4:83:42:F8:96:DF:88:A3:36
Authority key identifier: 48:06:B9:E6:2F:1B:00:F2:CF:98:D0:DC:C5:83:29:2A:FA:CB:52:2F
Certificate issuer: /CN=4806b9e62f1b00f2cf98d0dcc583292afacb522f
Certificate serial: 019D329AAD9B89CB635EE6BD98A0C64F4073
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAa55i8bAPLPmNDcxYMpKvrLUi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.mft
Manifest number: 1350
Signing time: Sat 28 Mar 2026 04:01:30 +0000
Manifest this update: Sat 28 Mar 2026 04:01:30 +0000
Manifest next update: Sun 29 Mar 2026 04:01:30 +0000
Files and hashes: 1: 7Ptpz77GbsWneLzHS_xYiCRmfRM.roa (hash: giptJ0k6ABexmkT87uxsZbt4+g/9rtgSll7SmUYIWGw=)
2: E572EOwt04Wz5HDKOSRuWANNWW4.roa (hash: G7g0vA+I7jRl8kRfOOZyFHebFoniIcI8evL8158VV7Y=)
3: SAa55i8bAPLPmNDcxYMpKvrLUi8.crl (hash: RQBixXeK5u5/fOS7uxrY5J8L+AqKdgAkQcaBH9yLY9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAa55i8bAPLPmNDcxYMpKvrLUi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:9a:ad:9b:89:cb:63:5e:e6:bd:98:a0:c6:4f:40:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4806b9e62f1b00f2cf98d0dcc583292afacb522f
Validity
Not Before: Mar 28 04:01:30 2026 GMT
Not After : Mar 29 04:01:30 2026 GMT
Subject: CN=9cdf0473e4d273a21559ecc48342f896df88a336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:bb:cb:ce:0b:3a:49:99:f1:c4:42:de:59:e5:
b2:fd:c7:9b:68:96:14:05:cb:4d:ee:4f:80:0f:38:
e4:59:06:d3:4f:93:e8:f8:21:43:d0:77:df:e2:59:
ff:c1:84:10:fb:b7:29:c7:a3:46:f1:9d:7e:05:86:
4f:69:e1:51:ee:87:73:4c:57:d4:c0:47:bf:db:42:
cc:07:03:c0:b5:db:d3:5c:bc:4f:bd:70:98:65:fe:
41:28:7e:5c:60:c8:69:13:53:49:de:d0:ea:f1:1b:
54:a2:60:d7:49:16:be:98:5d:8a:7b:6e:ae:a9:a2:
45:67:ef:a7:bd:62:cd:51:55:1f:8d:48:ec:7b:64:
5c:f8:32:6d:80:d4:a2:b1:31:d5:b7:4a:54:c9:65:
82:be:2a:fb:d5:d4:24:2d:56:95:26:e8:01:0a:26:
3e:28:5e:d0:9b:fb:e3:a5:f0:ea:13:df:5e:13:15:
62:f6:6f:cd:e3:67:74:09:20:af:3c:1e:87:15:49:
72:6c:db:fc:a2:9e:0f:ed:2f:85:1a:bf:4b:01:85:
74:04:6d:59:cb:c1:57:c8:fb:98:86:0d:64:35:71:
db:01:2b:d1:41:16:c5:5f:54:c2:d5:f3:cc:3f:b3:
a7:4b:c2:aa:ac:1b:e0:d4:b0:46:98:6a:d4:10:aa:
e5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:DF:04:73:E4:D2:73:A2:15:59:EC:C4:83:42:F8:96:DF:88:A3:36
X509v3 Authority Key Identifier:
keyid:48:06:B9:E6:2F:1B:00:F2:CF:98:D0:DC:C5:83:29:2A:FA:CB:52:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAa55i8bAPLPmNDcxYMpKvrLUi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:9f:0b:42:4f:7a:05:51:f1:cd:cf:50:bd:07:73:1c:87:f6:
d5:af:56:13:bb:cc:78:b5:aa:f9:35:3d:04:81:7f:d3:b3:20:
5d:d8:5d:19:ab:86:6d:2c:cf:d7:be:92:26:7d:48:b9:12:f7:
cb:b4:7d:83:e2:b4:a1:3a:49:06:57:e2:34:73:c2:08:22:f6:
46:0b:49:5e:76:3b:fe:9c:25:b6:43:a5:dc:27:7f:ed:15:3a:
38:cc:e5:ec:1f:31:84:bd:a2:e8:c1:0b:f3:0e:86:3c:11:27:
b4:be:06:51:6f:2d:a4:5d:b9:a3:6c:fe:13:5e:3f:08:42:f5:
ee:e9:31:26:a2:8d:b4:76:f6:89:1b:71:0b:12:e7:bf:47:f1:
49:60:e7:1b:2b:5b:d6:8e:53:ce:aa:e1:81:36:5f:8c:ae:73:
67:8b:12:7f:4b:c6:e3:5a:49:f8:b3:6f:27:5c:fc:81:a5:76:
bd:5b:ea:fe:1b:9a:d0:14:26:4e:a9:90:35:d6:d4:7b:fd:40:
64:d0:ae:88:3b:8f:03:83:1a:9d:a8:df:9c:b0:76:96:21:88:
66:73:09:e9:51:be:48:07:07:4c:0f:af:4b:98:eb:38:a7:ea:
12:ee:43:c1:33:69:cf:5b:10:7e:65:29:14:9f:d9:b4:85:2f:
ec:df:83:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:39:09 2026 by rpki-client