Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.mft
File: SAw7k_8qNPv6WuglVvZwNAy11ck.mft (raw, json)
Hash identifier: 68v9s20aTfd+ChDH5iSLKLUtV1Mgx1iDmzKQpnuI50U=
Subject key identifier: DE:F4:D4:9D:BA:35:B3:9D:A6:D4:8E:3D:BA:68:42:58:1F:2E:82:27
Authority key identifier: 48:0C:3B:93:FF:2A:34:FB:FA:5A:E8:25:56:F6:70:34:0C:B5:D5:C9
Certificate issuer: /CN=480c3b93ff2a34fbfa5ae82556f670340cb5d5c9
Certificate serial: 019D2929874A698EA57B3D4AFC39D91D7AC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAw7k_8qNPv6WuglVvZwNAy11ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 08:01:20 +0000
Manifest this update: Thu 26 Mar 2026 08:01:20 +0000
Manifest next update: Fri 27 Mar 2026 08:01:20 +0000
Files and hashes: 1: J5oJ0yY-0bzK1HfAz1Y_hlgSX8M.roa (hash: llpZQ9/tPuCwPDtcXQrfq/Zd/gdnLAnw8oHK6Zm0ygk=)
2: SAw7k_8qNPv6WuglVvZwNAy11ck.crl (hash: I8+eS4P1h+ncltJtckGweMW/s3M9R59qGwo0zPrpfR0=)
3: nAH3H9obEDKPlNqoUXx9V7rYSxw.roa (hash: VQ7cf7+kTzq+f0dyjeb2mnlvMFjzIzqtRjcZld88OE0=)
4: qaQdus1BOleDA5YBatWLdmpF4V8.roa (hash: qoEh+iI2D1MSwoWJBnblgqwJNtj9VkryalvSfDPlSuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAw7k_8qNPv6WuglVvZwNAy11ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:87:4a:69:8e:a5:7b:3d:4a:fc:39:d9:1d:7a:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480c3b93ff2a34fbfa5ae82556f670340cb5d5c9
Validity
Not Before: Mar 26 08:01:20 2026 GMT
Not After : Mar 27 08:01:20 2026 GMT
Subject: CN=def4d49dba35b39da6d48e3dba6842581f2e8227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9e:19:92:77:2b:4c:db:f0:9e:63:df:51:3f:
8c:d0:b5:d7:92:5e:b3:67:32:52:cc:6d:2e:1b:49:
fe:8f:88:80:16:22:09:93:d7:e5:0a:66:b4:a3:c2:
01:a6:7d:ac:33:55:d6:db:92:a8:85:0a:16:99:c9:
12:97:16:9f:f6:65:13:6d:d8:b5:fa:2b:a0:62:ae:
ec:a2:5e:d3:55:1e:17:fc:90:95:11:90:1d:bc:96:
3f:00:9b:93:dd:43:1b:d2:28:c2:89:64:6a:e9:c7:
21:81:d5:e7:a3:71:08:ed:0c:37:de:8f:b4:f5:b6:
54:66:8b:04:c5:12:84:a3:e1:36:8c:e7:5f:9a:de:
32:3e:ff:fe:7d:ff:a7:b9:21:ce:c2:ce:00:ce:6c:
fe:10:5a:77:f7:57:5f:c0:e3:e5:e8:f6:49:ea:7f:
49:9a:01:22:1b:ae:58:85:71:cb:9f:ae:bd:5b:0b:
b5:44:8d:91:60:1f:f0:92:74:38:7d:9e:2e:65:ed:
ae:3b:55:9a:25:fb:af:28:74:ce:99:c2:ff:c7:84:
a8:11:13:8e:b2:17:22:d1:e1:0a:d5:39:f1:8c:43:
32:1d:ff:1f:96:a8:03:dc:be:21:37:ef:d2:98:e6:
6a:de:ed:6e:e7:e4:38:ca:bd:a6:30:a8:42:1d:30:
07:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:F4:D4:9D:BA:35:B3:9D:A6:D4:8E:3D:BA:68:42:58:1F:2E:82:27
X509v3 Authority Key Identifier:
keyid:48:0C:3B:93:FF:2A:34:FB:FA:5A:E8:25:56:F6:70:34:0C:B5:D5:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAw7k_8qNPv6WuglVvZwNAy11ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:9b:af:a8:bd:cf:79:34:9e:63:d4:6b:dc:a5:d4:82:f9:86:
44:cb:8c:43:6b:5e:25:f2:f9:4a:c5:d0:a8:00:10:2a:99:02:
b1:72:a4:aa:07:71:30:ac:7e:1b:f4:67:37:a4:7c:61:ab:b0:
bb:f5:53:2e:6a:fa:98:d1:16:6b:3e:6d:b6:41:88:35:f8:1d:
1f:0b:c2:59:9b:47:83:92:d7:89:27:4c:c5:00:10:a4:e7:3c:
3f:61:c5:0a:72:0e:59:d4:ba:e2:61:1d:f3:f7:e2:22:7b:f5:
85:3a:03:a2:34:62:f6:2b:e8:17:da:a8:2f:d5:e8:4d:de:cb:
3c:b5:57:4a:a3:11:c5:b2:20:dd:9c:ec:b6:24:d7:8a:e7:75:
4f:71:52:37:94:16:fa:7a:2d:6b:b5:82:47:13:81:c4:a5:16:
d3:e4:19:64:97:03:0f:ed:80:ce:78:92:25:6a:f3:aa:24:83:
5a:91:a3:66:da:07:a5:b0:07:66:f9:cf:19:a9:e0:ce:db:c3:
e5:24:f3:e6:af:83:d7:87:21:4e:ea:07:0f:55:eb:e8:fc:07:
20:2a:ec:36:69:36:6d:4c:05:41:4b:be:89:b4:b2:44:f3:82:
e2:60:91:80:82:be:a1:eb:d6:5f:00:f8:81:88:7f:39:15:9e:
7d:98:83:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:00:06 2026 by rpki-client