Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.mft
File: SGeaItDbyYDV1ZszNnn5ObmuPyU.mft (raw, json)
Hash identifier: 35prp7sJhxHO5UH5Tcca2lwMUBmRX+5iOfqmb+biWRE=
Subject key identifier: A3:AA:E9:F4:7D:30:57:94:F1:A9:C2:85:9D:49:B0:19:FB:FC:20:91
Authority key identifier: 48:67:9A:22:D0:DB:C9:80:D5:D5:9B:33:36:79:F9:39:B9:AE:3F:25
Certificate issuer: /CN=48679a22d0dbc980d5d59b333679f939b9ae3f25
Certificate serial: 019D97AB426FAAA937333ACACA540E4A21EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGeaItDbyYDV1ZszNnn5ObmuPyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.mft
Manifest number: 18C2
Signing time: Thu 16 Apr 2026 19:01:16 +0000
Manifest this update: Thu 16 Apr 2026 19:01:16 +0000
Manifest next update: Fri 17 Apr 2026 19:01:16 +0000
Files and hashes: 1: Cb3GNV7sEZagImQ0z2CzEtPQStc.roa (hash: WKt5YxPaUYaqlF+1A2ePA/t2PiJgruaRiTwSTzv9PKY=)
2: SGeaItDbyYDV1ZszNnn5ObmuPyU.crl (hash: iN8TehVTbwlQmis5GDIT8WF7dapDSH2VJzUA5Uw0f0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SGeaItDbyYDV1ZszNnn5ObmuPyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:ab:42:6f:aa:a9:37:33:3a:ca:ca:54:0e:4a:21:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48679a22d0dbc980d5d59b333679f939b9ae3f25
Validity
Not Before: Apr 16 19:01:16 2026 GMT
Not After : Apr 17 19:01:16 2026 GMT
Subject: CN=a3aae9f47d305794f1a9c2859d49b019fbfc2091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ea:01:06:69:c3:0a:be:24:f9:ce:04:a5:5d:
75:07:0d:54:e2:60:98:1d:95:23:c0:e4:23:19:8c:
d7:76:e4:51:e4:7c:f6:69:6c:5c:78:c1:cf:ca:c4:
46:5c:46:52:c9:fe:23:e8:e6:c1:a9:1e:06:89:87:
cc:a2:36:e8:45:ca:e0:40:12:dc:db:91:4d:48:8e:
21:0d:06:ba:d3:7f:ca:ca:8f:46:89:fa:2e:5f:17:
22:aa:8a:6e:38:b9:19:9b:35:19:05:6a:8f:6d:ce:
e9:1a:09:72:b8:7b:53:d2:96:eb:6e:77:a9:b5:16:
3b:bb:fd:3e:4b:8f:95:40:e7:44:f4:18:2f:47:24:
4c:e9:06:c9:ba:c3:dd:7e:71:27:56:d5:13:86:c8:
51:1c:ae:54:b7:f6:b0:56:cf:92:d2:ce:6d:41:3a:
90:3a:55:c3:bf:04:e0:c5:5a:78:38:88:a8:c5:44:
78:a6:96:8d:fa:c5:db:93:9e:76:b6:aa:d2:d1:08:
2b:02:a6:8a:6a:ab:fd:7d:5b:cc:9d:0d:74:70:54:
0f:d9:31:ec:3d:80:27:0c:dd:f2:9f:c5:16:83:46:
3e:4e:9d:ff:ed:ea:49:03:a9:b7:ec:dd:4b:72:4e:
ef:0f:f1:f3:89:59:2f:e5:f9:50:0d:06:5b:c1:c4:
c8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:AA:E9:F4:7D:30:57:94:F1:A9:C2:85:9D:49:B0:19:FB:FC:20:91
X509v3 Authority Key Identifier:
keyid:48:67:9A:22:D0:DB:C9:80:D5:D5:9B:33:36:79:F9:39:B9:AE:3F:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGeaItDbyYDV1ZszNnn5ObmuPyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:4c:f5:fc:d4:ec:8f:b1:93:aa:84:d2:a5:25:f1:18:17:a3:
72:cf:9f:c5:11:11:a4:f2:04:e3:95:62:89:61:22:e5:7a:4f:
f5:5c:c2:34:f2:8c:d8:9b:a8:84:38:1b:86:7f:a4:d2:4c:a0:
73:84:5b:3c:be:7d:41:5c:f0:df:85:3a:26:91:47:12:e3:5c:
ee:ec:5e:21:81:f8:c6:04:42:b0:4e:3e:6c:ba:4a:7e:b9:91:
0c:0b:b7:f6:a8:de:f5:8f:a1:27:8f:ff:a9:66:20:63:cf:d7:
c0:cb:8b:8c:5d:13:f3:01:a9:b4:8f:c1:54:22:aa:30:19:e1:
82:a0:8b:44:b9:b4:a7:75:01:83:d7:73:99:71:fd:93:8c:95:
38:8e:bd:51:42:a6:d9:eb:9e:d2:6a:e9:5d:96:4e:e7:8f:44:
af:3d:93:f4:3b:3d:2e:a6:e7:12:4e:6d:da:40:66:4a:bb:43:
fc:98:ec:34:bf:e2:9d:9d:9d:4e:9e:cc:0e:d4:09:f2:0e:f4:
27:94:23:2a:66:52:31:b1:8a:af:58:93:34:98:cc:6a:d3:f4:
20:aa:b0:5b:e1:a1:2b:6a:80:2b:d0:e8:3d:a3:38:52:00:ee:
d7:f1:6f:de:04:41:bb:d6:57:b4:71:42:0d:38:8b:b3:df:b4:
5a:11:f2:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:22:51 2026 by rpki-client