Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.mft
File: SGeaItDbyYDV1ZszNnn5ObmuPyU.mft (raw, json)
Hash identifier: ywHhvKsbzyM0TGv8HmvTTW9DYCvXvWwsfBF8M5QecaU=
Subject key identifier: E1:B6:4E:B1:90:C5:99:A8:65:0A:B4:F7:42:E6:D6:BF:EF:95:C8:6B
Authority key identifier: 48:67:9A:22:D0:DB:C9:80:D5:D5:9B:33:36:79:F9:39:B9:AE:3F:25
Certificate issuer: /CN=48679a22d0dbc980d5d59b333679f939b9ae3f25
Certificate serial: 019CAC1000AB9C30229BB9CD7E9EBBE1EC35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGeaItDbyYDV1ZszNnn5ObmuPyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 01:00:55 +0000
Manifest this update: Mon 02 Mar 2026 01:00:55 +0000
Manifest next update: Tue 03 Mar 2026 01:00:55 +0000
Files and hashes: 1: Cb3GNV7sEZagImQ0z2CzEtPQStc.roa (hash: WKt5YxPaUYaqlF+1A2ePA/t2PiJgruaRiTwSTzv9PKY=)
2: SGeaItDbyYDV1ZszNnn5ObmuPyU.crl (hash: UEZXL9ka/yQGzScHKs6I/tGPHNLr0owKTTJh2VgiV6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SGeaItDbyYDV1ZszNnn5ObmuPyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:00:ab:9c:30:22:9b:b9:cd:7e:9e:bb:e1:ec:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48679a22d0dbc980d5d59b333679f939b9ae3f25
Validity
Not Before: Mar 2 01:00:55 2026 GMT
Not After : Mar 3 01:00:55 2026 GMT
Subject: CN=e1b64eb190c599a8650ab4f742e6d6bfef95c86b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:95:a4:79:13:a5:f9:0c:ae:a7:21:11:ba:4d:
3f:66:aa:b4:40:2c:e6:cb:26:be:27:7d:72:dc:d1:
26:1b:66:3a:e9:82:ba:ed:99:7c:b2:6c:80:c4:79:
4e:b1:70:4a:ed:9e:d7:f2:7f:a1:33:90:8c:cb:24:
a2:e0:40:4f:e3:84:cc:17:bd:ac:48:e6:31:15:ac:
18:d6:b5:4c:e4:cb:d0:46:c7:c0:16:69:57:90:e9:
91:77:15:ca:1b:b5:05:d6:60:40:94:5a:dd:da:0f:
e8:16:81:c7:5d:4d:e6:46:8f:a1:9f:b5:ab:1f:23:
59:ae:3d:ee:4c:99:89:30:8c:a1:c2:98:be:f0:8a:
fa:31:f0:ad:0e:24:6e:43:03:d1:15:9a:e0:d9:80:
7b:1c:47:cd:31:bf:af:31:1e:74:5a:a0:d1:d3:b3:
4b:32:7b:c5:b3:2c:21:3d:66:80:c4:c2:5d:8b:e3:
c2:47:a5:11:4a:ad:d8:53:c3:33:9d:8b:0c:6e:72:
d1:28:f2:a0:22:46:af:7a:09:1d:99:77:92:be:38:
2d:c0:2b:3f:93:4c:bd:73:81:7c:28:39:13:ec:13:
ae:13:67:05:3a:6d:86:c0:d9:59:e5:89:79:d4:98:
ab:27:57:22:c2:3c:48:17:cd:8c:f8:da:e4:e9:84:
19:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B6:4E:B1:90:C5:99:A8:65:0A:B4:F7:42:E6:D6:BF:EF:95:C8:6B
X509v3 Authority Key Identifier:
keyid:48:67:9A:22:D0:DB:C9:80:D5:D5:9B:33:36:79:F9:39:B9:AE:3F:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGeaItDbyYDV1ZszNnn5ObmuPyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:36:f1:24:d6:12:c9:98:32:eb:05:cc:35:bc:2a:d6:df:fd:
8b:73:34:34:ee:cf:19:a5:66:75:58:6d:10:43:25:13:98:66:
33:ea:7d:fa:ef:38:31:b3:91:db:e9:d3:2d:a6:2d:72:ab:da:
c2:22:51:70:22:d0:5b:f9:a1:97:a0:22:0d:dd:0e:de:6d:2e:
2a:a2:0c:57:0e:23:d7:8c:a8:97:2e:28:23:45:5d:d6:9c:7f:
08:59:00:2e:28:4e:a5:27:3f:bf:b6:ee:5f:19:e1:e8:06:e3:
14:24:cc:c3:a7:63:8c:83:02:96:00:00:a6:49:be:c5:a2:98:
f4:db:e4:5b:ca:43:58:e8:6b:9a:be:1e:05:fe:33:0c:a6:95:
41:b1:7d:16:24:7a:eb:6b:c3:8f:d9:c9:7c:82:a2:57:48:a4:
e6:33:69:4f:ed:50:c1:63:ba:44:40:3b:40:66:98:3c:36:50:
02:84:5c:78:27:a7:df:45:58:68:70:cd:f0:fe:8f:ed:b6:97:
a3:23:2f:d1:72:07:98:1d:c8:95:30:89:b6:4e:51:70:ee:86:
d0:b1:e9:42:c4:83:43:d1:89:f1:37:eb:20:e6:45:9b:c2:30:
8f:c0:c8:5e:61:68:6a:0a:2b:cf:3e:ba:61:e0:97:97:e9:91:
59:ac:f6:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:00:40 2026 by rpki-client