Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.mft
File: SdFaEOdHEJNsuMN7fG9fH7OMEh8.mft (raw, json)
Hash identifier: 31vfU+7L7KBsGHlRKM1/SI36QO2N0oSsUMsZiGnFyl8=
Subject key identifier: FA:F8:1D:DB:2E:15:4D:4E:60:09:69:6A:0E:AD:1C:16:15:DE:60:A3
Authority key identifier: 49:D1:5A:10:E7:47:10:93:6C:B8:C3:7B:7C:6F:5F:1F:B3:8C:12:1F
Certificate issuer: /CN=49d15a10e74710936cb8c37b7c6f5f1fb38c121f
Certificate serial: 019CAAFD995507D040B6C34A7C16BF97FF7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SdFaEOdHEJNsuMN7fG9fH7OMEh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.mft
Manifest number: 0E22
Signing time: Sun 01 Mar 2026 20:01:12 +0000
Manifest this update: Sun 01 Mar 2026 20:01:12 +0000
Manifest next update: Mon 02 Mar 2026 20:01:12 +0000
Files and hashes: 1: SdFaEOdHEJNsuMN7fG9fH7OMEh8.crl (hash: QCpoMAOp1ZVvcFlR+Agxe7CoaAbmB6agKdIOAnCe76E=)
2: Wvn-6bOtVas0qXKxXybSRbQtZBc.roa (hash: 1X1eFGWJ8hZe2T0rJSVL9R4hPe90VqVV+Y7boPOk/og=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SdFaEOdHEJNsuMN7fG9fH7OMEh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:99:55:07:d0:40:b6:c3:4a:7c:16:bf:97:ff:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49d15a10e74710936cb8c37b7c6f5f1fb38c121f
Validity
Not Before: Mar 1 20:01:12 2026 GMT
Not After : Mar 2 20:01:12 2026 GMT
Subject: CN=faf81ddb2e154d4e6009696a0ead1c1615de60a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:15:99:77:14:9b:5a:21:ab:bc:74:64:cd:f3:
f6:a4:d3:59:9b:02:ef:fc:52:eb:75:a4:15:53:18:
73:b3:3e:f0:25:a4:af:42:e9:ac:d3:3f:a4:a2:2f:
63:62:f4:35:04:e6:32:db:a3:c4:c1:bf:7d:e1:16:
e7:88:af:0a:67:cf:8c:f8:95:af:99:4b:8f:07:2d:
67:49:61:e6:fc:50:c9:9f:5c:97:89:f1:87:01:c1:
ea:5a:d8:d3:07:ab:70:49:40:ce:02:2d:dd:c7:6d:
ff:58:88:06:00:a4:bc:a2:df:c1:44:a0:74:12:5e:
a6:5a:dd:db:2d:1d:f6:79:84:16:2e:f7:38:aa:df:
2f:5e:43:51:ef:fd:4d:d1:4e:9f:88:2b:3f:33:06:
3e:fa:f7:ad:dd:62:98:b6:8d:5d:ed:26:bd:40:2d:
57:57:76:dd:1c:b4:e1:82:f8:4c:58:10:b4:ca:8c:
8c:17:ce:a3:de:cd:ec:68:d1:99:9d:69:86:ab:50:
01:43:e5:d0:c4:35:c4:aa:f0:e8:e7:42:87:9f:e2:
37:b0:90:d2:af:a8:de:0c:71:1c:c3:03:cd:26:ce:
9e:15:72:3c:f8:01:a4:1f:06:ef:ec:69:61:a8:2f:
3a:2c:7f:8b:68:6e:ec:46:ce:c4:75:56:aa:fe:66:
34:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F8:1D:DB:2E:15:4D:4E:60:09:69:6A:0E:AD:1C:16:15:DE:60:A3
X509v3 Authority Key Identifier:
keyid:49:D1:5A:10:E7:47:10:93:6C:B8:C3:7B:7C:6F:5F:1F:B3:8C:12:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SdFaEOdHEJNsuMN7fG9fH7OMEh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/814325-2191-41c6-b2ed-e229a42c4085/1/SdFaEOdHEJNsuMN7fG9fH7OMEh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:f9:65:90:c5:59:85:87:71:01:6b:32:35:6f:0e:17:5f:ce:
96:d2:9c:83:2d:e0:e9:7c:ef:93:19:07:32:02:65:e0:35:00:
20:29:bf:20:98:3f:2f:53:d9:c6:eb:eb:4b:a9:76:61:d3:2f:
9d:8b:02:aa:50:34:fb:32:61:94:0d:60:89:d9:60:ca:08:3e:
27:b4:b8:5d:93:6d:e6:b1:6f:9b:47:49:c2:fe:e1:d1:8f:0b:
bf:08:c3:49:69:44:e5:dd:82:05:43:64:71:ea:a3:9e:fe:4a:
6e:5e:8f:d9:08:c1:71:4d:cd:2b:32:cc:36:7c:98:c3:60:2d:
13:37:d0:e4:47:d1:d9:97:a6:1c:85:80:ae:4f:a7:93:39:60:
cf:d4:1b:ef:79:38:ec:c9:28:bd:fe:ff:4d:62:4d:7f:1f:eb:
e1:ac:4f:73:06:ba:13:44:09:93:23:4c:89:c1:d1:65:74:39:
0b:e9:c9:65:9c:9d:ab:9a:5e:89:8c:ec:b3:cc:81:75:ee:80:
ba:cf:96:55:33:12:24:e0:36:96:ad:66:85:fb:e8:e6:7e:fa:
e6:3a:6f:52:e6:df:dd:86:a0:fa:ef:f9:2b:69:ce:8e:b3:c1:
a2:e0:ff:b1:47:c9:eb:30:46:a5:43:35:30:24:1b:c3:1e:8b:
28:a9:e3:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:47:36 2026 by rpki-client