Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/f0f5ff-a820-4dba-8ee1-cda57426de22/1/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.mft
File: SAQjqhfQT1bGkAQDRdZ2K7_R-Is.mft (raw, json)
Hash identifier: hAQ+ohA+ihBM8GwB8t0VXOpoQQbzQ38Bxv/PI3huFl8=
Subject key identifier: F4:AF:67:35:1A:C5:39:EB:1B:4B:09:C1:EA:EE:FF:3D:8E:DB:FF:7C
Authority key identifier: 48:04:23:AA:17:D0:4F:56:C6:90:04:03:45:D6:76:2B:BF:D1:F8:8B
Certificate issuer: /CN=480423aa17d04f56c690040345d6762bbfd1f88b
Certificate serial: 019D99D0DEEF0C51C16D8D6872780185076C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/f0f5ff-a820-4dba-8ee1-cda57426de22/1/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.mft
Manifest number: 137A
Signing time: Fri 17 Apr 2026 05:01:35 +0000
Manifest this update: Fri 17 Apr 2026 05:01:35 +0000
Manifest next update: Sat 18 Apr 2026 05:01:35 +0000
Files and hashes: 1: C3Hq4w7BM7_K6mHHdh-CUZ1B7D0.roa (hash: Ek13lasSbyTfirrWZx3Y8k/3TLG7Wg/4AVTy2yQF+F0=)
2: SAQjqhfQT1bGkAQDRdZ2K7_R-Is.crl (hash: 9TVnpRcJiuPFDxCUNSdeipIlthHXceZqnIcKHCH1A60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/f0f5ff-a820-4dba-8ee1-cda57426de22/1/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/f0f5ff-a820-4dba-8ee1-cda57426de22/1/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:de:ef:0c:51:c1:6d:8d:68:72:78:01:85:07:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480423aa17d04f56c690040345d6762bbfd1f88b
Validity
Not Before: Apr 17 05:01:35 2026 GMT
Not After : Apr 18 05:01:35 2026 GMT
Subject: CN=f4af67351ac539eb1b4b09c1eaeeff3d8edbff7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:ba:e2:d5:4a:55:87:10:dc:29:8a:52:28:25:
54:32:bd:72:71:40:66:b7:98:6b:24:3e:0a:16:14:
4a:bd:e6:58:48:af:98:57:dc:e5:58:63:b2:f9:26:
44:40:28:a5:44:1a:f4:bc:1f:a2:14:32:33:fc:15:
63:04:fa:8b:b6:a7:f1:da:c7:49:97:7c:28:60:5b:
a5:e7:2d:28:cd:10:92:b8:7b:b2:0c:11:0b:d7:d9:
1a:bb:94:9a:8f:6a:7a:91:ac:f2:c4:25:18:ee:d5:
82:4e:73:1c:8a:6e:1c:c9:5c:9c:15:df:c9:72:62:
64:5e:ca:ec:5c:5b:62:39:72:9c:b0:7f:91:e4:8e:
6d:e7:fb:ae:b0:d7:b5:c1:38:2e:2e:da:30:1e:c5:
a7:9a:b9:ad:5d:80:d3:76:d8:00:76:ab:d0:b6:5f:
46:af:6f:b5:5a:6a:3c:30:31:6d:17:8f:2c:8d:b6:
d6:b1:b3:e0:4f:47:f2:27:e6:9e:d2:c5:d5:99:20:
43:1c:e0:8f:c6:77:0f:08:ea:b2:8e:aa:78:71:c7:
ef:49:3f:28:63:8a:7d:6a:ad:b9:04:b0:3c:a3:d5:
83:a7:94:1b:a5:08:7a:f3:14:a1:c6:a8:82:d6:6c:
c5:c5:58:c5:10:ab:77:e8:50:1c:cb:73:90:7d:b0:
0d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:AF:67:35:1A:C5:39:EB:1B:4B:09:C1:EA:EE:FF:3D:8E:DB:FF:7C
X509v3 Authority Key Identifier:
keyid:48:04:23:AA:17:D0:4F:56:C6:90:04:03:45:D6:76:2B:BF:D1:F8:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/f0f5ff-a820-4dba-8ee1-cda57426de22/1/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/f0f5ff-a820-4dba-8ee1-cda57426de22/1/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:61:48:9a:f9:82:a3:06:ca:8b:c3:d6:5e:9e:02:cd:8f:82:
d5:b7:88:3b:4c:ad:d9:a4:c1:a8:2f:4f:7b:92:eb:25:bb:ac:
77:d6:bc:47:4c:9b:05:28:6f:b5:61:44:41:2c:17:ad:12:c1:
10:c9:99:18:d3:98:88:88:9f:22:65:52:28:f1:74:17:e0:46:
35:a8:8d:c6:61:80:49:3c:c8:cd:bb:c8:dd:24:42:6a:04:c5:
d7:ec:08:7c:71:85:c5:71:ae:04:40:c9:57:fb:76:9a:35:d3:
30:ed:5b:14:3a:66:12:0c:eb:88:bd:77:78:36:5e:12:55:28:
e4:d5:d3:bd:fd:db:6a:db:db:b5:ad:6a:ea:28:db:51:ce:a1:
f4:a8:d8:8f:f5:11:82:6c:93:42:a1:08:13:d7:da:b4:09:67:
55:94:ad:c0:cc:5a:7a:5d:43:5d:4d:bd:7d:ad:fc:9f:8c:00:
a4:fa:17:2f:30:4a:01:90:6b:2b:22:eb:7d:45:6f:74:36:0a:
24:7f:b7:43:5f:48:da:af:e1:a7:76:74:5f:2d:cb:22:23:b8:
08:25:f7:4a:fd:b0:49:88:79:e8:e8:17:87:29:e6:b4:55:9e:
f8:5a:70:3d:71:63:d4:95:c7:b7:54:f1:5a:db:7b:4e:7f:a1:
f8:d8:8d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:44:21 2026 by rpki-client