Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/727267-421a-404b-9523-7285814344f3/1/SACbRi9GjH0BDdZBirzzFxK-Qyc.mft
File: SACbRi9GjH0BDdZBirzzFxK-Qyc.mft (raw, json)
Hash identifier: lIrFPPN4bkEOeACkyAXYUZQHavII4ziBdaRqFwOnZaY=
Subject key identifier: 84:28:5B:23:A4:BC:04:CF:94:C3:3A:36:D6:3F:A1:D1:81:DA:99:D2
Authority key identifier: 48:00:9B:46:2F:46:8C:7D:01:0D:D6:41:8A:BC:F3:17:12:BE:43:27
Certificate issuer: /CN=48009b462f468c7d010dd6418abcf31712be4327
Certificate serial: 01A12466C0E763E8BEA2CCB73E49C0CE9A67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SACbRi9GjH0BDdZBirzzFxK-Qyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/727267-421a-404b-9523-7285814344f3/1/SACbRi9GjH0BDdZBirzzFxK-Qyc.mft
Manifest number: D7
Signing time: Sat 10 Oct 2026 06:01:16 +0000
Manifest this update: Sat 10 Oct 2026 06:01:16 +0000
Manifest next update: Sun 11 Oct 2026 06:01:16 +0000
Files and hashes: 1: RZ3tel9syTFm_FDnewv1LtVhGaE.asa (hash: ZEPAWlh3qs8XE61M2XfXTiI9UFnTCQ0FVnCjRwgvbfQ=)
2: SACbRi9GjH0BDdZBirzzFxK-Qyc.crl (hash: 12tOW5aPYr0VJpxplvGa47bc/XcZBw3BO4incFoXxi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/727267-421a-404b-9523-7285814344f3/1/SACbRi9GjH0BDdZBirzzFxK-Qyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/727267-421a-404b-9523-7285814344f3/1/SACbRi9GjH0BDdZBirzzFxK-Qyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SACbRi9GjH0BDdZBirzzFxK-Qyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 06:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:24:66:c0:e7:63:e8:be:a2:cc:b7:3e:49:c0:ce:9a:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48009b462f468c7d010dd6418abcf31712be4327
Validity
Not Before: Oct 10 06:01:16 2026 GMT
Not After : Oct 11 06:01:16 2026 GMT
Subject: CN=84285b23a4bc04cf94c33a36d63fa1d181da99d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6b:d9:1a:59:f2:21:25:45:82:49:a6:31:fb:
1c:99:de:c7:26:38:31:fc:9b:ee:c3:4b:69:74:a2:
1c:36:23:51:8f:06:88:3b:5e:54:fd:2f:9b:60:56:
bd:bc:60:3c:4f:e5:92:a9:76:66:41:ea:ad:7b:b2:
7c:88:53:2b:57:7d:b2:df:af:52:c4:e6:83:b8:98:
e5:f5:de:a8:d1:37:0d:9d:3d:c1:92:aa:04:ad:ed:
f4:c6:89:9d:a4:e9:db:42:8d:0a:3a:c1:29:66:20:
2d:8e:0d:d1:59:96:af:d2:5f:ef:bf:ac:12:1c:4a:
9e:15:8a:06:d7:58:c7:a1:6c:a8:05:00:68:db:f4:
06:11:4d:f6:5d:0e:80:2e:76:18:fe:41:8f:ae:42:
12:5e:8d:bb:4c:ae:32:b0:8d:f3:2c:b6:c9:fb:da:
1f:06:00:ec:17:45:20:71:32:8a:1f:db:20:f3:22:
b7:d6:da:f8:d7:2a:d6:aa:12:78:08:d6:c6:09:f9:
bb:5d:a2:76:89:78:fc:5d:49:fb:ab:c6:03:19:ac:
53:c5:c7:1f:94:38:f1:cd:d0:53:a1:7f:10:9b:bd:
a9:97:99:10:94:04:1e:b6:68:b8:72:06:e4:2a:ac:
ed:98:e0:23:a0:a3:7b:ae:e7:c0:9d:53:2e:1a:a2:
8a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:28:5B:23:A4:BC:04:CF:94:C3:3A:36:D6:3F:A1:D1:81:DA:99:D2
X509v3 Authority Key Identifier:
keyid:48:00:9B:46:2F:46:8C:7D:01:0D:D6:41:8A:BC:F3:17:12:BE:43:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SACbRi9GjH0BDdZBirzzFxK-Qyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/727267-421a-404b-9523-7285814344f3/1/SACbRi9GjH0BDdZBirzzFxK-Qyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/727267-421a-404b-9523-7285814344f3/1/SACbRi9GjH0BDdZBirzzFxK-Qyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:5f:24:cc:ee:79:a0:4c:c2:3d:6a:1c:1f:82:b0:6f:c7:ef:
4f:8f:fd:13:eb:78:6c:cb:06:41:17:7c:7a:bc:8e:b2:00:b5:
5d:de:f4:2e:91:4f:2e:9d:6b:7b:81:c3:9a:70:b7:e5:c3:cf:
e3:ec:84:dc:e3:f9:eb:90:42:7c:29:3d:1e:0d:35:7e:73:8d:
8d:13:50:91:1f:cb:ec:8c:b2:12:93:25:51:d6:07:c4:2e:4c:
b0:98:a0:21:2d:f7:ba:34:f8:fe:88:19:04:52:cd:67:7e:24:
32:fd:61:1a:1e:8f:41:73:c3:64:a6:73:6c:c2:ab:b0:b8:8d:
8e:0c:0a:d5:6c:91:e1:43:d9:98:6c:ce:8a:dc:c6:ec:42:91:
37:db:85:5a:56:ff:b9:9c:26:46:09:3e:f4:de:9f:35:3f:43:
d3:22:e3:f8:50:db:4a:c6:40:1a:59:1a:3c:f8:ad:9f:3a:2c:
bc:1b:76:cf:e2:79:c0:18:28:c7:b2:ed:87:86:bf:a4:c1:98:
4c:5e:5a:c2:88:4c:3b:72:42:03:41:00:e3:0d:c8:36:08:36:
d6:28:01:03:63:36:c4:42:26:57:e0:03:bb:24:bc:cf:aa:2c:
f6:05:a3:a0:a0:62:ee:3d:e9:8d:27:3b:1b:96:a7:e4:22:d5:
80:23:21:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:54:14 2026 by rpki-client