Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft
File: sFoGBOdodvoD5q2Gh_odtsY9OQg.mft (raw, json)
Hash identifier: G2JN9QB6TqUQeTdVviigJSNErGcBxOTEl8+Qn5SflZ4=
Subject key identifier: 49:F9:11:3F:A0:53:DF:FC:EB:35:0E:EA:9B:37:1A:53:57:0D:7B:1F
Authority key identifier: B0:5A:06:04:E7:68:76:FA:03:E6:AD:86:87:FA:1D:B6:C6:3D:39:08
Certificate issuer: /CN=b05a0604e76876fa03e6ad8687fa1db6c63d3908
Certificate serial: 019D9B1981EAF9689DEBCA95A66E4C2AF98C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFoGBOdodvoD5q2Gh_odtsY9OQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 11:00:33 +0000
Manifest this update: Fri 17 Apr 2026 11:00:33 +0000
Manifest next update: Sat 18 Apr 2026 11:00:33 +0000
Files and hashes: 1: YVVSxC4wbNTE6amPOj_aUWu9KmQ.roa (hash: jx8KSb9gYYltGS0dfqO/0sgILL/tPjue23+E+n9mHYY=)
2: jvfuzQB2Ic8Lkn_v-fU0vD7KZUI.roa (hash: wTQiDytgLASjhAyRpE2k4salmmSbcvPsNpIE4v8G2dw=)
3: sFoGBOdodvoD5q2Gh_odtsY9OQg.crl (hash: +nJcGM9cStAhc37jbYGnQU7huDq9nOj/LKGOoWug5tI=)
4: xgkVb7jGmrVMuFNZV5uC54rwBLc.roa (hash: U7zPiRVnuj8K+WrtUv0kblwys87NbJBaEKGAwaoWJcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/sFoGBOdodvoD5q2Gh_odtsY9OQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:81:ea:f9:68:9d:eb:ca:95:a6:6e:4c:2a:f9:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05a0604e76876fa03e6ad8687fa1db6c63d3908
Validity
Not Before: Apr 17 11:00:33 2026 GMT
Not After : Apr 18 11:00:33 2026 GMT
Subject: CN=49f9113fa053dffceb350eea9b371a53570d7b1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:5d:32:e4:04:2b:00:c9:68:18:7a:36:ae:ba:
48:12:75:02:12:0f:3d:9d:fa:81:9d:76:0b:aa:3c:
a9:fa:98:15:5d:0a:6c:f1:80:85:77:fe:99:8d:3d:
f3:d8:47:ad:c5:14:d3:e9:2e:ff:28:2c:e0:61:9a:
95:61:e1:a3:f5:f8:43:7e:5a:c3:d2:c8:32:ad:b8:
73:61:cb:3d:db:b0:0e:53:6c:8c:14:b3:e8:d2:58:
f9:d7:a1:ac:a4:ca:5d:47:12:a9:2c:d0:3a:2c:68:
16:65:6d:98:9d:2d:d3:8b:05:eb:7b:51:e7:51:21:
69:54:c8:80:a4:2e:46:dc:99:6c:3f:10:e8:b1:b4:
bd:79:61:85:9b:f1:17:8f:3e:a5:9d:53:bf:3f:c7:
e5:83:22:44:3d:ff:24:ce:ad:2b:3c:98:0b:73:0e:
0c:16:62:92:c4:d5:ea:61:db:9f:2f:6f:4b:96:97:
2a:1e:a6:bc:2e:98:50:bf:46:1d:b0:87:52:d0:57:
29:e8:4c:ed:26:4d:32:68:bf:e5:11:0d:c2:22:02:
3d:33:f5:4d:0b:76:6e:dd:f6:c7:ff:83:4b:5a:60:
3b:33:cc:db:eb:f9:ce:c5:c1:19:23:17:45:bf:a7:
b5:56:da:40:54:1a:31:f8:a0:a3:97:33:c6:4a:f6:
a4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F9:11:3F:A0:53:DF:FC:EB:35:0E:EA:9B:37:1A:53:57:0D:7B:1F
X509v3 Authority Key Identifier:
keyid:B0:5A:06:04:E7:68:76:FA:03:E6:AD:86:87:FA:1D:B6:C6:3D:39:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFoGBOdodvoD5q2Gh_odtsY9OQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:94:4a:de:9d:9f:3e:9c:59:6e:15:b7:34:ad:75:2e:ee:3d:
21:af:49:d7:2c:22:48:81:8c:68:16:a1:04:e2:80:55:f4:29:
1f:50:6d:ac:43:25:0e:7c:29:aa:33:df:e1:8b:ee:a0:34:ac:
20:ee:a3:df:5f:74:9f:b6:4c:cc:23:2c:ea:aa:0a:4e:61:25:
f5:0f:dc:fb:7f:31:a7:62:e7:7f:3e:d9:04:1f:1e:d4:7a:6c:
e2:08:4f:41:8f:9f:62:8d:b6:c8:d1:50:b6:67:1d:91:e0:f0:
f9:bb:42:28:7b:d2:1c:89:53:d8:74:1e:f2:6f:ae:38:fb:72:
40:8c:73:f6:27:94:85:e4:da:9b:28:e4:0a:75:68:4c:04:cb:
01:05:53:66:74:a8:f2:b1:bc:4e:da:e6:94:bc:06:01:98:be:
23:7a:f4:91:06:57:69:72:08:d8:de:98:e4:05:e1:e6:52:4e:
65:d8:19:97:6e:94:74:6e:2f:93:32:0f:88:cd:2d:7f:7d:7b:
e2:54:53:cd:f3:19:57:8c:dc:c8:ea:66:5c:fc:45:41:41:b1:
53:d9:e9:d9:de:9a:aa:c6:f1:78:47:be:d6:4b:84:6f:3a:bc:
d5:fe:67:eb:b5:f9:ac:b6:49:67:a0:7d:65:a6:c0:d9:1c:65:
76:3b:2a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:39:24 2026 by rpki-client