Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/53696f-f973-47fb-8d79-addc6d4bb2e7/1/SanokeBtQid9xPtfvWnpq9jimIM.mft
File: SanokeBtQid9xPtfvWnpq9jimIM.mft (raw, json)
Hash identifier: AJqhcQ8wwd7py1qAIyIJ76dPV5dCI8vxLnq8Ip3E2LE=
Subject key identifier: 63:51:15:BC:DE:F9:A4:19:3F:0A:04:FD:D1:79:17:33:37:73:32:2D
Authority key identifier: 49:A9:E8:91:E0:6D:42:27:7D:C4:FB:5F:BD:69:E9:AB:D8:E2:98:83
Certificate issuer: /CN=49a9e891e06d42277dc4fb5fbd69e9abd8e29883
Certificate serial: 019CAE35F62927DEFDFE1DB385D6AC0C712E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SanokeBtQid9xPtfvWnpq9jimIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/53696f-f973-47fb-8d79-addc6d4bb2e7/1/SanokeBtQid9xPtfvWnpq9jimIM.mft
Manifest number: 184B
Signing time: Mon 02 Mar 2026 11:01:37 +0000
Manifest this update: Mon 02 Mar 2026 11:01:37 +0000
Manifest next update: Tue 03 Mar 2026 11:01:37 +0000
Files and hashes: 1: 2IRl_xTGVsHML4htKUJ_WxgAa6I.roa (hash: Whl5xYBFDPOniYmTRL6Ne857if6B4W9DGqAY9abFaZ0=)
2: SanokeBtQid9xPtfvWnpq9jimIM.crl (hash: aWbPz4FRo6K12uKAki0QiYn+Rd5yRWWh45JTiGLVazQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/53696f-f973-47fb-8d79-addc6d4bb2e7/1/SanokeBtQid9xPtfvWnpq9jimIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/53696f-f973-47fb-8d79-addc6d4bb2e7/1/SanokeBtQid9xPtfvWnpq9jimIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SanokeBtQid9xPtfvWnpq9jimIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:f6:29:27:de:fd:fe:1d:b3:85:d6:ac:0c:71:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49a9e891e06d42277dc4fb5fbd69e9abd8e29883
Validity
Not Before: Mar 2 11:01:37 2026 GMT
Not After : Mar 3 11:01:37 2026 GMT
Subject: CN=635115bcdef9a4193f0a04fdd17917333773322d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4c:47:87:49:40:77:9c:c9:dd:35:52:b3:fc:
5d:21:f7:41:5e:5e:e6:11:0f:d6:b4:83:12:6b:a6:
3a:d3:3e:eb:9c:88:59:24:cc:2a:57:2b:f0:2e:54:
9b:a5:67:bb:d5:fa:8f:23:47:c9:a4:79:2f:6e:b2:
9f:d3:6e:d7:49:7b:f6:33:2b:ca:2a:20:fd:38:dd:
d4:a2:cd:0f:98:55:57:0b:1b:bf:3a:de:e6:8f:3d:
d2:0b:4d:0d:38:c9:1b:22:72:83:e8:f4:34:b9:2b:
30:d4:cd:fc:2b:9b:90:b6:89:98:9d:12:96:29:99:
75:93:7f:a0:fd:de:90:ec:c2:37:66:15:02:14:86:
7b:ce:4d:4b:9d:75:cd:b8:a1:53:ee:c1:e4:6b:29:
c3:c0:93:9b:41:cd:8c:97:fa:6e:00:aa:44:1b:f9:
c8:79:27:99:f0:7c:45:97:fa:c8:81:d3:f3:31:29:
af:d3:43:64:f2:2e:fb:83:8a:a8:8b:7a:af:6a:10:
dd:7a:7b:d4:17:30:99:e2:5b:0c:a6:9b:e1:e2:22:
fc:a5:8d:26:d8:ce:af:5b:58:3a:91:1b:10:07:c3:
df:10:52:7a:52:13:37:b6:f6:22:96:34:99:78:b7:
c8:21:e1:e4:c2:47:d7:56:a7:c0:1a:a4:16:02:c1:
4a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:51:15:BC:DE:F9:A4:19:3F:0A:04:FD:D1:79:17:33:37:73:32:2D
X509v3 Authority Key Identifier:
keyid:49:A9:E8:91:E0:6D:42:27:7D:C4:FB:5F:BD:69:E9:AB:D8:E2:98:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SanokeBtQid9xPtfvWnpq9jimIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/53696f-f973-47fb-8d79-addc6d4bb2e7/1/SanokeBtQid9xPtfvWnpq9jimIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/53696f-f973-47fb-8d79-addc6d4bb2e7/1/SanokeBtQid9xPtfvWnpq9jimIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:04:1d:1c:e5:ad:1c:44:a0:74:4d:73:1a:41:fc:6b:a9:cc:
76:f2:87:09:39:2b:0d:99:83:7b:d3:16:f3:53:ae:12:66:ec:
81:1a:30:14:73:d5:ec:c5:24:cf:18:76:e2:6b:d6:ea:5b:e5:
6a:2e:e5:42:2a:28:8b:e5:50:4e:39:a5:4a:18:ad:40:fb:b5:
eb:6f:d8:65:c3:e8:38:fc:6a:fb:2b:b5:99:0c:e6:82:71:bc:
66:d7:b0:01:8b:05:05:1b:a9:60:a5:42:f2:6e:2d:86:66:ee:
9b:51:bf:b3:3b:e4:c0:80:e0:d9:64:50:4d:5d:86:70:72:9f:
be:ee:f6:c3:e5:14:3f:c7:d6:2d:f0:80:13:b6:a9:41:0a:f1:
f0:cd:0d:19:ac:5d:45:88:ee:cc:47:45:ff:d8:b6:6a:d8:93:
c1:ad:fe:6b:d1:0d:15:52:45:f8:55:a1:41:bc:98:f3:5e:a9:
5a:76:5a:11:5c:74:58:af:f5:71:36:35:32:53:47:e0:9e:23:
f7:12:6b:ec:8c:39:b4:73:23:63:4b:9d:c0:64:5e:ba:fd:b5:
11:8c:0b:9c:9a:8b:82:b9:42:b5:b9:b9:46:bb:51:02:00:2e:
42:a2:6b:d9:5a:f9:8a:73:e6:77:bc:79:24:bd:e0:b1:ff:4b:
18:a3:a1:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:54:36 2026 by rpki-client