Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.mft
File: SF92J0yAXSWxFaOtuh0uoVTe6tc.mft (raw, json)
Hash identifier: 4bRW8q0KgtAiAA/IR5TNPhNexiQlwj6LWgEoBslnyak=
Subject key identifier: 47:4C:03:0B:01:D4:10:F6:2A:7A:66:9C:E1:45:27:2A:C9:72:25:38
Authority key identifier: 48:5F:76:27:4C:80:5D:25:B1:15:A3:AD:BA:1D:2E:A1:54:DE:EA:D7
Certificate issuer: /CN=485f76274c805d25b115a3adba1d2ea154deead7
Certificate serial: 019D98BD4330F72BFB1C1265E9E66B3443B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SF92J0yAXSWxFaOtuh0uoVTe6tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.mft
Manifest number: 12BA
Signing time: Fri 17 Apr 2026 00:00:33 +0000
Manifest this update: Fri 17 Apr 2026 00:00:33 +0000
Manifest next update: Sat 18 Apr 2026 00:00:33 +0000
Files and hashes: 1: Oya_7CTNloqoLGAwE4lej4v0gVU.roa (hash: pi6Tio3aUQA0JE16nMLeotjfbha9a+YODpOnjWqpmKM=)
2: SF92J0yAXSWxFaOtuh0uoVTe6tc.crl (hash: hq2w9+VSBSNajSZ9zFyaP2ZmuGPKM+Dm+c7WhzPkC0s=)
3: VMZQ9NDd56nkh5RyTCLwouklkcA.roa (hash: uqsQckCvVpROGzhWbi/+xNcAtRw003GCNfZZ7Nd36Js=)
4: bOCkd18Ayb5bcI8G6YVBq7PIUcw.roa (hash: uKcVytuQYuouml3wIVfkbst8oBdAm0iOGlIFW2AnouI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SF92J0yAXSWxFaOtuh0uoVTe6tc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:43:30:f7:2b:fb:1c:12:65:e9:e6:6b:34:43:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485f76274c805d25b115a3adba1d2ea154deead7
Validity
Not Before: Apr 17 00:00:33 2026 GMT
Not After : Apr 18 00:00:33 2026 GMT
Subject: CN=474c030b01d410f62a7a669ce145272ac9722538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:dd:65:01:37:30:af:b6:df:61:03:41:0c:b5:
be:60:b7:03:b2:99:d4:45:66:4c:a4:2b:b7:6c:e4:
65:ab:3e:3b:e7:42:4b:cd:e5:b9:65:7c:15:d7:dc:
c5:a2:fe:ae:46:b8:6e:cb:02:e8:d0:39:8d:6e:08:
a0:aa:ff:66:fe:38:42:79:4b:0d:94:e9:f6:56:7b:
b5:d9:fb:0c:ba:c8:44:0f:ac:44:6b:f7:cf:55:f9:
55:6f:b3:cd:81:90:b9:27:3a:38:49:a6:4a:70:06:
bc:d6:ba:e6:60:1b:12:e2:69:74:f1:d0:1e:aa:7b:
4d:73:e5:bf:40:85:19:96:9b:ae:32:89:de:10:50:
58:1b:6e:73:d5:fb:62:e5:5f:2e:e5:ad:c3:c4:6c:
90:f8:92:a8:84:ef:d4:fc:7c:78:88:f8:e9:36:df:
1f:87:07:67:b9:bb:95:a9:e1:4e:98:06:42:17:dc:
6c:39:c7:04:db:d7:ba:5b:d8:79:d1:6e:f7:b9:e5:
d6:a9:d8:33:a1:48:0f:d9:ea:f3:ad:9f:f4:1b:43:
80:3f:84:41:85:ef:85:5c:97:9b:ef:61:5e:fb:18:
36:64:08:60:cf:45:60:c7:32:3c:ec:5e:3c:15:eb:
3f:98:0f:12:85:39:f1:76:5d:68:c9:29:a5:3e:4d:
3f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:4C:03:0B:01:D4:10:F6:2A:7A:66:9C:E1:45:27:2A:C9:72:25:38
X509v3 Authority Key Identifier:
keyid:48:5F:76:27:4C:80:5D:25:B1:15:A3:AD:BA:1D:2E:A1:54:DE:EA:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF92J0yAXSWxFaOtuh0uoVTe6tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:ee:51:75:e0:4d:80:6e:6d:c0:12:33:be:ff:9c:23:35:1b:
7c:6a:af:23:e6:1f:7f:b1:7f:48:b7:4b:ce:1a:1b:1e:3b:00:
8a:81:44:9c:40:36:a5:18:6a:72:76:05:01:95:fc:cb:b9:ca:
87:69:21:07:5e:8d:c0:75:0f:b0:c1:46:8e:fc:7e:54:44:77:
6f:6a:10:75:20:87:a8:a1:8b:9b:5e:bb:b3:a0:ff:28:17:c1:
cc:7e:4f:1a:4d:6d:34:f0:cd:35:06:d9:66:1b:04:36:f0:68:
38:f9:ea:b2:29:d6:ea:77:41:d6:89:e0:a6:42:af:44:ed:de:
64:d5:45:41:23:11:19:15:d5:eb:ad:aa:17:08:50:7a:70:ed:
67:03:22:2a:49:98:b1:12:e3:ac:8a:31:97:99:13:dd:83:c3:
4b:ea:92:a6:3a:87:3a:da:5b:af:38:fa:09:83:1a:6f:3b:6f:
b1:60:f2:0f:1f:44:a6:39:ff:1f:70:51:e6:78:5f:a5:3f:ad:
6f:28:1b:00:f9:65:07:33:a1:7d:a5:f2:62:be:21:38:e5:3c:
e0:08:b0:9a:cc:c5:ac:3f:3a:ae:25:8f:dd:03:d5:01:a7:cf:
10:8f:e8:7a:ed:d8:0e:a2:29:6c:19:fb:0b:61:08:d4:48:c2:
e7:a8:6c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:45:46 2026 by rpki-client