Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft
File: SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft (raw, json)
Hash identifier: 6CGfTk5jwrmLfaSgqwBUSUPdgh3tdJv83oJ3hZ+Px5w=
Subject key identifier: 43:35:55:EB:15:D8:18:38:C3:79:27:A2:42:15:51:86:34:C8:5D:5D
Authority key identifier: 49:D0:1F:70:CF:5F:4D:EE:D9:3A:8C:15:E4:94:02:9E:93:AB:ED:55
Certificate issuer: /CN=49d01f70cf5f4deed93a8c15e494029e93abed55
Certificate serial: 019CAD22D39BF4B54BC3B269C6A0EF92B042
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SdAfcM9fTe7ZOowV5JQCnpOr7VU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft
Manifest number: 046A
Signing time: Mon 02 Mar 2026 06:01:06 +0000
Manifest this update: Mon 02 Mar 2026 06:01:06 +0000
Manifest next update: Tue 03 Mar 2026 06:01:06 +0000
Files and hashes: 1: JJCCXVuKGJb9ue4yyF1fCtUPK9E.roa (hash: 9nwd4CsbVqKtlvKwPGpaOjb7a2D6lmLy6I2tj8BYZf4=)
2: SdAfcM9fTe7ZOowV5JQCnpOr7VU.crl (hash: IqUQ3j31+I3POYWgN94SdlpG5gYZ3o68WCR3vvvzJ/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SdAfcM9fTe7ZOowV5JQCnpOr7VU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:d3:9b:f4:b5:4b:c3:b2:69:c6:a0:ef:92:b0:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49d01f70cf5f4deed93a8c15e494029e93abed55
Validity
Not Before: Mar 2 06:01:06 2026 GMT
Not After : Mar 3 06:01:06 2026 GMT
Subject: CN=433555eb15d81838c37927a24215518634c85d5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:65:1b:2d:a1:8d:c8:5f:64:f8:aa:0a:dc:fd:
d6:b7:39:21:7a:5d:42:45:8c:ad:9f:0d:d5:ab:c3:
4a:c9:5e:51:dc:67:3a:d9:d1:83:be:82:22:e8:48:
ed:3e:b5:3c:62:35:a4:47:7f:ff:a1:9a:67:00:f4:
22:eb:77:eb:cf:bb:fa:bd:0f:85:12:95:71:51:2c:
74:28:ea:10:0d:47:b0:4e:bf:6e:ee:c1:74:ab:c9:
25:f1:7b:46:2a:a1:9f:02:28:38:ac:15:6e:19:9f:
e1:f2:53:ef:28:48:cc:10:42:be:dc:48:6c:a0:72:
cc:d4:7a:fb:4c:04:b3:71:15:68:9b:1e:cc:3a:fc:
fd:cf:8b:8f:a9:40:cf:64:1f:1b:d2:c8:bb:99:82:
bd:0d:fc:c5:77:d7:5c:d6:49:60:61:86:d6:c1:e3:
12:93:85:9c:61:90:58:07:42:27:68:6f:f3:ef:3c:
62:71:40:5b:d7:b0:c2:23:64:61:e1:01:d9:1f:37:
89:5f:fb:58:e8:a9:48:20:a6:cd:d3:3a:6d:94:06:
d0:32:41:5a:38:bb:ce:c6:12:72:e6:d6:02:5e:14:
98:d3:cb:c0:1d:39:e7:2e:ee:c3:1c:c7:81:0a:f4:
6f:73:e0:07:df:98:bd:14:ad:ce:14:42:96:12:eb:
35:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:35:55:EB:15:D8:18:38:C3:79:27:A2:42:15:51:86:34:C8:5D:5D
X509v3 Authority Key Identifier:
keyid:49:D0:1F:70:CF:5F:4D:EE:D9:3A:8C:15:E4:94:02:9E:93:AB:ED:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SdAfcM9fTe7ZOowV5JQCnpOr7VU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:f0:8f:e5:43:9f:a8:f0:80:3e:00:56:9a:2e:90:63:8d:04:
33:9d:3d:7e:35:85:48:11:91:02:63:cc:0f:22:b8:bd:20:a9:
f8:c3:4f:16:8b:1d:ba:ad:af:a8:ba:e6:b4:f4:9b:0a:86:e9:
cf:eb:83:f6:ba:a3:38:62:68:4a:79:6c:70:86:58:93:0e:96:
68:d1:9b:4f:4a:c7:ef:ec:3a:9b:7d:8c:bb:94:96:a6:74:eb:
e4:58:a1:88:17:61:95:2f:f4:5d:37:6a:04:65:df:e4:de:5e:
7d:a8:75:b4:67:52:3e:3c:d6:69:cd:c1:f7:b1:7e:c9:51:48:
7d:a4:30:77:8e:48:55:8f:cb:df:3a:04:df:9d:ea:cd:a9:d5:
ae:07:ae:d1:b6:4b:ab:dd:39:bf:b6:3b:10:00:00:61:dc:63:
15:3a:ef:c5:92:54:e7:74:f8:e2:99:b8:01:d2:70:03:39:fd:
c8:45:b1:34:bb:55:1f:f4:15:b2:57:48:b0:05:fd:1d:52:24:
58:12:10:c9:db:e4:81:4c:83:71:b9:96:4e:a5:c0:ed:f4:25:
e2:8f:c8:4f:13:f4:c3:35:66:db:49:76:6b:16:4d:56:fd:cd:
53:d0:e5:4b:ec:fe:5b:ef:10:74:14:d8:c2:78:3b:51:ca:db:
41:b3:44:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:25:31 2026 by rpki-client