Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft
File: SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft (raw, json)
Hash identifier: 9Khjyx3BwUi4ZtJIUz0gQcMu74gINXBqNqaZ5deSpDA=
Subject key identifier: 16:26:A3:E4:04:65:77:89:97:F1:A6:7B:2D:D9:A9:33:DF:7B:99:0B
Authority key identifier: 49:D0:1F:70:CF:5F:4D:EE:D9:3A:8C:15:E4:94:02:9E:93:AB:ED:55
Certificate issuer: /CN=49d01f70cf5f4deed93a8c15e494029e93abed55
Certificate serial: 01A131EB45916CBA822CD39FF7150CD2FD9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SdAfcM9fTe7ZOowV5JQCnpOr7VU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft
Manifest number: 06C1
Signing time: Mon 12 Oct 2026 21:01:04 +0000
Manifest this update: Mon 12 Oct 2026 21:01:04 +0000
Manifest next update: Tue 13 Oct 2026 21:01:04 +0000
Files and hashes: 1: JJCCXVuKGJb9ue4yyF1fCtUPK9E.roa (hash: 9nwd4CsbVqKtlvKwPGpaOjb7a2D6lmLy6I2tj8BYZf4=)
2: SdAfcM9fTe7ZOowV5JQCnpOr7VU.crl (hash: /9Tc6HTzvx0ueUxz7HwKxKZWiQLe6XnI+wkEfZoaOQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SdAfcM9fTe7ZOowV5JQCnpOr7VU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 21:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:eb:45:91:6c:ba:82:2c:d3:9f:f7:15:0c:d2:fd:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49d01f70cf5f4deed93a8c15e494029e93abed55
Validity
Not Before: Oct 12 21:01:04 2026 GMT
Not After : Oct 13 21:01:04 2026 GMT
Subject: CN=1626a3e40465778997f1a67b2dd9a933df7b990b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4b:93:1c:4e:37:55:90:dc:6a:23:04:48:fc:
a5:2f:e1:7b:40:4d:26:f3:af:ef:a8:11:74:fc:67:
61:63:f3:b3:4d:00:4f:db:8f:21:7f:bd:fc:66:cc:
86:ac:e8:e4:06:80:f5:bf:89:90:eb:38:ae:d3:f5:
45:b5:d4:44:ef:12:9d:2f:13:24:44:06:20:50:a8:
90:88:a2:cc:9b:70:28:6e:b7:8f:28:ec:dc:b9:3a:
d0:6d:60:00:d6:8a:5f:f5:68:45:15:6b:2c:9d:a0:
4d:89:0f:68:8d:4c:38:47:06:20:23:98:78:ae:ef:
76:34:da:48:d9:eb:4d:83:b6:57:82:7f:7c:4a:e1:
d5:03:ec:f9:b0:29:85:6b:f6:8d:35:55:79:68:78:
da:93:32:c1:45:42:84:3b:a8:02:66:71:44:c9:5a:
e8:b5:9a:d8:0c:a7:3e:a6:a4:52:28:14:66:0c:e8:
42:16:92:70:0e:d1:13:44:30:f4:f9:e7:d2:01:f0:
0e:b5:91:88:fc:4c:37:49:93:ac:2a:22:61:4c:2a:
56:f4:dd:0e:32:38:6e:e2:cf:61:03:37:d2:a6:37:
8e:03:2c:76:57:56:df:11:e8:bf:12:1c:3d:4e:00:
0e:2c:37:56:fa:72:2f:c8:b9:f7:c8:2b:69:af:5d:
87:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:26:A3:E4:04:65:77:89:97:F1:A6:7B:2D:D9:A9:33:DF:7B:99:0B
X509v3 Authority Key Identifier:
keyid:49:D0:1F:70:CF:5F:4D:EE:D9:3A:8C:15:E4:94:02:9E:93:AB:ED:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SdAfcM9fTe7ZOowV5JQCnpOr7VU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:9a:c3:6f:be:fd:40:96:41:f0:bc:aa:4e:4f:d9:e6:96:89:
ae:75:2d:b5:ba:35:14:18:16:89:8e:25:fb:a3:ae:d4:92:3b:
38:b5:d4:c2:86:42:c3:9e:a9:1c:fc:1f:14:40:9e:6e:b7:1d:
22:4e:73:dc:88:72:92:e3:4e:98:3e:b1:7c:75:fc:91:4a:1a:
69:9d:70:5c:a5:61:bd:ea:31:d6:2a:f2:62:4b:a6:f9:28:6f:
69:55:41:1b:16:37:dc:16:35:15:50:c8:11:a9:55:e5:be:ad:
f8:bc:9f:58:bb:78:46:5f:7d:75:48:28:c1:e4:13:25:c6:64:
64:02:cc:a8:54:a2:36:b9:e5:90:30:0a:2d:2d:dc:d3:63:11:
ec:ad:ce:ca:f5:61:e0:13:f7:d2:22:24:cc:80:31:d1:a8:ba:
ac:6c:aa:b2:aa:6a:bb:93:7a:5c:8f:d5:ff:5e:a1:3e:8d:3e:
ef:cb:2b:28:47:62:ea:ea:43:8a:33:da:e2:68:83:d6:3e:6e:
97:a6:4f:16:6e:12:91:3c:95:13:1c:31:f2:c6:23:bd:8a:3e:
74:17:71:7c:86:9a:5f:72:3f:53:b5:5b:cc:6f:4a:7f:35:53:
4f:8d:93:12:a9:c4:42:50:a6:51:57:a4:b7:a4:36:d9:96:e3:
67:5b:71:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 02:20:55 2026 by rpki-client