Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/51b2ce-09aa-438d-9907-101b9e80e359/1/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.mft
File: SX7eN_KfQKcbHLKl_OUm6KPQ5eE.mft (raw, json)
Hash identifier: PinlzgKhh43ho0fYElZjSj4TtUfnbLEs2AoHRWQK6Q0=
Subject key identifier: 5F:9C:62:28:34:09:3E:60:9E:6A:F6:CB:98:1E:F3:A2:61:18:0D:6A
Authority key identifier: 49:7E:DE:37:F2:9F:40:A7:1B:1C:B2:A5:FC:E5:26:E8:A3:D0:E5:E1
Certificate issuer: /CN=497ede37f29f40a71b1cb2a5fce526e8a3d0e5e1
Certificate serial: 019DA4C1C64033D7419B18B01753429B394E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/51b2ce-09aa-438d-9907-101b9e80e359/1/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.mft
Manifest number: 91
Signing time: Sun 19 Apr 2026 08:00:55 +0000
Manifest this update: Sun 19 Apr 2026 08:00:55 +0000
Manifest next update: Mon 20 Apr 2026 08:00:55 +0000
Files and hashes: 1: FsZqIeW01RfaEApHUES0cB5ebyI.roa (hash: VCT9mMAi/Cn+09fCPNJ/y3SBfVeioqWO5E+XzvEA3FA=)
2: KfCvlR8vu0qoz40NwG_o9ivr0L0.asa (hash: 28KOqwH8/su8P6T5Q9zLgm8jJkLHgtcR+NYZ8WhN7qk=)
3: SX7eN_KfQKcbHLKl_OUm6KPQ5eE.crl (hash: mDj6PMk6V+sw5ab9+N5LBXpjcrghyMaAMjj9rvPsMz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/51b2ce-09aa-438d-9907-101b9e80e359/1/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/51b2ce-09aa-438d-9907-101b9e80e359/1/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:c1:c6:40:33:d7:41:9b:18:b0:17:53:42:9b:39:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=497ede37f29f40a71b1cb2a5fce526e8a3d0e5e1
Validity
Not Before: Apr 19 08:00:55 2026 GMT
Not After : Apr 20 08:00:55 2026 GMT
Subject: CN=5f9c622834093e609e6af6cb981ef3a261180d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3c:ba:d5:62:05:e4:4a:0c:21:99:8f:1b:d7:
ba:e7:66:79:10:f5:b8:c7:d5:3f:0c:7a:ad:3e:09:
3c:d6:25:ea:b3:89:d5:b1:b5:99:d2:aa:72:1b:69:
79:2f:21:ab:4a:50:93:b9:19:69:fa:cd:71:19:cc:
47:82:82:6c:66:aa:fc:0c:20:0c:e5:22:94:24:bc:
30:fc:ab:df:9f:97:de:76:60:da:ca:2f:f2:29:51:
7d:2e:38:d0:01:de:84:fe:44:16:e5:0c:dd:e5:52:
f5:4b:9e:8c:32:4c:48:2e:7a:e0:27:d8:70:ad:05:
d6:cc:f5:2f:6b:fd:3d:b8:1c:f2:65:a1:b5:14:70:
4c:19:79:b7:c2:0a:c8:0b:f8:63:03:31:1a:a3:a4:
78:89:ab:60:a6:2b:f2:86:ee:de:af:e6:c1:d8:ed:
85:3f:2c:db:2d:04:fc:cf:3c:e6:90:34:8a:c7:b5:
48:a3:82:7c:32:4d:25:6b:4d:60:22:e7:ac:e4:28:
82:e3:ea:59:e8:4b:a2:c3:b6:e0:85:57:f4:e7:91:
d4:65:3f:78:e8:8d:b9:a3:12:1f:86:d0:c2:93:6c:
b1:2a:90:53:ab:4e:e9:82:b0:ba:bb:7e:82:59:42:
7f:8d:ca:b8:77:09:2e:2a:54:50:5e:1a:59:10:be:
40:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:9C:62:28:34:09:3E:60:9E:6A:F6:CB:98:1E:F3:A2:61:18:0D:6A
X509v3 Authority Key Identifier:
keyid:49:7E:DE:37:F2:9F:40:A7:1B:1C:B2:A5:FC:E5:26:E8:A3:D0:E5:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/51b2ce-09aa-438d-9907-101b9e80e359/1/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/51b2ce-09aa-438d-9907-101b9e80e359/1/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:39:34:6c:20:68:71:8e:19:a1:ae:1c:34:33:88:14:d1:4c:
72:4f:76:e0:5d:27:83:f2:3a:bb:30:9e:08:28:4f:8e:e1:02:
f9:30:7b:42:57:8e:a0:a3:e7:ce:48:2f:44:c4:bd:84:02:a1:
d7:a5:88:ce:7b:c1:d0:d9:1e:ed:01:3e:fc:b8:b7:56:64:bf:
e0:93:51:9f:57:24:fe:2a:30:94:ad:1b:14:f0:29:ee:97:a7:
62:b5:a9:04:de:fa:66:82:24:26:f4:65:a6:ea:5f:21:f4:7a:
18:75:12:95:b7:2c:e4:05:05:58:22:89:c1:06:e6:15:47:95:
97:c6:42:1c:5e:3a:60:14:ac:4d:27:05:76:30:3a:74:dc:6e:
29:9c:06:80:d9:ad:d4:e8:65:9f:e9:b5:40:19:0b:38:27:a9:
d1:41:23:f9:4a:53:fc:a2:8b:9c:07:c4:07:bb:60:f0:b8:dd:
4a:94:3a:78:ea:a6:6c:08:e3:fb:3c:7f:a6:70:d2:9d:db:e9:
c1:fe:e0:a6:64:00:94:e7:0b:39:b8:a5:a6:68:b7:0a:da:2b:
46:37:7b:e9:7f:88:bf:f0:1f:51:f4:f1:c4:ed:6c:56:ba:8d:
f0:26:20:88:28:ca:e8:de:50:e8:f2:75:1d:30:3b:16:33:75:
dd:ba:a9:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:44:00 2026 by rpki-client