Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.mft
File: SepQocYggnYq_aAH1vyLS9sFdJ8.mft (raw, json)
Hash identifier: nrwL9Wj+LinDBemGC1LW76vlN/khn0UPOxxW0Y3KPpM=
Subject key identifier: 10:7C:F8:72:88:66:21:08:85:DA:B5:A3:AD:8D:39:D0:BF:D5:8C:E8
Authority key identifier: 49:EA:50:A1:C6:20:82:76:2A:FD:A0:07:D6:FC:8B:4B:DB:05:74:9F
Certificate issuer: /CN=49ea50a1c62082762afda007d6fc8b4bdb05749f
Certificate serial: 019CAA21E57ECD5B2F46756B43834F23BC36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SepQocYggnYq_aAH1vyLS9sFdJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 16:01:14 +0000
Manifest this update: Sun 01 Mar 2026 16:01:14 +0000
Manifest next update: Mon 02 Mar 2026 16:01:14 +0000
Files and hashes: 1: PCmfaBCDc6kdDFKOLkKdXE8InlY.roa (hash: ZpImK0PiLtizwaLw2fhTrlKvfw3ZfWhio2/P51B+d/A=)
2: RwAyPd51yPKFVoNHbXXQGuR7_EY.roa (hash: SJOa0Y57+2jyYSq2obqvHcjbEVfI5zAybNhvZJSsELU=)
3: SepQocYggnYq_aAH1vyLS9sFdJ8.crl (hash: oDZqT+SMkET1OT+ffc+Vxb564BFTvJnpnt5yKq1Tv28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SepQocYggnYq_aAH1vyLS9sFdJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:e5:7e:cd:5b:2f:46:75:6b:43:83:4f:23:bc:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49ea50a1c62082762afda007d6fc8b4bdb05749f
Validity
Not Before: Mar 1 16:01:14 2026 GMT
Not After : Mar 2 16:01:14 2026 GMT
Subject: CN=107cf8728866210885dab5a3ad8d39d0bfd58ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:41:2e:c7:c9:13:a3:8b:e1:6c:c1:88:40:2e:
b3:be:96:69:4b:e9:00:e7:af:16:27:42:6a:97:d4:
d3:0f:46:8e:4c:0d:12:99:fe:a9:84:9c:59:d6:13:
ee:7e:6e:d8:3f:9a:5f:2e:11:09:d0:72:9b:2d:ba:
6f:32:31:70:b5:12:83:e8:c5:c1:d8:2e:70:5a:44:
34:a8:93:3a:d8:74:13:7a:33:1b:1c:48:21:14:57:
e4:7b:3a:9b:2b:c9:bd:46:bc:06:fb:1a:8f:9e:7e:
83:b5:91:cc:2f:43:7a:70:9e:7c:a3:f3:e5:13:e4:
30:7b:fe:77:5b:d9:8d:e3:d8:40:2d:92:c2:2c:06:
a4:a8:c8:66:db:98:61:35:64:ec:51:9c:f0:46:dd:
f2:2e:18:2f:4e:47:b4:e5:3f:d1:5a:9c:69:69:61:
5a:32:83:e8:75:98:68:51:06:48:6f:de:28:7b:d9:
32:0f:6b:94:17:41:d4:51:45:4b:5a:df:21:f7:05:
7f:ab:04:51:61:b5:8c:8a:6a:a5:78:89:41:89:7a:
61:b1:6f:aa:5a:cb:7d:8d:4e:df:31:e4:e1:ae:74:
f3:1b:7a:1d:b5:2d:83:6b:18:7b:df:6a:3b:3e:2f:
df:9a:61:c6:fb:fe:93:a1:5b:bb:e4:65:9b:f1:97:
66:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:7C:F8:72:88:66:21:08:85:DA:B5:A3:AD:8D:39:D0:BF:D5:8C:E8
X509v3 Authority Key Identifier:
keyid:49:EA:50:A1:C6:20:82:76:2A:FD:A0:07:D6:FC:8B:4B:DB:05:74:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SepQocYggnYq_aAH1vyLS9sFdJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:d5:92:bd:87:3a:55:08:e1:4f:2d:85:14:74:5c:e4:ea:44:
e6:73:7d:c7:17:28:b9:b8:60:d0:15:6e:d5:2f:b0:d2:23:29:
1c:6b:32:d5:bd:f7:9b:4e:12:ee:0d:f2:1e:ab:80:37:86:11:
f9:8d:d0:c0:93:b4:53:b7:40:85:cd:76:7c:07:96:7c:34:50:
f7:7d:48:bc:91:b5:52:5a:e6:8c:15:d7:aa:36:14:0f:d8:9f:
36:54:a0:ef:5d:34:70:8b:a2:48:82:6f:33:36:94:bb:da:61:
7c:60:03:ee:1b:d0:aa:b9:22:ae:37:3c:e9:35:26:6e:94:ef:
99:7b:da:1f:b8:b4:b2:89:57:44:03:9a:85:b6:f6:08:91:95:
8a:fe:a4:0e:91:5d:53:35:67:4e:e9:7e:7c:dc:6f:92:2b:ba:
85:48:ec:bf:8f:10:3b:8c:bb:bf:45:e8:6d:fb:a6:32:d4:d3:
12:12:81:5a:b9:78:93:ea:3a:70:6b:6f:e4:91:44:35:59:91:
a2:67:36:8b:c8:fe:ee:98:c2:34:28:60:8f:a8:a9:f7:fa:a6:
a2:bc:5f:04:2b:80:e6:43:2d:7f:1a:e7:e2:93:54:6d:7c:3a:
77:dc:b6:49:24:25:3a:95:e8:70:7d:7b:b2:a9:bc:4c:2e:05:
43:54:5d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:19 2026 by rpki-client