Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft
File: Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft (raw, json)
Hash identifier: ne59drylCzDZX9I1PDE8KnEFO/05iKGwer0mK9tTsT0=
Subject key identifier: 87:61:9D:A0:A9:9B:7F:B4:D6:3D:7D:D0:72:94:54:6C:05:44:F0:69
Authority key identifier: 49:DE:57:8D:AC:79:2D:95:E2:17:D9:87:1E:04:F6:69:73:BB:7E:B0
Certificate issuer: /CN=49de578dac792d95e217d9871e04f66973bb7eb0
Certificate serial: 019CAEA31B3DBFCE776F98D3F57A5CFE9A29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sd5Xjax5LZXiF9mHHgT2aXO7frA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft
Manifest number: 087A
Signing time: Mon 02 Mar 2026 13:00:50 +0000
Manifest this update: Mon 02 Mar 2026 13:00:50 +0000
Manifest next update: Tue 03 Mar 2026 13:00:50 +0000
Files and hashes: 1: Sd5Xjax5LZXiF9mHHgT2aXO7frA.crl (hash: aSIIU+XSE1i72L1tIuJjW560kutOj61BD+wmPqwKOOE=)
2: rGGWcglvMeSsvlJBXs2-o4-N8sw.roa (hash: xVXE+Qdew3w2sfea2qvXrMLGeuW+7MTsszSevinIA7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sd5Xjax5LZXiF9mHHgT2aXO7frA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:1b:3d:bf:ce:77:6f:98:d3:f5:7a:5c:fe:9a:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49de578dac792d95e217d9871e04f66973bb7eb0
Validity
Not Before: Mar 2 13:00:50 2026 GMT
Not After : Mar 3 13:00:50 2026 GMT
Subject: CN=87619da0a99b7fb4d63d7dd07294546c0544f069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:23:3e:dc:cd:a5:56:24:d5:8e:ae:59:37:c8:
3e:24:b8:b1:47:7e:f9:77:90:20:c0:af:ed:37:4c:
a9:16:08:3f:27:9c:ec:96:36:c8:f2:6c:1d:ed:ac:
6f:51:38:39:e5:53:f1:2f:83:b4:12:ae:f4:fd:77:
bd:f6:57:f7:71:61:d5:34:d9:98:9a:7c:e8:f1:d3:
14:55:63:80:d6:25:82:1e:b4:bb:50:fc:de:b7:7c:
f9:d8:ae:2a:a0:f6:aa:a0:5d:d4:f3:6b:67:0d:0a:
f7:cc:bf:c8:8c:ab:bd:f0:e3:6c:f2:fd:1b:bf:3d:
52:6a:58:9f:7b:a1:3f:10:2c:cb:e2:84:97:fd:de:
9d:77:30:d5:a8:9c:e5:3d:d9:4d:3a:96:98:cb:c4:
51:c4:d3:20:48:7b:e8:8b:34:ee:a3:91:33:dd:32:
37:d3:bd:ca:f2:cb:1b:bd:50:73:17:a2:7f:6d:36:
92:ba:8a:08:0f:70:2e:2d:9c:33:59:3d:b0:65:ba:
92:70:b1:8b:82:a5:28:ff:94:60:48:ab:c8:fb:ea:
77:df:29:08:2e:81:88:78:48:6f:f7:5c:be:92:20:
ed:fd:cc:2c:85:70:4a:42:66:29:86:55:98:ab:12:
50:35:be:3f:e3:61:a3:ca:f4:48:be:7f:7f:e6:a2:
78:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:61:9D:A0:A9:9B:7F:B4:D6:3D:7D:D0:72:94:54:6C:05:44:F0:69
X509v3 Authority Key Identifier:
keyid:49:DE:57:8D:AC:79:2D:95:E2:17:D9:87:1E:04:F6:69:73:BB:7E:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sd5Xjax5LZXiF9mHHgT2aXO7frA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:f9:87:ca:52:60:ae:17:c5:9c:6a:9c:81:fc:6c:31:d0:d2:
66:21:30:09:83:4d:82:9b:22:ed:3c:2b:8c:20:5a:94:97:ab:
4a:18:f7:45:d1:f2:bb:a0:15:af:fc:35:11:ab:9a:b2:21:25:
00:eb:af:86:2a:d7:f3:2c:40:29:e7:5f:4a:59:4a:1d:33:79:
6f:83:22:87:ac:0e:d6:2c:78:93:11:c5:e5:44:93:a4:36:e5:
4f:1c:97:e2:1a:51:f9:3e:5d:c8:86:d7:d8:77:f3:d9:8b:c6:
fd:02:59:9a:08:82:c3:ca:d1:2a:9d:18:5c:31:f3:70:16:5a:
31:6a:98:02:07:98:77:94:cb:9b:4c:80:8f:a1:91:06:f5:7e:
56:19:23:91:7c:44:81:27:52:18:70:f3:73:d2:c2:37:2c:a3:
97:dc:c5:e8:bb:b6:8c:50:a3:3d:6e:82:38:7c:23:a7:dc:8d:
93:fc:b5:ae:82:98:87:ed:37:92:19:a2:ca:a2:32:32:dc:72:
bb:4b:fd:a4:54:bd:c0:29:2d:99:89:d9:aa:f2:e1:62:a9:f7:
71:66:25:00:b0:5b:9d:d5:75:ad:93:cb:19:26:bb:02:d9:e6:
57:39:dc:52:e2:f7:89:00:96:db:f7:68:21:94:0b:94:81:12:
4a:de:1d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:25:23 2026 by rpki-client