Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft
File: Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft (raw, json)
Hash identifier: 8J2MRmXDBPgnouOBGFjUzejpZIoWR9SSkCT0daIeYHU=
Subject key identifier: F3:C2:B6:7D:2A:FF:EA:A1:D9:3A:69:72:4C:FD:86:2A:AA:42:C1:53
Authority key identifier: 49:DE:57:8D:AC:79:2D:95:E2:17:D9:87:1E:04:F6:69:73:BB:7E:B0
Certificate issuer: /CN=49de578dac792d95e217d9871e04f66973bb7eb0
Certificate serial: 019D984FBE20CACD8AD1C5F414F975BA1468
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sd5Xjax5LZXiF9mHHgT2aXO7frA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft
Manifest number: 08F3
Signing time: Thu 16 Apr 2026 22:00:55 +0000
Manifest this update: Thu 16 Apr 2026 22:00:55 +0000
Manifest next update: Fri 17 Apr 2026 22:00:55 +0000
Files and hashes: 1: Sd5Xjax5LZXiF9mHHgT2aXO7frA.crl (hash: 0w2szP75I4c9pXYcTQQooDnkVma26ThgSDKqBeCQ9K8=)
2: rGGWcglvMeSsvlJBXs2-o4-N8sw.roa (hash: xVXE+Qdew3w2sfea2qvXrMLGeuW+7MTsszSevinIA7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sd5Xjax5LZXiF9mHHgT2aXO7frA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:be:20:ca:cd:8a:d1:c5:f4:14:f9:75:ba:14:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49de578dac792d95e217d9871e04f66973bb7eb0
Validity
Not Before: Apr 16 22:00:55 2026 GMT
Not After : Apr 17 22:00:55 2026 GMT
Subject: CN=f3c2b67d2affeaa1d93a69724cfd862aaa42c153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:56:2f:4d:d6:ba:15:92:f6:4d:a4:a0:df:cb:
af:25:e0:0c:35:28:91:3b:09:86:1a:4c:a0:d2:02:
ff:4c:67:24:c7:c1:6e:62:a7:48:ac:66:ca:6c:95:
58:95:24:b5:f7:fb:5a:24:3a:90:81:0b:96:b2:77:
d7:6b:b4:d0:fc:e2:36:31:1a:57:ff:00:04:d0:c4:
67:b4:af:73:e3:ac:ed:4c:93:b7:79:99:32:12:5e:
64:c6:1f:3d:a2:b0:fd:bb:e9:57:90:04:2b:73:e1:
5f:9c:3e:1d:69:08:b0:69:3f:d6:6f:93:b0:eb:cf:
29:ce:6a:bd:4f:56:56:e1:d4:65:a3:28:17:bf:80:
9c:3a:45:af:f7:96:9a:5e:c2:d2:50:2b:20:fa:1a:
b0:51:51:97:fe:d0:21:85:02:94:44:3e:4a:33:9e:
85:f5:8c:40:89:a4:37:a6:7f:e1:1b:b6:b3:ab:af:
75:08:c2:a7:da:21:79:30:86:dc:7d:90:5a:81:6a:
02:62:c2:ca:6a:8d:46:0a:89:04:3d:eb:e3:2f:b1:
4b:f0:8e:0f:06:d8:21:ab:d3:40:e3:93:d6:13:d9:
aa:27:73:93:f5:54:41:1b:12:aa:ef:d0:8f:d7:bf:
95:58:8e:3d:7e:0f:59:83:9d:11:6c:ce:88:c2:cb:
86:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C2:B6:7D:2A:FF:EA:A1:D9:3A:69:72:4C:FD:86:2A:AA:42:C1:53
X509v3 Authority Key Identifier:
keyid:49:DE:57:8D:AC:79:2D:95:E2:17:D9:87:1E:04:F6:69:73:BB:7E:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sd5Xjax5LZXiF9mHHgT2aXO7frA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:9c:64:5e:20:8c:07:27:00:6a:9a:c2:83:c2:c9:11:95:58:
f3:17:99:78:6d:cf:9a:37:8f:4e:97:aa:4f:11:44:40:fe:8d:
a9:4d:54:f4:17:2e:dc:db:2b:03:eb:03:b5:25:de:9a:99:18:
dc:4e:c8:2e:dc:74:60:39:db:06:ec:4c:49:3d:f1:32:53:82:
35:07:7b:b1:25:d8:9b:e3:ca:8c:02:b3:18:69:17:08:97:79:
10:14:83:5a:ad:0d:a7:6d:90:43:87:42:b4:56:d8:b0:95:25:
5a:73:a2:52:07:89:ba:07:f5:dd:b5:75:81:5c:84:bd:f1:6e:
4f:46:c1:64:f5:3a:4f:f6:5b:ef:ef:05:2f:0e:5f:51:bc:d7:
a2:1b:75:ef:a6:dc:ff:2e:53:4e:22:ef:ce:e1:d0:82:e9:c8:
8b:af:9f:6e:10:2b:0d:ce:58:38:71:00:d3:2f:42:51:50:fa:
71:ad:41:83:1e:6e:b9:7b:74:35:9a:81:48:5f:07:9d:86:4b:
f2:46:7e:8b:85:1a:ea:d9:83:02:e7:d8:4a:24:fb:56:a1:75:
ef:36:32:9f:b9:39:18:9a:ef:a5:c3:28:71:fa:68:8f:3e:84:
80:3c:5d:50:fe:84:f8:16:84:ca:83:cc:58:92:4b:f5:2a:cc:
fd:10:74:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:42:44 2026 by rpki-client