Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.mft
File: SfA190v2NQvDef8uJTiC0kaO9Yg.mft (raw, json)
Hash identifier: GcW4uSLpK94nOIpx9EY53RJTGsQrdX3zxWWsn725Svc=
Subject key identifier: 0E:02:AB:D8:E6:F6:CE:06:0D:24:EA:6E:23:5B:45:31:ED:56:04:DE
Authority key identifier: 49:F0:35:F7:4B:F6:35:0B:C3:79:FF:2E:25:38:82:D2:46:8E:F5:88
Certificate issuer: /CN=49f035f74bf6350bc379ff2e253882d2468ef588
Certificate serial: 019CAA581FA7A70BF17D30B9247E98A27075
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfA190v2NQvDef8uJTiC0kaO9Yg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.mft
Manifest number: 055B
Signing time: Sun 01 Mar 2026 17:00:27 +0000
Manifest this update: Sun 01 Mar 2026 17:00:27 +0000
Manifest next update: Mon 02 Mar 2026 17:00:27 +0000
Files and hashes: 1: SfA190v2NQvDef8uJTiC0kaO9Yg.crl (hash: 35P40iJLSUbxGinDjwTrPtu0napVwsYHgE0SsdetXVo=)
2: r7-SCz1aeewC1b28_7aTBEERbc8.roa (hash: GlvMAyQ8rtSS7ofDdsa5bNcv30a7phC116f+dSElfio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SfA190v2NQvDef8uJTiC0kaO9Yg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:1f:a7:a7:0b:f1:7d:30:b9:24:7e:98:a2:70:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f035f74bf6350bc379ff2e253882d2468ef588
Validity
Not Before: Mar 1 17:00:27 2026 GMT
Not After : Mar 2 17:00:27 2026 GMT
Subject: CN=0e02abd8e6f6ce060d24ea6e235b4531ed5604de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e5:b3:73:fc:c8:35:60:60:b1:5d:7d:1f:5b:
e0:72:32:f9:d6:41:56:57:7f:c1:b4:b0:74:5d:2f:
97:4b:31:97:86:12:93:8f:48:31:dc:da:50:d9:32:
52:4d:43:3e:44:9d:b8:a9:f2:c0:cd:8c:2e:63:5d:
8f:d7:c7:e6:32:09:2a:22:a7:d8:d9:71:7e:6c:95:
fb:94:66:a6:19:20:b9:ff:48:3a:ac:a2:cd:fd:2f:
9b:bb:ab:29:42:cb:67:70:62:98:61:70:3e:52:81:
9a:65:e7:e3:b1:04:92:a8:27:45:2b:83:a4:3e:89:
ff:2a:d9:19:e2:ce:48:9c:23:3c:ce:cb:00:06:c9:
f8:c8:9e:99:c9:ca:47:a9:96:f9:1d:b0:a3:3e:64:
e0:fd:43:d2:27:be:c2:63:ac:d4:88:a3:37:91:97:
84:be:7a:49:37:9d:f8:bd:46:60:f7:7c:2c:c5:71:
a6:39:74:81:73:62:4a:1e:61:9c:e6:29:7d:a4:66:
0d:21:fe:12:ca:f3:a3:00:97:0b:1d:11:b2:8a:06:
91:fd:16:54:ba:0c:cc:aa:e3:b2:af:f8:7e:1b:8a:
ab:e2:4c:43:3a:69:51:eb:ac:d9:71:28:81:0e:e5:
ce:e2:bd:a1:e7:fc:70:86:2d:37:a1:90:64:70:17:
fa:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:02:AB:D8:E6:F6:CE:06:0D:24:EA:6E:23:5B:45:31:ED:56:04:DE
X509v3 Authority Key Identifier:
keyid:49:F0:35:F7:4B:F6:35:0B:C3:79:FF:2E:25:38:82:D2:46:8E:F5:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfA190v2NQvDef8uJTiC0kaO9Yg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:98:42:94:0a:0a:a5:b9:54:b5:42:8a:05:f0:2c:d4:2c:21:
b7:4c:1a:af:11:be:ab:23:48:23:6e:b8:e0:c9:95:fe:a5:ec:
62:18:0a:88:65:49:67:0a:54:e6:d0:d2:8f:07:78:c1:b7:77:
bd:c0:6d:38:ea:5a:50:ae:2e:45:f6:6a:10:4d:be:3f:c6:ac:
ba:e3:cc:c2:37:e9:d8:67:2e:ac:52:31:d5:e8:f8:b3:51:77:
bc:48:f8:ea:33:01:bf:2a:f1:47:e4:4c:df:78:30:b7:de:95:
00:77:67:e9:27:b2:40:eb:7f:4b:af:03:da:7a:1c:5f:e3:5f:
d7:4e:e2:0b:53:09:e5:8f:10:e1:94:4a:0c:3e:c1:5a:62:a5:
d0:72:80:1b:d6:5a:38:4b:91:7f:3a:9a:ab:3a:81:db:90:6d:
ea:db:be:ae:2e:26:fe:96:a3:a0:1b:14:b9:fc:a4:e4:2a:82:
36:8a:ed:3e:59:5d:f7:7c:b0:77:3d:cd:81:f1:4e:4f:70:05:
5a:b2:29:87:73:52:ac:8e:8c:40:39:6a:bc:89:ab:13:2a:f7:
46:ac:e9:50:33:46:79:09:bf:c3:7a:79:92:59:ee:51:03:f2:
85:d5:34:c5:7c:38:f6:a2:4d:fe:2e:c1:02:61:4c:b6:86:e6:
3f:cd:b6:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:43:07 2026 by rpki-client