Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft
File: r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft (raw, json)
Hash identifier: dqFap3pXDL/gCwJTZ61GeA+QwjS/m7UclWh9kxTBq/k=
Subject key identifier: 58:5D:EE:DF:4A:9A:F9:AC:0C:0D:7A:7F:62:60:56:94:18:0A:C3:E9
Authority key identifier: AF:E4:A0:D5:FD:A6:00:C5:D5:B7:F6:18:F6:86:D7:E9:30:51:B4:D7
Certificate issuer: /CN=afe4a0d5fda600c5d5b7f618f686d7e93051b4d7
Certificate serial: 019CA9458B5E560EA9A1C41A989E18BCC4B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-Sg1f2mAMXVt_YY9obX6TBRtNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft
Manifest number: 184A
Signing time: Sun 01 Mar 2026 12:00:32 +0000
Manifest this update: Sun 01 Mar 2026 12:00:32 +0000
Manifest next update: Mon 02 Mar 2026 12:00:32 +0000
Files and hashes: 1: Lh1w2stJ270Gej9xnTdwoInIgKA.roa (hash: o+GwhLAcoD1EMh7vyC4YZpvJmieyScRxzeQPPXDHKzo=)
2: mXT_95G0hHnwfzwy9GHCGff03us.roa (hash: MURLfvQpANHzg+d3efhUAoTh/8FNUBv5Zb/aAOYp3OU=)
3: r-Sg1f2mAMXVt_YY9obX6TBRtNc.crl (hash: hQnzO7nxbSo5A0gJnDq0GHQkqT9OsgC6UUe0R9P+Ve0=)
4: x7mbec4cpv5N8U0_JFOsofDdp9k.asa (hash: xc6esLHJMBzAKQI4ygNtC8Fx32gcjy+TaKUBFG2ujWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-Sg1f2mAMXVt_YY9obX6TBRtNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:45:8b:5e:56:0e:a9:a1:c4:1a:98:9e:18:bc:c4:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe4a0d5fda600c5d5b7f618f686d7e93051b4d7
Validity
Not Before: Mar 1 12:00:32 2026 GMT
Not After : Mar 2 12:00:32 2026 GMT
Subject: CN=585deedf4a9af9ac0c0d7a7f62605694180ac3e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b4:8a:12:76:56:81:f6:76:29:19:ce:3e:0c:
eb:c1:7c:d2:e9:d4:7a:7d:01:88:d4:97:af:25:b9:
f9:f6:16:d8:cc:d1:e5:0c:1b:18:0f:3f:f7:8f:1d:
32:e2:a3:ce:da:97:84:1a:d5:2f:0b:86:7f:66:00:
af:a3:dc:14:dd:8c:84:12:df:f0:a9:ab:5f:ab:7f:
71:bc:ba:05:de:c0:42:61:c6:45:cd:88:1c:1f:fc:
07:fa:7d:39:7d:bc:7a:5b:a8:36:d1:d2:01:a1:87:
a1:4a:6f:16:57:36:74:cb:bc:e0:ce:74:72:80:b1:
6d:76:df:e4:fb:cc:f0:1d:a4:7c:09:90:ef:9b:92:
2d:87:97:25:5c:83:d8:d1:14:a9:8e:64:4b:73:e4:
5d:f9:82:d9:a3:de:c7:88:7c:28:c4:30:28:3b:d2:
ac:55:1f:b1:d6:a4:d1:84:5c:6f:f6:d5:42:aa:cd:
76:7e:f5:45:41:d2:6d:1a:08:24:0a:d1:c0:b6:b4:
28:49:d2:70:07:6b:d6:4e:53:db:c6:5a:76:06:29:
f6:96:cc:0c:f5:50:79:03:66:de:44:98:6e:45:fd:
e2:b3:1a:9b:55:af:65:9d:62:86:c1:a4:26:65:43:
7d:4d:76:1d:7f:4c:d4:78:79:46:54:2e:db:0d:96:
c7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:5D:EE:DF:4A:9A:F9:AC:0C:0D:7A:7F:62:60:56:94:18:0A:C3:E9
X509v3 Authority Key Identifier:
keyid:AF:E4:A0:D5:FD:A6:00:C5:D5:B7:F6:18:F6:86:D7:E9:30:51:B4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-Sg1f2mAMXVt_YY9obX6TBRtNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:02:e8:56:5f:51:a1:6b:15:fc:7b:84:e6:17:11:ba:85:26:
00:58:48:96:27:8e:ce:72:b6:b5:ca:61:64:7c:6b:58:39:50:
88:da:67:cf:fd:22:ec:b2:de:18:9f:08:50:cb:ae:16:fb:1b:
40:84:09:89:7a:bc:ff:da:65:9e:60:94:30:a3:ac:6e:48:83:
d1:64:68:3d:90:4f:04:c9:ab:03:80:a8:10:1c:81:fd:4d:d3:
98:df:3f:ad:6a:53:03:e2:23:f7:e3:33:ae:cd:53:b5:ac:ff:
53:2e:e9:a7:ba:cf:aa:55:8e:3c:fa:b3:b4:a4:4d:f4:0b:c4:
ce:bc:a8:35:bd:0b:ec:99:69:79:27:26:39:60:ac:e1:8e:a2:
0a:b7:67:6d:38:c9:2f:c3:c2:66:53:ae:c0:bb:16:42:1c:79:
6f:c7:f1:1f:0a:bd:0f:61:c5:c0:f2:c9:86:b3:b9:88:fd:d9:
90:78:0b:d3:d8:8b:ce:46:46:e6:3b:24:42:ba:20:f0:fd:ec:
3b:41:e4:e8:3d:f6:f8:08:86:d6:ee:ed:44:2f:7c:27:59:81:
a8:b7:4b:ba:f8:90:98:ab:68:c5:49:15:71:14:33:52:41:0e:
af:51:29:4e:27:af:4b:76:11:be:2c:f9:1b:e3:bc:a7:6c:7c:
a1:8e:1e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:29:12 2026 by rpki-client