Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.mft
File: SGfTe3Yct6BfxzPj20M2b6NiU2w.mft (raw, json)
Hash identifier: XbEDnelInZM8SwxUyN6uqLNW1/JUhHvMSdTF1ZKSO6g=
Subject key identifier: 28:29:99:D4:46:87:DC:C4:0D:93:12:C9:61:4B:26:21:12:68:A4:09
Authority key identifier: 48:67:D3:7B:76:1C:B7:A0:5F:C7:33:E3:DB:43:36:6F:A3:62:53:6C
Certificate issuer: /CN=4867d37b761cb7a05fc733e3db43366fa362536c
Certificate serial: 019CABD9616C7D654A793A62C338B6CB9989
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGfTe3Yct6BfxzPj20M2b6NiU2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.mft
Manifest number: 111C
Signing time: Mon 02 Mar 2026 00:01:15 +0000
Manifest this update: Mon 02 Mar 2026 00:01:15 +0000
Manifest next update: Tue 03 Mar 2026 00:01:15 +0000
Files and hashes: 1: 7eg3o94jzF6MWPTPt5NbTvs7jJs.roa (hash: uBhb3oqgOc4SEMDE6pXGmihKzbDqsdvpsyNNplPMk2I=)
2: SGfTe3Yct6BfxzPj20M2b6NiU2w.crl (hash: 9sHAGwtqU54Z4yHX4HoqgkEGHM2prBUYg8r0IUBgUdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/SGfTe3Yct6BfxzPj20M2b6NiU2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:61:6c:7d:65:4a:79:3a:62:c3:38:b6:cb:99:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4867d37b761cb7a05fc733e3db43366fa362536c
Validity
Not Before: Mar 2 00:01:15 2026 GMT
Not After : Mar 3 00:01:15 2026 GMT
Subject: CN=282999d44687dcc40d9312c9614b26211268a409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:87:97:e1:46:98:52:27:1c:21:e5:16:02:73:
bc:66:08:d0:3f:f8:b2:a2:bb:ed:6b:60:0c:ba:48:
74:40:50:c5:af:8b:4b:54:65:ff:93:1a:5a:ad:ae:
78:3f:2d:91:70:cb:5b:42:aa:89:71:73:86:6d:6c:
4f:fd:c6:55:84:09:8f:f7:04:0c:8d:0f:4e:5d:ef:
e6:19:77:00:6b:35:b5:15:c0:dc:59:2f:e5:ea:21:
39:e5:a9:54:94:2e:8f:ad:ff:39:08:62:70:86:66:
47:90:80:a9:0c:e2:3e:34:07:c3:de:ae:43:df:11:
fa:07:fe:0b:d9:21:fb:bc:a9:1f:8d:c7:1f:de:e2:
c9:42:f3:c4:e5:37:c1:30:29:64:ae:d2:22:44:35:
53:4c:01:20:a3:56:d5:41:a3:d0:ab:da:4c:19:3f:
5a:4f:77:b6:3e:35:a8:a2:b4:5c:ce:ef:2b:d5:bd:
a9:83:91:6a:f0:5b:81:c8:8c:36:b9:14:cb:9c:3d:
0e:8c:a4:d0:eb:9d:e4:c7:3e:75:7e:d2:a6:76:3f:
32:74:af:40:58:14:0f:a4:b6:48:2b:9e:8d:48:69:
78:89:50:15:a4:d8:1d:3f:3c:92:0f:49:f2:d0:70:
e9:2e:45:a8:1f:14:7e:89:85:d2:43:38:1d:95:47:
99:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:29:99:D4:46:87:DC:C4:0D:93:12:C9:61:4B:26:21:12:68:A4:09
X509v3 Authority Key Identifier:
keyid:48:67:D3:7B:76:1C:B7:A0:5F:C7:33:E3:DB:43:36:6F:A3:62:53:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGfTe3Yct6BfxzPj20M2b6NiU2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:87:39:e1:7d:61:74:3b:ee:6e:16:60:9b:e3:ea:dd:08:24:
2b:57:e5:5a:aa:aa:cf:42:b5:14:cf:12:10:ce:ba:32:78:47:
be:0a:d6:8a:5a:6e:4e:6f:0b:f2:75:29:28:77:79:8f:6b:cf:
37:a1:99:2e:91:4a:ff:13:a0:ed:61:13:2b:b1:58:c0:ca:0c:
89:a6:b9:fd:7d:b3:0f:f2:c4:60:81:87:d9:c8:cf:c1:d5:68:
10:20:8f:1e:1e:53:67:17:68:11:d0:0f:3f:23:d4:4f:2e:3f:
1e:a1:03:d9:fa:9e:e3:01:06:4b:b9:8b:6a:ff:90:d8:d8:3b:
b7:8f:d7:71:97:e5:b6:6c:6d:81:04:96:18:4b:b1:2f:e3:bd:
16:69:39:2a:b8:b8:c0:86:cc:e5:7a:10:2a:32:e7:58:e4:3b:
30:9c:9c:25:38:10:80:a4:ab:6a:4e:e1:b1:81:1c:b8:cb:03:
63:08:c2:21:fe:b0:ad:9e:07:de:e0:31:5f:e4:2e:e0:90:fd:
5b:f1:c7:67:ee:91:5f:c3:7b:01:29:fc:20:0a:5a:d3:81:8c:
46:88:51:f0:fb:16:89:06:15:34:c0:83:73:b1:fe:bb:ec:4e:
2f:d7:70:df:ee:81:25:5d:03:e0:3f:0a:a2:d5:4b:9c:08:96:
32:13:08:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:57:31 2026 by rpki-client