Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.mft
File: SffBpGd-t4JtrmneAaaZtiAdYkQ.mft (raw, json)
Hash identifier: dBedGCotEH8NNbDVnfieXvHh15/wbkxZ4OAr1GXspJg=
Subject key identifier: 12:D2:4E:75:28:D5:4C:01:68:E5:EC:6A:B6:1D:EB:AC:07:CE:25:1B
Authority key identifier: 49:F7:C1:A4:67:7E:B7:82:6D:AE:69:DE:01:A6:99:B6:20:1D:62:44
Certificate issuer: /CN=49f7c1a4677eb7826dae69de01a699b6201d6244
Certificate serial: 01A0C3D7456161E7AE1765868081669872C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.mft
Manifest number: 0C3E
Signing time: Mon 21 Sep 2026 12:01:00 +0000
Manifest this update: Mon 21 Sep 2026 12:01:00 +0000
Manifest next update: Tue 22 Sep 2026 12:01:00 +0000
Files and hashes: 1: 1Ydtwyp0RxTqwFwlZLQC9pjEjck.roa (hash: lddKsSWBtsmYYjZdvA43DNL49znHbCiLIeDmyKFXUS8=)
2: P_w-NRk3sq4FN8wNQZlbDCGKay0.roa (hash: BFcjOL0TTkDSTQE9PAJPoPKs+FESp9oTcwSOntg8xNM=)
3: SffBpGd-t4JtrmneAaaZtiAdYkQ.crl (hash: AcpRBep4xHq4panVp7aWXUBpL0m5ldlHadB/4ZiaMZc=)
4: poS62r2xc1Q0WW07fhDP8zECi4w.roa (hash: +zufayp/EjEAE4m8aJ8bI+p2tsBzidxT3ZMgA9RaLz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:d7:45:61:61:e7:ae:17:65:86:80:81:66:98:72:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f7c1a4677eb7826dae69de01a699b6201d6244
Validity
Not Before: Sep 21 12:01:00 2026 GMT
Not After : Sep 22 12:01:00 2026 GMT
Subject: CN=12d24e7528d54c0168e5ec6ab61debac07ce251b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8b:71:cf:07:a8:ac:83:fc:0c:06:ef:c9:0a:
f0:a6:61:cf:7d:3f:eb:20:a5:c7:5a:8b:d0:fe:ed:
57:b9:7b:9e:a4:ab:4a:85:4a:8d:4c:ad:17:28:8d:
a3:cb:5e:17:1b:76:0f:a1:5a:67:5e:b4:f0:39:87:
dd:b8:a0:12:19:1a:4d:40:37:91:48:a6:7d:ae:6d:
6c:95:30:4a:21:db:bf:f7:84:d6:88:e6:ed:f8:ad:
37:95:f4:97:c9:08:73:66:f2:20:cf:50:28:c5:05:
4b:b5:e8:c2:45:a1:12:91:a3:c8:20:0a:45:3b:23:
87:06:cf:9a:0a:81:2a:7c:96:22:3d:a5:de:22:06:
bb:fb:b6:d5:86:84:8c:f6:83:ef:ad:17:fb:ce:76:
a6:91:72:2a:d0:04:96:0e:35:b9:91:1c:07:18:ce:
58:f0:8a:67:6f:0c:56:f8:ad:64:ab:e2:2a:51:79:
d9:6d:e2:c3:4d:79:eb:79:b8:24:b6:3b:dd:a7:5f:
87:5c:f6:80:6b:40:44:37:ba:74:33:25:2b:43:cc:
cd:e2:f5:d7:76:56:48:c6:82:eb:ef:98:5c:bf:8a:
a5:6f:76:02:df:84:2a:5a:53:be:87:23:55:32:4d:
09:25:0e:f5:95:40:29:ba:bb:c9:e4:85:79:f5:76:
2e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D2:4E:75:28:D5:4C:01:68:E5:EC:6A:B6:1D:EB:AC:07:CE:25:1B
X509v3 Authority Key Identifier:
keyid:49:F7:C1:A4:67:7E:B7:82:6D:AE:69:DE:01:A6:99:B6:20:1D:62:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:08:20:20:cf:39:d3:5e:ec:41:52:b1:2e:7f:a6:99:11:3c:
7d:30:e6:6e:7f:93:9b:95:92:8b:b7:35:29:8a:a3:88:65:6b:
9a:71:3b:c1:74:1a:ba:7d:ca:96:df:03:87:8e:5d:90:dd:15:
a0:c6:8a:62:1e:2f:dc:14:95:f7:b7:4a:74:c9:09:2d:b0:a8:
8e:49:68:58:1b:1f:f5:f5:6f:bb:8d:ca:08:ec:ab:c6:4f:4e:
f8:c9:d2:20:6e:88:84:47:30:64:a3:ed:10:18:5c:5c:0e:d6:
02:46:ce:f6:b2:38:83:1d:ed:48:ff:8c:c5:e5:4b:ce:be:e0:
e9:e1:73:e0:a3:df:25:0f:60:69:a5:15:52:21:cd:f6:cf:eb:
34:4e:71:cb:c8:a1:ec:b4:e3:be:6a:21:ed:20:56:cc:fe:dd:
04:ae:ee:9b:e3:73:8a:8a:de:ba:ab:47:df:96:e8:73:45:2d:
93:5c:4b:c8:a6:c1:36:cb:4e:00:94:53:24:19:26:d4:62:3f:
91:9e:02:a3:f8:31:9d:3e:dc:4e:7c:12:71:d6:f1:03:c7:e5:
db:b8:06:af:2e:49:c6:41:7f:81:32:f3:c1:57:ad:cf:78:dd:
0f:8a:cf:f3:b7:98:b3:5c:77:ba:59:77:49:f4:0b:12:cb:50:
04:48:c7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:26:54 2026 by rpki-client