Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.mft
File: SffBpGd-t4JtrmneAaaZtiAdYkQ.mft (raw, json)
Hash identifier: RoKhKn1YOE30H8VobF14GZX0uLXCgJNf0tZbXZl/t9U=
Subject key identifier: D8:91:E1:B5:20:5D:AE:17:6B:40:AA:E9:74:28:7C:C4:E0:34:00:EB
Authority key identifier: 49:F7:C1:A4:67:7E:B7:82:6D:AE:69:DE:01:A6:99:B6:20:1D:62:44
Certificate issuer: /CN=49f7c1a4677eb7826dae69de01a699b6201d6244
Certificate serial: 019CAAFD4CCC436C792B464C227661FF21CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.mft
Manifest number: 0A1E
Signing time: Sun 01 Mar 2026 20:00:52 +0000
Manifest this update: Sun 01 Mar 2026 20:00:52 +0000
Manifest next update: Mon 02 Mar 2026 20:00:52 +0000
Files and hashes: 1: 1Ydtwyp0RxTqwFwlZLQC9pjEjck.roa (hash: lddKsSWBtsmYYjZdvA43DNL49znHbCiLIeDmyKFXUS8=)
2: 7QrWs9jpQhmFY3PyZCr6-nEeMH8.roa (hash: SW0/y7KitZRJpYFxOpK/vsBcsStTykljR4R1T9PoZ4c=)
3: SffBpGd-t4JtrmneAaaZtiAdYkQ.crl (hash: iqxy5RefQh6cDqYnfIR+29hTBXf4c5A3sPOMd1iqbKk=)
4: poS62r2xc1Q0WW07fhDP8zECi4w.roa (hash: +zufayp/EjEAE4m8aJ8bI+p2tsBzidxT3ZMgA9RaLz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:4c:cc:43:6c:79:2b:46:4c:22:76:61:ff:21:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f7c1a4677eb7826dae69de01a699b6201d6244
Validity
Not Before: Mar 1 20:00:52 2026 GMT
Not After : Mar 2 20:00:52 2026 GMT
Subject: CN=d891e1b5205dae176b40aae974287cc4e03400eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4b:ce:8a:ca:ac:47:06:e4:ad:0c:95:22:9a:
63:69:6d:ca:35:1d:90:c0:31:38:8d:f4:e8:70:24:
98:dd:23:50:ff:e8:32:fe:e8:ea:c8:6a:b9:6d:be:
ea:07:52:79:e9:2f:98:a9:73:74:85:9b:83:1e:1a:
c3:e9:e5:cd:b9:c6:63:61:d3:df:0f:9b:69:88:3f:
4e:2f:e2:2b:78:93:82:bc:c9:8c:70:81:11:fd:5a:
b5:ce:ad:a3:7c:62:0f:29:56:d1:ea:bc:3e:d2:15:
67:01:f4:6a:01:d8:2d:85:52:f9:75:12:37:e9:2b:
bf:4b:ad:b4:0d:33:f7:a1:97:64:58:31:5c:aa:b9:
87:4b:cb:6b:76:59:59:b9:6b:7e:5b:da:11:71:a0:
18:66:90:49:32:7a:a4:16:52:d7:0c:8f:c0:c6:67:
0b:55:ad:37:83:7e:2a:dc:fc:55:f8:9b:d2:2f:7b:
03:d6:e7:5a:27:9e:19:fe:54:2c:57:5c:ae:30:27:
94:77:ed:94:ba:96:ba:5b:1b:b2:a5:78:c0:ff:91:
56:26:c9:c0:b9:10:11:a8:a2:94:4d:19:2f:95:50:
aa:dc:b6:0a:63:e1:df:73:05:bc:ca:05:12:d4:6a:
2d:3e:b9:a9:04:97:03:be:2e:69:e9:95:33:5e:bf:
15:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:91:E1:B5:20:5D:AE:17:6B:40:AA:E9:74:28:7C:C4:E0:34:00:EB
X509v3 Authority Key Identifier:
keyid:49:F7:C1:A4:67:7E:B7:82:6D:AE:69:DE:01:A6:99:B6:20:1D:62:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:53:2b:b0:e5:77:25:b1:c0:c1:32:d0:d0:c0:4f:a4:0c:3c:
f4:e4:61:3b:44:9d:53:74:27:f1:2c:1e:fa:f8:7a:b0:0c:4f:
bf:a7:47:48:3d:4b:ab:7e:d9:a9:ad:67:a0:8d:fc:6c:28:96:
00:16:da:23:d4:dc:0f:63:7c:81:8a:ce:da:9f:f7:2d:71:10:
49:eb:b4:9b:2b:58:02:2b:37:c1:36:47:f0:5d:b2:7b:61:f9:
4f:ed:fc:0e:3f:03:5c:91:10:70:63:8e:53:e4:80:2f:96:bf:
09:63:7c:39:57:e0:7f:8e:98:58:ac:4c:07:b7:cf:c8:66:1e:
bf:6b:51:02:ad:55:9f:9b:55:20:1c:f4:7c:79:8c:3a:9b:ea:
4e:4f:34:f0:1b:69:7f:0c:59:b0:c2:2c:d4:72:d6:5e:e3:fd:
70:98:f7:a9:88:da:61:b3:90:b1:14:8e:36:4e:dd:c5:df:8a:
c6:44:bd:3f:8a:d9:7f:42:b2:a7:57:37:b0:90:d2:79:2e:90:
6f:d5:38:f3:35:6e:a6:32:b9:0e:ed:f0:b3:d3:01:ae:73:ff:
76:00:c6:da:03:a1:4d:cb:24:0a:e2:9b:96:ea:da:c1:fa:59:
3a:8c:c7:06:59:0e:57:7d:1a:6d:85:9e:03:4d:dd:cc:88:2e:
06:40:b1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:06:09 2026 by rpki-client