Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.mft
File: SffBpGd-t4JtrmneAaaZtiAdYkQ.mft (raw, json)
Hash identifier: f8BP44wJ77J6RRo2XZS90wRF0nADgnJcklgQw9LuKaU=
Subject key identifier: E9:55:FB:03:54:FB:75:77:28:9E:D2:F7:7A:54:8C:E6:51:BC:19:A8
Authority key identifier: 49:F7:C1:A4:67:7E:B7:82:6D:AE:69:DE:01:A6:99:B6:20:1D:62:44
Certificate issuer: /CN=49f7c1a4677eb7826dae69de01a699b6201d6244
Certificate serial: 019D98868188F91330BDB7B6DF0B15CDF21C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.mft
Manifest number: 0A99
Signing time: Thu 16 Apr 2026 23:00:44 +0000
Manifest this update: Thu 16 Apr 2026 23:00:44 +0000
Manifest next update: Fri 17 Apr 2026 23:00:44 +0000
Files and hashes: 1: 1Ydtwyp0RxTqwFwlZLQC9pjEjck.roa (hash: lddKsSWBtsmYYjZdvA43DNL49znHbCiLIeDmyKFXUS8=)
2: 7QrWs9jpQhmFY3PyZCr6-nEeMH8.roa (hash: SW0/y7KitZRJpYFxOpK/vsBcsStTykljR4R1T9PoZ4c=)
3: SffBpGd-t4JtrmneAaaZtiAdYkQ.crl (hash: DwZGzm0oksHQ/ohX+w116IGBGN1LepQZPnnBtUSWS3Y=)
4: poS62r2xc1Q0WW07fhDP8zECi4w.roa (hash: +zufayp/EjEAE4m8aJ8bI+p2tsBzidxT3ZMgA9RaLz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:81:88:f9:13:30:bd:b7:b6:df:0b:15:cd:f2:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f7c1a4677eb7826dae69de01a699b6201d6244
Validity
Not Before: Apr 16 23:00:44 2026 GMT
Not After : Apr 17 23:00:44 2026 GMT
Subject: CN=e955fb0354fb7577289ed2f77a548ce651bc19a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:38:23:ad:49:cc:59:23:68:ee:70:f2:eb:6c:
50:9b:33:de:d9:78:bc:81:26:5f:13:fe:78:7d:6f:
14:07:05:51:6e:87:8f:12:21:74:5a:9e:fc:66:0c:
5c:ef:af:40:0c:63:47:e7:30:43:41:15:88:e7:71:
46:a5:5f:cd:c2:a5:a8:e3:9d:48:13:97:eb:6a:ec:
29:18:a4:b5:67:5a:16:81:f4:4c:01:c9:5e:d2:a7:
eb:11:54:03:75:f8:91:2f:ed:6c:81:eb:75:a4:3e:
0f:1c:e5:0c:9c:df:aa:75:01:5e:ee:2f:da:7f:f3:
79:a7:3c:ae:e2:03:c3:f3:c6:3d:78:51:11:da:25:
8b:dd:86:05:f9:9c:42:9d:87:15:23:aa:27:a2:c9:
a6:54:4b:50:e4:35:a0:c0:2c:29:b7:de:dd:44:15:
e3:51:0c:f7:b8:cb:b7:09:aa:ac:cd:d5:79:80:8f:
5f:9b:35:90:59:24:ae:42:5e:ee:99:9e:4d:af:18:
07:01:09:a8:25:0c:89:a8:c1:cb:76:72:b4:a6:5d:
31:5a:2f:f3:1a:7c:08:5e:5c:07:81:b9:d9:f7:d2:
8f:21:88:ab:c1:38:a6:6b:64:5a:31:ef:69:ed:9b:
85:31:dc:95:8e:b3:37:49:94:86:64:c0:53:10:4e:
53:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:55:FB:03:54:FB:75:77:28:9E:D2:F7:7A:54:8C:E6:51:BC:19:A8
X509v3 Authority Key Identifier:
keyid:49:F7:C1:A4:67:7E:B7:82:6D:AE:69:DE:01:A6:99:B6:20:1D:62:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:23:a0:8c:4e:c4:00:6d:7b:40:14:78:a5:74:d0:76:2e:d1:
3c:11:86:ba:34:58:7a:b4:6f:c0:55:5f:e4:d4:a3:d4:04:9b:
9e:9a:fa:7f:63:d6:a4:8f:4c:49:61:14:8d:f0:28:ee:97:4c:
8e:c9:cc:1d:17:32:1c:c5:84:9d:08:b9:41:95:5e:b7:90:c8:
58:2f:fe:eb:5b:a2:41:05:34:4b:1d:69:a0:34:c3:52:07:89:
bf:35:49:7b:83:32:0e:46:31:4e:db:a0:04:32:bc:10:79:aa:
3c:c8:31:6a:33:fc:ba:74:26:95:2e:ff:23:4f:26:73:bf:f4:
70:9a:35:57:6d:53:98:65:2c:7c:50:5f:40:04:c4:61:d1:25:
a0:f5:12:58:37:3c:f3:58:c5:2d:01:1b:3b:1f:7f:f5:0c:a3:
91:46:38:b1:02:4f:26:b6:07:03:3f:39:24:b7:32:2b:39:ed:
12:86:9d:91:b1:89:49:70:a1:ad:33:55:69:bc:fe:5b:e7:b3:
7a:af:a1:e9:85:71:b6:d5:08:21:b8:35:8a:f5:be:99:ca:ea:
62:c7:ec:80:b5:fc:bb:c4:da:13:92:20:ff:f6:3d:43:d6:7d:
f0:97:68:82:a3:a2:bd:a8:20:18:6b:a6:f7:12:33:5b:b8:2f:
07:2f:08:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:53:02 2026 by rpki-client