Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.mft
File: Sb8yq_d_QSwhD0CYItE5jsO-2ps.mft (raw, json)
Hash identifier: ux2JRldZZlYD8vTTKMcEMZzDe+ewHjIrzUPbAYkcD3U=
Subject key identifier: 49:8C:A9:A7:DB:C7:0D:C5:AB:01:5A:19:26:69:BE:69:DA:DF:37:C5
Authority key identifier: 49:BF:32:AB:F7:7F:41:2C:21:0F:40:98:22:D1:39:8E:C3:BE:DA:9B
Certificate issuer: /CN=49bf32abf77f412c210f409822d1398ec3beda9b
Certificate serial: 019D98BD51D743E056C23DEC2FF6012063E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sb8yq_d_QSwhD0CYItE5jsO-2ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 00:00:36 +0000
Manifest this update: Fri 17 Apr 2026 00:00:36 +0000
Manifest next update: Sat 18 Apr 2026 00:00:36 +0000
Files and hashes: 1: Sb8yq_d_QSwhD0CYItE5jsO-2ps.crl (hash: jAQzOSCkuOAvoKc9RfSayl1+5gk1pqyMWQiFsC62/NE=)
2: w7k2lrBQys2CDumqPbMqNrCdMKM.roa (hash: 4OFNHEKBovihz5W0xIvqIIAh7BlJWxOSYnsriRtP1DY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sb8yq_d_QSwhD0CYItE5jsO-2ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:51:d7:43:e0:56:c2:3d:ec:2f:f6:01:20:63:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bf32abf77f412c210f409822d1398ec3beda9b
Validity
Not Before: Apr 17 00:00:36 2026 GMT
Not After : Apr 18 00:00:36 2026 GMT
Subject: CN=498ca9a7dbc70dc5ab015a192669be69dadf37c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:87:4d:b6:8a:bf:0b:2b:e7:9c:6e:53:7b:1a:
49:64:68:40:47:36:57:53:16:9a:9d:42:dc:60:51:
27:2d:35:60:d9:44:f0:7b:be:e0:7c:b3:25:42:ef:
c2:0c:96:95:98:61:af:e6:eb:76:1a:a3:0e:78:66:
7a:ea:b0:9d:69:1f:52:c1:0a:38:d9:ad:aa:07:d1:
c9:10:87:15:a6:04:bc:80:c6:b5:99:49:1b:af:66:
c5:e9:f5:5d:a7:e8:82:bb:3c:36:c1:03:10:12:9e:
6f:ae:ab:d0:4e:8e:36:21:a8:08:2f:f7:65:f2:19:
b8:cd:b5:6c:ae:10:f2:1f:c7:42:4c:13:23:d2:ad:
8c:8c:90:54:fb:24:8b:4a:63:9c:48:7f:dd:f9:25:
e8:c7:85:ca:ef:7a:09:df:21:0f:f7:87:56:7c:2e:
8a:d8:a2:d2:fa:e1:6c:4c:19:14:ab:8c:18:62:04:
ce:fe:21:12:68:61:65:9d:2e:d0:4c:5b:37:e4:6d:
71:01:ed:d4:96:99:6f:8e:07:da:2d:6e:20:c1:7e:
7e:34:4f:a3:20:a2:c9:1c:13:4d:e5:ff:b2:b8:52:
35:ce:8f:5b:d8:3d:1d:57:5a:d0:1b:9e:47:c5:ed:
f6:64:dc:a4:9c:25:d3:cf:4f:eb:47:b5:85:17:4b:
68:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:8C:A9:A7:DB:C7:0D:C5:AB:01:5A:19:26:69:BE:69:DA:DF:37:C5
X509v3 Authority Key Identifier:
keyid:49:BF:32:AB:F7:7F:41:2C:21:0F:40:98:22:D1:39:8E:C3:BE:DA:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sb8yq_d_QSwhD0CYItE5jsO-2ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:b9:86:00:b5:db:b3:4e:60:04:5d:de:8e:9b:0e:2b:3b:ec:
9b:82:9f:ab:18:3e:18:e2:10:ca:5d:9c:ad:8c:c4:3b:5c:3b:
db:8e:d3:ba:39:9c:5d:1a:23:36:aa:16:65:5d:e6:cc:dd:06:
f4:96:83:0c:58:4f:07:8a:4c:31:00:87:38:f2:29:4f:9a:6c:
83:6f:55:36:dd:d9:14:cd:ad:1e:5a:06:5d:03:6b:f7:5f:1b:
80:10:2a:4b:35:73:9d:08:04:5c:e8:bc:8e:9f:3b:03:f4:a3:
8d:5d:75:5b:a6:94:f7:56:12:b0:87:e0:3e:b8:5b:be:d3:b2:
df:29:3e:2a:be:b3:3a:46:f9:14:9c:e4:37:d5:7f:a5:85:e3:
cf:d4:85:29:f6:df:c3:bf:92:6e:da:dc:0f:63:d4:c8:c1:cd:
bd:37:d3:79:69:2c:a6:c9:20:1f:86:5b:33:84:26:73:d6:68:
b2:89:5b:7f:cf:4e:76:fa:b1:8e:e9:4c:b7:46:2c:10:d6:17:
71:30:b3:c3:89:6e:e9:4d:21:a8:f2:17:a9:a8:2b:d9:63:a0:
22:4d:19:b4:33:66:76:c2:fd:89:b9:42:60:46:87:d6:f4:79:
28:0f:bf:b8:43:40:8f:1c:d9:06:0f:a8:87:58:29:f2:b6:06:
b0:41:3d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:12:56 2026 by rpki-client