
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.mft
File: SdhmPTuWngJTom1UJb7hxdRDs2E.mft (raw, json)
Hash identifier: qSyohp9hCeIZ39XE2ScQnCB/+zTT3/JbzBZITo9Ze48=
Subject key identifier: 25:1D:38:E2:2F:4F:AD:8E:3B:CA:0C:48:5F:67:D3:E3:C7:3C:AF:71
Authority key identifier: 49:D8:66:3D:3B:96:9E:02:53:A2:6D:54:25:BE:E1:C5:D4:43:B3:61
Certificate issuer: /CN=49d8663d3b969e0253a26d5425bee1c5d443b361
Certificate serial: 01A0DBA8B1897DFAC45AB2A0611498DD604E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SdhmPTuWngJTom1UJb7hxdRDs2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.mft
Manifest number: 0BD0
Signing time: Sat 26 Sep 2026 03:01:00 +0000
Manifest this update: Sat 26 Sep 2026 03:01:00 +0000
Manifest next update: Sun 27 Sep 2026 03:01:00 +0000
Files and hashes: 1: SdhmPTuWngJTom1UJb7hxdRDs2E.crl (hash: WAdmsHjFyc+83pA+bfjA1WJSdCY3W+egC/N5kyyP1Mw=)
2: ss_i7POqldkDP31KMdlVrzarBdE.roa (hash: WvsAUlRR+NRLn32GVVcoWQROpDNnn7tmpssNx6BwiVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/SdhmPTuWngJTom1UJb7hxdRDs2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:a8:b1:89:7d:fa:c4:5a:b2:a0:61:14:98:dd:60:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49d8663d3b969e0253a26d5425bee1c5d443b361
Validity
Not Before: Sep 26 03:01:00 2026 GMT
Not After : Sep 27 03:01:00 2026 GMT
Subject: CN=251d38e22f4fad8e3bca0c485f67d3e3c73caf71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:98:4b:3c:48:20:c6:70:f0:8a:98:77:75:22:
bb:cd:e2:7e:c2:b6:97:c8:53:48:17:fc:fa:d2:53:
99:79:cc:f5:b1:b8:ed:a9:6d:eb:7b:85:86:6d:70:
ac:c5:e8:e5:cc:c8:70:0e:34:e7:b9:df:1b:06:49:
63:0a:1e:e2:b0:48:b3:58:40:4d:e8:7d:48:70:4d:
c0:b7:95:27:56:28:58:6a:27:85:85:ad:b1:86:c1:
1c:98:eb:77:26:b6:83:df:63:50:59:f3:6f:97:31:
fa:41:05:87:27:0d:27:38:97:d9:e5:6e:df:76:d7:
4b:c0:f2:22:89:2f:fd:82:b0:34:ef:0e:2a:7a:59:
74:4a:0a:fc:78:22:81:3f:11:59:f2:09:d0:09:d7:
77:df:bb:04:27:64:4b:0b:0e:33:a8:88:f5:ed:89:
6d:75:bf:3b:1c:e9:39:52:6e:42:5e:e8:3f:16:5f:
97:0d:b0:6f:83:b0:40:40:57:76:c3:59:08:e6:a2:
31:8e:f1:00:02:18:ff:cf:08:b4:97:41:f1:c8:a0:
71:60:5f:37:02:9f:4b:e7:10:0f:da:3d:91:60:60:
e9:b2:e9:48:ae:66:24:16:fe:3b:7e:b2:ae:4f:3e:
81:a8:92:0f:e4:52:b6:da:72:7b:65:d3:da:f1:0d:
dd:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:1D:38:E2:2F:4F:AD:8E:3B:CA:0C:48:5F:67:D3:E3:C7:3C:AF:71
X509v3 Authority Key Identifier:
keyid:49:D8:66:3D:3B:96:9E:02:53:A2:6D:54:25:BE:E1:C5:D4:43:B3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SdhmPTuWngJTom1UJb7hxdRDs2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:58:c9:f1:94:72:bc:37:62:3d:05:1f:91:a3:0c:7e:60:0f:
22:dd:8a:86:57:04:76:dd:1f:9b:52:c5:17:53:77:2e:32:04:
e7:73:4f:b8:98:5b:b7:63:0a:11:66:a6:da:18:99:50:7b:02:
d6:19:db:3c:ef:ef:b2:81:a4:51:23:17:e5:f0:7d:e7:d4:dc:
55:d5:a4:ca:4c:ac:d8:dc:c8:84:ff:a6:fd:56:17:ec:a8:41:
60:31:17:9b:62:1d:67:9c:b5:d9:52:15:f0:bf:99:de:39:77:
9f:fd:3c:d3:bb:76:f9:8f:47:83:61:0d:94:ce:8d:0a:e4:1e:
c4:9b:a5:50:34:57:ba:2c:15:70:89:e8:b5:4b:66:9e:82:39:
52:c2:ea:e0:ad:73:be:56:b6:12:e1:d8:ae:c4:48:4e:4c:52:
2c:26:cb:d1:13:9f:78:cf:55:54:fd:6f:bc:17:24:d6:13:da:
22:46:8f:db:1f:2e:c2:d2:c6:a1:2e:81:24:b0:5d:83:7f:d5:
9f:3f:5f:7e:15:fb:2f:21:90:cb:c5:40:2c:a9:b7:3e:bf:79:
e0:0b:a4:2e:d0:f7:d5:70:c2:af:d0:da:18:d8:f3:7a:b8:b8:
81:9f:d1:5c:c7:52:ee:7d:81:39:0f:9f:61:ff:d4:1f:be:11:
41:39:5a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:58:38 2026 by rpki-client