Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.mft
File: SdhmPTuWngJTom1UJb7hxdRDs2E.mft (raw, json)
Hash identifier: BQlDICRwjP16xijM52TJZXTkyDJ5bfcVaX5qVa3rXxE=
Subject key identifier: 9A:96:95:5A:DA:69:A2:72:AB:AF:10:5E:DD:27:13:6F:D4:F6:0A:C9
Authority key identifier: 49:D8:66:3D:3B:96:9E:02:53:A2:6D:54:25:BE:E1:C5:D4:43:B3:61
Certificate issuer: /CN=49d8663d3b969e0253a26d5425bee1c5d443b361
Certificate serial: 019D9962692AD432F5686602A27C0625289C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SdhmPTuWngJTom1UJb7hxdRDs2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.mft
Manifest number: 0A20
Signing time: Fri 17 Apr 2026 03:00:56 +0000
Manifest this update: Fri 17 Apr 2026 03:00:56 +0000
Manifest next update: Sat 18 Apr 2026 03:00:56 +0000
Files and hashes: 1: SdhmPTuWngJTom1UJb7hxdRDs2E.crl (hash: umjxAnHYx+vnxqX1w/aZPAx7ORrOvr6ToqteaJ5unqA=)
2: ss_i7POqldkDP31KMdlVrzarBdE.roa (hash: WvsAUlRR+NRLn32GVVcoWQROpDNnn7tmpssNx6BwiVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/SdhmPTuWngJTom1UJb7hxdRDs2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:69:2a:d4:32:f5:68:66:02:a2:7c:06:25:28:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49d8663d3b969e0253a26d5425bee1c5d443b361
Validity
Not Before: Apr 17 03:00:56 2026 GMT
Not After : Apr 18 03:00:56 2026 GMT
Subject: CN=9a96955ada69a272abaf105edd27136fd4f60ac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ea:65:36:37:3f:40:8c:5c:ff:49:b5:8f:e0:
84:ab:0a:c8:c6:cc:03:0d:fd:43:c7:c9:72:9e:10:
55:b7:a3:99:3f:35:2f:c7:26:f2:5e:82:d8:92:cd:
2b:c1:9b:7a:4d:a3:bc:7e:91:ce:b6:e6:0e:d8:77:
62:ef:6e:be:8b:b6:a1:8f:ce:eb:d9:f4:44:df:ae:
20:72:5c:f6:d0:e3:32:95:9c:72:bf:a3:9d:86:65:
3f:6d:c3:b1:f4:a4:a8:56:d8:6f:16:94:1e:1a:85:
36:d1:30:e8:c9:04:ae:a6:9a:a0:7f:fa:ce:68:7c:
65:c0:ca:56:0a:0f:e5:83:47:36:5d:99:ad:dd:b2:
c8:81:37:1d:6d:93:f7:1f:94:fa:80:82:91:f8:5b:
08:60:16:2b:da:44:00:ab:54:f1:a3:1f:fd:1e:32:
b9:57:a0:a4:c3:e3:37:e3:25:f0:04:4f:94:40:84:
45:41:ce:7e:19:9c:c3:b2:8a:1d:df:5f:21:a8:91:
66:49:ac:6f:10:ae:8f:77:78:0d:cf:1b:b7:92:50:
01:b6:dc:02:68:8e:64:82:b5:a1:27:71:d5:92:89:
07:53:f3:ce:27:f5:5a:75:af:3c:45:b8:e7:25:09:
d5:cd:3e:ba:47:6c:65:a5:3a:b5:3f:dc:e3:a4:15:
07:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:96:95:5A:DA:69:A2:72:AB:AF:10:5E:DD:27:13:6F:D4:F6:0A:C9
X509v3 Authority Key Identifier:
keyid:49:D8:66:3D:3B:96:9E:02:53:A2:6D:54:25:BE:E1:C5:D4:43:B3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SdhmPTuWngJTom1UJb7hxdRDs2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:33:85:22:fc:a6:92:37:9f:78:3c:73:e2:ec:82:5e:f5:9d:
86:5f:c5:4e:c3:26:42:d6:f0:24:39:09:34:4c:56:ef:bb:29:
b2:ce:4a:58:ff:f5:06:75:73:20:0a:b7:95:fd:e7:f6:27:a8:
06:11:4b:8c:cb:92:53:bb:47:26:a3:ad:38:51:00:08:56:e4:
3d:cd:18:00:f8:8b:06:7f:2d:df:d7:79:22:15:2a:78:42:5b:
a5:d0:15:41:a9:30:32:d9:5a:eb:7d:d6:2b:4e:6a:82:7f:c1:
54:f2:10:8f:c7:87:52:1c:6e:fd:e6:87:b0:96:84:c9:35:96:
17:e4:cd:85:42:97:23:fc:ed:28:3f:e2:79:6f:43:4c:df:07:
d1:99:09:6d:0e:45:cd:29:d4:89:82:dc:f1:f0:e8:41:97:2c:
05:79:37:ad:f9:f4:19:34:d9:89:dc:1f:dc:30:e5:e1:5d:d3:
89:17:fa:c0:8e:a0:60:8c:7e:ec:ff:19:c6:ca:59:32:dc:c9:
6d:89:c2:ed:4d:23:c3:df:12:56:15:47:85:67:7e:2c:40:16:
36:26:cd:cd:76:9d:ba:81:bd:e0:c1:9a:61:e0:74:bf:d2:dd:
df:b8:8e:cc:6a:82:70:a4:40:92:96:09:b0:8f:a2:38:33:83:
f6:1e:73:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:49:53 2026 by rpki-client