Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.mft
File: SZ8D5I7WKpaEDrLy15w-whon8c4.mft (raw, json)
Hash identifier: 7pBSx/sMB5II//W49IuLV4fKBtzCglzKC7KYfnEH5GE=
Subject key identifier: A5:CB:97:BC:F2:B0:30:1B:F5:80:DB:0C:4D:7A:B6:E8:32:C8:3C:73
Authority key identifier: 49:9F:03:E4:8E:D6:2A:96:84:0E:B2:F2:D7:9C:3E:C2:1A:27:F1:CE
Certificate issuer: /CN=499f03e48ed62a96840eb2f2d79c3ec21a27f1ce
Certificate serial: 019D9A3F29DE92DD226C208574E910F12AC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SZ8D5I7WKpaEDrLy15w-whon8c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 07:02:03 +0000
Manifest this update: Fri 17 Apr 2026 07:02:03 +0000
Manifest next update: Sat 18 Apr 2026 07:02:03 +0000
Files and hashes: 1: A5XOJbTaPmRGoTvKxuzub_rL6N0.roa (hash: FAOba0SQ0llUhsUnpDnHyFWPVUFSFyEFJ1WvGVy5f9I=)
2: SZ8D5I7WKpaEDrLy15w-whon8c4.crl (hash: WlETOxgyEg5j+7j7WoFUBviYQWDmRb1HTq2h1LhVJaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SZ8D5I7WKpaEDrLy15w-whon8c4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3f:29:de:92:dd:22:6c:20:85:74:e9:10:f1:2a:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=499f03e48ed62a96840eb2f2d79c3ec21a27f1ce
Validity
Not Before: Apr 17 07:02:03 2026 GMT
Not After : Apr 18 07:02:03 2026 GMT
Subject: CN=a5cb97bcf2b0301bf580db0c4d7ab6e832c83c73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b3:ea:a9:a6:0e:e2:18:d4:ec:14:7e:ee:15:
69:a9:07:2e:0e:21:b6:52:a6:0e:3b:93:f7:7f:44:
e4:7a:1c:c2:a1:61:19:49:8a:22:31:58:ed:c0:b3:
48:2d:bd:1f:9b:7e:e8:d5:5e:01:33:38:14:3f:90:
c0:ae:1b:e7:0e:86:f0:7e:0b:0e:25:42:91:2d:3e:
00:eb:7e:24:07:0e:0c:88:6d:f4:1f:66:6b:32:af:
21:ce:04:ca:03:26:e5:69:44:dd:d4:10:01:fb:85:
fe:9b:e3:b5:a8:23:3b:7c:01:60:7b:e7:80:ed:be:
94:20:94:a6:24:e4:7e:96:fb:9d:71:08:4a:41:d6:
d1:24:e9:7f:41:de:b9:aa:ea:75:ca:f8:d4:93:4f:
37:2e:c4:2c:92:01:46:94:a8:56:b6:b4:12:14:d8:
41:a6:9f:57:93:f6:12:0c:6c:57:3a:40:05:8e:6c:
c0:1a:66:80:e9:89:0c:b7:60:0c:95:da:e4:dd:c0:
29:80:04:05:0d:98:ce:a2:f5:7d:a8:44:ea:ea:10:
6e:fc:3e:0c:2d:56:c7:f1:8b:7d:3b:6d:4d:94:f0:
09:0c:86:0d:c2:46:b5:2a:ec:54:44:f6:00:02:d7:
e3:ea:b6:4d:4d:4f:7c:9c:15:d3:dc:c0:47:f0:82:
8d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:CB:97:BC:F2:B0:30:1B:F5:80:DB:0C:4D:7A:B6:E8:32:C8:3C:73
X509v3 Authority Key Identifier:
keyid:49:9F:03:E4:8E:D6:2A:96:84:0E:B2:F2:D7:9C:3E:C2:1A:27:F1:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SZ8D5I7WKpaEDrLy15w-whon8c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:1e:1d:05:95:6b:e7:e2:1e:57:a4:d4:10:ab:43:3e:7a:8c:
66:76:5c:6d:6a:36:cb:b1:2c:9f:4e:76:29:28:41:b4:64:4e:
b8:b8:16:6c:6b:29:65:83:f6:46:f2:82:c6:bd:73:fb:ed:96:
37:c8:42:87:9b:66:09:f3:49:42:11:8b:d5:05:bd:b6:01:a8:
76:1c:6a:d0:9b:f9:13:40:3d:f8:3d:1c:9b:ea:13:46:19:17:
86:6c:bd:37:4b:9c:46:79:25:4e:cf:e0:f0:c3:96:3b:c9:c6:
a2:a3:79:da:f8:8b:92:33:f8:46:ed:9d:38:0b:71:c6:e1:50:
3c:da:4e:e2:7a:7f:84:7c:30:f9:ba:48:22:88:fc:6f:ae:16:
8b:99:11:c5:e9:89:0f:e6:37:6e:f7:49:26:47:2c:0f:59:84:
de:c7:eb:50:20:b5:29:00:4d:d0:46:85:80:5b:de:c8:b7:f7:
ab:2b:c3:53:28:c4:98:ed:0d:11:57:1d:52:99:7a:b9:c6:6d:
14:8f:7c:cf:b2:74:cb:92:45:65:39:91:78:cd:ad:c0:b6:00:
62:d0:e3:d6:41:78:f8:9a:5a:50:12:f6:46:69:5f:20:2b:30:
5a:09:db:83:f6:ac:86:d4:1c:b7:d7:11:dd:ee:f4:26:e3:f4:
a5:d0:7d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:09:55 2026 by rpki-client