Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.mft
File: SAa55i8bAPLPmNDcxYMpKvrLUi8.mft (raw, json)
Hash identifier: TnV36yMz0a4cQQM63J6fNjOAFK57ohgFCWDEPTrYv8k=
Subject key identifier: 6F:F7:C1:A9:80:EE:C0:15:B6:C7:FF:23:FF:52:52:6A:30:A8:A7:21
Authority key identifier: 48:06:B9:E6:2F:1B:00:F2:CF:98:D0:DC:C5:83:29:2A:FA:CB:52:2F
Certificate issuer: /CN=4806b9e62f1b00f2cf98d0dcc583292afacb522f
Certificate serial: 019CAD592E3CA502514F644E19EC444FE209
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAa55i8bAPLPmNDcxYMpKvrLUi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.mft
Manifest number: 130B
Signing time: Mon 02 Mar 2026 07:00:28 +0000
Manifest this update: Mon 02 Mar 2026 07:00:28 +0000
Manifest next update: Tue 03 Mar 2026 07:00:28 +0000
Files and hashes: 1: 7Ptpz77GbsWneLzHS_xYiCRmfRM.roa (hash: giptJ0k6ABexmkT87uxsZbt4+g/9rtgSll7SmUYIWGw=)
2: E572EOwt04Wz5HDKOSRuWANNWW4.roa (hash: G7g0vA+I7jRl8kRfOOZyFHebFoniIcI8evL8158VV7Y=)
3: SAa55i8bAPLPmNDcxYMpKvrLUi8.crl (hash: wBuzMHtC5EkuzELPQiGKam9pEQEgTN/B2r0QBbT72ms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAa55i8bAPLPmNDcxYMpKvrLUi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:2e:3c:a5:02:51:4f:64:4e:19:ec:44:4f:e2:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4806b9e62f1b00f2cf98d0dcc583292afacb522f
Validity
Not Before: Mar 2 07:00:28 2026 GMT
Not After : Mar 3 07:00:28 2026 GMT
Subject: CN=6ff7c1a980eec015b6c7ff23ff52526a30a8a721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:1f:71:ed:18:30:87:ac:7f:3a:70:e0:8c:fb:
d6:b0:d7:ac:e4:b5:84:78:11:8a:cc:17:23:20:c8:
b9:92:f4:10:41:66:2d:c3:26:a8:7a:87:85:c2:d4:
04:9c:01:7d:92:1f:01:99:6e:9d:41:9a:85:ea:81:
d5:31:f1:91:75:b5:9b:da:2c:57:8f:3b:36:ff:2c:
37:b3:fa:7b:77:a9:fd:09:8f:25:f5:72:ce:91:e8:
1e:82:65:3f:7d:57:70:d9:31:63:6b:f6:ad:b0:7d:
f3:71:61:43:74:ac:2c:4f:13:2f:9a:de:41:ff:0d:
86:76:4e:fa:ad:1f:cd:1f:66:d9:55:1a:d9:0e:6c:
98:72:29:82:98:0f:90:eb:30:a7:8c:25:6c:aa:0c:
14:cc:c1:28:5e:50:a0:10:91:92:36:ea:9b:2f:dd:
c4:65:95:11:50:0b:fa:b3:0b:60:bc:c0:16:ec:9a:
ad:35:ae:09:22:d1:49:93:0a:0a:80:7c:3d:8c:1d:
84:93:14:2f:a6:30:50:8e:40:f1:d4:89:06:65:fe:
d9:5d:77:ce:31:45:6e:ab:72:d4:ae:83:8a:f2:24:
e8:9a:14:7f:9d:41:a7:90:14:c0:eb:fc:a1:be:c7:
25:92:71:94:25:93:2e:80:2d:dd:99:9f:66:55:04:
c8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:F7:C1:A9:80:EE:C0:15:B6:C7:FF:23:FF:52:52:6A:30:A8:A7:21
X509v3 Authority Key Identifier:
keyid:48:06:B9:E6:2F:1B:00:F2:CF:98:D0:DC:C5:83:29:2A:FA:CB:52:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAa55i8bAPLPmNDcxYMpKvrLUi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:94:11:6f:6b:30:92:d6:ea:c1:e1:f1:3d:ed:2c:7b:3a:7a:
8c:0e:83:ea:df:b4:cd:5f:1a:02:47:af:b0:d4:23:8e:56:77:
d4:34:e0:e3:68:80:62:88:ed:11:0f:d6:1f:36:5b:3e:db:58:
03:18:fe:ee:e4:17:21:8e:ad:64:d2:44:d2:0b:56:40:22:23:
9a:d4:d5:5e:cd:6b:1f:39:f8:dc:27:ba:7e:cf:25:59:c4:1c:
16:3c:f9:ba:2e:d8:54:22:e5:b3:87:62:80:9e:db:a4:89:f7:
00:3f:44:e4:d6:3f:f6:f6:b1:44:01:e9:30:4b:fe:64:df:bf:
58:7c:ce:c8:49:da:ac:ee:ff:ec:e1:62:7f:1e:26:cb:12:75:
39:1b:7e:1a:8f:f9:a8:18:39:be:d3:40:85:bd:29:1c:7a:30:
d0:ca:d4:ba:df:c1:5b:e8:92:e8:35:2a:9e:6f:48:11:23:37:
14:fd:d4:5f:82:f6:da:d9:17:b8:7d:be:8a:36:6e:d8:92:7f:
16:ec:e0:07:db:b2:68:43:f5:74:6d:33:1b:a2:14:6f:52:1a:
c3:7a:90:3c:35:8f:ec:4c:4e:af:77:de:13:a7:51:b9:a1:dd:
27:54:e5:ab:d7:c4:ee:56:0f:d9:2d:d5:3f:63:1b:1f:98:98:
19:52:f5:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:41:49 2026 by rpki-client