Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.mft
File: SAw7k_8qNPv6WuglVvZwNAy11ck.mft (raw, json)
Hash identifier: y7gQ/B5xjSn6BxbccWp9I46XZFRFC0OYdh8Ni6xQ458=
Subject key identifier: 05:13:6E:EA:FD:2B:41:59:92:8B:27:F8:E8:5B:0D:D3:C2:F5:59:37
Authority key identifier: 48:0C:3B:93:FF:2A:34:FB:FA:5A:E8:25:56:F6:70:34:0C:B5:D5:C9
Certificate issuer: /CN=480c3b93ff2a34fbfa5ae82556f670340cb5d5c9
Certificate serial: 019CABA2073B3A618BC598C89D768EE26B9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAw7k_8qNPv6WuglVvZwNAy11ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 23:00:48 +0000
Manifest this update: Sun 01 Mar 2026 23:00:48 +0000
Manifest next update: Mon 02 Mar 2026 23:00:48 +0000
Files and hashes: 1: J5oJ0yY-0bzK1HfAz1Y_hlgSX8M.roa (hash: llpZQ9/tPuCwPDtcXQrfq/Zd/gdnLAnw8oHK6Zm0ygk=)
2: SAw7k_8qNPv6WuglVvZwNAy11ck.crl (hash: dW6iKXo+RKh3xDme4PEDu24x6MoqkSR4gd6ZPO39oz0=)
3: nAH3H9obEDKPlNqoUXx9V7rYSxw.roa (hash: VQ7cf7+kTzq+f0dyjeb2mnlvMFjzIzqtRjcZld88OE0=)
4: qaQdus1BOleDA5YBatWLdmpF4V8.roa (hash: qoEh+iI2D1MSwoWJBnblgqwJNtj9VkryalvSfDPlSuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAw7k_8qNPv6WuglVvZwNAy11ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:07:3b:3a:61:8b:c5:98:c8:9d:76:8e:e2:6b:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480c3b93ff2a34fbfa5ae82556f670340cb5d5c9
Validity
Not Before: Mar 1 23:00:48 2026 GMT
Not After : Mar 2 23:00:48 2026 GMT
Subject: CN=05136eeafd2b4159928b27f8e85b0dd3c2f55937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1b:29:ac:1a:d8:eb:da:26:c6:c5:1f:2f:c3:
26:89:55:20:3f:bd:ce:ad:8a:ef:79:25:9b:ff:3d:
0d:a8:e7:06:66:c4:88:4a:b2:bd:cd:3f:30:ed:f2:
7d:8a:18:62:cd:73:f7:8c:91:69:ec:4d:8d:f0:8a:
eb:70:79:c5:ab:7f:15:92:d3:07:42:13:70:e8:72:
07:23:2f:a3:fb:21:ce:ba:50:b2:2d:f9:6c:5f:96:
9f:cd:e8:67:2c:61:76:4d:2c:b3:7a:9e:10:b1:1c:
43:42:4e:f2:29:d8:ed:95:19:31:e4:46:08:1e:a5:
e0:d5:0a:50:0b:2d:a8:b6:80:74:fc:2c:f7:cd:a9:
68:f5:c6:c8:49:68:13:fe:d9:be:1c:01:b4:e8:26:
63:87:9b:09:a5:01:15:9c:08:51:b6:fc:ae:e7:8d:
0c:f2:75:17:61:13:ef:da:80:32:25:16:21:6a:27:
7c:1f:22:83:c6:19:ea:06:2a:0c:20:55:b7:5b:ab:
50:10:8f:33:4d:ae:3b:6c:23:c5:95:90:01:62:36:
b6:84:b3:f4:a3:1d:e2:66:fc:5e:71:cb:69:3c:38:
f7:39:4a:0b:cc:ae:fa:f5:bf:b7:bf:5a:7a:66:65:
5e:7c:4a:57:6e:a4:00:3b:13:5c:ab:8d:1e:16:87:
9e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:13:6E:EA:FD:2B:41:59:92:8B:27:F8:E8:5B:0D:D3:C2:F5:59:37
X509v3 Authority Key Identifier:
keyid:48:0C:3B:93:FF:2A:34:FB:FA:5A:E8:25:56:F6:70:34:0C:B5:D5:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAw7k_8qNPv6WuglVvZwNAy11ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:4d:39:b7:34:8e:20:9f:eb:02:1f:12:47:2a:9f:07:fe:9c:
82:49:f6:56:1c:7a:f5:04:61:f8:2c:d7:0e:12:b4:5f:6e:74:
fc:20:9a:50:5a:f4:ce:a9:3a:23:6d:f1:97:4c:0b:55:d8:3a:
7d:82:e6:30:d8:bc:f5:12:3f:c2:9e:42:6f:a5:b1:48:fe:2a:
6c:de:02:88:4e:c3:54:38:b7:e9:68:64:58:bc:3c:44:e4:d0:
2d:b3:d3:6e:f1:ec:13:96:af:ff:08:b7:b3:41:e7:8e:b4:7d:
94:d2:c3:64:8e:01:d8:0e:ec:c2:1a:22:fa:e2:90:8c:e0:66:
45:e9:f2:5e:3a:8a:2a:d3:98:96:1e:28:de:6d:ba:7d:10:f4:
c3:79:43:b3:9c:23:00:70:0c:83:30:aa:ef:41:d0:c3:fd:4e:
a3:1e:8a:46:bd:9b:93:e0:9b:76:56:75:52:a4:37:af:b3:5b:
56:68:e6:9e:75:f8:28:1b:98:5b:36:d1:2f:83:57:66:c8:84:
a5:bb:76:ed:1f:1a:76:dc:44:8f:4c:1c:02:27:05:65:7d:d9:
58:92:7c:95:dc:0b:a3:0c:69:17:db:55:63:b1:02:62:ad:56:
fb:8e:db:85:15:8b:39:89:30:0d:23:0f:4b:f1:23:aa:e8:de:
aa:b4:cc:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:15:05 2026 by rpki-client