Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft
File: sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft (raw, json)
Hash identifier: mK9H5p5N+f0sCvB4Ibl89ZJrTvL+nrKjXRcZzRxLhtQ=
Subject key identifier: 77:A3:BE:C0:F6:A3:21:A1:A6:6C:9E:C8:CE:64:7A:C1:3E:4B:51:E2
Authority key identifier: B0:04:F5:86:9F:56:75:F6:5F:9B:10:CF:F4:B6:5F:74:F7:6B:ED:17
Certificate issuer: /CN=b004f5869f5675f65f9b10cff4b65f74f76bed17
Certificate serial: 019D97E1DF94C8CE2D805E5FFA60A23822F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft
Manifest number: 07D7
Signing time: Thu 16 Apr 2026 20:00:55 +0000
Manifest this update: Thu 16 Apr 2026 20:00:55 +0000
Manifest next update: Fri 17 Apr 2026 20:00:55 +0000
Files and hashes: 1: kPH-8Zc1kxZQMwbBGjp_GqisqV0.roa (hash: d06nVSlv366yU56PgOO4NAbOUg53x7byASD8YLEXL7Y=)
2: sAT1hp9WdfZfmxDP9LZfdPdr7Rc.crl (hash: xuzpBkxR8hx13XySf7BV/mdoFSyfJJF8HYKWR2xnOZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:df:94:c8:ce:2d:80:5e:5f:fa:60:a2:38:22:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b004f5869f5675f65f9b10cff4b65f74f76bed17
Validity
Not Before: Apr 16 20:00:55 2026 GMT
Not After : Apr 17 20:00:55 2026 GMT
Subject: CN=77a3bec0f6a321a1a66c9ec8ce647ac13e4b51e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:62:9e:8e:19:d7:0b:23:4e:7a:d4:d6:e7:a3:
1b:7c:f8:de:67:5a:cc:e1:51:41:41:93:14:0c:4a:
df:96:c9:bc:74:f2:7b:6e:03:cb:89:47:35:2e:06:
e5:76:d5:0c:a5:cf:e5:d9:4c:07:a2:fb:54:9f:ec:
5e:b3:85:c1:af:a9:37:3d:dd:dd:ec:dc:fc:e1:ac:
3d:ec:b5:6c:83:52:ad:3f:ee:5a:bd:b4:13:ea:d3:
f4:85:b8:5a:60:13:3d:97:bd:8b:95:2c:64:fb:36:
d0:4e:d1:32:dc:47:ec:1c:92:40:5f:32:f9:0d:20:
ef:e5:86:bf:87:5d:8d:c7:f3:58:65:1b:5c:75:15:
7f:5c:40:fd:97:da:31:9a:61:9d:46:8c:37:bb:6e:
0f:90:03:cf:1a:e2:15:93:a1:07:46:f0:ff:10:3d:
fc:f1:05:df:83:10:2e:df:0d:41:06:f0:10:03:0a:
d1:96:8a:c0:6f:c9:e5:97:e4:e2:ab:f8:95:52:04:
fe:cc:56:2e:99:d4:0f:2c:cc:b9:4b:17:25:b8:07:
d3:81:f4:92:1c:ea:aa:d0:d2:b0:4d:79:da:bb:6f:
85:3c:09:d7:e4:28:94:98:a5:d8:b8:3e:bb:cc:bb:
32:af:90:a2:5e:5c:2e:ee:7f:a9:b5:fe:b6:d7:1f:
76:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A3:BE:C0:F6:A3:21:A1:A6:6C:9E:C8:CE:64:7A:C1:3E:4B:51:E2
X509v3 Authority Key Identifier:
keyid:B0:04:F5:86:9F:56:75:F6:5F:9B:10:CF:F4:B6:5F:74:F7:6B:ED:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:d2:21:50:c7:37:d8:93:f4:aa:1d:f2:b0:8f:b3:a4:d4:1a:
7e:11:b5:d9:de:7b:59:d9:9a:81:28:28:70:8e:e7:f8:5c:8e:
18:a2:d9:e6:64:bd:c6:9f:7b:11:1a:b5:5c:11:37:7c:e3:91:
d3:80:d9:04:79:6e:31:ed:23:96:ae:4c:36:6f:81:de:d1:0d:
a7:aa:13:aa:66:80:31:15:fe:09:b8:b9:dd:b5:a4:b4:6b:2b:
e7:71:51:26:9a:95:a1:4d:1b:e3:7e:1c:2f:4f:24:d4:7d:4a:
4a:77:b8:67:6b:cb:d1:e0:90:15:ec:3c:e0:e2:e8:1c:98:85:
01:8b:dc:db:20:59:7d:d5:c2:81:3f:7a:9e:16:5d:7b:85:9f:
45:e0:43:41:a5:93:a6:f8:7d:71:ad:f4:2e:4a:19:19:de:12:
6a:18:56:ba:fc:5b:35:ab:f6:38:5f:24:e4:49:3a:db:c5:68:
41:65:00:17:47:5b:35:ed:19:35:01:ca:eb:ca:53:77:9f:4a:
02:eb:b7:1f:50:29:01:13:f6:a6:ec:ba:45:73:19:b4:93:64:
f2:92:9f:6a:a7:4b:6e:e7:ce:ab:cd:b2:13:25:10:a8:10:15:
90:75:1a:0e:3f:98:be:5b:44:e1:de:9c:1e:7b:29:59:5f:c6:
92:2b:f8:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:23:44 2026 by rpki-client