Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft
File: sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft (raw, json)
Hash identifier: NUPQmafbvrhu0dyl/PlZhI8y/0Fsy5H6LjcBXIBRywk=
Subject key identifier: A5:25:0A:17:19:50:65:06:50:64:0B:5B:82:25:EB:A0:77:86:88:7A
Authority key identifier: B0:04:F5:86:9F:56:75:F6:5F:9B:10:CF:F4:B6:5F:74:F7:6B:ED:17
Certificate issuer: /CN=b004f5869f5675f65f9b10cff4b65f74f76bed17
Certificate serial: 019CAA5890FE1D90CD57100923B1232A68D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft
Manifest number: 075C
Signing time: Sun 01 Mar 2026 17:00:56 +0000
Manifest this update: Sun 01 Mar 2026 17:00:56 +0000
Manifest next update: Mon 02 Mar 2026 17:00:56 +0000
Files and hashes: 1: kPH-8Zc1kxZQMwbBGjp_GqisqV0.roa (hash: d06nVSlv366yU56PgOO4NAbOUg53x7byASD8YLEXL7Y=)
2: sAT1hp9WdfZfmxDP9LZfdPdr7Rc.crl (hash: 9dTE4MVkbV9ckRIaL/4HK3cWgd2BYawXn74HSXiTmwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:90:fe:1d:90:cd:57:10:09:23:b1:23:2a:68:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b004f5869f5675f65f9b10cff4b65f74f76bed17
Validity
Not Before: Mar 1 17:00:56 2026 GMT
Not After : Mar 2 17:00:56 2026 GMT
Subject: CN=a5250a171950650650640b5b8225eba07786887a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a8:8b:b9:57:8c:67:d8:c3:70:d9:d3:8f:5b:
98:df:00:dc:87:9b:26:3e:be:ac:e5:3e:37:be:a7:
5a:57:e1:9b:9c:7b:ee:ec:6a:90:5f:2f:72:8e:77:
ed:cc:a5:bf:7c:4b:38:66:f8:03:3f:15:70:8d:4c:
c6:2d:42:95:e1:0a:b6:46:ac:24:6c:cf:f7:ed:d5:
84:26:bb:27:95:8b:bf:51:63:ce:32:dd:39:ce:9c:
a8:ef:1d:7c:84:b1:e3:55:a2:e2:a9:1a:04:f7:8e:
b8:d2:11:47:94:cf:77:3a:a8:6b:6f:33:51:0a:ab:
5f:8b:60:dd:9a:be:d1:80:3d:7d:71:96:1f:b7:a0:
91:a7:e6:4d:56:26:fe:0e:63:58:7f:cd:51:9b:81:
15:83:0f:fd:00:5d:28:c4:55:52:db:70:31:c8:de:
16:b6:78:a5:ce:f4:3c:1e:37:96:d6:33:35:b2:35:
c1:56:e0:99:2b:60:1e:1e:0a:9a:2a:8a:79:72:a6:
c9:68:57:1e:67:bd:3a:51:1e:8b:ff:b8:98:e2:5e:
f3:ac:5b:c3:e6:ca:94:df:97:f0:20:a6:03:ad:b0:
f2:53:7f:99:ea:29:7a:2a:50:5a:c8:e8:51:5c:7a:
67:d6:c1:8b:bb:c9:30:17:85:26:0f:2b:c9:62:d8:
80:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:25:0A:17:19:50:65:06:50:64:0B:5B:82:25:EB:A0:77:86:88:7A
X509v3 Authority Key Identifier:
keyid:B0:04:F5:86:9F:56:75:F6:5F:9B:10:CF:F4:B6:5F:74:F7:6B:ED:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:e2:31:2d:75:06:1c:4a:50:21:54:86:a2:f4:66:0a:27:6e:
d8:94:04:ce:91:38:7c:93:7b:65:60:7c:4c:9e:78:c0:cb:ad:
cd:4d:68:6a:7b:f3:42:b2:06:18:72:da:4c:f2:72:2b:ee:73:
0d:05:12:c1:6f:ec:91:12:e3:e0:96:cc:cb:6c:e3:f1:53:56:
89:c9:7a:05:20:19:1b:1e:e7:e9:27:9c:4e:1d:8f:e1:aa:77:
93:c9:fc:68:a0:61:67:71:e2:a7:87:4c:77:72:45:7e:47:d6:
4f:5b:5e:b5:6e:b1:15:9c:bf:61:db:76:6f:79:1f:20:d2:4a:
6e:e6:62:3c:73:ae:7b:1f:60:a6:2f:a3:fe:e3:0e:91:a8:1a:
f9:35:dd:48:98:bb:ce:43:aa:cd:ed:f6:23:7b:07:d7:e4:eb:
74:03:09:23:e1:e6:75:68:fd:1c:25:31:fe:d9:56:8f:b0:c7:
00:41:fe:7c:81:fb:a6:0b:0a:58:f1:db:96:8e:19:83:f3:d8:
b0:a2:16:9b:80:7d:2f:8d:7f:f3:d2:ae:ec:1b:98:1d:1d:32:
3c:3a:8f:49:08:f4:dd:85:14:55:de:cc:11:25:5d:c8:27:fd:
6e:5d:9f:ca:11:95:86:57:0c:37:c5:21:78:5e:07:95:d5:21:
9e:3d:46:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:32:44 2026 by rpki-client