Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.mft
File: SGeaItDbyYDV1ZszNnn5ObmuPyU.mft (raw, json)
Hash identifier: aA3krAwgEhYz3MTPquSpZhWLZ7WQ/JUejcl78bhp6hg=
Subject key identifier: C9:8F:CE:D1:50:B6:20:71:86:A3:3A:B9:31:01:72:6F:AF:C2:35:DC
Authority key identifier: 48:67:9A:22:D0:DB:C9:80:D5:D5:9B:33:36:79:F9:39:B9:AE:3F:25
Certificate issuer: /CN=48679a22d0dbc980d5d59b333679f939b9ae3f25
Certificate serial: 019D371BA86D9139C6C1704E4C9BD541155C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGeaItDbyYDV1ZszNnn5ObmuPyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 01:00:52 +0000
Manifest this update: Sun 29 Mar 2026 01:00:52 +0000
Manifest next update: Mon 30 Mar 2026 01:00:52 +0000
Files and hashes: 1: Cb3GNV7sEZagImQ0z2CzEtPQStc.roa (hash: WKt5YxPaUYaqlF+1A2ePA/t2PiJgruaRiTwSTzv9PKY=)
2: SGeaItDbyYDV1ZszNnn5ObmuPyU.crl (hash: KsynxUJQJdV775mmeEN/9blFRcKyic9yLUAF8GlHUws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SGeaItDbyYDV1ZszNnn5ObmuPyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:a8:6d:91:39:c6:c1:70:4e:4c:9b:d5:41:15:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48679a22d0dbc980d5d59b333679f939b9ae3f25
Validity
Not Before: Mar 29 01:00:52 2026 GMT
Not After : Mar 30 01:00:52 2026 GMT
Subject: CN=c98fced150b6207186a33ab93101726fafc235dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d1:b6:c9:a8:ce:16:51:51:da:1a:d4:36:d8:
ee:0a:78:13:7a:57:3c:86:eb:e9:af:32:a3:70:e5:
db:f4:5c:72:c4:45:e7:aa:d0:21:bf:01:a0:48:4e:
b0:f6:24:0f:bc:87:25:05:89:65:3b:d2:ac:6b:9b:
ef:05:65:10:b1:fb:3e:4e:be:ea:14:b1:01:4c:5a:
89:48:a3:90:d6:9e:ce:2d:6b:e9:23:5a:17:ba:e1:
63:89:c6:22:90:bc:08:88:06:c4:97:68:2b:07:58:
71:e5:10:f6:cf:c9:4a:69:64:0a:aa:4c:7e:0c:ff:
cd:29:bd:e4:49:5e:5b:98:8c:f1:b2:a4:3b:4a:4a:
5a:b1:aa:bd:e2:68:97:ca:6f:5b:de:02:ba:b3:73:
07:bc:42:1f:e6:42:7f:44:ed:73:18:14:b9:53:bd:
35:59:8b:47:0e:0f:58:53:fc:ef:cc:94:13:37:eb:
a3:f9:91:20:7c:af:e7:70:7b:37:b3:fc:65:af:83:
52:18:c3:2f:eb:b5:6d:bc:09:93:5c:e2:46:c2:17:
43:ea:3c:1a:0d:e8:35:bb:e2:76:07:3d:e3:04:fa:
49:67:4e:b4:75:1c:27:0a:98:f0:91:99:24:83:d7:
a6:fd:fc:d7:00:ea:20:1a:d1:d3:05:00:ea:1b:eb:
a0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:8F:CE:D1:50:B6:20:71:86:A3:3A:B9:31:01:72:6F:AF:C2:35:DC
X509v3 Authority Key Identifier:
keyid:48:67:9A:22:D0:DB:C9:80:D5:D5:9B:33:36:79:F9:39:B9:AE:3F:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGeaItDbyYDV1ZszNnn5ObmuPyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:8a:53:48:26:d4:55:2b:9f:0d:47:70:34:0e:88:36:56:b2:
53:81:a1:af:3e:50:70:7e:de:5c:f0:20:ed:2b:e6:64:31:a1:
e2:c2:69:58:9a:b3:22:50:c5:3f:63:b0:65:ef:b3:98:00:23:
fb:11:e0:68:15:bb:f3:13:5f:15:eb:a1:60:10:d6:53:4e:67:
38:16:a6:c9:12:cc:3c:87:0d:b6:b1:cf:e4:c3:f4:1f:cf:2d:
a4:f5:1c:11:d3:a7:a6:64:3c:97:e7:c2:fd:5d:84:c2:a0:db:
c0:81:95:06:09:15:3e:82:1c:3a:45:53:66:ea:95:84:ff:17:
11:bb:a0:0b:3f:12:87:15:7f:6a:1a:ad:df:8f:ef:c7:be:b9:
4e:8f:f9:3a:4d:d3:1d:c6:f3:72:cd:a8:96:1c:e6:a5:35:e8:
df:cb:e1:a0:15:75:25:17:6c:8c:43:41:cf:06:70:95:ea:86:
7b:f4:5c:e7:ad:2c:0e:47:a0:4d:19:98:73:8e:f1:47:2b:bb:
23:97:e8:5d:27:7c:39:1b:f4:a0:0f:b6:4d:d4:31:07:19:48:
e3:e3:fb:23:c5:ef:ab:87:3a:d1:d5:44:3f:dc:4e:1a:ca:ca:
27:76:bd:9f:4e:bd:e3:15:f5:65:d8:d8:97:30:73:67:85:6b:
82:c8:d3:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:18 2026 by rpki-client