Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft
File: Sb1NKMUsLxLkah774RMkG-AMpY8.mft (raw, json)
Hash identifier: 79vCwnhxrI3nf8YDGSdFMxPE7XO+pxq3wqoi0Ej7dis=
Subject key identifier: F8:63:19:E1:90:14:47:B7:E8:5B:21:97:2B:DD:97:53:28:AA:C0:41
Authority key identifier: 49:BD:4D:28:C5:2C:2F:12:E4:6A:1E:FB:E1:13:24:1B:E0:0C:A5:8F
Certificate issuer: /CN=49bd4d28c52c2f12e46a1efbe113241be00ca58f
Certificate serial: 019CE4B5852C161ECA9DF997EDF50A22C225
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sb1NKMUsLxLkah774RMkG-AMpY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft
Manifest number: 17BD
Signing time: Fri 13 Mar 2026 01:00:27 +0000
Manifest this update: Fri 13 Mar 2026 01:00:27 +0000
Manifest next update: Sat 14 Mar 2026 01:00:27 +0000
Files and hashes: 1: 7IHSj-vh6R5J2MfqRSw46f9qAsc.roa (hash: WQuJSrCdjbcb9iug/FZIAKR6uCrGdMnpVemGgDUv0Dk=)
2: 9lfxpqvnzkC1l7LuLpA3lEV1oPk.roa (hash: th7K1/T63+0Jd6NuXOYrvk7FBSUYm4oVyo1+FY93Tws=)
3: Sb1NKMUsLxLkah774RMkG-AMpY8.crl (hash: ZzCwSmm8fe0M4GQ3zgYE+5+mk2Ht/w2LaMRg32t7TcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sb1NKMUsLxLkah774RMkG-AMpY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:b5:85:2c:16:1e:ca:9d:f9:97:ed:f5:0a:22:c2:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd4d28c52c2f12e46a1efbe113241be00ca58f
Validity
Not Before: Mar 13 01:00:27 2026 GMT
Not After : Mar 14 01:00:27 2026 GMT
Subject: CN=f86319e1901447b7e85b21972bdd975328aac041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:53:e0:d7:0c:f0:77:5b:36:48:8f:e7:86:cf:
b2:ee:07:8a:cc:d7:d9:92:86:01:8a:42:d0:aa:c6:
61:08:e6:05:f3:b8:de:64:0d:69:b4:93:80:14:9a:
cd:82:77:61:dd:79:26:69:07:34:47:43:62:c1:97:
0e:de:54:a8:ed:67:25:ac:72:a9:45:be:a1:32:29:
ff:d1:52:33:6e:42:7f:ff:74:4f:f8:37:c6:77:80:
df:b0:9b:78:9b:7e:c2:de:58:37:86:74:5a:1f:63:
e7:45:81:be:8a:74:8c:58:52:c5:d3:39:4b:fd:87:
d2:2b:a0:a5:41:a6:96:0e:78:c9:47:07:d6:09:58:
43:1c:ec:f6:ac:2a:47:00:8e:5a:ce:2b:04:a2:05:
f2:bc:e2:86:15:46:5c:33:c0:45:2c:df:3f:77:a7:
de:44:d8:cf:79:be:83:13:77:15:16:98:1b:ee:cc:
fd:96:47:57:62:ba:5b:18:73:f9:c9:78:a7:a9:b5:
8e:5f:18:12:d9:03:37:99:2b:34:33:f6:0d:32:30:
84:f0:7e:b5:08:e0:8c:31:e1:5c:c2:4e:96:81:36:
ee:ac:fe:4f:72:c3:28:32:0e:57:2e:1c:61:f8:f4:
5f:fd:7e:89:b6:d0:2e:7d:57:1c:19:0f:93:cd:3d:
d1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:63:19:E1:90:14:47:B7:E8:5B:21:97:2B:DD:97:53:28:AA:C0:41
X509v3 Authority Key Identifier:
keyid:49:BD:4D:28:C5:2C:2F:12:E4:6A:1E:FB:E1:13:24:1B:E0:0C:A5:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sb1NKMUsLxLkah774RMkG-AMpY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:4d:79:12:2c:b0:12:3b:52:84:60:e4:cd:fe:5d:34:7a:36:
a8:1b:79:2b:89:8d:b3:e8:14:fc:b9:35:9a:47:4a:06:2a:e6:
bd:a9:32:65:13:aa:e8:46:96:b9:63:46:b2:9e:05:ce:e1:1f:
d6:26:64:72:42:63:94:34:4b:87:3d:cb:a1:f4:76:b3:7c:09:
d4:22:bd:ba:a9:dd:d4:96:bd:81:c3:e3:2a:5b:db:60:cd:2e:
d9:30:2b:f5:a0:f5:47:4a:41:fe:d7:21:ad:e7:de:ba:1f:f7:
42:c9:74:57:0f:d0:2b:a5:d6:f7:63:63:a6:34:b7:06:1f:cd:
03:04:f6:4d:e3:80:a7:49:1f:3c:9d:46:4f:c9:c2:bf:6b:ad:
d3:fe:98:8a:91:f6:83:5b:60:25:c2:73:ec:e1:92:28:92:a5:
f0:01:0c:35:85:08:69:d1:39:bc:1e:b3:42:24:5f:b9:fa:15:
8e:b2:eb:7c:72:ff:80:a9:8e:83:19:78:c1:fe:f2:98:63:d0:
f6:b4:d4:57:51:2e:13:be:56:19:82:a1:2e:ed:55:5a:d0:b3:
de:80:18:6d:88:bb:90:17:4f:d0:52:44:4b:12:f6:44:73:7b:
a9:23:b1:6e:ef:65:20:06:8a:a1:d9:9a:0d:da:29:f6:f9:3f:
3f:29:b4:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:38:54 2026 by rpki-client