Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft
File: Sb1NKMUsLxLkah774RMkG-AMpY8.mft (raw, json)
Hash identifier: HYHaKop/nc2+U/A3acYRyiW0jFrdo0oG3XEn1yFQHoI=
Subject key identifier: F6:3C:47:21:17:DE:7C:1D:E0:19:18:8C:3C:AC:15:0D:58:CA:1E:90
Authority key identifier: 49:BD:4D:28:C5:2C:2F:12:E4:6A:1E:FB:E1:13:24:1B:E0:0C:A5:8F
Certificate issuer: /CN=49bd4d28c52c2f12e46a1efbe113241be00ca58f
Certificate serial: 019DCE628435533B0B40F6B17A45119B5089
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sb1NKMUsLxLkah774RMkG-AMpY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft
Manifest number: 1836
Signing time: Mon 27 Apr 2026 10:00:55 +0000
Manifest this update: Mon 27 Apr 2026 10:00:55 +0000
Manifest next update: Tue 28 Apr 2026 10:00:55 +0000
Files and hashes: 1: 7IHSj-vh6R5J2MfqRSw46f9qAsc.roa (hash: WQuJSrCdjbcb9iug/FZIAKR6uCrGdMnpVemGgDUv0Dk=)
2: 9lfxpqvnzkC1l7LuLpA3lEV1oPk.roa (hash: th7K1/T63+0Jd6NuXOYrvk7FBSUYm4oVyo1+FY93Tws=)
3: Sb1NKMUsLxLkah774RMkG-AMpY8.crl (hash: BfI7ID5hcMwFh4HNAG62gsCfjSlumTXtdrpA1r2lFWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sb1NKMUsLxLkah774RMkG-AMpY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:62:84:35:53:3b:0b:40:f6:b1:7a:45:11:9b:50:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd4d28c52c2f12e46a1efbe113241be00ca58f
Validity
Not Before: Apr 27 10:00:55 2026 GMT
Not After : Apr 28 10:00:55 2026 GMT
Subject: CN=f63c472117de7c1de019188c3cac150d58ca1e90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d0:ca:53:39:20:bc:1e:9f:1e:90:01:b2:1f:
40:3d:1c:69:e4:e4:72:e0:a3:b8:09:e4:f1:c0:19:
6c:d6:e5:b1:cb:4f:fe:da:3a:65:51:3a:bb:e5:5e:
51:24:3f:45:19:f5:9c:69:ce:e4:43:97:e8:2c:c6:
5e:2c:26:fe:fa:ee:13:e6:69:73:c7:8b:7e:60:c3:
c5:6c:74:82:dc:52:e4:f5:e2:63:44:5f:03:f9:18:
2b:93:8d:13:7c:b8:46:98:6a:e4:49:7b:76:bf:d1:
ff:4a:83:3e:3a:1b:75:11:f6:ec:f0:86:36:e6:c0:
af:d9:fd:07:00:ef:b8:25:cf:27:c1:79:76:2e:56:
ab:14:93:9a:14:bb:0e:f1:1c:3c:29:56:6d:91:b4:
a0:18:ca:d6:fd:55:ef:79:11:f6:61:85:09:69:16:
5a:d0:04:24:3e:19:b0:77:31:1e:11:11:f7:04:e0:
f9:81:e6:10:48:63:d0:f8:f9:f5:6b:5d:58:8f:b4:
50:37:da:52:00:cf:d9:6e:6c:59:5a:a3:42:42:4b:
6c:64:3e:3b:c5:97:59:e4:a1:39:96:6c:67:8e:6c:
af:7e:98:96:1d:16:7f:c8:f9:19:fa:ce:ca:bc:45:
a0:bd:20:39:0f:83:03:a6:5b:59:08:a0:58:80:c0:
ae:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:3C:47:21:17:DE:7C:1D:E0:19:18:8C:3C:AC:15:0D:58:CA:1E:90
X509v3 Authority Key Identifier:
keyid:49:BD:4D:28:C5:2C:2F:12:E4:6A:1E:FB:E1:13:24:1B:E0:0C:A5:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sb1NKMUsLxLkah774RMkG-AMpY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:d6:23:a5:c5:2b:f6:a9:b8:73:39:bd:b2:7a:29:6b:74:a4:
46:4f:4e:63:3c:a3:2d:81:7b:7a:b9:86:b1:5c:42:13:df:ae:
d5:42:7e:55:fe:4a:a9:4f:7f:2d:25:0a:7a:66:1f:3f:3e:2b:
97:82:7f:af:25:76:8a:ef:bc:2d:44:d0:05:f4:db:ba:8e:6a:
e8:d1:49:cc:9a:19:63:f6:eb:d6:e6:d0:b2:ca:59:7f:bb:c8:
b1:da:d7:c6:f5:69:83:04:8e:3a:30:77:7d:90:35:51:54:51:
0b:d4:69:83:1e:5d:61:bb:6b:18:02:f5:14:8e:4b:df:96:bf:
de:25:f9:15:2d:d9:3c:52:e7:a1:e1:54:06:c5:09:1d:07:1d:
f0:95:54:0d:8e:a9:e5:aa:35:28:0a:48:c2:2e:f9:53:d6:84:
6b:08:9e:ae:da:55:68:ee:9b:3b:90:e9:6c:19:35:af:9f:89:
ba:48:a5:e6:ad:45:0c:c6:c7:53:dd:73:2b:29:3f:c2:57:a5:
9f:02:d3:71:4f:f3:82:b2:85:d4:c4:d1:9e:3c:29:4c:df:e1:
7a:43:5b:cc:c2:34:5b:73:8a:76:3e:ed:4b:59:f1:6b:f5:69:
fd:6a:60:56:82:c7:07:63:cc:37:fe:5b:8b:7a:a3:78:84:e6:
53:82:b5:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:13:39 2026 by rpki-client