Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.mft
File: sV49wOv7EOu5QZdFRzLveGrHW3A.mft (raw, json)
Hash identifier: 8QhCHtJ2JYxy44qYnFMSp63ST0s4mSa/X/xHjue7UPc=
Subject key identifier: 86:FD:FC:49:D9:DB:3C:02:43:40:8A:24:D4:2D:6D:F3:8E:93:A1:0F
Authority key identifier: B1:5E:3D:C0:EB:FB:10:EB:B9:41:97:45:47:32:EF:78:6A:C7:5B:70
Certificate issuer: /CN=b15e3dc0ebfb10ebb94197454732ef786ac75b70
Certificate serial: 019D3940C3FCE9B04C91B6EC60F2D5C05EBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sV49wOv7EOu5QZdFRzLveGrHW3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.mft
Manifest number: 0D4B
Signing time: Sun 29 Mar 2026 11:00:38 +0000
Manifest this update: Sun 29 Mar 2026 11:00:38 +0000
Manifest next update: Mon 30 Mar 2026 11:00:38 +0000
Files and hashes: 1: MjSrEKMCWcyMEE6nS-q7WuWv6TI.roa (hash: 4Sap9NoQcaB7qcwGKxc8FZ4d2698TBnl8zwNLDBPALw=)
2: sV49wOv7EOu5QZdFRzLveGrHW3A.crl (hash: SmdrmJczhThgBKSF3DXhjZZPDqlmYC7RT2qd0OTsbdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/sV49wOv7EOu5QZdFRzLveGrHW3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:c3:fc:e9:b0:4c:91:b6:ec:60:f2:d5:c0:5e:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b15e3dc0ebfb10ebb94197454732ef786ac75b70
Validity
Not Before: Mar 29 11:00:38 2026 GMT
Not After : Mar 30 11:00:38 2026 GMT
Subject: CN=86fdfc49d9db3c0243408a24d42d6df38e93a10f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:96:5e:6a:cc:20:84:3a:18:55:37:c5:06:34:
5f:6e:37:45:2b:8b:e0:bb:84:cf:72:b6:88:eb:91:
90:58:11:10:a4:e4:47:a0:c6:d4:bd:81:ca:cd:6b:
84:b8:da:a5:4d:b5:b5:70:ac:26:c1:89:a7:89:4c:
a3:59:7a:f7:bd:2f:bb:30:59:c9:f5:61:d3:14:42:
df:2b:31:1d:36:0d:ad:fa:2f:68:44:89:b7:63:89:
39:94:f9:3c:5c:e0:9b:1e:99:59:5d:6c:83:5a:95:
40:b1:46:e9:a6:ee:58:22:b1:d0:f0:5b:62:13:32:
3b:79:8f:e5:c8:de:aa:56:e8:aa:55:d3:96:cb:82:
1d:38:41:72:bc:ec:51:2c:92:47:53:8f:d8:e9:66:
35:c6:e8:e7:88:66:ef:5f:9b:b0:0a:55:d4:1e:8f:
57:c3:56:82:f7:99:05:62:4d:9f:a9:d4:69:14:6c:
86:ff:f5:cb:5a:10:29:c5:b9:a9:e4:0f:45:f4:b7:
0b:42:46:0a:cd:14:ce:4c:38:f4:01:69:50:81:b2:
e6:c6:24:9c:db:18:08:5e:30:8f:85:51:c9:fb:b2:
99:c3:e9:9a:e8:eb:33:db:85:e5:75:2b:65:7e:45:
03:ae:0c:f1:c7:a2:86:0a:93:e8:f6:52:9b:7c:73:
cd:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:FD:FC:49:D9:DB:3C:02:43:40:8A:24:D4:2D:6D:F3:8E:93:A1:0F
X509v3 Authority Key Identifier:
keyid:B1:5E:3D:C0:EB:FB:10:EB:B9:41:97:45:47:32:EF:78:6A:C7:5B:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sV49wOv7EOu5QZdFRzLveGrHW3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:9f:c6:93:75:64:d9:44:e3:f1:d7:07:94:d2:3f:ee:15:45:
05:30:c8:d9:79:35:1d:b5:61:05:c3:96:36:ba:2c:b1:78:8b:
ab:a3:fd:34:2d:ca:10:2c:04:9a:69:93:86:2c:15:9e:2a:e3:
1d:64:05:2a:1a:d1:bf:ad:c2:be:19:5d:4b:48:47:81:71:a4:
4d:6f:af:ea:0e:eb:9e:6c:07:8c:c5:02:90:ef:44:cb:5e:af:
4e:99:27:b6:cd:66:7b:16:99:2b:ad:ff:29:58:c7:b3:79:4c:
94:c7:6c:04:33:02:cb:3d:78:c7:f1:a6:c6:67:be:b4:9f:88:
22:70:9d:b9:53:fe:02:c2:90:ed:8e:7b:07:2f:02:35:41:8c:
c7:2f:be:cc:57:3b:c3:a5:fc:ff:fb:a0:39:7d:f4:2a:15:b0:
0b:e6:26:b9:d4:2a:72:fb:af:3c:35:22:6c:41:84:3f:b4:63:
0f:fa:bc:70:0f:49:8f:56:7b:4f:2b:19:bc:a2:2a:5c:36:c5:
f3:5a:4e:e3:b3:92:86:1d:92:1f:a4:0f:44:ec:20:b1:be:5f:
ff:24:e9:c7:29:d2:54:d6:af:48:ff:82:ce:fe:61:3c:c6:3d:
49:8e:51:7b:e2:57:7a:34:dd:62:35:42:57:17:af:97:b8:dc:
46:64:f2:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:03:00 2026 by rpki-client