Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/727267-421a-404b-9523-7285814344f3/1/SACbRi9GjH0BDdZBirzzFxK-Qyc.mft
File: SACbRi9GjH0BDdZBirzzFxK-Qyc.mft (raw, json)
Hash identifier: GcVytdJB0ibUwFQw0AttONrtq9Ymv+aBPP7oKrt3kR0=
Subject key identifier: 54:17:48:85:29:FD:09:1A:1E:DA:C2:F8:59:8E:88:51:4F:30:76:4B
Authority key identifier: 48:00:9B:46:2F:46:8C:7D:01:0D:D6:41:8A:BC:F3:17:12:BE:43:27
Certificate issuer: /CN=48009b462f468c7d010dd6418abcf31712be4327
Certificate serial: 019FF9117AB15CA2DFED5CBF3ADBFB4C0E2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SACbRi9GjH0BDdZBirzzFxK-Qyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/727267-421a-404b-9523-7285814344f3/1/SACbRi9GjH0BDdZBirzzFxK-Qyc.mft
Manifest number: 3C
Signing time: Thu 13 Aug 2026 03:01:39 +0000
Manifest this update: Thu 13 Aug 2026 03:01:39 +0000
Manifest next update: Fri 14 Aug 2026 03:01:39 +0000
Files and hashes: 1: RZ3tel9syTFm_FDnewv1LtVhGaE.asa (hash: ZEPAWlh3qs8XE61M2XfXTiI9UFnTCQ0FVnCjRwgvbfQ=)
2: SACbRi9GjH0BDdZBirzzFxK-Qyc.crl (hash: +Fp1ObIWqUALezuo5T7SQSFaVjQIzLFBvdoB76B0iXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/727267-421a-404b-9523-7285814344f3/1/SACbRi9GjH0BDdZBirzzFxK-Qyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/727267-421a-404b-9523-7285814344f3/1/SACbRi9GjH0BDdZBirzzFxK-Qyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SACbRi9GjH0BDdZBirzzFxK-Qyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:11:7a:b1:5c:a2:df:ed:5c:bf:3a:db:fb:4c:0e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48009b462f468c7d010dd6418abcf31712be4327
Validity
Not Before: Aug 13 03:01:39 2026 GMT
Not After : Aug 14 03:01:39 2026 GMT
Subject: CN=5417488529fd091a1edac2f8598e88514f30764b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:54:c6:7d:d8:fc:ad:28:a1:f5:37:d9:23:7e:
db:c4:e9:c0:c8:06:c3:c9:2c:ec:42:77:a4:da:9b:
ca:c3:26:a3:d6:17:08:65:39:70:45:e8:8c:46:48:
69:08:6e:90:5f:02:1e:55:79:96:37:8c:e0:10:61:
cf:0f:93:0f:43:35:b9:73:f7:8e:ec:35:94:a7:fc:
cf:20:fd:77:27:fd:de:48:7b:56:93:c5:8f:57:62:
38:d0:ea:a9:94:1e:37:b0:ff:06:7f:fa:d0:13:b5:
85:49:e5:44:5c:07:3b:5c:7a:d0:95:4f:03:52:b7:
fb:7c:22:3c:49:53:49:84:5d:12:b5:97:6d:cc:fc:
32:15:6e:e7:f6:1f:fd:3b:05:3e:b4:6c:16:75:8c:
b5:9e:70:1c:9b:63:2c:9b:b3:6d:f0:0c:9d:ea:5a:
ff:ab:69:b1:87:09:28:6f:d4:81:cd:c4:08:50:31:
17:dc:2a:85:5a:01:cd:26:88:a2:c3:ac:dd:f2:5f:
8f:b1:98:1c:eb:28:79:cc:8f:88:e7:fa:2b:f7:fe:
96:8f:1c:b8:d3:13:61:af:2a:fc:ab:56:21:d6:14:
b5:51:c9:cd:a5:7d:78:a1:fe:95:fa:85:3d:10:ce:
21:fb:d5:2d:59:b1:fd:fb:c8:51:54:3d:28:45:26:
3f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:17:48:85:29:FD:09:1A:1E:DA:C2:F8:59:8E:88:51:4F:30:76:4B
X509v3 Authority Key Identifier:
keyid:48:00:9B:46:2F:46:8C:7D:01:0D:D6:41:8A:BC:F3:17:12:BE:43:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SACbRi9GjH0BDdZBirzzFxK-Qyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/727267-421a-404b-9523-7285814344f3/1/SACbRi9GjH0BDdZBirzzFxK-Qyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/727267-421a-404b-9523-7285814344f3/1/SACbRi9GjH0BDdZBirzzFxK-Qyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:60:eb:fa:8c:50:91:4d:0c:34:a1:a9:ad:40:6b:a4:b7:73:
90:a6:e1:dd:f0:7e:29:f3:0a:63:9c:02:0a:46:30:09:67:bd:
23:af:ab:61:80:57:0c:5a:c0:dd:1b:ae:87:be:d1:6e:59:1a:
fa:47:68:50:a2:96:ae:c4:a5:fa:9e:1f:1f:ed:fe:87:10:15:
39:01:eb:9e:59:a4:2d:aa:67:2f:b1:9a:73:93:52:88:21:c2:
c7:8d:85:6d:6d:1d:85:15:3f:64:1c:0c:71:92:b9:86:7e:f9:
a1:d6:7e:d7:0d:ca:b4:95:6b:5a:42:40:05:f6:39:b4:aa:6f:
a3:8d:1e:79:ef:34:c5:a0:32:1f:91:7d:80:b2:d5:15:db:c1:
52:4a:d2:73:20:b3:e5:65:c9:65:38:15:4c:54:00:f7:97:54:
8d:57:80:cb:00:3b:58:e5:de:b3:9a:69:00:13:a0:a5:e6:ef:
fd:f5:78:1d:7c:24:e1:66:3b:ee:eb:b3:d3:49:22:8c:8b:c5:
10:b1:e1:9b:ac:38:e0:2d:74:5b:c1:8c:32:a1:2d:4b:83:ce:
b5:ce:3e:24:b1:be:7c:0a:c0:db:ed:58:d2:0c:90:1f:cf:b5:
c1:14:9b:74:86:e2:f7:1d:25:df:1f:26:fb:62:92:b6:77:c3:
53:1d:81:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:52:21 2026 by rpki-client