Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/727267-421a-404b-9523-7285814344f3/1/SACbRi9GjH0BDdZBirzzFxK-Qyc.mft
File: SACbRi9GjH0BDdZBirzzFxK-Qyc.mft (raw, json)
Hash identifier: cWO0BgqzSm3D+fqEh9VvcesWDnznBMtQgGh5VZIRpf0=
Subject key identifier: CD:72:4A:00:A1:42:8E:DB:5A:E4:BE:95:E6:36:4A:BD:91:DA:2A:BA
Authority key identifier: 48:00:9B:46:2F:46:8C:7D:01:0D:D6:41:8A:BC:F3:17:12:BE:43:27
Certificate issuer: /CN=48009b462f468c7d010dd6418abcf31712be4327
Certificate serial: 01A0E888E83D6F40F291C2C741A9C1D1A617
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SACbRi9GjH0BDdZBirzzFxK-Qyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/727267-421a-404b-9523-7285814344f3/1/SACbRi9GjH0BDdZBirzzFxK-Qyc.mft
Manifest number: B8
Signing time: Mon 28 Sep 2026 15:01:21 +0000
Manifest this update: Mon 28 Sep 2026 15:01:21 +0000
Manifest next update: Tue 29 Sep 2026 15:01:21 +0000
Files and hashes: 1: RZ3tel9syTFm_FDnewv1LtVhGaE.asa (hash: ZEPAWlh3qs8XE61M2XfXTiI9UFnTCQ0FVnCjRwgvbfQ=)
2: SACbRi9GjH0BDdZBirzzFxK-Qyc.crl (hash: LBCkRi4jyDwgZpPxTfpHaoTZ9wuFJgEN9K0BAeDWXiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/727267-421a-404b-9523-7285814344f3/1/SACbRi9GjH0BDdZBirzzFxK-Qyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/727267-421a-404b-9523-7285814344f3/1/SACbRi9GjH0BDdZBirzzFxK-Qyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SACbRi9GjH0BDdZBirzzFxK-Qyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:88:e8:3d:6f:40:f2:91:c2:c7:41:a9:c1:d1:a6:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48009b462f468c7d010dd6418abcf31712be4327
Validity
Not Before: Sep 28 15:01:21 2026 GMT
Not After : Sep 29 15:01:21 2026 GMT
Subject: CN=cd724a00a1428edb5ae4be95e6364abd91da2aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5d:87:bb:74:af:be:5f:81:ee:e8:cb:dc:b2:
40:fd:be:45:09:a1:66:30:28:e4:71:d8:b0:f6:24:
cd:27:83:a0:64:9c:91:2b:1d:ea:c7:6c:c9:25:27:
a3:be:91:5b:6f:22:cd:4a:eb:fe:a7:a1:ba:da:ea:
95:68:08:04:01:62:84:57:72:0d:09:8b:93:6d:1b:
cf:7f:ee:0c:2e:f4:03:c2:ce:73:99:fa:68:0e:39:
81:1d:0f:0a:f4:4f:c2:65:1e:d0:62:f1:e9:06:7d:
10:4d:0a:26:96:e9:94:85:ba:d8:7b:42:fc:79:26:
9b:c8:18:39:c9:1f:3a:f9:e6:8c:ce:6c:07:1a:49:
82:56:79:26:99:46:c7:33:ad:d3:14:7a:4f:74:18:
15:6d:a3:0b:45:9c:58:c9:64:1f:3f:d7:a1:83:11:
f7:a0:bf:79:ab:59:56:c6:4d:9e:07:a6:2c:fc:eb:
35:43:cc:a5:03:e1:db:2e:ea:81:53:1b:ec:3f:02:
c9:d1:3b:d1:60:76:08:88:a9:4d:0a:e3:80:f3:ee:
8d:e8:0f:7d:73:6f:17:7a:68:89:02:7b:95:d9:00:
d4:44:9c:07:5e:45:27:a7:f1:c4:cf:1d:cb:67:25:
6b:14:67:b7:65:ed:61:7b:5a:1c:61:90:96:7f:1b:
7a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:72:4A:00:A1:42:8E:DB:5A:E4:BE:95:E6:36:4A:BD:91:DA:2A:BA
X509v3 Authority Key Identifier:
keyid:48:00:9B:46:2F:46:8C:7D:01:0D:D6:41:8A:BC:F3:17:12:BE:43:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SACbRi9GjH0BDdZBirzzFxK-Qyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/727267-421a-404b-9523-7285814344f3/1/SACbRi9GjH0BDdZBirzzFxK-Qyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/727267-421a-404b-9523-7285814344f3/1/SACbRi9GjH0BDdZBirzzFxK-Qyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:71:ef:6c:f1:35:fa:f5:60:ed:48:0f:80:b5:4d:05:ba:4c:
e8:a0:1a:1e:2d:d0:02:aa:0e:b7:23:8c:35:09:2b:72:1b:7d:
0d:d2:8e:4b:69:c1:44:f9:12:ec:b2:5d:cc:84:1f:33:69:b7:
29:c2:84:c9:a2:a7:60:b6:b3:ab:43:12:46:f5:65:67:25:24:
e9:9b:0c:54:84:6b:e6:6d:cd:72:ea:37:ed:f5:8e:2d:ad:a0:
2d:06:a1:26:5b:92:05:5f:09:ab:43:64:c0:9e:00:4c:61:3a:
17:68:48:5b:b9:16:99:54:a7:86:eb:7c:7a:b2:5d:32:26:4e:
56:29:16:36:aa:e6:81:98:66:a1:c9:2a:06:fd:44:3b:c1:61:
4a:ba:56:a6:52:ec:3e:eb:6b:1e:fc:24:b9:31:e4:c3:35:6d:
50:d5:ba:b4:e5:7e:10:6c:99:3e:bc:4b:52:f6:4e:c6:2f:57:
a7:36:1a:22:a1:c7:b0:89:35:72:4f:69:d4:5f:ac:9b:76:48:
18:34:7d:ac:f0:29:81:45:e7:cb:f4:0b:71:04:f4:74:9a:66:
4d:22:f5:f2:fd:cd:de:db:92:ec:a0:17:08:f2:cc:c3:f5:c5:
ee:7d:7d:5c:6e:ff:27:67:69:1d:5d:b7:28:2a:20:b1:ef:86:
a6:b8:ae:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 00:51:43 2026 by rpki-client