Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/53696f-f973-47fb-8d79-addc6d4bb2e7/1/SanokeBtQid9xPtfvWnpq9jimIM.mft
File: SanokeBtQid9xPtfvWnpq9jimIM.mft (raw, json)
Hash identifier: cWCgZ3pXfY+y4nb4O4W0SXdZhsOFNQQ83z4np1kotGg=
Subject key identifier: 40:0B:1D:2D:93:C5:8E:1C:55:CA:88:E7:91:5F:DC:B0:AC:FD:B8:0F
Authority key identifier: 49:A9:E8:91:E0:6D:42:27:7D:C4:FB:5F:BD:69:E9:AB:D8:E2:98:83
Certificate issuer: /CN=49a9e891e06d42277dc4fb5fbd69e9abd8e29883
Certificate serial: 019D3753080D61E1A017BD65E4D0EA2CC8DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SanokeBtQid9xPtfvWnpq9jimIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/53696f-f973-47fb-8d79-addc6d4bb2e7/1/SanokeBtQid9xPtfvWnpq9jimIM.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 02:01:21 +0000
Manifest this update: Sun 29 Mar 2026 02:01:21 +0000
Manifest next update: Mon 30 Mar 2026 02:01:21 +0000
Files and hashes: 1: 2IRl_xTGVsHML4htKUJ_WxgAa6I.roa (hash: Whl5xYBFDPOniYmTRL6Ne857if6B4W9DGqAY9abFaZ0=)
2: SanokeBtQid9xPtfvWnpq9jimIM.crl (hash: cbQuEPFOElogel5VjNe8Je1MgWofDqkqlEqBVraV460=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/53696f-f973-47fb-8d79-addc6d4bb2e7/1/SanokeBtQid9xPtfvWnpq9jimIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/53696f-f973-47fb-8d79-addc6d4bb2e7/1/SanokeBtQid9xPtfvWnpq9jimIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SanokeBtQid9xPtfvWnpq9jimIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:08:0d:61:e1:a0:17:bd:65:e4:d0:ea:2c:c8:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49a9e891e06d42277dc4fb5fbd69e9abd8e29883
Validity
Not Before: Mar 29 02:01:21 2026 GMT
Not After : Mar 30 02:01:21 2026 GMT
Subject: CN=400b1d2d93c58e1c55ca88e7915fdcb0acfdb80f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c6:2d:d1:6b:74:ee:4a:d1:77:e3:8a:65:48:
c8:71:77:21:3e:1d:90:50:07:1d:bd:e8:75:e7:45:
c1:0c:8f:91:07:66:8f:12:37:08:ca:95:56:4f:d1:
0a:2a:ff:1c:37:c8:09:f1:00:28:35:4e:71:ca:8e:
7e:46:08:1f:16:5e:45:e0:3c:af:fb:93:1a:6d:f6:
c7:a4:1c:3e:48:95:b5:0a:09:b3:89:51:01:ae:fe:
e1:2e:54:f1:80:23:56:28:9a:70:84:fb:25:48:07:
59:57:23:ce:f7:0d:60:35:2c:01:b4:3e:58:3f:61:
30:5d:fb:e5:20:3f:bc:6a:4b:31:84:f1:69:28:1d:
33:a9:46:1a:09:d8:4c:93:fe:18:7a:7d:52:79:fc:
f0:47:d1:48:0f:be:c7:d2:e4:63:85:b7:30:f6:8a:
a3:6e:8d:fb:98:2d:e7:cf:f3:6c:f1:ba:8b:7d:cc:
b4:ed:c0:c0:f4:22:b8:8a:29:6c:cc:49:67:54:93:
f0:66:13:85:db:26:b0:40:fc:e1:89:13:d6:6e:21:
0d:af:9f:03:3d:d3:cc:b0:e9:16:fe:a4:43:6c:56:
ec:c0:be:20:35:b3:53:77:f6:e3:5f:c4:2f:a4:25:
94:89:6d:fa:a3:ab:10:99:93:9f:31:b7:14:67:c4:
ef:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:0B:1D:2D:93:C5:8E:1C:55:CA:88:E7:91:5F:DC:B0:AC:FD:B8:0F
X509v3 Authority Key Identifier:
keyid:49:A9:E8:91:E0:6D:42:27:7D:C4:FB:5F:BD:69:E9:AB:D8:E2:98:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SanokeBtQid9xPtfvWnpq9jimIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/53696f-f973-47fb-8d79-addc6d4bb2e7/1/SanokeBtQid9xPtfvWnpq9jimIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/53696f-f973-47fb-8d79-addc6d4bb2e7/1/SanokeBtQid9xPtfvWnpq9jimIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:47:06:3b:bb:96:40:3b:27:43:32:86:8b:ad:8b:e9:3c:c4:
f0:d7:42:de:05:21:6f:84:b8:81:fb:e4:cf:d4:c3:f2:b2:1c:
4a:6c:bb:07:5a:09:bd:0e:82:e2:a7:db:0b:3b:09:93:a1:1f:
77:10:5b:90:de:47:a7:20:f8:24:0c:8e:9f:bf:6a:a9:9a:31:
07:11:3f:6b:32:57:cf:79:21:37:1b:87:ba:cc:71:d2:b5:02:
5d:4b:48:ca:66:9a:b7:5c:e2:ab:0a:ab:f2:4b:89:ed:fc:14:
49:ad:c4:a8:ff:66:89:58:d5:da:c7:b9:f6:6e:d5:5f:e4:f8:
b6:2a:de:37:6c:7f:7e:25:bb:3b:1d:39:91:bc:84:18:f6:37:
6a:34:f0:5f:32:94:be:76:95:a8:d7:cf:9a:62:c8:65:88:e2:
5e:e1:f4:83:c6:44:22:cd:b2:96:12:ec:00:a1:8f:e4:29:bb:
6c:a4:b2:09:0f:29:a0:80:96:fc:fe:8c:24:47:84:86:fd:fa:
53:eb:50:0a:05:fc:a5:80:b5:fe:15:4f:3a:62:e0:b7:c4:93:
c0:c7:c1:31:48:c4:4f:8e:c8:bf:1a:17:3f:8e:e6:11:2a:fa:
bd:c3:88:8c:50:0a:3b:e5:17:33:57:98:24:bc:c8:3c:0b:99:
28:e3:11:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:51 2026 by rpki-client