Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft
File: SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft (raw, json)
Hash identifier: R/g37UjXI6IjOhJLqa/EuH+qN+8IR7hDdOd8XKwooOg=
Subject key identifier: 4A:AA:DD:88:BD:CA:B0:BB:46:5E:B0:89:19:03:50:E4:13:48:5D:DF
Authority key identifier: 49:D0:1F:70:CF:5F:4D:EE:D9:3A:8C:15:E4:94:02:9E:93:AB:ED:55
Certificate issuer: /CN=49d01f70cf5f4deed93a8c15e494029e93abed55
Certificate serial: 019EB87CE86C8A5FD511FCE4750270E605BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SdAfcM9fTe7ZOowV5JQCnpOr7VU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft
Manifest number: 0579
Signing time: Thu 11 Jun 2026 21:00:54 +0000
Manifest this update: Thu 11 Jun 2026 21:00:54 +0000
Manifest next update: Fri 12 Jun 2026 21:00:54 +0000
Files and hashes: 1: JJCCXVuKGJb9ue4yyF1fCtUPK9E.roa (hash: 9nwd4CsbVqKtlvKwPGpaOjb7a2D6lmLy6I2tj8BYZf4=)
2: SdAfcM9fTe7ZOowV5JQCnpOr7VU.crl (hash: SrA8FRFipGySvCwUsmaoaIQm5Uu2LAuWbVFImKIEXHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SdAfcM9fTe7ZOowV5JQCnpOr7VU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:7c:e8:6c:8a:5f:d5:11:fc:e4:75:02:70:e6:05:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49d01f70cf5f4deed93a8c15e494029e93abed55
Validity
Not Before: Jun 11 21:00:54 2026 GMT
Not After : Jun 12 21:00:54 2026 GMT
Subject: CN=4aaadd88bdcab0bb465eb089190350e413485ddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:2c:b8:cc:6d:8b:51:81:34:4b:42:31:0e:d2:
81:95:bd:4a:23:35:d0:a1:ab:e5:90:0d:ba:41:0a:
39:63:0f:34:fb:26:00:17:01:5c:ef:5d:ba:10:36:
3f:be:f3:f3:e5:ba:57:95:e3:bc:c4:04:45:3d:65:
07:8a:d8:b7:c4:a0:69:77:f1:15:cc:94:d9:23:6e:
1d:fb:9c:ea:f2:3e:94:3e:1e:06:a3:37:69:dc:f0:
ca:54:33:17:5c:4b:3b:9d:a7:93:53:43:f9:01:60:
49:4a:9d:6d:53:98:ad:68:b3:28:61:c7:51:fa:46:
f0:c6:4a:3a:ca:71:b3:b6:f5:49:12:28:11:21:3d:
8a:6f:54:57:b5:4e:5d:81:01:82:28:9f:8e:24:46:
31:a2:60:db:74:d2:06:68:f6:48:0e:be:44:2c:aa:
5d:a5:bd:45:b0:b9:d8:29:16:9c:7d:3b:2b:81:11:
76:67:e5:56:11:4c:d2:76:f0:eb:81:a9:30:86:01:
ea:fe:fd:56:46:f4:0b:d5:96:95:39:5c:37:86:4b:
75:c8:70:1f:9a:56:72:52:df:40:a4:a5:d2:fe:97:
31:7f:81:ad:dd:0e:b0:f2:66:66:84:e6:62:cf:97:
03:76:59:ec:d1:4a:a5:1b:4b:b4:1b:fc:59:d5:19:
12:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:AA:DD:88:BD:CA:B0:BB:46:5E:B0:89:19:03:50:E4:13:48:5D:DF
X509v3 Authority Key Identifier:
keyid:49:D0:1F:70:CF:5F:4D:EE:D9:3A:8C:15:E4:94:02:9E:93:AB:ED:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SdAfcM9fTe7ZOowV5JQCnpOr7VU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:19:b9:92:0e:df:c0:2f:a1:84:14:3f:58:92:54:1a:13:18:
d9:05:ef:06:61:4b:88:43:59:dc:82:75:6c:49:d4:1f:fa:81:
1b:11:d3:d5:32:4b:d0:f1:53:fd:a0:a1:4d:aa:1c:a0:1a:4e:
ad:e3:a7:8a:8f:fd:5e:d1:e6:e1:ce:06:b5:e8:9d:50:74:53:
35:90:78:ec:c7:ea:6e:2d:c9:85:5a:dc:c8:9a:5f:db:74:57:
4f:d9:93:a6:c7:d0:4e:1b:52:e7:f1:ab:ed:87:48:2a:7d:5f:
d1:f0:d2:19:3c:e7:d0:40:8e:b5:6e:22:e3:dc:be:c7:8c:3b:
13:0f:ca:c3:5b:05:16:e1:1e:3b:3a:02:b9:0c:4c:06:49:20:
ab:01:88:b2:e9:60:2d:72:36:8f:10:4d:f4:80:02:f8:12:96:
a9:52:7f:26:39:aa:e2:02:d3:d1:3e:b7:4f:d6:02:ed:61:03:
dd:94:38:85:c9:dc:45:f9:85:94:03:8b:86:78:9d:a7:18:8b:
12:a7:c9:9a:f5:47:83:c7:af:32:06:85:71:82:df:9d:41:f6:
af:28:e2:b3:9e:92:91:ac:60:90:c2:d6:74:e4:81:72:51:de:
3a:e0:78:04:db:91:37:c4:4d:b4:1c:45:6a:62:27:f0:27:d5:
d0:58:2f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:49:10 2026 by rpki-client