Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft
File: SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft (raw, json)
Hash identifier: 97nyYR4GjHQYr79qf9VWIi9F/Hu+ut/UdLWVSV/9pPU=
Subject key identifier: 79:C2:86:9B:34:F8:9A:FC:76:42:39:37:77:6D:E0:C0:E0:37:58:F5
Authority key identifier: 49:D0:1F:70:CF:5F:4D:EE:D9:3A:8C:15:E4:94:02:9E:93:AB:ED:55
Certificate issuer: /CN=49d01f70cf5f4deed93a8c15e494029e93abed55
Certificate serial: 019DCED0DADFA2946210BE28DF87CDB8D63D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SdAfcM9fTe7ZOowV5JQCnpOr7VU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft
Manifest number: 0500
Signing time: Mon 27 Apr 2026 12:01:27 +0000
Manifest this update: Mon 27 Apr 2026 12:01:27 +0000
Manifest next update: Tue 28 Apr 2026 12:01:27 +0000
Files and hashes: 1: JJCCXVuKGJb9ue4yyF1fCtUPK9E.roa (hash: 9nwd4CsbVqKtlvKwPGpaOjb7a2D6lmLy6I2tj8BYZf4=)
2: SdAfcM9fTe7ZOowV5JQCnpOr7VU.crl (hash: poOtp1ZOVb519IQOQh95XUH7bv+gY0/u4Piok2DVR54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SdAfcM9fTe7ZOowV5JQCnpOr7VU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:d0:da:df:a2:94:62:10:be:28:df:87:cd:b8:d6:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49d01f70cf5f4deed93a8c15e494029e93abed55
Validity
Not Before: Apr 27 12:01:27 2026 GMT
Not After : Apr 28 12:01:27 2026 GMT
Subject: CN=79c2869b34f89afc76423937776de0c0e03758f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7f:f3:26:dc:59:55:63:3b:a5:d6:54:52:c8:
bb:4f:73:8b:fc:9d:28:c3:0b:40:d4:a1:9c:11:bf:
cb:28:da:0e:44:d0:ec:60:23:15:0d:b9:68:30:a7:
be:c1:0a:d2:2e:e4:b4:4d:d2:fc:0f:f1:f5:b1:cf:
2a:65:5e:47:53:e8:9e:19:f5:cf:05:9b:db:d7:93:
3a:97:ae:c7:b7:70:7d:fd:0e:92:1a:a6:7b:71:8b:
9a:83:36:d5:91:8a:d2:bc:48:af:7b:d8:28:61:63:
2a:72:ed:f1:7c:a6:31:e5:6c:9b:7b:57:b0:2a:c2:
66:90:88:48:e4:05:df:6e:c7:5a:90:d6:cc:27:4b:
f9:1d:4f:50:ab:76:a3:5a:6b:c9:83:33:28:4e:2e:
4f:30:63:1c:ca:36:38:1a:33:f1:c2:14:03:45:8e:
2b:8e:4b:26:d4:25:bc:73:aa:93:05:71:88:06:3b:
9b:71:a5:ea:18:bc:e7:18:12:10:b6:bc:67:53:00:
32:b2:e1:0c:32:fe:7c:c2:b8:9e:87:dd:ef:e6:01:
32:35:c7:42:77:dd:32:e7:63:e6:3e:dc:4f:fa:c6:
e9:57:d3:43:a0:79:04:e2:66:7e:de:9b:60:6f:79:
28:f9:90:dc:ec:d6:ba:16:60:bf:e6:bd:ab:28:f1:
38:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:C2:86:9B:34:F8:9A:FC:76:42:39:37:77:6D:E0:C0:E0:37:58:F5
X509v3 Authority Key Identifier:
keyid:49:D0:1F:70:CF:5F:4D:EE:D9:3A:8C:15:E4:94:02:9E:93:AB:ED:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SdAfcM9fTe7ZOowV5JQCnpOr7VU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:a0:f6:11:02:10:db:3c:4f:2b:37:e7:f9:b8:3c:18:e5:48:
2b:be:ec:b4:3c:d9:0b:0c:33:d9:16:a0:ca:81:d8:91:b5:ce:
c9:cb:aa:6c:94:7b:80:6e:aa:11:71:09:f6:a3:42:f2:23:87:
de:ba:f4:16:6a:3d:88:f0:b0:ca:4b:49:66:34:27:1c:75:87:
77:4a:b0:5d:22:e7:39:39:99:e1:5a:31:82:2c:f3:49:d6:03:
3c:cd:dc:22:52:82:27:cc:40:44:13:07:54:1f:5e:48:41:7d:
fb:e5:e8:dc:14:65:e7:c8:35:3c:99:cc:e8:4f:d9:b2:56:93:
da:14:84:74:bd:26:9e:b4:3f:57:df:2d:5c:64:c1:a5:ba:0d:
ea:65:86:a0:86:ac:fd:e1:d2:c4:6d:cf:27:5a:9a:4d:b2:44:
e5:d5:9f:45:2d:eb:52:94:a3:ee:57:da:49:b4:54:3b:ab:6c:
13:24:3f:82:9b:5d:d3:57:e6:a7:2b:b5:1c:82:55:e7:cf:b9:
66:f6:f4:80:b8:75:cc:b7:ae:23:23:3a:0e:a2:07:5e:52:6a:
22:b7:26:c5:ba:9c:be:53:23:69:2c:9d:7c:13:d9:56:b7:44:
e7:37:15:29:b2:7f:d3:37:3d:38:bd:65:d8:c1:d5:01:19:90:
14:89:bc:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:05:54 2026 by rpki-client