Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft
File: SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft (raw, json)
Hash identifier: stKWjUeDc0PpX1eW6/rq+/fO48l79yrj2po2T0eDwgk=
Subject key identifier: 44:5E:2A:70:76:EB:AF:03:AE:EF:B8:7D:65:4E:8C:AD:1F:9F:9D:8F
Authority key identifier: 49:D0:1F:70:CF:5F:4D:EE:D9:3A:8C:15:E4:94:02:9E:93:AB:ED:55
Certificate issuer: /CN=49d01f70cf5f4deed93a8c15e494029e93abed55
Certificate serial: 01A1811922259D3B1F1404DD87B9CFA76D4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SdAfcM9fTe7ZOowV5JQCnpOr7VU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft
Manifest number: 06EA
Signing time: Wed 28 Oct 2026 06:01:10 +0000
Manifest this update: Wed 28 Oct 2026 06:01:10 +0000
Manifest next update: Thu 29 Oct 2026 06:01:10 +0000
Files and hashes: 1: JJCCXVuKGJb9ue4yyF1fCtUPK9E.roa (hash: 9nwd4CsbVqKtlvKwPGpaOjb7a2D6lmLy6I2tj8BYZf4=)
2: SdAfcM9fTe7ZOowV5JQCnpOr7VU.crl (hash: qK3EAEjCUUFKslU2GSP3Cp1EScysKSe4L0WBcX/2a2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SdAfcM9fTe7ZOowV5JQCnpOr7VU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:19:22:25:9d:3b:1f:14:04:dd:87:b9:cf:a7:6d:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49d01f70cf5f4deed93a8c15e494029e93abed55
Validity
Not Before: Oct 28 06:01:10 2026 GMT
Not After : Oct 29 06:01:10 2026 GMT
Subject: CN=445e2a7076ebaf03aeefb87d654e8cad1f9f9d8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:57:7f:37:d9:af:95:1b:58:8d:76:b2:f5:00:
af:1c:97:11:9b:4e:9e:a3:43:98:2d:93:aa:02:c9:
ff:0e:1e:f0:82:f3:7d:4c:e3:6c:f8:45:d8:a1:e1:
3d:bb:38:a5:fe:1b:da:78:92:2d:43:e8:ce:5b:87:
5a:59:90:e2:cc:12:0a:ff:de:04:9b:03:72:27:f9:
e0:5a:3e:bf:e6:21:c5:b3:2d:42:60:7b:36:52:f2:
06:c8:52:3a:20:71:03:8b:da:d2:a5:1c:55:e6:36:
e9:fd:90:bc:be:87:13:14:41:9c:25:f0:eb:2a:2a:
cc:0c:0f:9f:7f:c7:82:58:25:c4:b5:d7:a1:69:f1:
10:01:fc:28:b7:83:7b:77:6d:69:95:f1:37:f7:51:
45:89:1e:87:3d:fd:24:6b:69:f8:f5:33:16:2e:bb:
88:e8:45:f3:b7:b9:c5:1b:79:da:6e:67:f4:b4:e3:
25:c5:de:f0:c8:9f:50:5d:10:fa:17:c5:57:6d:84:
78:af:8b:00:e9:55:bf:9e:6b:b9:df:fb:63:cf:69:
3c:d1:8e:66:37:b6:a5:66:24:86:c1:22:3f:bf:3d:
4c:6f:b3:20:db:fb:a4:42:ad:15:7c:41:b9:05:ea:
ad:40:00:3e:cd:d4:53:79:04:1b:63:84:8b:17:54:
d5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:5E:2A:70:76:EB:AF:03:AE:EF:B8:7D:65:4E:8C:AD:1F:9F:9D:8F
X509v3 Authority Key Identifier:
keyid:49:D0:1F:70:CF:5F:4D:EE:D9:3A:8C:15:E4:94:02:9E:93:AB:ED:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SdAfcM9fTe7ZOowV5JQCnpOr7VU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:0d:fb:eb:2c:df:5b:00:e0:49:01:9b:52:30:80:ac:70:6a:
f6:6b:a0:42:63:7c:a5:c9:a0:dd:eb:27:61:c5:43:8f:71:72:
58:83:84:90:15:d0:be:28:65:52:3f:9b:f0:e1:19:0c:8c:53:
9b:d0:48:7c:e1:17:94:b7:df:9e:3b:2d:cb:03:ec:b4:9d:f9:
61:dd:88:ce:71:3a:72:95:ae:aa:5b:77:44:2c:37:6d:1a:26:
99:28:78:d6:7a:22:be:df:9d:e7:b6:de:b3:67:db:b8:f9:0d:
46:df:1d:30:62:07:44:5c:f4:b7:ee:35:79:37:c2:ad:06:ee:
8f:88:54:dc:65:7f:e8:c4:00:99:2b:ea:e4:0f:53:c9:bb:96:
ff:dd:59:ac:7e:9f:2b:ab:49:2a:fb:ad:74:12:c6:e9:c6:3d:
e9:b8:ec:5e:c2:92:68:b4:7a:ab:87:a5:74:34:e4:5e:25:91:
07:db:15:87:09:26:70:39:19:b7:18:85:51:2b:0a:93:21:53:
cc:61:44:00:76:a3:bb:ec:d1:29:ec:71:58:e9:b6:a5:02:5f:
78:cb:7e:72:60:a1:65:6e:df:07:3f:64:ca:a3:74:16:d9:b0:
58:29:61:39:8a:ac:02:f2:ef:fd:ed:13:46:78:dc:0d:67:8a:
07:ee:77:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:38:32 2026 by rpki-client