Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/51b2ce-09aa-438d-9907-101b9e80e359/1/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.mft
File: SX7eN_KfQKcbHLKl_OUm6KPQ5eE.mft (raw, json)
Hash identifier: 87mYFWlTWrKjXYn51UdcxH9k/6gTJ3WIGobRz/0/rWw=
Subject key identifier: 50:EB:CD:21:6E:92:E1:6D:E8:98:EA:58:49:80:1B:A9:C3:DB:F4:5E
Authority key identifier: 49:7E:DE:37:F2:9F:40:A7:1B:1C:B2:A5:FC:E5:26:E8:A3:D0:E5:E1
Certificate issuer: /CN=497ede37f29f40a71b1cb2a5fce526e8a3d0e5e1
Certificate serial: 019CF5050A8125C0A8047572EA5AAEC83E12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/51b2ce-09aa-438d-9907-101b9e80e359/1/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.mft
Manifest number: 36
Signing time: Mon 16 Mar 2026 05:01:14 +0000
Manifest this update: Mon 16 Mar 2026 05:01:14 +0000
Manifest next update: Tue 17 Mar 2026 05:01:14 +0000
Files and hashes: 1: FsZqIeW01RfaEApHUES0cB5ebyI.roa (hash: VCT9mMAi/Cn+09fCPNJ/y3SBfVeioqWO5E+XzvEA3FA=)
2: KfCvlR8vu0qoz40NwG_o9ivr0L0.asa (hash: 28KOqwH8/su8P6T5Q9zLgm8jJkLHgtcR+NYZ8WhN7qk=)
3: SX7eN_KfQKcbHLKl_OUm6KPQ5eE.crl (hash: ueT2HN4TqITeH2fW3maslFL2Q5pqGcy2fznAV8mbksU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/51b2ce-09aa-438d-9907-101b9e80e359/1/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/51b2ce-09aa-438d-9907-101b9e80e359/1/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f5:05:0a:81:25:c0:a8:04:75:72:ea:5a:ae:c8:3e:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=497ede37f29f40a71b1cb2a5fce526e8a3d0e5e1
Validity
Not Before: Mar 16 05:01:14 2026 GMT
Not After : Mar 17 05:01:14 2026 GMT
Subject: CN=50ebcd216e92e16de898ea5849801ba9c3dbf45e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3c:2a:0b:18:26:71:d8:4e:84:5e:4d:6d:aa:
ad:79:bb:d0:05:63:4b:2a:68:bc:fd:da:a0:7d:64:
fa:95:ee:c4:9b:b4:43:4f:b9:0f:90:44:cb:28:61:
45:2e:2a:a5:fc:00:7b:58:c3:83:e1:d2:b6:b7:a8:
17:15:88:38:a6:df:9d:2a:88:43:8c:b0:ff:61:e6:
86:69:71:13:fb:15:1c:09:0b:6a:8f:01:f9:54:00:
6b:da:f1:6d:32:fe:cb:92:35:1e:b5:d5:bd:89:5c:
d4:9f:8c:a1:cf:90:b5:49:ce:07:16:38:4c:33:bd:
ef:33:20:60:f5:49:e9:7a:86:f6:30:e8:ee:b3:bc:
60:6a:2a:a3:bf:0f:71:e4:88:d4:65:95:8a:09:32:
94:86:58:ad:ff:c7:6e:bb:8a:2a:3c:25:50:48:e8:
f2:f3:c9:d8:2e:16:4b:97:aa:2e:71:68:fb:be:22:
33:ed:79:dc:44:3a:ef:b9:dd:a8:b6:8b:b4:80:73:
58:50:e5:24:24:10:d3:3e:a5:c8:8c:68:ed:d9:95:
80:5d:52:03:6a:57:f1:29:39:82:5d:e9:2b:67:17:
16:34:7b:2c:3a:30:36:20:9e:15:0c:7d:e4:22:27:
50:cd:56:66:fc:49:ff:60:75:97:bc:ad:71:ee:b0:
9f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:EB:CD:21:6E:92:E1:6D:E8:98:EA:58:49:80:1B:A9:C3:DB:F4:5E
X509v3 Authority Key Identifier:
keyid:49:7E:DE:37:F2:9F:40:A7:1B:1C:B2:A5:FC:E5:26:E8:A3:D0:E5:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/51b2ce-09aa-438d-9907-101b9e80e359/1/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/51b2ce-09aa-438d-9907-101b9e80e359/1/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:df:bc:69:c8:15:5b:24:5d:b3:70:48:4c:f7:79:27:59:20:
c6:cd:59:9b:e4:2e:39:e0:ae:e0:ef:f9:7d:80:69:66:3d:72:
4d:10:fc:33:37:21:1d:1f:49:c0:57:50:bf:b3:4c:d0:90:5a:
9c:0e:07:e4:38:03:60:f7:a6:db:b7:68:4c:6c:94:d7:17:5d:
78:de:7b:1f:20:e8:34:8e:cc:d5:4e:9d:e8:3e:53:5c:e3:72:
f2:a0:9f:47:af:54:9b:5e:bf:7f:7a:8a:34:5c:98:65:42:88:
03:97:c7:01:b0:5b:d8:52:dd:f5:42:da:e3:24:59:5a:4f:28:
a1:72:5d:fa:c2:0d:7f:fd:5b:a6:d3:15:35:69:10:b0:e1:6b:
70:08:f9:f5:bd:98:74:e0:85:19:87:7e:22:e5:ab:9d:1e:81:
2c:75:cf:11:d9:b0:ae:5e:f8:19:4b:b4:bd:69:3c:2f:24:3d:
85:18:a8:65:75:e8:51:0b:18:11:2c:8c:f4:71:57:c6:04:2e:
7e:5c:f1:99:0d:e0:9e:b0:40:00:32:dc:47:32:e4:9c:b5:53:
65:1e:6e:b7:6e:02:47:8d:03:45:f4:80:cc:8e:ea:a0:5c:73:
49:52:9c:44:17:f9:23:ac:3d:6f:41:02:94:1b:20:52:08:ad:
28:5d:bd:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 08:16:48 2026 by rpki-client