Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/51b2ce-09aa-438d-9907-101b9e80e359/1/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.mft
File: SX7eN_KfQKcbHLKl_OUm6KPQ5eE.mft (raw, json)
Hash identifier: zlqxzLl8FUUJocA02RW0lZ3nzW+N32btipikSpVHWTM=
Subject key identifier: 3A:EB:B6:B1:91:41:24:B5:E7:D6:DD:F9:97:7E:6F:BC:C7:1F:9E:AF
Authority key identifier: 49:7E:DE:37:F2:9F:40:A7:1B:1C:B2:A5:FC:E5:26:E8:A3:D0:E5:E1
Certificate issuer: /CN=497ede37f29f40a71b1cb2a5fce526e8a3d0e5e1
Certificate serial: 019DDCC38B3B7BB0F75D94642A02D0876AE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/51b2ce-09aa-438d-9907-101b9e80e359/1/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.mft
Manifest number: AE
Signing time: Thu 30 Apr 2026 05:01:35 +0000
Manifest this update: Thu 30 Apr 2026 05:01:35 +0000
Manifest next update: Fri 01 May 2026 05:01:35 +0000
Files and hashes: 1: FsZqIeW01RfaEApHUES0cB5ebyI.roa (hash: VCT9mMAi/Cn+09fCPNJ/y3SBfVeioqWO5E+XzvEA3FA=)
2: KfCvlR8vu0qoz40NwG_o9ivr0L0.asa (hash: 28KOqwH8/su8P6T5Q9zLgm8jJkLHgtcR+NYZ8WhN7qk=)
3: SX7eN_KfQKcbHLKl_OUm6KPQ5eE.crl (hash: zxayFh3ikZaTKQ9auiIdAds8WZ5EJREWa0XdXl7QXe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/51b2ce-09aa-438d-9907-101b9e80e359/1/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/51b2ce-09aa-438d-9907-101b9e80e359/1/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 05:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dc:c3:8b:3b:7b:b0:f7:5d:94:64:2a:02:d0:87:6a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=497ede37f29f40a71b1cb2a5fce526e8a3d0e5e1
Validity
Not Before: Apr 30 05:01:35 2026 GMT
Not After : May 1 05:01:35 2026 GMT
Subject: CN=3aebb6b1914124b5e7d6ddf9977e6fbcc71f9eaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:7f:fb:eb:bf:19:25:fa:d1:8c:45:b2:67:cb:
c3:f4:d0:45:5a:0d:80:66:e8:50:24:15:4b:5e:b9:
a6:a3:00:a0:ff:1d:b0:8f:e8:3e:bf:ec:59:a6:0a:
88:a3:44:21:6c:7a:05:19:63:a6:27:e8:3d:2a:0c:
dd:e4:07:3f:b0:3e:7c:df:5c:90:4f:2e:27:39:c7:
6d:de:29:96:23:ce:b9:e5:e1:b1:44:0a:d6:34:85:
d1:7a:bb:30:9e:39:d1:5d:e8:01:2d:80:3a:f3:f1:
c0:cb:66:2f:9d:f8:0b:15:17:3c:af:e0:2b:55:2d:
7c:38:77:43:db:e4:37:45:75:94:95:14:58:2c:16:
12:3c:a0:39:f5:a9:2e:14:31:b1:70:54:23:0b:da:
06:9b:b9:60:ce:92:42:78:ff:4b:d2:25:97:e9:13:
44:0d:6c:6e:27:05:64:f0:e9:ba:46:78:51:ad:53:
76:a0:14:7a:f6:f7:72:99:37:ae:e8:58:c0:27:56:
b0:cf:b9:fa:a2:53:c2:0d:9c:07:25:4a:25:30:dd:
bc:80:39:cc:8d:17:ee:65:53:7e:99:a2:1a:78:63:
7b:a2:32:72:05:8d:b0:aa:b1:72:24:e8:6f:f3:a6:
5d:ac:e3:02:5e:93:c0:dd:ff:1b:6e:23:b5:31:59:
9a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:EB:B6:B1:91:41:24:B5:E7:D6:DD:F9:97:7E:6F:BC:C7:1F:9E:AF
X509v3 Authority Key Identifier:
keyid:49:7E:DE:37:F2:9F:40:A7:1B:1C:B2:A5:FC:E5:26:E8:A3:D0:E5:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/51b2ce-09aa-438d-9907-101b9e80e359/1/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/51b2ce-09aa-438d-9907-101b9e80e359/1/SX7eN_KfQKcbHLKl_OUm6KPQ5eE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:fe:ab:0e:db:fb:9a:12:6d:fd:09:2a:4e:d4:3d:60:af:1f:
90:02:f3:fe:95:93:5a:1a:2e:df:b6:01:52:48:30:06:4f:c0:
85:b3:5b:9c:85:71:cf:3c:d8:fd:b6:fd:a8:8f:bc:06:95:cc:
db:a5:25:2e:2d:f5:5e:a2:dd:83:7d:63:26:ed:86:9f:25:60:
03:5e:d5:5b:6b:fc:d7:3d:68:9b:47:12:10:fe:41:d8:af:49:
fe:69:c4:67:90:a8:71:ac:a7:b6:63:81:94:77:92:9b:39:43:
48:2f:02:90:3a:cb:83:5c:f8:27:84:41:72:12:2b:16:3e:2e:
e8:2c:84:1d:99:58:ad:7e:09:c9:91:36:4d:1f:9f:da:8c:e2:
ed:2a:c2:c8:6b:93:6a:4c:78:31:17:c4:49:c1:e9:48:a9:9b:
e9:b7:9b:e4:f4:ab:c8:da:cd:a3:01:97:49:a9:d1:09:38:a3:
7a:e6:8a:29:d1:f4:51:64:1e:9d:02:66:bf:f5:ae:84:0f:2e:
43:b2:8f:d0:22:97:4f:60:50:83:f0:25:c6:2f:b0:bc:8d:76:
3b:c5:f3:f5:27:66:e4:52:1e:ed:46:77:3a:f1:83:9c:64:1e:
64:e4:41:d7:1f:28:bf:cc:43:20:7c:40:c3:fb:57:22:1c:6a:
69:f7:ca:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 12:52:02 2026 by rpki-client