Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.mft
File: SepQocYggnYq_aAH1vyLS9sFdJ8.mft (raw, json)
Hash identifier: +avtk1B6qBlwDwvGGN4rNIT5Jid472H7TpyY5Uz9/eQ=
Subject key identifier: FB:73:4E:5E:9C:AF:F7:AF:95:BC:75:BD:7F:2C:E4:36:31:31:CB:70
Authority key identifier: 49:EA:50:A1:C6:20:82:76:2A:FD:A0:07:D6:FC:8B:4B:DB:05:74:9F
Certificate issuer: /CN=49ea50a1c62082762afda007d6fc8b4bdb05749f
Certificate serial: 019D371BFF4359B14F3A53E897A1AAD3495C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SepQocYggnYq_aAH1vyLS9sFdJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 01:01:14 +0000
Manifest this update: Sun 29 Mar 2026 01:01:14 +0000
Manifest next update: Mon 30 Mar 2026 01:01:14 +0000
Files and hashes: 1: PCmfaBCDc6kdDFKOLkKdXE8InlY.roa (hash: ZpImK0PiLtizwaLw2fhTrlKvfw3ZfWhio2/P51B+d/A=)
2: RwAyPd51yPKFVoNHbXXQGuR7_EY.roa (hash: SJOa0Y57+2jyYSq2obqvHcjbEVfI5zAybNhvZJSsELU=)
3: SepQocYggnYq_aAH1vyLS9sFdJ8.crl (hash: A9KTnAVePQW1T5HnmIH2vrZky2h1aeA8iJXLJ92+mX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SepQocYggnYq_aAH1vyLS9sFdJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:ff:43:59:b1:4f:3a:53:e8:97:a1:aa:d3:49:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49ea50a1c62082762afda007d6fc8b4bdb05749f
Validity
Not Before: Mar 29 01:01:14 2026 GMT
Not After : Mar 30 01:01:14 2026 GMT
Subject: CN=fb734e5e9caff7af95bc75bd7f2ce4363131cb70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:fa:b2:ce:f4:fc:55:dd:1f:d6:1e:b9:e8:65:
11:36:43:27:cc:79:e1:8d:44:74:46:70:1e:d4:46:
33:71:0c:21:8e:cf:5c:44:e9:b2:15:5b:45:90:a7:
67:0f:9b:c5:2b:be:25:a6:be:1e:68:6a:b1:95:f4:
3b:ca:91:a8:1b:0d:5a:73:02:b7:e4:b7:86:d9:d8:
38:04:16:c6:34:bf:1e:38:77:71:ed:a4:4b:d2:c8:
6d:c5:b1:b8:37:ca:ff:08:b5:ac:82:e4:16:90:72:
23:b8:a8:ef:14:a7:4e:22:e7:d1:9d:93:99:50:7a:
c2:66:09:0e:6f:3c:7c:8b:4e:0f:71:e6:da:dd:27:
a0:d2:f8:11:6b:7b:bb:f3:d4:60:1a:4c:63:7c:ae:
b8:a4:6a:0a:be:47:66:27:0f:51:5f:d0:55:0c:c4:
4c:f0:9d:64:3e:16:46:66:70:b3:1a:0d:21:fe:72:
a7:2e:79:b4:89:f8:30:2e:dc:55:fb:24:08:06:4a:
a9:dd:71:df:a2:b2:79:8b:5d:22:4a:8e:e3:2a:67:
99:43:7b:c6:66:0b:50:6e:47:09:ba:73:8f:46:38:
c4:3f:67:cd:08:b9:de:ba:5f:9f:c8:12:3b:69:d1:
b7:d9:19:17:c2:26:4e:ae:bb:20:2b:bd:21:92:7d:
5f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:73:4E:5E:9C:AF:F7:AF:95:BC:75:BD:7F:2C:E4:36:31:31:CB:70
X509v3 Authority Key Identifier:
keyid:49:EA:50:A1:C6:20:82:76:2A:FD:A0:07:D6:FC:8B:4B:DB:05:74:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SepQocYggnYq_aAH1vyLS9sFdJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:1e:41:ec:42:b0:db:e7:6e:87:e6:11:5e:56:09:a3:ce:5f:
dd:d4:a0:c3:56:a8:f7:e3:9b:8b:f3:e7:8f:07:c9:35:e6:3c:
c4:14:8e:1c:26:7c:26:5f:12:8c:f5:3c:50:3c:ff:30:ee:1d:
4a:b8:bc:9e:55:81:5a:ad:64:1b:b3:eb:4b:44:90:04:52:45:
ba:9f:19:e7:02:2b:58:e3:ab:13:c5:d1:46:ae:e3:f4:e3:59:
11:34:6d:55:06:ef:7c:b0:2e:5c:76:92:6e:c5:dc:9c:0f:93:
5d:54:e2:ae:71:f8:00:fa:c8:6f:b8:0a:28:34:86:74:2e:fa:
b4:1d:31:07:a4:2a:db:71:77:e0:f7:cc:88:93:62:0a:b3:8c:
bb:15:a1:69:84:f3:26:46:2b:95:0c:b9:0a:ac:3e:82:77:57:
dd:3f:c0:b2:16:34:b8:0d:8d:14:36:3f:10:98:8a:31:b1:1f:
6e:e3:41:1e:28:95:30:1d:6d:5c:02:12:d7:ad:d0:5b:2d:68:
86:7e:34:20:62:a5:3b:64:d5:8c:66:bf:17:cf:f5:98:9b:73:
b4:06:a1:93:35:53:58:86:49:d4:ce:df:c3:37:9d:21:f0:cb:
01:3c:73:f4:b7:df:fe:c4:ea:6c:0e:2d:fb:b6:19:37:92:9c:
d5:e7:df:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:04 2026 by rpki-client