Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft
File: Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft (raw, json)
Hash identifier: VML+lYyLznPcQwEtUObQlOCEwHDF3rSxntQjU1qZcHM=
Subject key identifier: 26:17:D8:72:C1:2E:CC:62:AB:25:39:BB:EB:88:E8:34:A6:F9:12:39
Authority key identifier: 49:DE:57:8D:AC:79:2D:95:E2:17:D9:87:1E:04:F6:69:73:BB:7E:B0
Certificate issuer: /CN=49de578dac792d95e217d9871e04f66973bb7eb0
Certificate serial: 019D24718EAADF1A315C3C593311F0ACB20E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sd5Xjax5LZXiF9mHHgT2aXO7frA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft
Manifest number: 08B7
Signing time: Wed 25 Mar 2026 10:01:54 +0000
Manifest this update: Wed 25 Mar 2026 10:01:54 +0000
Manifest next update: Thu 26 Mar 2026 10:01:54 +0000
Files and hashes: 1: Sd5Xjax5LZXiF9mHHgT2aXO7frA.crl (hash: QZd+H0pqHdcHantvMorN1TosnaXP5tCchKTOcmdUAw4=)
2: rGGWcglvMeSsvlJBXs2-o4-N8sw.roa (hash: xVXE+Qdew3w2sfea2qvXrMLGeuW+7MTsszSevinIA7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sd5Xjax5LZXiF9mHHgT2aXO7frA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 10:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:71:8e:aa:df:1a:31:5c:3c:59:33:11:f0:ac:b2:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49de578dac792d95e217d9871e04f66973bb7eb0
Validity
Not Before: Mar 25 10:01:54 2026 GMT
Not After : Mar 26 10:01:54 2026 GMT
Subject: CN=2617d872c12ecc62ab2539bbeb88e834a6f91239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e8:23:8c:71:7f:79:92:2c:4f:84:c6:22:8a:
e1:31:97:b7:ab:18:6b:c8:6a:e4:e7:1d:d4:21:fb:
87:d4:e6:ed:6d:07:b8:de:9a:9c:f0:fc:dc:b8:d5:
f3:42:e6:db:19:81:4d:f5:a2:4d:48:22:7c:cf:c6:
b9:78:d8:32:c1:2c:c0:06:79:05:4b:4a:c7:f7:be:
46:6c:33:7b:1c:12:dc:ed:8e:13:be:f6:87:30:42:
76:c8:6a:16:ad:b7:1a:7d:a3:2e:12:56:1a:40:52:
25:a8:f5:61:00:27:60:6a:a2:8c:e7:bb:6a:c0:13:
7b:79:7a:f5:1b:bd:78:23:9e:6d:ed:3b:f6:b3:8d:
59:1a:51:c5:c6:78:23:7e:df:43:cb:12:5d:7d:21:
dd:82:86:c3:3e:d3:44:20:9f:3f:88:17:7d:ca:70:
12:d3:1b:ca:49:b0:ca:e0:df:7f:98:41:0f:08:c5:
74:84:22:2b:12:ad:2a:f1:6b:cf:2a:0a:5a:1b:8b:
6d:0d:be:a7:19:f9:c8:59:da:b4:7f:41:ed:2c:4f:
b2:bb:fc:39:69:2b:ca:4b:e8:3c:38:31:7c:9d:96:
21:10:56:e4:61:96:8b:ac:e4:ad:44:e1:07:ac:04:
7c:be:4b:fb:c9:6a:3c:b3:c4:86:b8:54:a4:0d:7c:
cc:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:17:D8:72:C1:2E:CC:62:AB:25:39:BB:EB:88:E8:34:A6:F9:12:39
X509v3 Authority Key Identifier:
keyid:49:DE:57:8D:AC:79:2D:95:E2:17:D9:87:1E:04:F6:69:73:BB:7E:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sd5Xjax5LZXiF9mHHgT2aXO7frA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:2c:d1:48:6b:66:78:a8:3a:6e:a1:60:8a:3b:10:b8:85:d5:
6c:46:d1:c8:87:08:fd:7e:05:45:f2:d0:c1:ee:39:90:e5:5b:
bd:08:84:3f:20:f9:5f:9c:28:fa:77:df:78:7b:c8:78:2a:52:
81:97:69:df:42:65:cb:8a:08:7e:b5:75:43:2f:bd:9a:43:bd:
a2:ce:ec:ad:3d:1a:0d:85:25:bc:9e:85:3e:b5:b9:7c:bb:91:
71:77:67:fa:46:ae:68:a1:a3:b6:4e:52:42:0a:f2:74:94:49:
fa:c6:54:82:76:fd:1c:7e:5e:c0:2c:84:41:da:e2:5a:95:25:
77:82:5d:d1:ce:ee:11:c5:06:0b:99:00:5c:ab:7f:47:ee:d4:
24:00:ed:cd:7c:c0:9a:33:ec:82:9c:8a:ea:de:e4:bd:6f:37:
9d:58:9b:76:43:4b:bb:ba:e4:b4:2d:b7:85:5f:f6:0b:c6:04:
6f:54:a8:ac:e6:6a:78:4f:a2:17:da:7b:9d:ac:15:7a:88:bf:
5b:0e:c5:08:d6:c4:dc:89:9e:f5:c4:6e:ed:7c:aa:c7:1c:91:
bf:f5:c3:af:aa:01:f6:2e:95:d1:05:c0:30:c3:91:04:83:b6:
48:bd:a2:0a:84:f1:6b:22:61:b5:00:69:f7:a1:bc:57:90:96:
1c:2e:29:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 20:38:08 2026 by rpki-client