Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft
File: Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft (raw, json)
Hash identifier: ooxUaxB9AM8dNoOk/jj53voeIjuCMdUFpPHqz5X/Qrw=
Subject key identifier: 34:CF:30:9E:36:65:A3:2E:CC:EB:17:A5:72:83:FB:C0:F5:20:1A:98
Authority key identifier: 49:DE:57:8D:AC:79:2D:95:E2:17:D9:87:1E:04:F6:69:73:BB:7E:B0
Certificate issuer: /CN=49de578dac792d95e217d9871e04f66973bb7eb0
Certificate serial: 01A10701CD7FA1272986ADB20CA04FF4AF65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sd5Xjax5LZXiF9mHHgT2aXO7frA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft
Manifest number: 0ABA
Signing time: Sun 04 Oct 2026 13:02:00 +0000
Manifest this update: Sun 04 Oct 2026 13:02:00 +0000
Manifest next update: Mon 05 Oct 2026 13:02:00 +0000
Files and hashes: 1: Sd5Xjax5LZXiF9mHHgT2aXO7frA.crl (hash: Czele/3ptLUOt0ZOtynS3kjyF35rK+irI/5y546gt58=)
2: rGGWcglvMeSsvlJBXs2-o4-N8sw.roa (hash: xVXE+Qdew3w2sfea2qvXrMLGeuW+7MTsszSevinIA7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sd5Xjax5LZXiF9mHHgT2aXO7frA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:01:cd:7f:a1:27:29:86:ad:b2:0c:a0:4f:f4:af:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49de578dac792d95e217d9871e04f66973bb7eb0
Validity
Not Before: Oct 4 13:02:00 2026 GMT
Not After : Oct 5 13:02:00 2026 GMT
Subject: CN=34cf309e3665a32ecceb17a57283fbc0f5201a98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:83:49:83:67:6d:18:b9:95:3e:26:72:ec:33:
53:4f:2e:b7:59:31:bf:23:9d:6f:b0:20:69:24:31:
3e:03:b4:9e:8b:19:6c:a1:cd:5f:9c:91:21:22:cc:
27:7d:2b:db:fa:bc:7c:22:c6:76:f0:58:2f:33:d9:
1c:c0:e4:ee:1b:62:85:f0:49:3c:a7:30:ed:bf:0c:
c5:74:a3:13:5f:3b:78:54:fe:d9:c8:29:6a:57:84:
41:92:ac:c8:0e:47:a7:e2:b4:18:a3:06:18:ab:ea:
9d:2e:b5:1e:6b:41:32:ed:4d:bb:25:15:e1:b8:e4:
a3:1e:00:38:f0:b1:cc:1e:11:c9:cd:47:92:ef:36:
cb:95:1c:8b:21:43:fb:15:99:d2:1e:a3:2f:6a:82:
39:43:e7:c8:04:7a:44:d4:38:b2:a8:3a:0d:9c:66:
a7:8d:f3:9d:d5:c6:13:98:bf:66:16:eb:2f:eb:cd:
a0:d3:7e:3b:af:a9:b7:e9:16:9d:40:29:ba:69:00:
9c:7e:ee:e4:73:6f:31:a5:6a:b4:80:f0:a8:b9:d2:
46:58:b6:be:04:14:37:33:11:59:39:fc:76:f8:44:
3c:9a:89:57:66:39:66:05:73:43:bd:9a:3e:fd:b0:
52:70:92:54:4f:0b:1e:f8:2b:27:76:77:f3:7a:ca:
b6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:CF:30:9E:36:65:A3:2E:CC:EB:17:A5:72:83:FB:C0:F5:20:1A:98
X509v3 Authority Key Identifier:
keyid:49:DE:57:8D:AC:79:2D:95:E2:17:D9:87:1E:04:F6:69:73:BB:7E:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sd5Xjax5LZXiF9mHHgT2aXO7frA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:76:50:a3:46:e5:bf:c3:6f:43:e3:ea:bb:34:52:34:1a:01:
bf:87:55:f3:ae:f0:d2:29:63:92:6e:e5:79:dc:ce:8e:3d:7e:
5a:38:1b:59:c6:98:55:fc:9c:d0:d6:98:ff:fa:f2:db:f1:c7:
8d:f8:d5:e3:07:e2:aa:0b:5e:29:9f:11:d9:7d:82:37:38:95:
6a:8e:4a:04:d5:e5:79:ef:9c:47:5d:52:ac:87:81:a7:4b:71:
44:f8:c7:75:b8:60:d8:e9:62:56:25:23:00:6d:b8:59:b7:ba:
50:a6:35:87:b5:ee:d0:1b:6d:45:df:38:9c:bf:38:c3:df:72:
63:2f:c2:b1:c5:d5:f5:29:54:05:8f:36:8e:8d:04:fa:8e:c6:
b3:06:bb:99:4a:16:88:d0:d7:80:45:47:27:c7:7c:4c:2b:8b:
4f:1b:18:9a:83:23:0a:cb:76:b3:7b:7d:bf:ab:27:32:40:fa:
db:19:63:da:6c:49:e9:7a:6c:9e:86:79:bb:af:d9:93:80:ba:
9d:e3:c8:11:6a:f7:96:dc:6e:72:3a:ca:f5:eb:16:4b:15:1c:
46:33:c1:bb:a6:9a:d4:6c:f2:c6:4f:a3:00:69:82:6d:59:55:
72:50:dd:67:fc:87:65:3e:e0:1b:b2:3a:68:2f:0e:15:f7:60:
fc:fa:54:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:27:14 2026 by rpki-client