Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.mft
File: sA09NPYeSEaIv_-cxwN1WCN3WZg.mft (raw, json)
Hash identifier: vSnVr9lSjkogPjZeUaZsh0FPDG0Fe+CuVFNGbLfAOmk=
Subject key identifier: 55:D6:1C:79:D4:64:4A:13:09:0D:7F:CB:04:37:CD:EC:56:99:0D:54
Authority key identifier: B0:0D:3D:34:F6:1E:48:46:88:BF:FF:9C:C7:03:75:58:23:77:59:98
Certificate issuer: /CN=b00d3d34f61e484688bfff9cc703755823775998
Certificate serial: 019D37F736CAA3A0D0517E515481BEEC2594
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sA09NPYeSEaIv_-cxwN1WCN3WZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.mft
Manifest number: 1546
Signing time: Sun 29 Mar 2026 05:00:41 +0000
Manifest this update: Sun 29 Mar 2026 05:00:41 +0000
Manifest next update: Mon 30 Mar 2026 05:00:41 +0000
Files and hashes: 1: i-A0G1xNSw4VydVA7TAj4sDFMVk.roa (hash: kMsiOD5BYe1zMMRan05rFNja/Pm689GMM1lIhaKqC7o=)
2: sA09NPYeSEaIv_-cxwN1WCN3WZg.crl (hash: k2RHFb5KiYiixBWB3c/hzEEWH2QdAULQmR6P1TiXiok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/sA09NPYeSEaIv_-cxwN1WCN3WZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:36:ca:a3:a0:d0:51:7e:51:54:81:be:ec:25:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b00d3d34f61e484688bfff9cc703755823775998
Validity
Not Before: Mar 29 05:00:41 2026 GMT
Not After : Mar 30 05:00:41 2026 GMT
Subject: CN=55d61c79d4644a13090d7fcb0437cdec56990d54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:bb:ee:4b:52:9c:42:f2:cb:09:b3:ba:f0:a2:
66:c0:bb:54:2c:4b:64:4d:fb:83:35:9e:9e:1f:bf:
9e:ff:7a:ef:0f:b2:39:6f:b5:68:87:94:1c:d4:a6:
a1:eb:96:8e:84:5d:ea:af:5b:58:e1:22:95:ba:e5:
cc:43:ca:c3:5c:e2:b4:51:e4:24:92:68:5a:c7:8f:
af:d0:84:d1:51:44:58:45:ae:63:ee:71:1c:d5:3c:
e6:6f:5e:69:3b:b2:35:55:6a:01:f2:43:e3:fc:6f:
5d:21:9c:0e:0e:93:2c:24:f2:3b:8c:86:bc:09:0a:
0b:b8:a2:68:5c:67:35:42:e5:39:ae:1e:3f:17:e3:
5d:5e:bf:b4:f6:6b:4c:64:ea:15:34:b9:f0:45:6a:
5f:5f:2c:c3:84:48:c7:7e:c0:b5:99:1e:4a:4b:28:
62:db:13:83:02:cb:b9:68:7c:b0:99:9a:58:69:f8:
bc:5d:20:1d:27:a6:10:6f:dd:04:17:af:81:91:75:
69:7c:9e:04:02:03:e1:38:89:8f:1b:28:ce:d8:5e:
1c:88:8c:ad:1e:3b:e1:07:85:ee:fc:1e:32:82:e6:
a7:f0:c1:72:36:28:a4:17:bf:a8:c5:b5:42:b2:9b:
04:f5:ff:9d:c2:06:18:b6:1d:d1:c2:8f:0c:bd:4c:
7b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:D6:1C:79:D4:64:4A:13:09:0D:7F:CB:04:37:CD:EC:56:99:0D:54
X509v3 Authority Key Identifier:
keyid:B0:0D:3D:34:F6:1E:48:46:88:BF:FF:9C:C7:03:75:58:23:77:59:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sA09NPYeSEaIv_-cxwN1WCN3WZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:6d:cd:38:47:6f:e4:e8:2b:4f:d7:14:d3:d5:de:7f:20:db:
c6:98:ae:64:55:2a:a0:9a:1f:94:1f:bc:68:7d:d1:28:90:f3:
ba:ce:9c:69:3f:02:18:50:25:16:56:77:1c:58:50:2f:a6:80:
80:6d:20:d6:4e:02:5a:cc:ec:7b:74:36:b5:bd:29:00:0d:37:
9b:8e:8d:ec:82:8a:fd:fe:3e:f3:76:24:9a:ca:c8:14:49:dc:
f5:8a:fb:94:e9:52:d4:27:b8:ba:c7:91:ce:84:51:03:09:a4:
67:59:59:bf:49:96:62:77:4b:a4:75:61:b8:99:37:8c:67:c0:
17:a6:99:7f:d6:55:b8:e8:5d:9e:f1:13:43:aa:6a:f1:d7:6d:
ed:0d:40:02:36:49:c4:d6:ba:d4:57:f4:cd:99:cd:d4:50:68:
db:c5:ac:85:bf:0b:93:86:26:f8:4a:ee:73:94:87:c0:9c:18:
c7:b7:6f:36:c9:36:86:c4:46:a3:5c:ad:70:e6:59:f9:61:7a:
7b:33:8a:a3:7f:bd:48:a1:22:19:3b:b6:d3:50:1b:5d:ba:aa:
b9:d6:d0:1a:9c:ff:55:aa:66:37:7b:6b:7e:4c:fe:67:32:3f:
98:c1:c7:eb:5f:8a:8e:71:f1:58:0a:e0:f5:54:f0:bf:4d:c1:
18:f0:aa:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:46 2026 by rpki-client