Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/SBaZwQuP-LkauQlAMU7pOyev3NY.mft
File: SBaZwQuP-LkauQlAMU7pOyev3NY.mft (raw, json)
Hash identifier: A3BcVLdd4OJUPekEk48Ms2B518qmHS/eoA8XloReWQ8=
Subject key identifier: F9:37:78:4D:66:AE:FB:7F:5C:3C:FA:62:A2:D4:60:98:ED:53:E9:D2
Authority key identifier: 48:16:99:C1:0B:8F:F8:B9:1A:B9:09:40:31:4E:E9:3B:27:AF:DC:D6
Certificate issuer: /CN=481699c10b8ff8b91ab90940314ee93b27afdcd6
Certificate serial: 019D37C0F8E1124C24EB5B84511A424615C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBaZwQuP-LkauQlAMU7pOyev3NY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/SBaZwQuP-LkauQlAMU7pOyev3NY.mft
Manifest number: 0ED3
Signing time: Sun 29 Mar 2026 04:01:26 +0000
Manifest this update: Sun 29 Mar 2026 04:01:26 +0000
Manifest next update: Mon 30 Mar 2026 04:01:26 +0000
Files and hashes: 1: N9xSU22seEj4Gls_lmMkrISNt44.roa (hash: 1sZ9jU2yxOzi9JbZQ0lqxHMOKu1AeSCdlUhQs7k0urM=)
2: SBaZwQuP-LkauQlAMU7pOyev3NY.crl (hash: 2Y7KYBRxtzGdKr4cRxTJplT1n6v+v6J65T8ivmqcnNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/SBaZwQuP-LkauQlAMU7pOyev3NY.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/SBaZwQuP-LkauQlAMU7pOyev3NY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SBaZwQuP-LkauQlAMU7pOyev3NY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:f8:e1:12:4c:24:eb:5b:84:51:1a:42:46:15:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=481699c10b8ff8b91ab90940314ee93b27afdcd6
Validity
Not Before: Mar 29 04:01:26 2026 GMT
Not After : Mar 30 04:01:26 2026 GMT
Subject: CN=f937784d66aefb7f5c3cfa62a2d46098ed53e9d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:49:ba:cb:b5:b4:57:bb:e9:cd:92:69:d6:61:
cf:a7:af:d1:65:e8:16:0f:81:c7:6d:19:b6:0a:6f:
6a:d9:0e:05:5e:43:77:6e:bb:52:58:51:4c:97:a3:
5a:92:4e:66:ad:a2:d0:4b:aa:09:8e:27:a5:a8:b0:
e6:aa:e5:93:bf:f9:9b:78:2c:06:24:e3:6b:b4:2c:
62:73:82:a7:73:2f:a3:08:63:36:ba:c5:60:71:c9:
ba:74:5d:82:2b:46:f5:3b:1a:84:32:5c:86:4f:a2:
99:77:3a:3c:99:60:1c:c0:57:b9:12:c5:2e:c6:2c:
6a:cd:d8:d7:f6:8f:9f:d9:a8:bc:dc:7e:ae:22:7a:
be:ba:23:9b:87:32:73:6f:0d:9e:0b:f3:47:e7:59:
49:56:42:b5:ca:78:9f:85:ad:86:b8:49:d6:9e:56:
8f:08:6c:f7:3e:32:e3:21:eb:5a:94:f3:99:a3:9c:
80:1c:65:bc:5a:1d:6c:b6:09:c6:68:f6:1f:69:8e:
b5:99:9c:f6:00:9f:4c:1b:05:f2:60:ea:49:0a:ac:
56:ad:87:cc:3f:e8:1f:25:8a:93:50:d5:17:f4:5c:
71:a8:0a:c5:05:a9:84:a9:9c:30:42:da:b5:f3:13:
ac:2b:b0:13:a4:d2:af:e6:88:e4:0f:89:db:58:31:
c8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:37:78:4D:66:AE:FB:7F:5C:3C:FA:62:A2:D4:60:98:ED:53:E9:D2
X509v3 Authority Key Identifier:
keyid:48:16:99:C1:0B:8F:F8:B9:1A:B9:09:40:31:4E:E9:3B:27:AF:DC:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBaZwQuP-LkauQlAMU7pOyev3NY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/SBaZwQuP-LkauQlAMU7pOyev3NY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/SBaZwQuP-LkauQlAMU7pOyev3NY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:1e:43:2e:12:b4:af:c6:f3:b9:40:b6:a5:76:1d:32:47:da:
4f:3a:9a:dd:fb:28:49:c0:fc:ca:83:f6:33:b2:e9:31:9d:cb:
6c:46:7b:64:0c:0b:30:0d:51:d4:e7:3f:90:94:59:44:46:ef:
89:d3:da:72:65:7b:ca:7e:f4:8b:a9:cf:d3:8e:eb:c9:e5:92:
37:52:3c:c6:4c:cc:23:e2:96:87:a8:3a:df:e2:de:9c:b3:b6:
20:01:77:c7:71:1b:e3:d5:2e:5d:91:61:82:4d:86:9e:bc:2e:
29:f4:ab:75:67:85:7e:40:c8:70:c2:6f:71:bf:df:d0:cb:26:
a3:fd:f5:d8:d4:d0:ee:37:90:8a:18:85:bc:9e:a4:79:9d:4e:
e9:0f:4b:15:cf:65:f2:29:06:39:16:01:8a:f1:2c:e9:c0:c1:
a8:eb:08:08:03:69:c5:99:cf:58:5c:c1:37:e9:f6:7d:bb:97:
60:f5:72:35:5d:a4:13:2e:56:e8:21:13:2f:35:02:c6:aa:0a:
ad:ee:e7:81:02:84:81:f2:c9:60:c0:f4:c7:6a:04:be:e6:90:
b8:92:90:2a:8f:7a:d2:74:24:5d:e4:32:04:ab:c1:45:48:5d:
e5:69:8a:b6:9a:7b:d3:de:94:19:73:fd:1f:ea:b5:19:7c:12:
d0:9f:2e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:35 2026 by rpki-client