Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/2a72ee-ec1f-40c6-ad9d-5a4df896fc3e/1/SAtOZTD1jbM45B1DTlwkjri0nrU.mft
File: SAtOZTD1jbM45B1DTlwkjri0nrU.mft (raw, json)
Hash identifier: Ft0BiDT8SDPtrXZdY1cUuqnqF0ULLvc3NIj4wGy5rFc=
Subject key identifier: 01:48:71:31:F5:A0:4F:F4:80:D4:9E:EB:F4:09:C3:5A:7E:C8:E9:6D
Authority key identifier: 48:0B:4E:65:30:F5:8D:B3:38:E4:1D:43:4E:5C:24:8E:B8:B4:9E:B5
Certificate issuer: /CN=480b4e6530f58db338e41d434e5c248eb8b49eb5
Certificate serial: 019D37F707992F86BCCB417BB3E1040D7441
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAtOZTD1jbM45B1DTlwkjri0nrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/2a72ee-ec1f-40c6-ad9d-5a4df896fc3e/1/SAtOZTD1jbM45B1DTlwkjri0nrU.mft
Manifest number: 0FEE
Signing time: Sun 29 Mar 2026 05:00:29 +0000
Manifest this update: Sun 29 Mar 2026 05:00:29 +0000
Manifest next update: Mon 30 Mar 2026 05:00:29 +0000
Files and hashes: 1: 4U4MbiSV6kmpKfL8B6L6VKqblTY.roa (hash: X9YwPhP7oKQF4wZpCPI7kZ8nWJ6qTuSADd5JFvye0ys=)
2: EyNcY5Z8gMCGSsUlurZ-vzlzRMk.roa (hash: WB7iGBNBwcsdOHeiUNEfNJNFo1bIzRxEZw4wIprpZOA=)
3: HlyQkRvIajic21yQ3EdpgC5Yqgg.roa (hash: DEi+PcIqXLpiPBIpLE3KgS4ClyQCr0Vig+hsaKKtuiM=)
4: SAtOZTD1jbM45B1DTlwkjri0nrU.crl (hash: WZ+EdYzdoBGMbuwHuSvBSpbKlCb8X27Mgn7+Nv3oJxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/2a72ee-ec1f-40c6-ad9d-5a4df896fc3e/1/SAtOZTD1jbM45B1DTlwkjri0nrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/2a72ee-ec1f-40c6-ad9d-5a4df896fc3e/1/SAtOZTD1jbM45B1DTlwkjri0nrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAtOZTD1jbM45B1DTlwkjri0nrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:07:99:2f:86:bc:cb:41:7b:b3:e1:04:0d:74:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480b4e6530f58db338e41d434e5c248eb8b49eb5
Validity
Not Before: Mar 29 05:00:29 2026 GMT
Not After : Mar 30 05:00:29 2026 GMT
Subject: CN=01487131f5a04ff480d49eebf409c35a7ec8e96d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1b:58:7b:a1:0d:37:42:9c:07:2e:fa:f0:2e:
fc:c9:65:75:eb:be:e3:4c:de:65:d0:82:c4:f4:2c:
8a:57:8d:55:70:01:3f:00:59:45:11:03:86:89:c2:
2b:26:e7:db:de:44:df:a6:9a:a0:f4:bb:11:21:47:
20:13:8c:94:8e:fc:27:59:2d:bb:50:0e:34:3a:63:
b9:8f:78:44:43:f6:bd:ca:c6:16:62:e4:3b:da:8a:
e0:a1:ca:ee:cc:71:37:2e:47:16:f1:b1:cd:72:91:
a4:b1:93:19:f7:66:40:c7:14:1d:5f:d2:81:52:50:
b9:af:57:89:4f:b9:91:8a:d3:8a:81:25:fd:09:ba:
7b:1a:bd:f0:3e:24:1a:f5:bb:01:e1:22:2c:95:80:
67:83:58:9a:21:59:45:32:2c:2a:61:af:fd:a2:51:
a3:24:e1:c2:72:c3:01:07:5d:45:a5:b4:fe:1a:98:
ef:7e:a1:d4:e2:26:50:fd:39:32:95:38:2d:af:2f:
9d:96:9d:63:4a:1a:26:b2:87:14:4a:73:8b:90:6f:
e7:47:83:df:09:e8:3d:18:dd:e5:e9:81:8d:78:87:
80:37:92:be:bf:c7:0e:43:b1:64:73:6e:e2:e6:e0:
7e:7c:6c:d1:6d:35:2a:56:38:6f:10:20:4f:bb:f7:
3e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:48:71:31:F5:A0:4F:F4:80:D4:9E:EB:F4:09:C3:5A:7E:C8:E9:6D
X509v3 Authority Key Identifier:
keyid:48:0B:4E:65:30:F5:8D:B3:38:E4:1D:43:4E:5C:24:8E:B8:B4:9E:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAtOZTD1jbM45B1DTlwkjri0nrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2a72ee-ec1f-40c6-ad9d-5a4df896fc3e/1/SAtOZTD1jbM45B1DTlwkjri0nrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2a72ee-ec1f-40c6-ad9d-5a4df896fc3e/1/SAtOZTD1jbM45B1DTlwkjri0nrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:95:a6:30:cc:c1:70:63:ad:04:76:81:6a:a8:36:f8:17:08:
4a:84:70:b4:00:9c:0d:e1:56:98:3a:d6:bc:9d:97:9e:1c:1e:
e0:d3:1e:1c:1d:3d:a0:db:07:27:a0:ba:e6:a6:b2:77:16:a0:
4f:48:b5:b4:45:d9:f8:6e:ab:8e:1f:ea:5c:42:31:05:1d:78:
ad:16:21:50:db:18:10:ff:1c:e6:31:2c:b5:cc:da:a8:e5:60:
61:32:50:07:2b:37:5f:90:22:19:e9:91:b9:b7:d0:6e:23:ac:
d1:10:08:db:04:c9:7e:4c:16:10:3d:59:8a:20:89:bf:ef:88:
ae:5f:af:a2:8d:db:b0:57:41:a8:41:77:de:17:e5:7f:f9:4c:
40:7d:76:2e:65:4d:0c:87:1f:e5:48:5b:92:8a:e0:31:36:71:
8f:59:6e:8e:d5:4c:ef:59:3b:16:09:18:d2:a1:1b:6c:3a:2c:
79:c4:b3:c3:09:2d:e6:fc:44:b5:fc:81:70:3a:29:c2:d9:29:
c8:c9:79:1b:fa:cb:1e:87:f7:a3:f4:d3:df:ba:c1:55:d9:34:
81:c4:59:a3:22:b6:d2:15:75:58:76:2c:45:e5:56:f2:32:17:
ac:a5:ca:43:59:0d:55:8b:ca:17:23:ab:15:b7:58:9a:a2:fc:
26:2d:f0:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:00 2026 by rpki-client