Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/556ad5-2e6b-4d51-856c-61c9c29c275d/1/SGbUAn3jwn6JfXKtsshth6t-WsI.mft
File: SGbUAn3jwn6JfXKtsshth6t-WsI.mft (raw, json)
Hash identifier: HvHK4AwpOmQ+N8ogPzxruTFSX2jzqsq9zPK3c/VlFVY=
Subject key identifier: 07:BF:2F:59:FA:31:C8:35:A1:76:D8:CA:97:6C:1C:2C:37:3A:B1:F1
Authority key identifier: 48:66:D4:02:7D:E3:C2:7E:89:7D:72:AD:B2:C8:6D:87:AB:7E:5A:C2
Certificate issuer: /CN=4866d4027de3c27e897d72adb2c86d87ab7e5ac2
Certificate serial: 019D3940F85F197E92B9FCD1CE52228358FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGbUAn3jwn6JfXKtsshth6t-WsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/556ad5-2e6b-4d51-856c-61c9c29c275d/1/SGbUAn3jwn6JfXKtsshth6t-WsI.mft
Manifest number: 1899
Signing time: Sun 29 Mar 2026 11:00:52 +0000
Manifest this update: Sun 29 Mar 2026 11:00:52 +0000
Manifest next update: Mon 30 Mar 2026 11:00:52 +0000
Files and hashes: 1: Fexpb8Mm1qldEMdDfjeahWE_FzM.roa (hash: beEp1xMiPmbPcQtZzifL9idgvv0u2YByV9XjHML5QxA=)
2: SGbUAn3jwn6JfXKtsshth6t-WsI.crl (hash: mROzFQaUoTfESoWbKk7CmXSgje019UYdMqujBgPX3Ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/556ad5-2e6b-4d51-856c-61c9c29c275d/1/SGbUAn3jwn6JfXKtsshth6t-WsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/556ad5-2e6b-4d51-856c-61c9c29c275d/1/SGbUAn3jwn6JfXKtsshth6t-WsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SGbUAn3jwn6JfXKtsshth6t-WsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:f8:5f:19:7e:92:b9:fc:d1:ce:52:22:83:58:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4866d4027de3c27e897d72adb2c86d87ab7e5ac2
Validity
Not Before: Mar 29 11:00:52 2026 GMT
Not After : Mar 30 11:00:52 2026 GMT
Subject: CN=07bf2f59fa31c835a176d8ca976c1c2c373ab1f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:9b:c1:0d:56:9d:c2:52:51:fd:dd:3d:8c:5f:
b9:d2:a9:61:87:50:dc:3c:07:ad:b9:6e:11:61:cc:
42:d6:7c:b4:0f:97:7f:d0:cd:f7:52:a5:a7:9f:c3:
a8:1f:75:ab:7f:1f:37:36:99:b5:2c:c9:40:31:3f:
27:2f:bb:a8:e5:e6:43:bb:88:96:f1:b7:69:8e:7a:
7b:13:79:e3:29:12:d9:0d:f4:db:75:b4:21:ff:2a:
f5:1e:ae:c5:36:1d:b5:4c:b0:a6:90:ae:1f:5f:28:
83:9d:05:b7:74:31:b7:de:7b:74:b7:d8:d3:ad:99:
52:07:21:ee:da:81:f5:5c:4b:46:88:ce:72:c7:39:
40:ea:81:13:2c:01:af:45:bb:a7:ce:90:5c:ac:fe:
5f:04:59:73:a5:cc:ef:f6:57:8b:dc:50:68:fc:63:
05:ce:9b:ef:d3:9d:7a:b6:c0:c9:3f:bb:9d:6d:44:
54:af:db:e6:32:eb:96:57:b7:f6:58:fd:84:68:a0:
62:53:d5:a5:12:69:b8:60:aa:87:fb:d3:a0:1a:b6:
c7:0d:43:40:bf:e6:72:c4:63:ea:82:59:48:97:a4:
e3:71:12:8f:b0:02:6f:39:82:18:d5:49:4a:f6:e2:
54:c7:68:2e:0c:72:bd:e1:65:a7:97:68:6c:bc:ae:
0f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:BF:2F:59:FA:31:C8:35:A1:76:D8:CA:97:6C:1C:2C:37:3A:B1:F1
X509v3 Authority Key Identifier:
keyid:48:66:D4:02:7D:E3:C2:7E:89:7D:72:AD:B2:C8:6D:87:AB:7E:5A:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGbUAn3jwn6JfXKtsshth6t-WsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/556ad5-2e6b-4d51-856c-61c9c29c275d/1/SGbUAn3jwn6JfXKtsshth6t-WsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/556ad5-2e6b-4d51-856c-61c9c29c275d/1/SGbUAn3jwn6JfXKtsshth6t-WsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:3e:ae:db:18:d0:76:04:5a:15:23:4c:05:f0:12:d3:60:a3:
77:c1:f6:61:a0:0e:50:d2:18:17:0f:40:05:12:a2:de:7c:a2:
4c:08:e3:b3:a5:10:4c:87:87:28:4b:ac:0c:94:67:53:a4:54:
69:96:66:0e:76:4e:6b:fc:9a:6c:2a:d7:6f:d2:54:81:a4:a4:
aa:98:ef:fd:69:90:f7:1e:52:68:41:ba:83:e5:b3:89:9a:45:
ee:16:19:66:cd:d7:56:7c:45:9c:9a:59:ba:df:a1:6f:3d:70:
e2:cc:f3:1d:d6:2b:63:03:15:7a:d3:8d:27:3f:8a:19:e3:26:
ff:3e:fb:6e:63:09:c2:9f:f6:40:e9:bd:dc:c6:c1:78:eb:58:
4f:7d:43:48:13:7d:bf:ae:64:a3:db:37:74:36:9a:a7:64:bc:
ce:98:1f:a3:b0:b4:ed:8d:52:e1:1d:0c:71:12:93:e9:24:ca:
c9:80:cf:b4:23:2c:2e:ab:fc:81:40:26:db:0b:e8:9f:67:46:
32:03:32:39:9d:8e:90:62:94:98:fa:d0:9e:b1:ab:af:b1:27:
a2:19:77:a0:9d:03:6e:9a:cc:15:82:a4:f1:73:03:ab:3e:bc:
b6:1d:07:7d:65:36:44:6c:05:8a:11:36:89:3e:ac:67:0a:cd:
86:46:50:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:26:20 2026 by rpki-client