Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
File: SA488NEiV0x-ezvwNNDT0BPuvBU.mft (raw, json)
Hash identifier: PSrqM3G2+e+UjgeoAQestp5Mncd7KHayZ+jL/PlbKZM=
Subject key identifier: 2C:23:F9:0F:B8:63:6D:2A:48:31:1C:80:E4:E4:F0:32:63:BF:FA:6D
Authority key identifier: 48:0E:3C:F0:D1:22:57:4C:7E:7B:3B:F0:34:D0:D3:D0:13:EE:BC:15
Certificate issuer: /CN=480e3cf0d122574c7e7b3bf034d0d3d013eebc15
Certificate serial: 019D382E048C21B08CFBEC1F6C5812BF59E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SA488NEiV0x-ezvwNNDT0BPuvBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
Manifest number: 0D97
Signing time: Sun 29 Mar 2026 06:00:33 +0000
Manifest this update: Sun 29 Mar 2026 06:00:33 +0000
Manifest next update: Mon 30 Mar 2026 06:00:33 +0000
Files and hashes: 1: 1-Jvy4cSjaj8AFJqw5ncsPjDeR28.roa (hash: +Ni2CLOoRpCVmzTI9f4DnaA4YvB7dZwIDsF6rECn1wA=)
2: LbwUBW6UnU18v-U18rNDE3l0xQQ.roa (hash: SkrwHdQX53t1+eW9cdOIIYqsrHJtmmj6qudznw4zEbg=)
3: SA488NEiV0x-ezvwNNDT0BPuvBU.crl (hash: zvU9/8EPSLzwDM5yIebJN+5xJ8trU1nvdPnX6fyuDmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SA488NEiV0x-ezvwNNDT0BPuvBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:04:8c:21:b0:8c:fb:ec:1f:6c:58:12:bf:59:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480e3cf0d122574c7e7b3bf034d0d3d013eebc15
Validity
Not Before: Mar 29 06:00:33 2026 GMT
Not After : Mar 30 06:00:33 2026 GMT
Subject: CN=2c23f90fb8636d2a48311c80e4e4f03263bffa6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d0:a9:61:81:4a:57:77:fa:62:d4:b2:93:5f:
2e:c6:5c:93:40:35:17:5c:67:be:6e:fc:ed:ee:58:
28:22:ea:8f:79:c8:91:49:c5:49:19:00:6a:63:6b:
76:54:9e:19:18:2a:b0:33:da:80:6b:4b:6a:3d:df:
f4:3d:79:23:ce:3e:56:96:a3:f2:a8:07:96:7d:53:
a3:57:d2:1e:f7:e9:9f:ad:c1:bb:29:4b:b1:7f:34:
23:3d:6c:41:76:a0:53:e1:91:43:c9:48:62:e5:c4:
3a:53:83:47:4a:e4:38:06:94:3f:32:a3:e5:c8:b1:
9f:07:f7:34:8f:f7:08:5c:5f:b3:3e:be:3b:1d:b6:
8e:51:dc:14:e3:03:6c:5f:36:7f:bc:80:f2:76:ec:
d8:36:30:45:4e:7f:fc:cf:aa:fd:a3:3e:58:ba:36:
e1:d4:53:d1:7f:59:bd:ad:bd:16:4f:bb:cb:1f:33:
56:b3:a6:dc:8e:a6:21:ff:b1:4b:c7:f0:70:51:02:
c9:3f:58:eb:7c:55:75:85:9f:39:53:60:09:61:64:
3b:8b:57:5f:24:f0:c4:0d:14:76:11:3b:b4:52:f6:
45:d5:d2:fa:45:d5:5d:bf:60:61:1e:bc:7a:31:d3:
00:2e:86:95:f7:4f:91:ec:f1:30:76:a0:f7:0e:a2:
ad:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:23:F9:0F:B8:63:6D:2A:48:31:1C:80:E4:E4:F0:32:63:BF:FA:6D
X509v3 Authority Key Identifier:
keyid:48:0E:3C:F0:D1:22:57:4C:7E:7B:3B:F0:34:D0:D3:D0:13:EE:BC:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SA488NEiV0x-ezvwNNDT0BPuvBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:da:89:79:72:c6:63:10:6b:64:3d:31:7e:bf:0f:42:f8:9f:
3b:44:55:66:d0:bc:7f:00:e2:fa:11:cc:87:ea:24:f5:62:de:
26:64:bb:05:ce:c1:c6:a8:04:36:8f:22:75:c4:b3:4f:20:84:
64:c4:ed:3f:88:e5:d4:f4:c9:6b:46:f2:02:56:b1:34:98:20:
55:06:e7:dd:82:81:b5:5a:a8:62:34:bc:7e:cd:27:5c:96:df:
17:92:5d:25:9f:71:f6:20:e4:91:28:08:26:89:bd:fe:ec:1a:
69:db:c2:63:c2:d7:2d:77:49:7c:3a:85:bc:57:77:50:1b:be:
20:fb:17:e9:a0:6d:bb:d7:15:0c:d5:66:9b:f3:31:63:83:57:
62:fb:24:6a:26:0b:2f:55:8e:20:79:d9:9d:d7:fd:f1:9c:85:
9d:1e:8c:7f:70:23:7d:d2:fa:83:87:51:75:20:2e:4c:37:c0:
f7:bd:a5:df:42:78:22:b8:f2:40:72:c2:93:5f:f2:d5:d1:02:
fd:ec:65:bd:4c:89:62:07:38:44:77:1c:77:ae:83:0f:ad:d2:
fa:07:9a:23:67:b4:c7:86:2c:18:28:2e:1f:68:aa:f5:8e:c1:
0c:29:c1:0a:b2:e0:3f:9d:b9:a4:8f:37:ae:e2:4a:0c:b6:0a:
7c:ee:d2:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:39 2026 by rpki-client