Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
File: SA488NEiV0x-ezvwNNDT0BPuvBU.mft (raw, json)
Hash identifier: XKzEVmqkw+XuCJVqvVxfZY31QfTfHfmSmSgJRwV31eI=
Subject key identifier: A6:83:BB:49:B2:6D:EF:C9:85:91:CB:83:C0:AF:35:AD:29:0E:6D:33
Authority key identifier: 48:0E:3C:F0:D1:22:57:4C:7E:7B:3B:F0:34:D0:D3:D0:13:EE:BC:15
Certificate issuer: /CN=480e3cf0d122574c7e7b3bf034d0d3d013eebc15
Certificate serial: 01A04C1B846D0D260FDBECDC16753A2756ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SA488NEiV0x-ezvwNNDT0BPuvBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
Manifest number: 0F2F
Signing time: Sat 29 Aug 2026 06:01:06 +0000
Manifest this update: Sat 29 Aug 2026 06:01:06 +0000
Manifest next update: Sun 30 Aug 2026 06:01:06 +0000
Files and hashes: 1: 1-Jvy4cSjaj8AFJqw5ncsPjDeR28.roa (hash: +Ni2CLOoRpCVmzTI9f4DnaA4YvB7dZwIDsF6rECn1wA=)
2: LbwUBW6UnU18v-U18rNDE3l0xQQ.roa (hash: SkrwHdQX53t1+eW9cdOIIYqsrHJtmmj6qudznw4zEbg=)
3: SA488NEiV0x-ezvwNNDT0BPuvBU.crl (hash: clCPfeb+OE2rQD/AKa+KeEqFipl1YwQNuxga/KzKsSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SA488NEiV0x-ezvwNNDT0BPuvBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 30 Aug 2026 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4c:1b:84:6d:0d:26:0f:db:ec:dc:16:75:3a:27:56:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480e3cf0d122574c7e7b3bf034d0d3d013eebc15
Validity
Not Before: Aug 29 06:01:06 2026 GMT
Not After : Aug 30 06:01:06 2026 GMT
Subject: CN=a683bb49b26defc98591cb83c0af35ad290e6d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:cb:df:ea:0a:05:98:1b:af:e5:2a:3d:b1:b3:
b1:f6:cc:84:4c:81:ae:ed:39:bd:06:0d:de:9c:19:
bc:c3:d4:29:0b:85:e6:a3:8c:f9:77:1c:f2:4f:29:
47:2a:c3:64:3e:c4:4e:3b:7d:8c:3a:ec:e0:ea:9b:
bb:83:5d:4c:cd:16:c2:32:d3:f6:a1:34:7d:72:58:
c2:01:34:a2:1a:5a:29:5d:e1:52:2d:32:d0:4b:5c:
f6:fc:43:67:ac:68:60:24:68:39:34:c4:77:c3:1c:
d5:52:66:f6:b5:48:af:14:99:c0:da:0d:97:69:b7:
99:f2:32:63:d6:83:c0:e4:08:27:86:3c:07:23:9d:
a1:f0:58:72:d5:70:db:9c:b0:14:f5:60:fd:70:7d:
c3:c1:f7:c2:5f:80:e8:9a:ba:3d:f3:5a:98:3d:de:
07:62:27:75:72:fb:a9:36:f5:49:0d:30:fe:21:37:
c8:b5:e6:b9:bf:25:b4:cf:46:dd:e5:e3:d5:4c:f3:
05:03:3e:54:13:4a:b9:b9:ff:df:98:f9:1b:f9:2e:
7e:e5:ee:88:a1:4a:31:5c:8f:ba:9b:ba:14:10:9c:
25:04:1b:a2:46:06:33:a2:ad:90:90:cf:81:15:42:
fc:22:36:89:3f:73:6d:36:dc:bd:8e:2a:e1:8d:f9:
02:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:83:BB:49:B2:6D:EF:C9:85:91:CB:83:C0:AF:35:AD:29:0E:6D:33
X509v3 Authority Key Identifier:
keyid:48:0E:3C:F0:D1:22:57:4C:7E:7B:3B:F0:34:D0:D3:D0:13:EE:BC:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SA488NEiV0x-ezvwNNDT0BPuvBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:cc:72:69:17:42:23:9b:eb:9e:3c:d5:73:d4:3e:77:e3:13:
f3:d1:35:1c:35:f5:bc:fd:00:cf:81:5d:78:df:69:e9:96:fa:
ad:fa:c2:93:94:2f:ed:a6:aa:67:32:15:f0:11:9e:b2:1e:6a:
3b:ec:b3:2c:c8:a0:eb:e3:15:bd:d9:96:b7:59:23:ff:54:1c:
a9:28:bc:1a:ea:de:85:9c:12:f1:3e:a1:46:1a:e7:77:e9:0d:
64:cf:36:b6:d2:d9:0a:a0:df:5b:22:19:d0:f9:40:d2:25:35:
19:9d:fe:c4:1b:5e:84:c8:2d:2d:c6:12:fa:37:05:d4:f5:d7:
51:33:53:c0:08:5b:69:8d:cc:b2:54:07:a2:94:24:a6:d5:3c:
7e:0c:85:5b:ed:83:b1:e9:11:63:cb:ab:29:14:df:64:dc:da:
07:a5:75:ff:89:df:6f:ed:b3:b1:b1:a3:2e:e5:b0:a7:87:e5:
51:3e:89:f6:48:8c:48:45:41:2f:f1:f7:c8:58:03:d8:d0:5a:
1b:52:97:60:a5:93:cd:86:71:f6:65:fc:10:3c:25:30:40:c9:
a0:f1:ce:f3:42:c5:d5:b8:4f:44:a9:23:89:e7:ce:2f:ff:d9:
32:b1:42:fa:10:de:41:9b:6c:ae:f1:a4:2f:a1:e1:25:87:aa:
8a:6a:b7:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 14:09:06 2026 by rpki-client