Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.mft
File: SGfTe3Yct6BfxzPj20M2b6NiU2w.mft (raw, json)
Hash identifier: 1o8UhLEps9hQdwoRdfgIlJxJEETZaYf/9i6DwA28VwI=
Subject key identifier: 0C:DA:10:8C:E7:94:F3:F1:2C:E7:14:7B:C9:22:7E:E8:1E:F6:E1:91
Authority key identifier: 48:67:D3:7B:76:1C:B7:A0:5F:C7:33:E3:DB:43:36:6F:A3:62:53:6C
Certificate issuer: /CN=4867d37b761cb7a05fc733e3db43366fa362536c
Certificate serial: 019D3AC1411E34D212D4C791F602691C8EDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGfTe3Yct6BfxzPj20M2b6NiU2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.mft
Manifest number: 1166
Signing time: Sun 29 Mar 2026 18:00:36 +0000
Manifest this update: Sun 29 Mar 2026 18:00:36 +0000
Manifest next update: Mon 30 Mar 2026 18:00:36 +0000
Files and hashes: 1: 7eg3o94jzF6MWPTPt5NbTvs7jJs.roa (hash: uBhb3oqgOc4SEMDE6pXGmihKzbDqsdvpsyNNplPMk2I=)
2: SGfTe3Yct6BfxzPj20M2b6NiU2w.crl (hash: sZoavDttxkJYAlC48I0axzHWJ+Ul2cQvdaCDD1H55ZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/SGfTe3Yct6BfxzPj20M2b6NiU2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c1:41:1e:34:d2:12:d4:c7:91:f6:02:69:1c:8e:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4867d37b761cb7a05fc733e3db43366fa362536c
Validity
Not Before: Mar 29 18:00:36 2026 GMT
Not After : Mar 30 18:00:36 2026 GMT
Subject: CN=0cda108ce794f3f12ce7147bc9227ee81ef6e191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f9:d1:00:4f:71:8b:88:9f:69:f6:0e:e3:e8:
49:37:2a:7d:69:95:2f:87:ef:f6:c5:c9:d3:75:2d:
36:4d:8d:d6:e2:cf:c0:2c:94:8f:95:75:22:81:28:
35:3e:c0:70:fc:44:ed:80:ee:f7:a6:fb:43:3c:30:
92:7f:88:d5:36:e7:93:a6:4a:1f:e2:a3:2e:3e:b4:
eb:87:a0:fb:db:65:07:f5:f5:aa:58:f6:bb:09:a2:
de:b4:d1:33:0c:6a:70:a0:9c:6c:fa:8b:8b:f1:8d:
86:8e:91:cc:64:1b:8c:8a:90:bc:c3:93:ce:cb:5f:
63:93:40:b9:3c:7f:74:7d:f6:05:7a:d8:03:8c:c5:
53:8d:db:90:6c:a1:40:00:c5:27:d8:9d:95:56:8c:
27:9c:de:ad:f9:2c:e6:06:79:20:c3:87:63:ab:90:
13:d6:63:bc:d2:45:d5:71:1f:ff:e0:5b:ff:f4:dc:
4c:da:b8:9c:04:f8:71:b0:4f:62:5f:fe:8c:51:41:
a7:1f:8d:be:63:ae:ba:68:c7:3f:22:f8:dc:7e:61:
40:72:33:70:b6:f1:7a:77:52:81:f3:fa:cc:25:11:
86:9f:4f:2a:9d:6c:59:66:53:e1:3e:2e:37:d3:5c:
fe:37:4b:92:bc:68:2c:b6:dc:30:1f:fb:8d:54:8b:
83:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:DA:10:8C:E7:94:F3:F1:2C:E7:14:7B:C9:22:7E:E8:1E:F6:E1:91
X509v3 Authority Key Identifier:
keyid:48:67:D3:7B:76:1C:B7:A0:5F:C7:33:E3:DB:43:36:6F:A3:62:53:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGfTe3Yct6BfxzPj20M2b6NiU2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:5b:f9:6e:52:ba:46:f6:31:13:a5:8b:98:a6:4d:c8:a4:9c:
34:3f:da:bf:f7:7d:4d:45:93:99:dc:9f:16:f1:65:32:7d:94:
2f:6b:b2:28:11:47:9b:a5:25:aa:4a:e4:65:6c:12:fa:49:0d:
4b:87:78:e5:7d:12:4a:e5:61:bc:0c:03:46:b2:1c:70:ac:cd:
b9:3d:52:2d:53:bf:0d:17:52:4e:23:0b:68:7c:df:9d:5f:91:
14:47:f4:2d:0f:49:a0:58:31:f1:19:4c:4a:a5:97:a3:df:12:
31:d2:c8:db:96:d4:7b:d5:65:2e:fe:fd:1b:93:18:ea:fe:86:
5b:e0:a5:0e:2f:f0:42:2c:fa:9f:21:18:63:6d:7e:05:c1:7f:
b2:bd:88:e2:27:0e:4d:63:42:c7:5c:0a:fc:eb:3e:ef:f6:e5:
73:c8:ed:40:32:46:61:85:63:6a:72:00:b5:3c:dd:16:ba:bc:
b6:6c:18:67:90:ed:73:6a:ad:89:31:d7:19:c6:63:ff:30:81:
73:46:16:fa:0e:47:5c:ee:81:62:58:a5:c1:47:25:69:92:7d:
36:48:0a:26:d6:bd:c4:24:71:c3:d4:84:e4:16:d4:d5:23:56:
27:43:7e:82:ac:29:61:f5:0d:0a:c0:12:63:c7:6c:34:53:3c:
24:b8:4e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:50:16 2026 by rpki-client