Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.mft
File: SffBpGd-t4JtrmneAaaZtiAdYkQ.mft (raw, json)
Hash identifier: tPN/rsKp9OjP6WA/EDADZVFk37QrIhOnNTYA1P5ILQY=
Subject key identifier: FF:F5:0E:8E:01:87:D2:AC:7A:61:A4:A9:FF:6B:48:37:6F:92:39:53
Authority key identifier: 49:F7:C1:A4:67:7E:B7:82:6D:AE:69:DE:01:A6:99:B6:20:1D:62:44
Certificate issuer: /CN=49f7c1a4677eb7826dae69de01a699b6201d6244
Certificate serial: 019D099E47D8C8BC95F9480CE3022B6B29C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.mft
Manifest number: 0A4F
Signing time: Fri 20 Mar 2026 05:01:01 +0000
Manifest this update: Fri 20 Mar 2026 05:01:01 +0000
Manifest next update: Sat 21 Mar 2026 05:01:01 +0000
Files and hashes: 1: 1Ydtwyp0RxTqwFwlZLQC9pjEjck.roa (hash: lddKsSWBtsmYYjZdvA43DNL49znHbCiLIeDmyKFXUS8=)
2: 7QrWs9jpQhmFY3PyZCr6-nEeMH8.roa (hash: SW0/y7KitZRJpYFxOpK/vsBcsStTykljR4R1T9PoZ4c=)
3: SffBpGd-t4JtrmneAaaZtiAdYkQ.crl (hash: UY4D30n+Z/CK72sdAED89CcsLE2cFhdgYDiKkFX0VsU=)
4: poS62r2xc1Q0WW07fhDP8zECi4w.roa (hash: +zufayp/EjEAE4m8aJ8bI+p2tsBzidxT3ZMgA9RaLz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:09:9e:47:d8:c8:bc:95:f9:48:0c:e3:02:2b:6b:29:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f7c1a4677eb7826dae69de01a699b6201d6244
Validity
Not Before: Mar 20 05:01:01 2026 GMT
Not After : Mar 21 05:01:01 2026 GMT
Subject: CN=fff50e8e0187d2ac7a61a4a9ff6b48376f923953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b6:f8:5e:db:ec:c4:5c:b9:0e:a4:b4:71:e0:
59:bf:2b:52:5b:29:a1:f2:d9:24:ed:c3:5d:42:8b:
ff:d7:05:37:29:79:b7:bf:21:98:5e:4a:8f:01:bf:
1f:e5:44:9a:3d:e2:07:2a:69:91:9b:1a:57:33:fc:
e8:8d:89:c7:96:b9:14:16:49:60:17:6e:86:6a:99:
59:3a:6f:c5:5e:f6:8f:59:6a:0a:ce:a3:62:0d:ca:
97:84:dd:64:c7:75:5a:8d:7d:65:31:c0:0a:07:9c:
55:11:6c:36:db:ee:01:e6:03:d3:4a:c3:ce:b2:26:
55:c0:ce:50:40:7b:48:cf:39:9a:1c:c2:cd:6f:ad:
82:ac:66:0a:3a:05:11:6c:e0:bd:dc:09:f5:ba:21:
15:64:dd:06:fb:b5:0b:35:d5:e3:01:71:0d:92:90:
91:1b:92:59:69:4a:b1:60:e1:58:6f:10:f9:6a:da:
b7:d4:df:ec:fb:25:b9:42:cd:09:15:80:da:2f:56:
a9:87:60:ab:04:16:c0:e0:1b:40:6e:44:a6:35:aa:
62:7a:93:25:58:78:2c:30:45:fb:ce:f8:0d:90:cb:
01:44:a1:87:93:d5:4e:67:5c:50:59:29:30:df:0c:
3e:ed:c9:a4:f2:be:f3:82:47:6a:0d:57:7f:8e:17:
34:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F5:0E:8E:01:87:D2:AC:7A:61:A4:A9:FF:6B:48:37:6F:92:39:53
X509v3 Authority Key Identifier:
keyid:49:F7:C1:A4:67:7E:B7:82:6D:AE:69:DE:01:A6:99:B6:20:1D:62:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:0d:a7:6c:fc:0f:80:62:4f:0d:78:45:06:86:a4:e8:a5:f2:
58:dc:4e:0d:bc:e5:07:98:0f:ef:3c:5d:af:95:9b:98:b2:bf:
78:e1:3d:95:7d:db:0a:11:14:29:1b:df:ec:23:f4:18:25:17:
91:f4:05:dc:3b:70:96:f4:33:3a:e5:da:ae:04:17:ae:b8:97:
65:e1:91:5c:cb:0a:25:04:42:f7:a9:2c:93:fa:d1:8c:3c:71:
06:2f:cf:b6:d8:2c:ba:22:6e:5d:02:60:c6:4c:17:11:c7:41:
9a:63:ac:a3:8b:41:f4:b5:6b:e1:30:4e:56:fe:67:a0:3c:a1:
de:d6:21:48:a6:17:1e:dc:0d:88:08:de:0a:e7:37:03:80:29:
9d:65:ea:3c:05:45:ac:40:03:b0:2a:ac:3d:b1:2b:eb:d3:a9:
27:d0:97:0e:15:50:24:b7:3c:15:1f:30:8d:25:5d:33:47:d2:
72:b7:a8:d0:2b:dd:e9:6f:a7:26:85:f2:7e:ad:06:4d:9e:eb:
0b:da:54:a7:c0:d4:bd:a6:e6:b3:f8:d2:35:a8:4c:34:0b:2d:
d4:2b:21:7d:57:ec:42:8a:30:ac:df:3f:48:a1:16:3a:33:83:
61:a7:5c:92:6b:0f:eb:a5:27:92:90:12:bb:f3:54:34:86:92:
92:24:09:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 10:22:04 2026 by rpki-client