Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.mft
File: SffBpGd-t4JtrmneAaaZtiAdYkQ.mft (raw, json)
Hash identifier: 4FSjlpvsNdoRWmNjO8oJpoynMLyjGjtb4edZA3R9wsE=
Subject key identifier: 2A:0F:BD:EE:1A:2B:DA:B0:86:FD:E3:55:4E:1B:3C:B8:2B:9A:DC:B6
Authority key identifier: 49:F7:C1:A4:67:7E:B7:82:6D:AE:69:DE:01:A6:99:B6:20:1D:62:44
Certificate issuer: /CN=49f7c1a4677eb7826dae69de01a699b6201d6244
Certificate serial: 019E00CFC81F400C3C9421085AB39A3F54A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.mft
Manifest number: 0ACF
Signing time: Thu 07 May 2026 05:01:17 +0000
Manifest this update: Thu 07 May 2026 05:01:17 +0000
Manifest next update: Fri 08 May 2026 05:01:17 +0000
Files and hashes: 1: 1Ydtwyp0RxTqwFwlZLQC9pjEjck.roa (hash: lddKsSWBtsmYYjZdvA43DNL49znHbCiLIeDmyKFXUS8=)
2: 7QrWs9jpQhmFY3PyZCr6-nEeMH8.roa (hash: SW0/y7KitZRJpYFxOpK/vsBcsStTykljR4R1T9PoZ4c=)
3: SffBpGd-t4JtrmneAaaZtiAdYkQ.crl (hash: ktVwOoYK9ShPflJVX3dJlmppq8Jm5VlhaFizMIqTXYY=)
4: poS62r2xc1Q0WW07fhDP8zECi4w.roa (hash: +zufayp/EjEAE4m8aJ8bI+p2tsBzidxT3ZMgA9RaLz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 May 2026 05:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:00:cf:c8:1f:40:0c:3c:94:21:08:5a:b3:9a:3f:54:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f7c1a4677eb7826dae69de01a699b6201d6244
Validity
Not Before: May 7 05:01:17 2026 GMT
Not After : May 8 05:01:17 2026 GMT
Subject: CN=2a0fbdee1a2bdab086fde3554e1b3cb82b9adcb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fb:03:d8:97:e4:55:9e:11:3f:98:1f:25:81:
8e:eb:45:e0:74:24:af:64:51:a1:5b:8d:59:26:a8:
5d:54:93:77:ab:a6:0d:25:21:64:f5:a2:c2:c4:8a:
ec:9e:4b:db:43:91:e1:11:f0:f8:ec:4a:a5:0f:af:
9c:da:2f:63:9c:f6:d5:97:33:b4:46:64:ac:15:e0:
fa:11:6e:fa:3b:ac:57:ac:ee:f2:e3:85:b1:56:f5:
3f:6e:16:d5:85:47:38:08:81:eb:d6:5e:72:47:a7:
0d:d0:ff:59:9b:f7:dc:3d:ea:42:46:4e:71:21:f3:
cf:0e:65:2b:d9:09:09:5d:64:aa:f3:d2:d9:c8:e0:
93:4d:29:0c:66:31:09:ea:3d:48:76:28:19:25:e0:
2e:38:d9:31:70:3c:3c:0d:f1:55:30:6d:eb:f9:fe:
37:11:5b:4d:f8:e1:f1:c6:fe:42:19:7e:8c:70:54:
f8:25:92:07:a7:05:9c:f5:94:49:eb:7a:36:92:e2:
c2:92:e9:76:44:b1:7c:e2:f9:9b:ad:41:6b:87:93:
92:64:92:ca:9e:f7:55:ee:73:eb:e5:05:ac:88:e6:
40:09:d4:7d:5b:0f:ac:b8:45:3b:d5:d3:2d:9b:bf:
45:64:97:1c:0a:e7:cc:40:b4:f6:7e:bd:f2:f6:a3:
12:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:0F:BD:EE:1A:2B:DA:B0:86:FD:E3:55:4E:1B:3C:B8:2B:9A:DC:B6
X509v3 Authority Key Identifier:
keyid:49:F7:C1:A4:67:7E:B7:82:6D:AE:69:DE:01:A6:99:B6:20:1D:62:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:41:9c:7e:39:3c:8c:39:4f:6e:79:d4:d1:e5:2d:48:a6:c6:
d6:22:39:8c:6d:5f:38:27:85:10:de:4e:21:01:cf:5b:d9:5f:
0e:eb:39:9f:89:44:79:4d:29:91:0e:c9:cf:b8:d2:06:d1:5d:
c3:40:c7:d9:59:9f:7d:b3:7f:8d:97:0a:0f:c0:b4:99:60:db:
87:16:00:7f:d4:73:84:29:5a:aa:97:47:67:3b:09:96:d2:9f:
2f:e7:0a:48:05:a6:b3:91:5f:48:a8:14:32:df:0f:a0:a3:c2:
ff:c3:9f:05:ef:10:c2:4e:0c:61:99:43:0a:fe:d2:99:ae:e4:
d5:03:5e:30:3a:16:95:8b:ce:8a:39:1c:4e:62:eb:80:74:96:
38:03:a5:31:2a:d2:6d:3f:b9:5a:1d:42:e4:c3:2d:28:fe:3a:
53:79:3b:b2:2a:55:1b:04:13:dc:f3:30:82:8c:6f:eb:ed:13:
c3:2f:79:c1:c3:15:05:6e:5c:0e:82:a4:bc:97:2a:36:eb:98:
64:e2:42:18:93:c2:35:93:c4:2b:04:63:83:84:7b:d1:8a:7c:
10:37:9e:6a:58:b9:da:e6:ef:17:73:ca:67:9d:90:ed:05:47:
f6:87:2b:b5:1a:81:70:39:ae:05:c6:7e:0d:d4:1c:72:95:45:
9b:83:7a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 10:18:27 2026 by rpki-client