Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.mft
File: Sb8yq_d_QSwhD0CYItE5jsO-2ps.mft (raw, json)
Hash identifier: Mp6ICAvD1OdrNYKXclsM1f1hcwRvqV8N6Dbtc/8JzoM=
Subject key identifier: C2:09:8E:A5:09:FE:46:46:37:8D:3E:BD:82:EA:98:79:5A:03:9A:72
Authority key identifier: 49:BF:32:AB:F7:7F:41:2C:21:0F:40:98:22:D1:39:8E:C3:BE:DA:9B
Certificate issuer: /CN=49bf32abf77f412c210f409822d1398ec3beda9b
Certificate serial: 019D382E0DCA85AA2B7C01F9B7D028AF1937
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sb8yq_d_QSwhD0CYItE5jsO-2ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 06:00:35 +0000
Manifest this update: Sun 29 Mar 2026 06:00:35 +0000
Manifest next update: Mon 30 Mar 2026 06:00:35 +0000
Files and hashes: 1: Sb8yq_d_QSwhD0CYItE5jsO-2ps.crl (hash: GBlljkeM3lfWwrFVvh3VnM9YAtkaK+yV5KfvXqCSyKM=)
2: w7k2lrBQys2CDumqPbMqNrCdMKM.roa (hash: 4OFNHEKBovihz5W0xIvqIIAh7BlJWxOSYnsriRtP1DY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sb8yq_d_QSwhD0CYItE5jsO-2ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:0d:ca:85:aa:2b:7c:01:f9:b7:d0:28:af:19:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bf32abf77f412c210f409822d1398ec3beda9b
Validity
Not Before: Mar 29 06:00:35 2026 GMT
Not After : Mar 30 06:00:35 2026 GMT
Subject: CN=c2098ea509fe4646378d3ebd82ea98795a039a72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d5:f2:bf:26:fd:02:5c:80:63:cf:47:22:b0:
04:99:6b:c0:af:34:55:9c:a3:a6:2f:69:57:92:18:
ab:1c:c1:3e:4e:eb:64:19:ab:f7:01:6d:ae:82:5b:
b9:f0:d7:4c:c3:c3:e2:45:0d:62:f7:c6:7a:b1:0c:
8c:18:69:95:11:15:07:9a:64:86:4f:13:88:62:fc:
86:73:03:f1:db:ca:48:be:dc:e2:2a:57:46:41:fe:
75:c5:c0:da:a0:ff:d9:b8:94:ea:09:89:be:1d:c7:
7a:bc:9d:a3:e5:e7:05:82:70:a3:f6:bb:88:d2:ba:
d2:0f:bc:4d:f0:2c:7b:cc:a4:0f:bb:55:85:27:b1:
c5:4f:c2:df:c4:10:26:fe:cb:21:ab:f4:90:59:31:
bc:fa:a1:0a:68:04:8c:95:76:68:1a:70:b4:75:61:
8e:79:37:b7:0b:84:f9:75:da:95:c8:ca:bd:5c:c9:
7d:7c:9f:8f:70:14:8e:25:04:99:95:f0:c8:ab:1a:
ca:d4:21:14:6e:a1:13:49:ae:b5:fd:28:a5:10:40:
d6:fd:3a:de:e9:50:30:5e:54:83:6e:57:bd:38:5f:
08:07:f0:69:69:6b:7c:ee:4a:9b:26:87:4a:11:56:
9d:88:4a:57:14:58:46:d6:a5:68:44:61:bd:89:a0:
bd:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:09:8E:A5:09:FE:46:46:37:8D:3E:BD:82:EA:98:79:5A:03:9A:72
X509v3 Authority Key Identifier:
keyid:49:BF:32:AB:F7:7F:41:2C:21:0F:40:98:22:D1:39:8E:C3:BE:DA:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sb8yq_d_QSwhD0CYItE5jsO-2ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:ab:c9:17:1b:67:9c:2b:62:37:e1:cf:27:2f:b8:0e:21:dc:
e9:41:95:5a:0b:04:b2:54:4e:50:b1:9a:ab:82:87:a9:60:0d:
fb:13:63:94:0d:a5:ea:f3:9f:32:27:36:b4:8d:c5:af:3f:8f:
82:b8:84:f0:91:41:4b:e7:01:ad:2d:6f:16:2b:23:d5:37:46:
1d:54:60:6d:9d:b2:7f:95:c7:a1:57:a1:e5:1e:fc:4f:81:77:
db:10:93:b9:e1:27:dd:0d:dd:e4:a1:2e:b3:04:3e:f9:58:55:
61:e8:0d:5e:06:42:53:6a:5f:3c:d5:bc:b1:46:91:5a:7d:64:
58:b3:b9:d6:dc:18:00:fb:ca:7f:f0:5f:84:b1:93:17:9e:8d:
46:d4:ef:e0:87:f1:cf:86:3f:33:37:32:a2:c0:f8:2f:4b:5f:
1a:bb:5e:61:11:d6:33:7e:fe:05:9d:4e:ed:51:d5:0a:56:30:
fe:17:da:af:89:be:7a:35:b4:10:c0:fa:13:a0:fe:5e:a8:02:
fe:01:f5:47:1f:39:30:c5:8f:73:b6:cf:cb:0c:1b:b5:7e:1a:
0e:4a:93:6c:3c:ba:26:5f:c5:63:ed:de:14:88:3e:2c:5b:e5:
5e:87:01:f0:bd:40:99:ae:a2:a2:61:2b:9f:db:ad:f0:3e:f3:
09:c4:0c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:01 2026 by rpki-client