Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.mft
File: SZ8D5I7WKpaEDrLy15w-whon8c4.mft (raw, json)
Hash identifier: BmsetH0obc8U7KYsfbQKe9qy7oyafWknOJe1gq1Pipo=
Subject key identifier: F8:D6:EC:D6:A0:A3:20:49:B9:D2:CE:39:C7:7C:29:5B:70:28:4B:51
Authority key identifier: 49:9F:03:E4:8E:D6:2A:96:84:0E:B2:F2:D7:9C:3E:C2:1A:27:F1:CE
Certificate issuer: /CN=499f03e48ed62a96840eb2f2d79c3ec21a27f1ce
Certificate serial: 019D37C0284A9A92ED9F10BABC71934A91C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SZ8D5I7WKpaEDrLy15w-whon8c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 04:00:33 +0000
Manifest this update: Sun 29 Mar 2026 04:00:33 +0000
Manifest next update: Mon 30 Mar 2026 04:00:33 +0000
Files and hashes: 1: A5XOJbTaPmRGoTvKxuzub_rL6N0.roa (hash: FAOba0SQ0llUhsUnpDnHyFWPVUFSFyEFJ1WvGVy5f9I=)
2: SZ8D5I7WKpaEDrLy15w-whon8c4.crl (hash: HqEApfTK+mjG1ZUgxBIxq7CdMe5HUi1QWAdj78B7MZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SZ8D5I7WKpaEDrLy15w-whon8c4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:28:4a:9a:92:ed:9f:10:ba:bc:71:93:4a:91:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=499f03e48ed62a96840eb2f2d79c3ec21a27f1ce
Validity
Not Before: Mar 29 04:00:33 2026 GMT
Not After : Mar 30 04:00:33 2026 GMT
Subject: CN=f8d6ecd6a0a32049b9d2ce39c77c295b70284b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b1:21:29:c8:24:39:60:7a:78:2e:b2:7a:60:
0b:b5:57:fe:ad:13:da:e4:03:9a:0c:e4:ce:dd:dd:
c7:0d:74:11:4b:6e:a2:b3:6d:67:39:c8:c2:2a:3f:
f0:6e:8f:9c:77:1b:69:a2:30:e1:ba:4e:9b:5f:a0:
e4:fb:f7:f4:a8:87:5f:c9:42:3c:91:66:63:16:0b:
6e:16:42:19:ea:13:94:15:43:44:be:01:b5:70:27:
55:0b:1f:c4:77:c8:90:68:eb:9d:20:b7:d7:43:5e:
06:c7:11:b6:87:a6:a5:09:09:82:6c:bb:6f:af:e6:
3d:ef:d8:e8:a1:83:6a:8a:1a:31:9a:90:f3:4f:b6:
8a:79:08:6b:a1:29:c1:86:b2:b3:b6:71:1c:94:d0:
35:e2:63:11:9d:cc:c3:4c:96:64:a9:5c:3a:f4:5f:
a5:35:2f:43:62:44:c6:1c:52:c1:4f:89:24:0b:6e:
df:0e:ae:38:43:10:3b:b0:53:6e:bb:37:61:c9:c8:
64:80:2a:c2:fe:3e:f8:7a:87:2f:d6:1f:61:f1:a0:
c5:2c:9a:f8:9e:68:1b:34:c8:e8:09:42:1f:42:41:
25:35:8b:2b:6f:42:67:c7:10:9a:cf:4e:4a:d1:a2:
03:a4:cb:7b:97:1e:ac:46:83:26:c6:df:39:e8:3d:
c4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D6:EC:D6:A0:A3:20:49:B9:D2:CE:39:C7:7C:29:5B:70:28:4B:51
X509v3 Authority Key Identifier:
keyid:49:9F:03:E4:8E:D6:2A:96:84:0E:B2:F2:D7:9C:3E:C2:1A:27:F1:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SZ8D5I7WKpaEDrLy15w-whon8c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:d3:66:5f:9d:3e:0f:b8:c2:d8:f6:a3:2d:f7:13:05:86:3f:
ee:3e:fa:2b:60:fc:3b:a8:ac:1e:53:5f:8b:16:8e:d7:b4:9b:
91:94:05:a2:70:45:c4:fc:5f:b9:80:a4:62:60:8e:87:d2:d0:
2f:4d:61:ed:b6:72:79:fb:4d:01:b1:54:f0:e0:ce:22:76:77:
55:32:82:88:5d:fe:20:9f:d5:d8:9c:7f:74:60:83:55:16:e0:
e7:50:be:6a:4e:ed:b4:27:22:05:e4:c3:fe:14:8f:a4:33:21:
01:72:5a:9d:5c:97:dd:74:d4:a9:c7:ab:56:64:fb:b4:48:f6:
90:32:79:68:c5:41:7a:99:ea:9e:4f:35:e0:ee:fe:8f:ea:27:
23:23:02:53:b7:60:7c:e7:61:74:80:85:dc:b7:ff:4d:3e:2c:
2d:38:c1:d9:45:e1:69:2f:51:03:ed:5d:c7:d6:72:1b:58:e1:
62:ae:2a:e2:09:a5:c0:09:bb:8f:61:32:32:f3:4a:8f:a7:e0:
d7:f2:cd:10:2b:7f:23:fb:d6:e1:0e:4c:13:85:61:3a:6d:fb:
9d:17:a6:0b:db:f1:99:c5:8f:64:79:78:83:d2:3d:d7:e9:71:
f1:c8:2b:ec:4a:7a:7d:af:96:e2:dc:20:79:d1:bb:f8:da:8c:
08:e1:4e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:57 2026 by rpki-client