Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.mft
File: SAa55i8bAPLPmNDcxYMpKvrLUi8.mft (raw, json)
Hash identifier: wVnn0R2qT/9/AIf4gS4iNImgUHNUjxtl3JiYNI18upY=
Subject key identifier: 8E:09:1C:F2:AC:6D:09:35:CF:38:3B:7F:DC:DC:C1:03:D9:AE:7F:EA
Authority key identifier: 48:06:B9:E6:2F:1B:00:F2:CF:98:D0:DC:C5:83:29:2A:FA:CB:52:2F
Certificate issuer: /CN=4806b9e62f1b00f2cf98d0dcc583292afacb522f
Certificate serial: 019D386596D6B375DE8D11BBF734C4210208
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAa55i8bAPLPmNDcxYMpKvrLUi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.mft
Manifest number: 1353
Signing time: Sun 29 Mar 2026 07:01:15 +0000
Manifest this update: Sun 29 Mar 2026 07:01:15 +0000
Manifest next update: Mon 30 Mar 2026 07:01:15 +0000
Files and hashes: 1: 7Ptpz77GbsWneLzHS_xYiCRmfRM.roa (hash: giptJ0k6ABexmkT87uxsZbt4+g/9rtgSll7SmUYIWGw=)
2: E572EOwt04Wz5HDKOSRuWANNWW4.roa (hash: G7g0vA+I7jRl8kRfOOZyFHebFoniIcI8evL8158VV7Y=)
3: SAa55i8bAPLPmNDcxYMpKvrLUi8.crl (hash: XRPLXKYKi7DuodZ6c1uom91pW0XWwl5Ik33PJxJXYq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAa55i8bAPLPmNDcxYMpKvrLUi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:96:d6:b3:75:de:8d:11:bb:f7:34:c4:21:02:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4806b9e62f1b00f2cf98d0dcc583292afacb522f
Validity
Not Before: Mar 29 07:01:15 2026 GMT
Not After : Mar 30 07:01:15 2026 GMT
Subject: CN=8e091cf2ac6d0935cf383b7fdcdcc103d9ae7fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:18:ea:45:22:ff:a8:35:da:7e:d8:1b:0e:0b:
01:17:ee:a7:0f:f0:8d:c1:63:cd:60:13:e7:0c:ec:
07:e4:38:17:8a:00:c6:46:2a:38:7e:d2:26:9a:d4:
f4:62:df:39:66:8c:fb:09:b6:e5:80:e3:e1:e7:8b:
11:ee:28:9a:dc:81:a3:23:e7:c3:a7:4b:78:f2:6f:
9a:f9:e8:9a:fc:6b:fe:5c:8c:76:73:25:1e:f3:31:
8c:b3:3e:7c:fa:0c:55:8f:48:0a:60:0d:96:20:2d:
8f:71:b3:02:c3:85:d5:06:40:76:a1:49:1a:3d:6a:
d0:f3:e6:c7:46:b3:fa:43:ba:2e:5d:f0:3d:89:39:
55:4e:f9:83:24:81:50:d8:3e:d2:0a:b8:2b:38:b6:
ce:ba:3c:a9:4d:8f:84:95:96:e5:65:6b:13:ab:a3:
8e:2c:07:49:52:35:d6:9c:8c:63:2c:89:91:cb:fc:
59:98:5d:2d:c4:e8:1f:06:e6:fa:25:f2:f4:28:df:
cc:8a:0b:21:da:34:de:51:4b:56:3e:65:1e:50:9f:
6e:71:68:36:d8:db:28:f2:40:1f:82:33:94:2b:72:
9f:a7:6e:94:80:6e:5d:70:00:0d:c1:22:cc:4c:e6:
ce:11:b5:0d:50:b4:18:97:3f:bd:44:0d:83:77:cc:
1b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:09:1C:F2:AC:6D:09:35:CF:38:3B:7F:DC:DC:C1:03:D9:AE:7F:EA
X509v3 Authority Key Identifier:
keyid:48:06:B9:E6:2F:1B:00:F2:CF:98:D0:DC:C5:83:29:2A:FA:CB:52:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAa55i8bAPLPmNDcxYMpKvrLUi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:0e:37:d7:e7:63:67:a2:85:68:2c:d6:0c:5c:e3:09:34:3d:
56:01:21:dc:6d:91:06:7d:ba:bd:be:14:c1:0b:20:65:f4:6e:
43:4c:73:60:56:b2:b5:b4:ed:7f:d0:7f:86:fc:6b:c7:e9:1c:
81:df:49:ab:d5:fa:98:67:5a:dc:d6:7b:a7:6f:fd:c6:cf:44:
ff:f0:61:75:c7:0d:11:6c:53:6d:bc:33:14:b4:7e:3f:c6:a4:
b3:82:a6:69:a3:f4:2a:c1:de:cc:53:15:2a:3a:d5:85:c6:f8:
4b:3c:10:3f:af:71:ca:43:6e:bd:c1:bb:e4:de:98:8c:47:8b:
5a:43:17:cd:fd:16:5a:32:50:a4:4c:89:4a:9f:a4:fc:46:8f:
33:83:78:52:92:d9:58:a4:8d:c8:d3:b1:ea:03:f4:46:c3:6e:
26:08:78:5a:de:23:7d:2d:92:1b:4c:4c:ee:05:48:99:b0:2e:
17:7f:f6:e1:be:c5:82:5d:16:8f:24:c6:a4:28:ab:c0:f0:e7:
ae:65:94:95:ea:70:ce:19:00:9c:88:10:77:23:36:c8:ee:f4:
b6:f9:f6:25:79:3c:a3:b6:18:c1:03:7c:9f:30:ef:91:0e:39:
1a:6a:85:b0:92:9d:60:46:08:d1:77:00:90:30:99:d4:81:18:
b8:5f:67:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:58 2026 by rpki-client