Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft
File: sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft (raw, json)
Hash identifier: 7SJxPzbr0TmWwokUo6nnOl3V/67HfDRlmS8hFc7XjNk=
Subject key identifier: 19:EC:18:A9:03:F6:32:9C:80:17:1A:5A:9F:0B:D2:71:71:F7:C1:A5
Authority key identifier: B0:04:F5:86:9F:56:75:F6:5F:9B:10:CF:F4:B6:5F:74:F7:6B:ED:17
Certificate issuer: /CN=b004f5869f5675f65f9b10cff4b65f74f76bed17
Certificate serial: 019D3940F2B8D061FC669324F82C91F6728F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft
Manifest number: 07A6
Signing time: Sun 29 Mar 2026 11:00:50 +0000
Manifest this update: Sun 29 Mar 2026 11:00:50 +0000
Manifest next update: Mon 30 Mar 2026 11:00:50 +0000
Files and hashes: 1: kPH-8Zc1kxZQMwbBGjp_GqisqV0.roa (hash: d06nVSlv366yU56PgOO4NAbOUg53x7byASD8YLEXL7Y=)
2: sAT1hp9WdfZfmxDP9LZfdPdr7Rc.crl (hash: fvNTNFkWQB7KLst1bMinReWkSO6xBLiTd+RLFnmAzMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:f2:b8:d0:61:fc:66:93:24:f8:2c:91:f6:72:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b004f5869f5675f65f9b10cff4b65f74f76bed17
Validity
Not Before: Mar 29 11:00:50 2026 GMT
Not After : Mar 30 11:00:50 2026 GMT
Subject: CN=19ec18a903f6329c80171a5a9f0bd27171f7c1a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:84:24:e6:66:e6:f8:dd:e3:72:38:81:e2:69:
7c:50:c5:85:52:bb:ea:5b:13:47:56:3a:62:60:8d:
b1:b2:60:bc:9d:76:42:4b:ae:38:92:2f:1b:e3:e5:
81:b7:b1:23:04:f2:9b:4c:86:86:62:0d:c5:90:6d:
15:77:7f:45:61:96:49:a5:52:ae:0e:0e:da:ff:9a:
1c:90:cb:aa:e8:e2:4d:c8:a3:92:a7:78:fa:df:8c:
8e:94:88:4a:d2:3e:62:79:48:94:52:1d:6d:bd:94:
b6:65:9a:d9:75:3b:dd:e5:3b:f5:38:1e:61:55:05:
ed:93:8d:52:5b:55:d8:a9:b9:df:93:1b:7c:0e:81:
c1:7c:b7:60:39:b8:82:0d:44:30:35:e5:5a:5f:37:
ac:91:64:91:09:8a:7d:99:c0:ed:a3:b2:a6:1c:73:
04:43:14:1f:a3:cc:5a:b4:b7:da:ef:f3:b5:5a:45:
34:d6:0c:08:30:06:58:f4:27:7f:d0:e0:5b:04:75:
01:5e:0b:52:e9:3a:ca:c3:91:15:e4:6b:4d:1a:69:
4d:09:03:dc:50:8f:96:95:ec:6c:91:60:5d:15:1d:
a4:7f:fe:e3:a2:cb:3c:8b:e3:ce:0b:85:91:63:07:
b3:14:40:b2:94:c0:56:1e:a3:0a:2a:b2:e2:6a:4f:
3d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:EC:18:A9:03:F6:32:9C:80:17:1A:5A:9F:0B:D2:71:71:F7:C1:A5
X509v3 Authority Key Identifier:
keyid:B0:04:F5:86:9F:56:75:F6:5F:9B:10:CF:F4:B6:5F:74:F7:6B:ED:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:41:3e:3b:a0:51:49:a5:bf:02:de:a5:6d:78:7f:06:6f:26:
bc:60:1f:ac:a7:31:68:73:c1:11:48:2b:be:ad:90:d8:a4:cd:
ad:2b:fd:31:6c:02:3e:3c:7e:4f:63:c4:31:85:bf:d7:5d:66:
13:21:33:c0:a9:ef:f4:58:5a:8a:fe:da:81:bb:2a:91:e2:18:
03:c3:fd:7c:1e:e4:3e:1a:0b:37:43:0c:58:81:63:03:15:da:
38:a2:66:11:26:e2:65:12:ad:eb:5a:cb:85:f2:fe:9d:9f:4e:
0c:1a:8b:36:f7:3d:b1:b8:60:0e:8e:97:c0:fa:64:94:c7:55:
05:4e:25:3b:46:37:2a:dc:31:a7:b2:af:38:7e:67:2d:fe:5e:
61:19:85:a4:19:4e:56:a6:69:ee:17:e8:19:8b:a2:42:53:da:
61:62:fa:34:80:d9:90:1d:c4:76:c4:68:32:e3:b3:3d:36:34:
6c:d6:1c:a4:d3:d9:9c:1e:64:f3:5d:d7:bb:52:ad:9a:61:d7:
f4:12:2a:df:78:c1:61:a9:58:8c:a4:a5:63:b9:f6:19:15:91:
b0:91:41:6d:33:a2:7e:81:0b:a1:25:13:c8:2c:5c:c3:34:0c:
48:39:8f:55:e3:47:e3:44:ee:97:92:c3:a5:75:19:8a:0d:56:
44:0f:2e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:40:37 2026 by rpki-client