Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.mft
File: SfOdbIsj_Nwg5TF06S-z9Wyqi2E.mft (raw, json)
Hash identifier: o/6C3rrXu41QEpydGNYO8Dx+PicmIab3Jpsg39LaVxg=
Subject key identifier: D4:3F:6A:5F:08:DD:47:D9:7F:70:E3:60:5E:F5:2C:F4:F9:EE:4F:28
Authority key identifier: 49:F3:9D:6C:8B:23:FC:DC:20:E5:31:74:E9:2F:B3:F5:6C:AA:8B:61
Certificate issuer: /CN=49f39d6c8b23fcdc20e53174e92fb3f56caa8b61
Certificate serial: 019D3A1C5C33DFFD35238376408AA67F7A7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.mft
Manifest number: 1821
Signing time: Sun 29 Mar 2026 15:00:30 +0000
Manifest this update: Sun 29 Mar 2026 15:00:30 +0000
Manifest next update: Mon 30 Mar 2026 15:00:30 +0000
Files and hashes: 1: RQT8IM5YpZZwOG6-oLbHqe47a-w.roa (hash: blADeokcP6llo8Gy54kWFLivb2CKCeXJKcNiIgYk8iI=)
2: SfOdbIsj_Nwg5TF06S-z9Wyqi2E.crl (hash: gawngwssMq06XVDvd8AbQBTCTsCmArt6CoAyRG7Zv4U=)
3: iO3SkKO1UQLda-9awSqU8lYbgSU.roa (hash: rqIW3vWhfYP/PXzk9vOJK+ndWvAPgxulGED/LkU7CuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:5c:33:df:fd:35:23:83:76:40:8a:a6:7f:7a:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f39d6c8b23fcdc20e53174e92fb3f56caa8b61
Validity
Not Before: Mar 29 15:00:30 2026 GMT
Not After : Mar 30 15:00:30 2026 GMT
Subject: CN=d43f6a5f08dd47d97f70e3605ef52cf4f9ee4f28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a0:37:a5:4a:da:41:35:92:f0:cf:76:9d:02:
21:df:ae:f9:dd:fc:f7:b8:ec:32:23:1c:db:5c:5e:
88:ca:8e:a1:75:ca:db:bc:1b:33:2f:81:81:ee:c8:
1b:ff:e4:93:02:03:44:f2:8d:50:cb:47:ef:b7:59:
55:27:a3:20:74:46:96:91:5d:28:2b:72:95:56:7c:
86:a1:df:65:9a:47:ca:27:b2:bc:98:cd:5f:c0:fd:
89:a8:2f:bf:cd:34:56:65:9a:ac:f6:b6:cf:5a:6a:
e7:78:dd:ab:69:7c:de:97:65:88:0b:1e:5e:81:b7:
c6:46:b6:da:93:72:1e:03:d9:e3:b6:95:b8:91:11:
e6:e8:f1:cd:39:b6:57:17:77:17:89:50:0a:0c:05:
7f:79:4f:9b:d3:de:04:c0:e8:cc:16:3e:9c:45:9e:
6a:f4:25:cc:5a:bf:38:ae:40:53:ec:70:22:bc:64:
f2:5e:b4:4e:1e:2c:b3:64:59:a0:6a:85:90:bd:ed:
d7:fb:e0:0f:33:7e:32:c4:fd:7f:3a:db:56:73:fb:
f2:9a:50:f5:86:72:f9:83:e7:0a:11:df:0d:5b:5f:
2a:fb:88:a1:6f:45:b9:59:52:cd:54:1a:5c:7d:6c:
e3:63:b8:85:b7:c9:a0:97:8f:31:47:32:ea:a1:17:
81:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:3F:6A:5F:08:DD:47:D9:7F:70:E3:60:5E:F5:2C:F4:F9:EE:4F:28
X509v3 Authority Key Identifier:
keyid:49:F3:9D:6C:8B:23:FC:DC:20:E5:31:74:E9:2F:B3:F5:6C:AA:8B:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:04:ef:26:d5:f8:9d:9f:c1:ab:b8:84:6a:af:59:08:2e:b4:
1a:26:33:ef:76:d8:dc:3e:1e:b1:e3:1d:a5:91:df:47:78:4f:
28:15:49:22:a6:54:4f:67:53:ea:62:ba:84:bf:f8:71:07:7c:
16:aa:ae:29:3f:97:9b:45:ac:32:a6:2f:3f:31:eb:81:01:96:
d3:fb:46:a3:0a:b0:02:08:84:90:2f:55:c2:7d:8b:84:4e:23:
59:31:89:ad:d3:58:5c:50:8f:67:6b:f3:ca:6c:37:4b:24:3c:
ef:ae:e2:b7:f2:a4:e9:b1:18:f8:da:3c:c4:e5:15:d4:66:f5:
45:60:e1:36:08:83:3b:52:d4:a5:4c:b4:8a:f9:c4:f8:10:38:
44:e6:b5:32:55:13:98:9e:e6:12:74:36:37:59:07:cb:48:39:
06:ae:7c:e5:04:a1:31:96:75:2d:df:e6:4b:7d:66:1d:5d:1e:
60:67:b4:23:8a:67:e1:78:b7:2c:28:6e:8f:56:e2:55:1f:a4:
08:0e:36:d3:22:2a:b5:59:24:b8:ac:2e:ca:12:d5:44:cb:c7:
da:ed:a6:c8:58:6a:14:79:fa:d3:9e:a5:34:4c:99:60:8e:ec:
95:01:8b:58:bc:6c:7f:d9:8d:2d:18:51:0d:c9:28:0c:51:40:
de:a9:37:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:53:55 2026 by rpki-client