Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft
File: SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft (raw, json)
Hash identifier: FWwe8SAi99u7pJO0kG6SHttjRCE2/a0UkQgRo683+xY=
Subject key identifier: C4:AF:5A:8A:B4:75:A3:D7:0B:D4:DA:45:94:71:9A:F2:A3:57:C2:F3
Authority key identifier: 48:3F:B3:7D:1F:B0:CC:D2:16:DA:DE:C4:00:09:56:1A:84:4A:A8:3B
Certificate issuer: /CN=483fb37d1fb0ccd216dadec40009561a844aa83b
Certificate serial: 019D31BEBD04DFA46B869BA61A4547478D26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SD-zfR-wzNIW2t7EAAlWGoRKqDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft
Manifest number: 053D
Signing time: Sat 28 Mar 2026 00:01:16 +0000
Manifest this update: Sat 28 Mar 2026 00:01:16 +0000
Manifest next update: Sun 29 Mar 2026 00:01:16 +0000
Files and hashes: 1: SD-zfR-wzNIW2t7EAAlWGoRKqDs.crl (hash: 241AM4ThjsIy6NUgH3aLtmCaGrYFP0Mm10goCr+FpH4=)
2: xVWlyfjWNauHSqD1r_D5-LgllLw.roa (hash: dlJT/Xcxoye27KDxhsg9z9fDGJ9uuoxQEu/5uWsLfvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SD-zfR-wzNIW2t7EAAlWGoRKqDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:31:be:bd:04:df:a4:6b:86:9b:a6:1a:45:47:47:8d:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=483fb37d1fb0ccd216dadec40009561a844aa83b
Validity
Not Before: Mar 28 00:01:16 2026 GMT
Not After : Mar 29 00:01:16 2026 GMT
Subject: CN=c4af5a8ab475a3d70bd4da4594719af2a357c2f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b1:9c:8c:9a:7e:47:13:62:d1:d7:06:39:73:
ec:bb:7f:ea:e3:db:ad:22:3b:a2:00:7a:6f:99:66:
a7:ca:f8:78:50:ad:ea:4f:0e:39:d5:83:25:5f:99:
b0:df:48:73:ea:23:22:28:91:08:d5:47:f4:88:24:
78:e6:6e:fe:fe:ff:15:57:02:01:12:bd:c0:80:0c:
64:29:5e:1a:5a:53:e5:e8:ee:2c:9f:9a:52:57:1a:
0e:2b:4b:4f:88:37:2d:c9:ea:6a:eb:95:52:56:dc:
cf:b8:d8:b5:81:11:53:6c:6f:00:34:ad:f3:3f:98:
c4:93:5c:af:c3:52:4e:e9:b8:3d:9d:a3:e1:02:c8:
c4:c5:fd:91:93:d0:f4:51:f0:78:c6:bc:5a:3c:e0:
77:04:89:8c:99:11:c2:66:ea:13:9d:86:32:e8:29:
e2:e5:9e:93:48:de:13:26:96:75:dd:28:7d:39:f7:
ff:f8:fb:f4:99:74:08:61:cf:17:ff:47:c5:7a:a6:
7d:fb:d3:69:6c:b4:2b:6c:05:91:b0:48:5b:9c:9c:
75:9f:dc:53:2a:4b:1a:5b:f0:04:68:77:5a:5e:bc:
dd:15:b9:69:a2:c2:ba:7a:ed:ce:50:35:0f:5e:a1:
81:6d:40:e0:0f:fc:db:34:0a:0a:c5:cd:77:47:af:
16:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:AF:5A:8A:B4:75:A3:D7:0B:D4:DA:45:94:71:9A:F2:A3:57:C2:F3
X509v3 Authority Key Identifier:
keyid:48:3F:B3:7D:1F:B0:CC:D2:16:DA:DE:C4:00:09:56:1A:84:4A:A8:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SD-zfR-wzNIW2t7EAAlWGoRKqDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a1eb66-cc87-4a90-9c5d-ee3ca74bbb79/1/SD-zfR-wzNIW2t7EAAlWGoRKqDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:71:02:a1:de:40:90:8f:2a:ad:60:98:1e:91:d2:12:99:d3:
69:c5:76:f8:82:58:96:69:5d:de:1c:2c:fa:cd:8d:63:98:e3:
a8:29:d4:c7:2a:f9:42:34:b7:cf:2e:78:c6:cd:3d:dd:17:0b:
d9:6a:b2:a3:ef:b8:d1:4d:55:14:97:7e:fc:8a:fb:03:a2:0f:
4c:e4:cb:fb:24:db:44:6d:f1:d5:70:2c:e1:b4:b1:01:a0:3f:
69:0b:c7:64:5e:ff:c8:20:80:21:7f:73:84:84:96:ca:e9:56:
4e:8c:3e:3a:96:d2:66:4c:39:f3:9c:f2:df:85:62:18:77:3d:
9a:73:4c:71:94:27:07:03:cd:de:6d:82:23:61:aa:b9:21:cb:
02:42:97:14:d9:ee:ab:93:cb:fe:3f:45:8e:fb:16:f7:98:6a:
f2:d5:1b:cf:aa:e7:f3:f6:ba:db:1c:73:48:b4:2a:0d:f9:b2:
f8:8f:69:d5:12:b8:13:d9:f6:8d:2f:a4:d3:a8:30:eb:1b:40:
ce:fb:8e:d1:03:ce:33:1d:f4:cc:9f:89:ad:41:72:50:07:08:
b0:0c:38:a5:6b:dc:6c:4b:f4:46:e3:ee:7d:be:80:50:61:c0:
3e:43:3f:81:27:13:b6:25:3f:df:7c:96:e9:91:ee:de:a6:b8:
39:3f:c8:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:34:05 2026 by rpki-client