Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.mft
File: SF4-4cMlgXX0_22bVZ2lTIPsC08.mft (raw, json)
Hash identifier: emhxRbwDIQBZ4Qq7CGIOoVcNqTLY0Fk54Jwt4lsKCOM=
Subject key identifier: 1A:12:CE:53:EB:6A:27:43:0F:F4:DA:03:28:85:03:16:A7:8E:02:1C
Authority key identifier: 48:5E:3E:E1:C3:25:81:75:F4:FF:6D:9B:55:9D:A5:4C:83:EC:0B:4F
Certificate issuer: /CN=485e3ee1c3258175f4ff6d9b559da54c83ec0b4f
Certificate serial: 019D28BBD0180D563A62DA3219FD6BE6ED38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SF4-4cMlgXX0_22bVZ2lTIPsC08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 06:01:30 +0000
Manifest this update: Thu 26 Mar 2026 06:01:30 +0000
Manifest next update: Fri 27 Mar 2026 06:01:30 +0000
Files and hashes: 1: SF4-4cMlgXX0_22bVZ2lTIPsC08.crl (hash: 0Ome1+Iv+0qELiRfh73u+FPVJsUDdtrrkQMc362xN/o=)
2: W4KHw-He6kWePo83bS5E3YXxts0.roa (hash: HnOkT9H7Ca2rZOkZ/pXWIqV8bBgY7J8LEGyl2k3M+hY=)
3: _a5oTu8gmKTkulokRAA15ZrEXNM.roa (hash: m1okP9QJB17W56hE2P8J+CdYw56KQB54uec3dsvEZRc=)
4: xZnQUNKtjz0xBu4GBzb-zu_Y-aY.roa (hash: +vp8PoavLw4YQsjZPIBnjlGldFa1m0sRHbYb6KV//EE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.mft
rsync://rpki.ripe.net/repository/DEFAULT/SF4-4cMlgXX0_22bVZ2lTIPsC08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:d0:18:0d:56:3a:62:da:32:19:fd:6b:e6:ed:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485e3ee1c3258175f4ff6d9b559da54c83ec0b4f
Validity
Not Before: Mar 26 06:01:30 2026 GMT
Not After : Mar 27 06:01:30 2026 GMT
Subject: CN=1a12ce53eb6a27430ff4da0328850316a78e021c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:72:dd:62:b4:08:e4:85:a9:dd:08:be:c3:82:
a5:5f:eb:82:e9:03:63:8c:3a:f3:59:e4:5a:e9:62:
c9:a0:bd:60:99:b4:e4:67:fc:e4:e1:03:78:8b:0d:
6c:ef:16:4c:75:17:a4:79:7a:30:d2:99:16:5f:a8:
58:e3:b8:15:e4:dd:93:96:77:12:9e:c8:26:ea:07:
8c:4f:3d:e9:01:e5:0b:2d:99:36:99:94:a9:12:ae:
ba:af:6d:e4:38:f9:5d:de:f0:f1:b7:10:71:14:c1:
13:cd:de:c0:fb:3c:db:6e:ce:2c:f6:d1:87:23:ac:
cb:3b:bb:7c:08:3f:af:76:6f:c7:17:2a:90:f7:47:
56:f3:4e:fb:79:10:6d:19:ea:2e:01:60:0a:72:ab:
29:8e:8b:65:2a:4b:da:2e:78:93:14:0b:29:e1:64:
a6:ff:92:30:4a:9c:48:e8:73:22:fb:10:7d:e1:2c:
cd:f7:9c:e8:78:a5:2c:46:16:11:73:0e:9f:7b:ad:
d0:64:12:2f:de:66:a2:1d:fe:3d:10:cd:d8:8e:97:
3f:79:14:27:75:22:86:78:ba:68:90:58:c0:23:c5:
64:4b:ff:00:f8:2b:6f:be:16:97:9f:e7:03:ed:bd:
56:dc:06:72:fe:c4:ae:60:4d:35:86:c7:21:e4:92:
d0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:12:CE:53:EB:6A:27:43:0F:F4:DA:03:28:85:03:16:A7:8E:02:1C
X509v3 Authority Key Identifier:
keyid:48:5E:3E:E1:C3:25:81:75:F4:FF:6D:9B:55:9D:A5:4C:83:EC:0B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF4-4cMlgXX0_22bVZ2lTIPsC08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:ec:e7:38:b6:f9:59:ea:55:a8:d6:03:12:4d:25:5e:34:57:
98:6a:ae:5c:a7:d0:ba:bd:22:2c:6d:ca:a2:a2:38:1f:0a:59:
e0:c9:0a:05:57:46:97:5b:15:98:f6:ca:c5:cc:4a:95:b8:a0:
66:37:8d:9c:3d:00:72:4c:3b:72:4e:e5:1c:b6:56:9f:c9:74:
49:c2:0f:92:e8:87:24:c6:33:22:b4:d4:1f:c8:77:8f:83:01:
3d:a7:32:39:b7:ac:b0:34:2b:9a:66:e7:b7:fc:32:ff:42:60:
56:5a:a7:14:8e:83:fd:b6:71:c7:11:6e:52:7f:c1:b6:36:21:
c4:c1:ce:63:44:6b:2c:51:f8:72:27:66:9a:c6:1a:c8:71:88:
63:81:4c:d9:5a:15:4b:b6:89:d5:3e:ea:77:3f:71:20:b1:10:
31:e2:fe:63:47:01:1b:c6:98:e0:d8:91:e8:b9:9e:00:73:07:
eb:d5:5b:5b:24:b1:24:be:ae:dc:75:8d:75:f9:e5:f1:c2:42:
4b:6c:6d:00:0f:d2:72:4c:83:00:c9:06:6f:76:5f:0c:30:4d:
f1:85:fb:50:02:4d:c1:f5:6c:41:07:37:b4:55:42:20:48:1e:
29:19:8e:9b:c1:dc:cd:7a:cb:b1:91:cf:8a:0a:5d:c8:b0:bc:
2e:d4:72:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:56:33 2026 by rpki-client