Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.mft
File: SFldSlTtZEITxEYZXjb3jsGig5k.mft (raw, json)
Hash identifier: KdBh0Yr54kbwuYbmLap/TwNzNKhoRbNaI/VEhqDwh94=
Subject key identifier: DF:4F:44:7E:6E:78:7C:76:83:2A:13:29:5F:5E:30:26:F1:C0:D7:C1
Authority key identifier: 48:59:5D:4A:54:ED:64:42:13:C4:46:19:5E:36:F7:8E:C1:A2:83:99
Certificate issuer: /CN=48595d4a54ed644213c446195e36f78ec1a28399
Certificate serial: 019D265F641C9CA438C1CC0094124C879275
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFldSlTtZEITxEYZXjb3jsGig5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 19:01:18 +0000
Manifest this update: Wed 25 Mar 2026 19:01:18 +0000
Manifest next update: Thu 26 Mar 2026 19:01:18 +0000
Files and hashes: 1: SFldSlTtZEITxEYZXjb3jsGig5k.crl (hash: btquaJzBwFaQY+l2Wjm4p2SOVS76oqKKo01PFntbM0M=)
2: hLXYn7_sE8_0uE-9APcSyfa3cKM.roa (hash: OnfUzd7ri0bA88lhkI8jx6ukwUTJ7Iy7tmQtDjoFSz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFldSlTtZEITxEYZXjb3jsGig5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:64:1c:9c:a4:38:c1:cc:00:94:12:4c:87:92:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48595d4a54ed644213c446195e36f78ec1a28399
Validity
Not Before: Mar 25 19:01:18 2026 GMT
Not After : Mar 26 19:01:18 2026 GMT
Subject: CN=df4f447e6e787c76832a13295f5e3026f1c0d7c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ea:45:bc:b3:e0:f0:ae:48:7b:da:f4:6b:69:
e4:45:5d:60:03:9d:1d:08:7d:4a:95:0b:44:cb:c3:
09:37:56:7d:62:34:c1:52:73:64:0d:c7:75:3f:50:
73:34:8f:44:63:49:d2:4d:a4:7d:eb:ab:e0:1c:5b:
84:40:b9:e2:2b:af:49:fd:d4:d9:af:5d:54:5d:28:
18:0f:67:76:5a:90:3e:b7:05:1b:6e:83:98:61:09:
00:db:9a:01:e9:fb:0a:a5:9b:fb:ab:1f:3c:74:52:
7c:cf:ce:cb:77:dd:a0:00:61:7b:3b:08:6f:cd:9b:
a4:fa:e5:a1:3d:26:35:2d:59:fd:f1:ea:31:5c:d3:
8e:f4:3c:7f:66:4a:80:e4:4d:41:a0:96:0e:f6:b1:
f7:d1:09:55:fb:8e:80:24:10:db:2c:bd:b6:35:ca:
da:d6:ca:48:89:ca:3e:61:0d:1c:5e:4b:b8:d5:ab:
50:5a:b1:7b:26:9a:2d:d9:9e:58:52:d6:44:ae:2c:
45:55:9c:c5:12:8b:21:91:55:2d:fb:7f:8c:d5:57:
9d:20:12:46:0e:b1:51:85:a3:eb:9b:6d:30:d6:e9:
db:f7:fe:3f:b0:b5:dd:b7:9b:1b:80:cc:45:de:52:
7c:21:33:ed:e6:be:c0:b0:ac:6b:16:34:9e:e2:4e:
cb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:4F:44:7E:6E:78:7C:76:83:2A:13:29:5F:5E:30:26:F1:C0:D7:C1
X509v3 Authority Key Identifier:
keyid:48:59:5D:4A:54:ED:64:42:13:C4:46:19:5E:36:F7:8E:C1:A2:83:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFldSlTtZEITxEYZXjb3jsGig5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:7a:44:76:a5:79:fa:36:9b:86:a6:df:34:e0:36:6c:01:46:
36:f0:30:d7:46:5c:96:cf:35:f4:1d:79:f0:82:7a:9b:e5:b4:
ea:af:c6:7f:67:31:29:93:4d:27:4a:2b:30:4f:15:8d:ec:55:
d0:ac:6a:95:86:3f:c4:7e:34:f3:57:30:a4:a5:c7:25:2e:02:
75:79:bc:ca:76:70:ec:61:a7:8a:38:48:54:74:22:e9:65:24:
5f:e7:b9:c7:6f:fd:3c:e3:8a:0d:6b:dc:32:53:f0:25:4e:d6:
c1:7b:d5:5b:a3:b9:d6:5a:8d:79:61:3c:6b:3d:6f:d8:10:31:
b2:88:49:b7:ce:84:fd:ea:5e:aa:2f:d4:2c:91:e1:5a:ff:1f:
eb:86:f1:2b:91:a9:b6:ea:e5:ca:b0:8a:0a:e8:28:e4:2b:d0:
8c:6c:3e:5f:8e:44:0d:43:88:5c:dc:69:fd:41:ee:8d:77:51:
a3:a6:89:ed:11:f9:9e:f5:2e:03:af:f4:5e:43:2d:d3:2e:e7:
95:b6:62:07:2a:f5:4e:2a:ac:b2:53:88:54:47:ea:6a:48:02:
ee:1d:ed:25:87:83:5a:f3:9b:a0:37:d3:8f:ff:ed:34:cf:53:
2b:50:d4:41:45:bf:97:5a:dc:49:34:d3:30:0d:95:65:c1:90:
1d:98:11:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:55:05 2026 by rpki-client