Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.mft
File: SFMhasnZIXM78_SEOTo0SVwOKmc.mft (raw, json)
Hash identifier: lK1nmcxrvTp/otkCQsq56/LlRyGdPzit1nUoKRrQzU4=
Subject key identifier: D7:2C:91:83:9F:06:AB:52:E3:F6:D7:1A:A2:E5:F5:E7:F5:6F:38:BA
Authority key identifier: 48:53:21:6A:C9:D9:21:73:3B:F3:F4:84:39:3A:34:49:5C:0E:2A:67
Certificate issuer: /CN=4853216ac9d921733bf3f484393a34495c0e2a67
Certificate serial: 019D29CDECFD930AD69B6282FB27633EA504
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFMhasnZIXM78_SEOTo0SVwOKmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.mft
Manifest number: 0BE5
Signing time: Thu 26 Mar 2026 11:00:54 +0000
Manifest this update: Thu 26 Mar 2026 11:00:54 +0000
Manifest next update: Fri 27 Mar 2026 11:00:54 +0000
Files and hashes: 1: 2ZDYJtflCnBB_8qwON088KKU-a4.roa (hash: tEciLezX+dLS/ImbpFLCNZihGdAn391R3qBRLACKNXQ=)
2: SFMhasnZIXM78_SEOTo0SVwOKmc.crl (hash: qQVHnqWYC2H0Up7xKuq1ltOUeey/uakRpUYLOPVxkwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFMhasnZIXM78_SEOTo0SVwOKmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:ec:fd:93:0a:d6:9b:62:82:fb:27:63:3e:a5:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4853216ac9d921733bf3f484393a34495c0e2a67
Validity
Not Before: Mar 26 11:00:54 2026 GMT
Not After : Mar 27 11:00:54 2026 GMT
Subject: CN=d72c91839f06ab52e3f6d71aa2e5f5e7f56f38ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:71:cc:0b:41:fe:1f:56:8b:48:4c:62:29:61:
f8:41:b2:77:70:f0:a7:c7:a5:5d:95:5f:8b:82:8a:
16:b3:d0:13:31:10:92:6c:e3:78:d7:7a:d8:09:97:
0e:42:20:b9:23:b0:ba:1a:d5:5d:55:65:0e:fe:89:
3e:91:87:be:b3:ad:e1:4f:f8:68:f1:99:f0:07:1a:
e6:67:ee:93:12:a9:22:8d:56:bd:ff:1b:71:66:5b:
44:3e:19:e0:16:a3:c7:93:a4:8f:d8:0e:89:32:4d:
d5:ed:77:1e:29:9a:f7:f1:0b:a2:7b:a1:b7:fb:9f:
ef:f9:43:24:7b:4e:36:42:b4:bb:d8:c9:d9:be:4a:
35:3e:bf:3b:d4:3a:51:1c:8e:8f:2d:3e:d1:40:13:
7b:0b:8a:7f:4f:3d:1d:e6:75:7b:7b:e5:4c:53:a1:
5d:e1:9a:90:42:63:1e:8d:76:ec:a6:6b:62:67:a0:
41:a5:15:8e:3a:63:8b:d9:77:d7:17:ec:42:05:fe:
64:e0:68:ef:b2:10:ce:64:3d:9c:19:2d:c5:f5:c9:
7f:14:61:b7:6e:db:80:ff:24:b5:07:f7:19:7c:88:
36:7c:ce:0a:16:86:49:c8:39:05:be:70:bf:90:b4:
8e:35:1c:07:57:dd:00:22:e7:5d:5f:2d:54:69:b1:
ae:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:2C:91:83:9F:06:AB:52:E3:F6:D7:1A:A2:E5:F5:E7:F5:6F:38:BA
X509v3 Authority Key Identifier:
keyid:48:53:21:6A:C9:D9:21:73:3B:F3:F4:84:39:3A:34:49:5C:0E:2A:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFMhasnZIXM78_SEOTo0SVwOKmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:cf:a1:f2:57:c5:c7:f7:a7:e8:e4:e3:b8:76:3d:59:78:5a:
22:8f:47:73:19:3e:76:ca:0c:a2:2f:c9:2f:21:8c:ba:5e:cd:
26:a1:87:d9:32:db:b9:9e:08:ba:2a:c2:21:ae:3c:15:9c:59:
f7:c9:32:40:af:2d:fd:7b:20:f4:7c:c5:17:13:21:45:51:10:
41:3f:3e:de:84:16:58:da:6a:1f:3c:d6:e2:90:c2:c3:88:1b:
be:d3:0d:e9:35:35:a0:11:e0:11:cb:79:16:e5:85:6c:a8:4e:
95:59:c4:fc:1f:6e:ec:3a:df:15:70:97:0b:b2:a1:01:fd:65:
00:f9:22:98:27:44:00:a4:79:1f:43:ab:4a:8e:af:b3:c5:94:
d6:77:35:ef:c3:7f:85:54:b1:04:85:7e:66:24:02:05:3c:30:
06:2f:f8:64:ae:92:84:b0:e8:7a:46:f2:93:5c:45:f3:f6:e8:
26:71:47:e0:3b:6d:79:4c:dc:c5:4f:3f:8a:2a:db:2a:04:44:
5c:24:a4:d4:67:ec:6e:dc:83:2a:b0:7d:db:00:3c:c8:5e:53:
85:4c:81:cd:da:b2:b6:ca:f5:14:12:a5:1a:fd:1a:91:07:3e:
ca:63:6c:a2:ab:de:f0:86:3d:5f:dd:4e:7a:44:1d:16:98:7f:
44:95:95:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:38:57 2026 by rpki-client