Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.mft
File: SFMhasnZIXM78_SEOTo0SVwOKmc.mft (raw, json)
Hash identifier: CRHRvBvWvhe3vJHWMYD7aR0+n2qPtvDZr//7dVbf2GU=
Subject key identifier: FE:1E:4B:AC:49:57:68:E8:A7:5F:63:04:8A:3E:A2:88:FB:B4:1B:DB
Authority key identifier: 48:53:21:6A:C9:D9:21:73:3B:F3:F4:84:39:3A:34:49:5C:0E:2A:67
Certificate issuer: /CN=4853216ac9d921733bf3f484393a34495c0e2a67
Certificate serial: 019D27DF5870EDB5AAAAF6C57DCEE0AD93F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFMhasnZIXM78_SEOTo0SVwOKmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.mft
Manifest number: 0BE4
Signing time: Thu 26 Mar 2026 02:00:41 +0000
Manifest this update: Thu 26 Mar 2026 02:00:41 +0000
Manifest next update: Fri 27 Mar 2026 02:00:41 +0000
Files and hashes: 1: 2ZDYJtflCnBB_8qwON088KKU-a4.roa (hash: tEciLezX+dLS/ImbpFLCNZihGdAn391R3qBRLACKNXQ=)
2: SFMhasnZIXM78_SEOTo0SVwOKmc.crl (hash: NY10FMYvsCswMJhg3ls1rBB8b3Fgv6rpTTY4BNuRQGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFMhasnZIXM78_SEOTo0SVwOKmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:58:70:ed:b5:aa:aa:f6:c5:7d:ce:e0:ad:93:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4853216ac9d921733bf3f484393a34495c0e2a67
Validity
Not Before: Mar 26 02:00:41 2026 GMT
Not After : Mar 27 02:00:41 2026 GMT
Subject: CN=fe1e4bac495768e8a75f63048a3ea288fbb41bdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c2:45:be:64:3f:9b:db:07:0a:9b:41:62:49:
d6:09:89:54:f7:25:9c:a8:65:7c:a7:9a:47:b5:2b:
7c:e7:6e:74:ed:b7:76:fd:9d:a6:b6:c4:39:a4:fe:
a5:43:a9:e9:d5:81:a3:f3:c4:33:29:de:ce:c8:d8:
b3:0f:7a:03:b8:b7:8a:25:b5:9f:78:44:6c:c8:95:
22:89:4f:f8:f4:bd:56:95:bd:8e:2e:93:e4:59:e9:
56:73:66:73:2f:74:b3:47:a0:1c:8c:22:78:5d:89:
4b:f0:aa:62:40:d9:1f:e2:12:3f:40:a7:d8:52:fe:
a1:cc:7a:d3:88:ac:1d:ac:88:d0:10:20:65:6d:33:
1c:0a:5e:38:8e:c0:60:e1:0d:1f:3a:b3:02:4a:91:
84:63:c6:9c:2e:17:24:1e:c2:df:a1:65:e4:58:66:
67:db:ba:7e:5c:36:e5:c4:0e:ed:ed:c6:d8:56:4e:
51:73:d3:8d:68:d7:b3:aa:7c:41:ed:82:5d:61:f4:
7e:b2:c4:9e:0e:08:c5:ef:f7:5f:39:c7:50:23:c7:
37:04:62:98:f2:51:0d:41:9c:6a:28:9f:c9:da:09:
18:63:d7:53:ea:10:7d:28:0b:89:8e:07:47:2d:65:
91:c2:eb:05:9c:d2:84:ac:0b:0d:72:fc:fb:96:0c:
66:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:1E:4B:AC:49:57:68:E8:A7:5F:63:04:8A:3E:A2:88:FB:B4:1B:DB
X509v3 Authority Key Identifier:
keyid:48:53:21:6A:C9:D9:21:73:3B:F3:F4:84:39:3A:34:49:5C:0E:2A:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFMhasnZIXM78_SEOTo0SVwOKmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:26:b5:d4:c9:f8:47:13:af:12:b9:f6:d8:46:5d:1b:2a:8c:
07:57:5c:e2:39:79:e7:f3:84:fc:74:cd:37:d9:d0:d6:e0:7a:
30:a4:a2:ad:52:aa:b9:df:6c:c7:96:fe:ec:a0:6e:85:57:74:
60:56:92:0a:73:23:98:15:ff:64:ec:ed:66:91:14:c8:5f:0e:
b6:e6:19:9c:91:5b:84:cb:d5:72:11:a0:df:85:49:10:79:6f:
79:e5:0f:a7:9c:a9:5f:52:4e:d0:08:10:dd:ca:ab:a3:9b:fd:
5e:e0:cf:bc:4d:bf:fe:1f:c4:cb:ed:c4:88:f2:3c:5f:72:b7:
68:0f:db:3a:a1:65:f2:ef:b7:ab:32:5c:21:0f:c3:78:65:6b:
6f:69:9e:f0:da:b6:47:18:f2:dd:32:f6:d7:9b:7e:89:1d:a8:
85:e9:29:63:99:e5:99:a8:fd:21:65:08:19:cf:87:a7:63:f7:
21:3f:98:08:55:64:ef:95:6f:f8:43:2a:21:35:ff:5c:97:f1:
db:51:c2:85:50:3c:49:61:02:69:6b:d9:84:28:ac:d6:32:78:
8e:6c:77:8b:1d:87:66:4e:79:57:4e:4e:ed:d5:bc:d5:b6:c3:
a3:63:d0:ff:b7:16:b4:0f:3b:37:07:f4:3c:c9:7d:2c:5f:82:
7c:75:2a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:59:55 2026 by rpki-client