Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft
File: SFGWc90KnPV4lVIK83wqgYPc4Wg.mft (raw, json)
Hash identifier: yiiOhpXmhACCaZp/X/9aA1vjeIo1iSXdg8+APXnm96U=
Subject key identifier: D6:43:69:0C:9C:71:4A:CF:B8:FB:B9:B0:89:FD:D4:AF:D9:7E:73:30
Authority key identifier: 48:51:96:73:DD:0A:9C:F5:78:95:52:0A:F3:7C:2A:81:83:DC:E1:68
Certificate issuer: /CN=48519673dd0a9cf57895520af37c2a8183dce168
Certificate serial: 01A0DD60D4D4EB57DB450D32700A163AD0A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFGWc90KnPV4lVIK83wqgYPc4Wg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft
Manifest number: 1568
Signing time: Sat 26 Sep 2026 11:01:45 +0000
Manifest this update: Sat 26 Sep 2026 11:01:45 +0000
Manifest next update: Sun 27 Sep 2026 11:01:45 +0000
Files and hashes: 1: SFGWc90KnPV4lVIK83wqgYPc4Wg.crl (hash: CcO4a6F2D3xaFYeqdyjGOjQYp4+a75gksWQwTsmmYvs=)
2: YZU5h2cJPs993oeBmAc82_JPG4k.roa (hash: JlU2N1oKnkfBo3YZbM9h2zkBZpc0rh/bJMlA2t9a81A=)
3: p4Ryzsx0HvYa6fK3naSzqeJIhoY.asa (hash: VowtidAin+vlyTlcj1rURI5mA4zUI5zWri0ufSFrjfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFGWc90KnPV4lVIK83wqgYPc4Wg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:60:d4:d4:eb:57:db:45:0d:32:70:0a:16:3a:d0:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48519673dd0a9cf57895520af37c2a8183dce168
Validity
Not Before: Sep 26 11:01:45 2026 GMT
Not After : Sep 27 11:01:45 2026 GMT
Subject: CN=d643690c9c714acfb8fbb9b089fdd4afd97e7330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bd:7f:8b:c9:1e:b5:87:37:d3:13:f6:df:b8:
91:a6:a7:f9:51:78:c1:89:25:4a:57:ef:0b:92:a5:
c4:05:72:cb:45:f5:e8:c0:50:21:fa:67:20:b9:1f:
0a:05:c9:b6:0b:96:59:7b:03:68:7b:32:7a:b9:31:
ea:02:69:18:b4:9e:ee:0d:88:a7:be:a0:5d:3d:fd:
34:bf:96:f0:68:14:dc:64:5d:59:ab:34:73:05:f7:
9d:2d:79:4e:fd:36:e4:cf:ca:78:5a:ba:1f:1d:1e:
e5:17:7c:b2:a3:7c:a3:4f:be:fc:14:d2:81:35:15:
5c:12:e7:16:3a:12:5b:45:34:c1:7e:2f:32:7c:ad:
da:c0:ae:10:3d:ba:21:c8:24:4a:41:d6:dd:97:71:
cc:99:73:77:3d:36:e7:2b:81:23:d6:f9:00:20:66:
43:68:f9:14:07:76:ba:05:09:6b:e8:69:55:51:f5:
50:87:89:7f:05:cc:09:c4:9a:86:5b:47:7e:92:92:
32:ef:f9:bc:72:09:28:30:bb:37:7f:2f:10:fa:ea:
43:9a:12:05:99:ff:6d:e3:48:4c:f6:23:0b:91:1f:
c9:e5:9d:34:d0:9f:5e:e7:cd:c2:5f:b6:6c:bd:bc:
40:ba:f2:a7:42:b8:d9:46:c5:b0:d5:8f:23:c9:99:
ad:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:43:69:0C:9C:71:4A:CF:B8:FB:B9:B0:89:FD:D4:AF:D9:7E:73:30
X509v3 Authority Key Identifier:
keyid:48:51:96:73:DD:0A:9C:F5:78:95:52:0A:F3:7C:2A:81:83:DC:E1:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFGWc90KnPV4lVIK83wqgYPc4Wg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:cb:00:43:e0:2b:75:e7:cc:8d:b6:ca:e0:b6:51:9a:f1:ab:
dd:32:ff:55:7a:08:41:1d:66:b4:98:87:42:47:6e:f8:1d:02:
e0:b9:47:a8:89:94:9b:27:85:f8:51:5a:cb:e6:4c:6f:da:95:
fc:72:da:d0:da:f2:2a:77:bf:77:33:23:43:86:7d:51:2c:2a:
1a:83:f4:34:66:2e:ac:30:67:35:9e:bb:2b:2d:da:50:43:25:
44:58:d1:bb:f8:a1:63:6f:27:23:67:48:af:52:b6:37:b1:5d:
bc:7f:d8:66:98:a0:0b:c3:a2:b3:c8:6a:95:8b:69:66:e6:3b:
91:2d:9c:92:1f:be:57:b0:ce:f9:2d:6d:1f:54:ff:ff:f2:07:
6d:b6:01:2e:e2:9f:d8:85:61:d8:dd:21:4c:5d:92:7f:ff:d3:
7f:ff:40:2f:72:40:1c:7b:dc:46:9e:bc:4c:93:a0:e4:e6:ae:
5d:4c:f2:a9:2b:d0:e3:2c:1e:7a:a0:a5:56:67:da:4f:6d:e2:
9f:54:93:85:dd:ad:5a:c8:b6:c0:2b:12:25:d4:f9:54:d6:5c:
48:86:8b:c0:e5:72:54:8d:ad:07:52:81:58:d0:fd:95:98:e1:
06:ea:ac:49:34:1f:ed:14:c8:9a:b1:9d:87:43:d1:ef:1f:67:
2c:3d:25:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDdYNTU61fbRQ0ycAoWOtChMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4NTE5NjczZGQwYTljZjU3ODk1NTIwYWYzN2MyYTgxODNk
Y2UxNjgwHhcNMjYwOTI2MTEwMTQ1WhcNMjYwOTI3MTEwMTQ1WjAzMTEwLwYDVQQD
EyhkNjQzNjkwYzljNzE0YWNmYjhmYmI5YjA4OWZkZDRhZmQ5N2U3MzMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt71/i8ketYc30xP237iRpqf5UXjB
iSVKV+8LkqXEBXLLRfXowFAh+mcguR8KBcm2C5ZZewNoezJ6uTHqAmkYtJ7uDYin
vqBdPf00v5bwaBTcZF1ZqzRzBfedLXlO/Tbkz8p4WrofHR7lF3yyo3yjT778FNKB
NRVcEucWOhJbRTTBfi8yfK3awK4QPbohyCRKQdbdl3HMmXN3PTbnK4Ej1vkAIGZD
aPkUB3a6BQlr6GlVUfVQh4l/BcwJxJqGW0d+kpIy7/m8cgkoMLs3fy8Q+upDmhIF
mf9t40hM9iMLkR/J5Z000J9e583CX7ZsvbxAuvKnQrjZRsWw1Y8jyZmtXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNZDaQyccUrPuPu5sIn91K/ZfnMwMB8GA1UdIwQY
MBaAFEhRlnPdCpz1eJVSCvN8KoGD3OFoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0ZHV2M5MEtuUFY0bFZJSzgzd3FnWVBjNFdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8zYmQ1OWEtMmQwYy00MDkzLTkxM2Et
ZmUzNmNlZGE2MzE2LzEvU0ZHV2M5MEtuUFY0bFZJSzgzd3FnWVBjNFdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS8zYmQ1OWEtMmQwYy00MDkzLTkxM2EtZmUzNmNlZGE2MzE2
LzEvU0ZHV2M5MEtuUFY0bFZJSzgzd3FnWVBjNFdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYcsAQ+Ar
defMjbbK4LZRmvGr3TL/VXoIQR1mtJiHQkdu+B0C4LlHqImUmyeF+FFay+ZMb9qV
/HLa0NryKne/dzMjQ4Z9USwqGoP0NGYurDBnNZ67Ky3aUEMlRFjRu/ihY28nI2dI
r1K2N7FdvH/YZpigC8Ois8hqlYtpZuY7kS2ckh++V7DO+S1tH1T///IHbbYBLuKf
2IVh2N0hTF2Sf//Tf/9AL3JAHHvcRp68TJOg5OauXUzyqSvQ4yweeqClVmfaT23i
n1SThd2tWsi2wCsSJdT5VNZcSIaLwOVyVI2tB1KBWND9lZjhBuqsSTQf7RTImrGd
h0PR7x9nLD0lOA==
-----END CERTIFICATE-----
Generated at Sat Sep 26 20:45:07 2026 by rpki-client