Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.mft
File: SFk-QNpaUvMi21oEwg-0htThVQI.mft (raw, json)
Hash identifier: 3H2jwlsKBRUOB3aMHKMXbNekUAVvYHRgfouoLeDAU40=
Subject key identifier: AB:A5:2A:20:C2:64:24:C7:03:ED:96:A3:EF:F7:AB:20:0E:BD:09:47
Authority key identifier: 48:59:3E:40:DA:5A:52:F3:22:DB:5A:04:C2:0F:B4:86:D4:E1:55:02
Certificate issuer: /CN=48593e40da5a52f322db5a04c20fb486d4e15502
Certificate serial: 01A0DC167619497CCBF78D50A2258994A8BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFk-QNpaUvMi21oEwg-0htThVQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.mft
Manifest number: 172D
Signing time: Sat 26 Sep 2026 05:00:54 +0000
Manifest this update: Sat 26 Sep 2026 05:00:54 +0000
Manifest next update: Sun 27 Sep 2026 05:00:54 +0000
Files and hashes: 1: SFk-QNpaUvMi21oEwg-0htThVQI.crl (hash: Uw7d5FDg8tW9YcTskLL6SunWIWaDtlaak6IDpq1C6U4=)
2: VFzP0FGh0SQzSyAC9MEO9bnaqZU.roa (hash: DwjrXgZVVBQjvwjFMKe9t4mZj6kib5GRnctDIksFE5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFk-QNpaUvMi21oEwg-0htThVQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:16:76:19:49:7c:cb:f7:8d:50:a2:25:89:94:a8:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48593e40da5a52f322db5a04c20fb486d4e15502
Validity
Not Before: Sep 26 05:00:54 2026 GMT
Not After : Sep 27 05:00:54 2026 GMT
Subject: CN=aba52a20c26424c703ed96a3eff7ab200ebd0947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b0:1d:40:10:f3:ac:cf:98:b6:e5:47:c1:78:
c5:4c:c9:fc:b3:f0:02:0b:9b:c2:ca:e1:f5:da:2d:
7f:1b:9f:81:3d:32:6f:09:0e:e5:fe:1e:02:9a:d9:
d4:ed:7e:35:c8:01:aa:e6:1b:e2:06:b4:4a:53:cb:
8c:5a:a9:45:66:f0:05:55:f8:b9:2b:21:51:5b:67:
d1:77:f3:c5:c7:f4:a4:ce:94:fc:be:bf:28:c8:9b:
31:95:b5:c2:93:a0:c0:c6:a4:3d:b7:29:24:0b:6e:
03:ca:4e:6c:85:12:2e:0f:86:fa:a9:73:8d:01:07:
56:1c:7c:3f:3e:8a:8e:3e:b7:60:0a:3e:1f:26:a2:
ab:33:8e:4e:26:b6:95:c6:b6:68:a0:77:db:45:15:
76:dd:1c:e9:03:29:5f:e8:21:25:9c:78:8a:dd:bc:
8c:04:8d:a3:7f:69:7f:d7:48:9d:25:cf:58:a5:86:
43:29:fc:0e:a8:81:6e:35:07:20:c4:78:8d:bb:8f:
e7:86:b3:65:a3:95:a0:85:ce:3e:b3:fc:c8:cc:b5:
f4:9e:9d:7c:b9:a2:52:28:74:f6:bc:d2:4f:4f:bc:
e0:5c:61:22:f2:ac:33:38:40:d1:1b:79:ac:16:fd:
89:07:08:72:f6:b7:4e:b3:0d:39:3f:08:64:61:2e:
67:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A5:2A:20:C2:64:24:C7:03:ED:96:A3:EF:F7:AB:20:0E:BD:09:47
X509v3 Authority Key Identifier:
keyid:48:59:3E:40:DA:5A:52:F3:22:DB:5A:04:C2:0F:B4:86:D4:E1:55:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFk-QNpaUvMi21oEwg-0htThVQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:d9:d3:6b:11:95:bd:44:1e:0f:0b:2e:52:af:3c:e9:60:e7:
12:12:8e:80:02:62:4a:7b:07:0b:c3:61:6b:eb:6b:2b:68:ec:
5e:99:15:b1:ec:fe:53:04:c4:60:95:36:90:b0:73:19:a9:7a:
b5:5b:16:73:0e:ab:35:ed:1c:8e:82:a3:52:ee:dc:f4:39:e7:
7c:2f:6e:b2:ac:25:a5:8d:8d:5e:26:44:9a:32:04:58:df:be:
57:92:0c:89:14:de:7b:28:ca:43:fd:84:97:fd:bd:b9:96:65:
3a:67:43:4d:dd:1a:d8:1d:ab:73:a1:82:84:2a:17:1e:09:4d:
d8:3d:01:cf:7f:89:a8:76:65:26:a9:2c:66:69:9d:22:5a:05:
cc:d7:c3:24:0c:c6:a9:6c:2a:7f:f7:77:81:47:07:a9:d5:5e:
72:68:51:7d:c6:7c:4f:46:64:9f:f8:60:a0:53:3f:f9:74:cf:
ad:1b:45:07:5c:aa:59:1c:68:77:12:e3:9b:13:5c:36:a5:6a:
8d:ba:43:be:e9:fe:c4:69:02:74:5b:e8:2e:bb:d2:c1:b6:f3:
00:0a:5a:50:e1:8f:ff:83:20:1d:d2:21:bd:bd:70:7c:c8:fd:
42:98:20:2f:88:2f:0d:6f:09:b5:5e:c9:13:cf:8f:ad:c2:f1:
e0:5e:bd:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:03:51 2026 by rpki-client