Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.mft
File: SFk-QNpaUvMi21oEwg-0htThVQI.mft (raw, json)
Hash identifier: ZgGYC9xYvxLhwSnZjgq19g+A6+PUAe2wMEsOp6j9TlU=
Subject key identifier: 03:A8:82:AB:69:F1:78:1C:D6:EA:57:DB:E8:E7:D6:82:FF:ED:88:89
Authority key identifier: 48:59:3E:40:DA:5A:52:F3:22:DB:5A:04:C2:0F:B4:86:D4:E1:55:02
Certificate issuer: /CN=48593e40da5a52f322db5a04c20fb486d4e15502
Certificate serial: 019D25F1AF9B54B9B5EAFA40F202EF3F2247
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFk-QNpaUvMi21oEwg-0htThVQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.mft
Manifest number: 1541
Signing time: Wed 25 Mar 2026 17:01:29 +0000
Manifest this update: Wed 25 Mar 2026 17:01:29 +0000
Manifest next update: Thu 26 Mar 2026 17:01:29 +0000
Files and hashes: 1: SFk-QNpaUvMi21oEwg-0htThVQI.crl (hash: y14kvfXnK+Kz3O5aZ+JFwHCBOgbwKqYRfSLgjhhbrIw=)
2: VFzP0FGh0SQzSyAC9MEO9bnaqZU.roa (hash: DwjrXgZVVBQjvwjFMKe9t4mZj6kib5GRnctDIksFE5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFk-QNpaUvMi21oEwg-0htThVQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:af:9b:54:b9:b5:ea:fa:40:f2:02:ef:3f:22:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48593e40da5a52f322db5a04c20fb486d4e15502
Validity
Not Before: Mar 25 17:01:29 2026 GMT
Not After : Mar 26 17:01:29 2026 GMT
Subject: CN=03a882ab69f1781cd6ea57dbe8e7d682ffed8889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:53:07:d6:73:dd:6a:a8:7a:cb:5f:97:c8:fe:
92:35:70:e8:da:b2:98:e0:e5:7a:46:eb:ed:e0:44:
57:d6:b5:67:22:63:2c:a1:13:d7:e7:8b:b2:6c:06:
0c:15:72:2f:69:b5:80:4a:46:88:ae:30:06:f7:74:
52:67:4c:eb:5a:97:78:bd:15:e7:03:a2:9c:e0:fa:
63:77:89:05:0e:72:d9:bb:b5:ef:8e:10:b6:d2:a4:
65:cc:53:a0:6e:52:f0:cd:6e:ef:10:98:08:9a:85:
87:98:6d:2f:0e:57:e8:87:af:15:4c:53:c2:4f:b7:
cc:56:43:50:6c:74:46:8e:89:26:33:d3:33:95:ec:
4f:5b:93:60:04:97:8f:9c:97:bc:85:29:98:1d:88:
f9:b5:e2:f0:47:36:db:00:2e:ac:46:a8:6c:16:b4:
67:8d:b0:d0:7c:7c:ae:a9:ad:76:2a:a5:d4:3b:24:
dd:51:e2:be:78:26:1f:f1:98:5f:11:e9:36:48:26:
ea:b6:c4:c8:91:e6:f1:8e:3c:d2:f7:c0:f0:ac:48:
7c:f2:c1:c2:dc:1f:75:3f:8d:60:e4:15:5b:7f:8e:
82:05:ed:e4:61:9e:74:a6:2c:91:fa:1b:44:ca:3e:
46:06:a5:b5:60:da:7a:4c:2b:97:4f:90:b8:42:dc:
45:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A8:82:AB:69:F1:78:1C:D6:EA:57:DB:E8:E7:D6:82:FF:ED:88:89
X509v3 Authority Key Identifier:
keyid:48:59:3E:40:DA:5A:52:F3:22:DB:5A:04:C2:0F:B4:86:D4:E1:55:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFk-QNpaUvMi21oEwg-0htThVQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:30:55:04:0d:5f:b2:0a:38:00:0c:3e:19:e8:0e:2d:a6:e3:
c0:72:ff:6f:0c:f0:d6:0e:02:33:fd:a7:5e:18:47:f1:2f:e8:
dc:16:35:ef:75:ad:32:74:20:11:5c:6e:a7:9f:77:20:d7:30:
0f:0e:fd:05:07:3d:46:79:a8:66:a8:7c:99:33:67:3f:0e:78:
02:03:81:4d:82:b3:af:74:b9:db:aa:ac:6c:64:9d:f0:6c:91:
82:3b:19:15:9f:f9:cc:a3:67:8e:55:0c:30:40:75:af:79:33:
bf:62:01:f1:c9:9a:3a:a0:80:3b:b5:ec:bc:46:2c:95:5c:aa:
b0:df:20:04:26:6d:d7:5b:a2:9a:d9:30:e4:af:57:44:4f:99:
a6:ec:fe:b3:d5:35:39:80:77:dd:b8:94:ba:ad:09:6d:32:99:
a1:8e:3e:fd:72:a5:6b:cd:0c:41:1d:b9:30:db:ec:ab:19:e0:
1a:5d:46:f9:88:1f:de:87:81:28:1b:c9:9b:f0:85:8c:ce:d4:
60:5b:72:90:73:22:d1:d3:cb:2d:58:73:76:9c:6f:e9:ff:de:
05:09:f4:77:43:0f:ca:fd:72:db:a2:9a:d8:23:73:0f:74:61:
cb:02:9f:a3:de:e7:1a:06:5c:7c:61:2e:44:3a:95:e0:a3:f5:
d8:9c:78:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:37:40 2026 by rpki-client