Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.mft
File: SFk-QNpaUvMi21oEwg-0htThVQI.mft (raw, json)
Hash identifier: +rNpCwieBdj2FhTUWYz0SvowLdXFWsr6ARemVfLB6ms=
Subject key identifier: 28:92:25:27:F2:A9:F6:CD:C1:C0:25:2B:0A:B2:F2:CF:BB:0A:C2:B3
Authority key identifier: 48:59:3E:40:DA:5A:52:F3:22:DB:5A:04:C2:0F:B4:86:D4:E1:55:02
Certificate issuer: /CN=48593e40da5a52f322db5a04c20fb486d4e15502
Certificate serial: 019F93C9A3906A6BB812E3C112E1F3D5AABD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFk-QNpaUvMi21oEwg-0htThVQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.mft
Manifest number: 1683
Signing time: Fri 24 Jul 2026 11:01:33 +0000
Manifest this update: Fri 24 Jul 2026 11:01:33 +0000
Manifest next update: Sat 25 Jul 2026 11:01:33 +0000
Files and hashes: 1: SFk-QNpaUvMi21oEwg-0htThVQI.crl (hash: n+CqLZKnwgkDnGYE6cVqnr0q+rU1mgqQEylcmtzA9TU=)
2: VFzP0FGh0SQzSyAC9MEO9bnaqZU.roa (hash: DwjrXgZVVBQjvwjFMKe9t4mZj6kib5GRnctDIksFE5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFk-QNpaUvMi21oEwg-0htThVQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:a3:90:6a:6b:b8:12:e3:c1:12:e1:f3:d5:aa:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48593e40da5a52f322db5a04c20fb486d4e15502
Validity
Not Before: Jul 24 11:01:33 2026 GMT
Not After : Jul 25 11:01:33 2026 GMT
Subject: CN=28922527f2a9f6cdc1c0252b0ab2f2cfbb0ac2b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:31:e1:a9:7c:ea:0d:4a:84:12:a9:18:cb:8b:
f3:aa:aa:05:a6:01:fd:28:af:b7:ad:a1:dc:13:2e:
31:12:18:65:ec:fd:45:a0:a6:05:12:3e:60:32:92:
ee:16:b5:2e:2e:c3:b2:99:7c:a7:61:6a:15:00:ed:
89:6b:55:65:d4:cb:20:7e:39:5d:e1:c3:f8:5b:88:
91:53:8d:86:12:74:43:33:90:7d:6c:91:59:6f:ad:
77:6a:31:6c:d2:99:8c:b7:ee:11:ae:fb:19:31:5b:
ed:5f:1a:21:84:46:12:d6:80:28:4b:9b:a6:e4:e0:
45:87:7e:da:07:df:cd:6e:4e:8a:d1:3b:37:ee:b1:
8c:0c:de:95:fa:89:2d:0f:0b:b0:a4:78:04:57:66:
46:bb:f4:be:77:a2:9c:f1:37:2f:68:24:ff:e1:a2:
9f:89:5e:45:9a:68:1e:d3:45:58:4c:b0:26:51:6b:
bd:86:a8:bc:85:70:67:f5:28:a1:07:1f:1e:04:49:
bf:e0:93:97:e5:bd:77:1c:01:77:3f:9c:d1:c5:20:
0a:83:99:fe:01:36:21:6d:90:6f:7a:13:b8:67:54:
49:5b:39:55:a3:43:fe:18:a6:40:f6:e1:dd:4f:1c:
25:09:f2:77:d1:3a:af:fd:a1:72:f2:a0:9e:52:82:
10:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:92:25:27:F2:A9:F6:CD:C1:C0:25:2B:0A:B2:F2:CF:BB:0A:C2:B3
X509v3 Authority Key Identifier:
keyid:48:59:3E:40:DA:5A:52:F3:22:DB:5A:04:C2:0F:B4:86:D4:E1:55:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFk-QNpaUvMi21oEwg-0htThVQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:64:4d:22:3f:93:1f:f4:bb:c1:24:9b:d9:26:44:b5:fa:cc:
cb:4b:dc:f4:72:bc:ed:dd:ba:ce:ad:40:9e:21:32:84:84:3e:
dd:38:50:5a:6d:12:0f:8f:97:66:c5:1e:be:e1:ce:17:82:e0:
62:5d:e1:98:9c:db:a3:e7:39:c4:8d:11:e1:08:15:b3:f6:bf:
d9:ff:26:ff:ab:1e:08:ad:48:37:8d:ae:6c:b9:9d:40:1a:3d:
60:2f:15:2e:8c:37:4e:3b:f6:e8:e8:08:3b:33:34:56:19:86:
14:84:12:77:0d:c5:c3:5d:0c:67:7f:86:4a:43:7d:ea:2d:f5:
4e:66:4b:df:e2:67:28:58:aa:1d:1f:3b:b0:ea:dd:49:61:d2:
36:66:c2:71:bb:85:26:2b:54:a3:ec:22:a0:d8:24:26:1f:ed:
55:0d:bf:a4:ee:b8:6f:f9:00:87:69:8d:3f:12:9b:ed:02:74:
a7:cb:38:fe:1c:08:9d:d0:d1:25:e3:a5:70:7a:d7:8c:32:7c:
8d:b2:a8:97:56:bb:9a:d7:c1:07:61:6a:c8:0b:1c:96:ab:69:
9a:db:0f:8f:10:f3:eb:4d:14:da:c1:ab:f4:af:0e:b1:a3:fb:
4a:ba:7c:f5:5e:ec:76:1f:a6:20:4d:53:e7:1e:5d:52:2b:6a:
8f:eb:64:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:23:27 2026 by rpki-client