Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/804266-cc2e-4183-bcd7-c5a47dd7a9fe/1/sfInuSnKr9HOkVpUSUfJS1wAhtM.mft
File: sfInuSnKr9HOkVpUSUfJS1wAhtM.mft (raw, json)
Hash identifier: 7NAPK9T6EE5Lwd9VMx6hwGmhF3WDUq+tsqE8SMR6lFc=
Subject key identifier: 97:67:13:34:BC:DE:43:CA:F4:89:3D:1A:D7:12:B2:45:A2:CA:DE:C3
Authority key identifier: B1:F2:27:B9:29:CA:AF:D1:CE:91:5A:54:49:47:C9:4B:5C:00:86:D3
Certificate issuer: /CN=b1f227b929caafd1ce915a544947c94b5c0086d3
Certificate serial: 019D329AC87BC8B5009F021D9EA403FD441A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sfInuSnKr9HOkVpUSUfJS1wAhtM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/804266-cc2e-4183-bcd7-c5a47dd7a9fe/1/sfInuSnKr9HOkVpUSUfJS1wAhtM.mft
Manifest number: 010C
Signing time: Sat 28 Mar 2026 04:01:37 +0000
Manifest this update: Sat 28 Mar 2026 04:01:37 +0000
Manifest next update: Sun 29 Mar 2026 04:01:37 +0000
Files and hashes: 1: sfInuSnKr9HOkVpUSUfJS1wAhtM.crl (hash: b5cw4C/BmU5hxkJbsWJAVTXYUOQvrScOpj9bR7CAv7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/804266-cc2e-4183-bcd7-c5a47dd7a9fe/1/sfInuSnKr9HOkVpUSUfJS1wAhtM.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/804266-cc2e-4183-bcd7-c5a47dd7a9fe/1/sfInuSnKr9HOkVpUSUfJS1wAhtM.mft
rsync://rpki.ripe.net/repository/DEFAULT/sfInuSnKr9HOkVpUSUfJS1wAhtM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:9a:c8:7b:c8:b5:00:9f:02:1d:9e:a4:03:fd:44:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1f227b929caafd1ce915a544947c94b5c0086d3
Validity
Not Before: Mar 28 04:01:37 2026 GMT
Not After : Mar 29 04:01:37 2026 GMT
Subject: CN=97671334bcde43caf4893d1ad712b245a2cadec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:46:35:c2:4b:c4:a2:af:bc:c0:8b:fb:f2:01:
1a:cd:94:11:12:e7:b4:ec:77:c7:cc:f4:44:b0:6e:
61:e6:fc:86:e9:72:4f:82:41:f8:c5:41:3d:c0:10:
de:96:cc:2e:08:35:a2:c4:f3:5a:de:2f:ae:67:58:
8d:88:3c:d5:e1:25:9a:e6:b7:81:76:83:73:0f:6b:
7b:8e:c3:10:da:8d:cd:ed:8d:e0:5f:1e:9c:bb:fd:
35:86:f8:21:b3:3f:58:6d:0f:57:35:dc:a0:e7:e5:
04:69:d6:8b:bb:cf:ac:8d:61:ac:d6:c5:3d:a3:cd:
40:7b:a3:ed:9a:a5:ec:e9:cd:b0:47:13:60:eb:02:
f2:f7:10:ab:cd:fa:90:bb:df:7a:25:f7:d7:c2:4e:
9e:98:a1:37:a2:22:09:92:eb:0e:5a:55:66:5d:70:
b1:7f:aa:ef:26:a8:ac:de:a8:92:32:a4:dc:3c:3f:
2a:e7:09:fc:fd:70:2b:1a:8c:7f:8a:0a:83:2a:93:
a2:0e:8c:0e:8a:82:a9:c8:17:b8:f7:e4:41:90:83:
43:54:e2:13:88:c6:2c:0c:e3:20:29:13:4e:cf:c1:
42:e3:75:cb:51:60:5e:ce:1e:6a:dc:e7:29:2a:31:
de:ce:03:02:3d:99:63:73:04:e6:ea:5b:da:0f:38:
02:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:67:13:34:BC:DE:43:CA:F4:89:3D:1A:D7:12:B2:45:A2:CA:DE:C3
X509v3 Authority Key Identifier:
keyid:B1:F2:27:B9:29:CA:AF:D1:CE:91:5A:54:49:47:C9:4B:5C:00:86:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sfInuSnKr9HOkVpUSUfJS1wAhtM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/804266-cc2e-4183-bcd7-c5a47dd7a9fe/1/sfInuSnKr9HOkVpUSUfJS1wAhtM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/804266-cc2e-4183-bcd7-c5a47dd7a9fe/1/sfInuSnKr9HOkVpUSUfJS1wAhtM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:96:df:6d:fb:d7:f0:96:27:d2:3a:81:b2:dc:e5:82:10:69:
1d:19:b3:ed:6a:8d:cf:b9:30:ff:62:8b:ae:ed:bc:d7:c1:ed:
fa:db:97:ea:81:17:dc:12:77:d7:41:c9:43:5b:6a:b9:b7:03:
c5:78:e0:95:b9:77:28:4a:3f:f0:8f:f0:92:c6:f1:8e:10:4c:
d5:26:9b:dd:2b:ca:b3:de:96:56:1b:10:c6:d0:57:9f:29:47:
da:11:a7:6c:30:8c:52:cc:b4:be:54:57:7f:4f:5b:8f:b9:86:
e3:6f:22:50:1f:75:45:9a:8f:87:22:7f:a3:a1:6f:31:02:a2:
e4:1c:b9:77:37:03:e4:8e:60:2d:b7:41:09:52:c8:1f:97:9f:
05:4d:db:af:56:16:64:be:8e:98:fd:96:af:d7:66:b2:5a:77:
01:17:44:d6:b8:5e:cd:2f:a9:42:dd:3b:0f:10:15:1e:21:1b:
9e:1d:70:b3:76:16:f8:26:91:16:69:f5:aa:8e:1f:38:00:48:
c7:e6:41:68:4f:2e:f2:2d:da:f3:0e:a6:6e:e7:1e:39:a5:ea:
e5:fa:82:fd:b4:03:5f:a7:3b:0a:83:6f:65:bd:93:38:1f:7c:
db:c9:fd:59:08:1d:aa:79:49:fb:ec:51:c8:76:22:a8:bd:84:
93:71:5e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:38:07 2026 by rpki-client