
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.mft
File: sfcTzyBVLWxcI_CeezdmmEb5ylA.mft (raw, json)
Hash identifier: dZoI/0tWS8FwwRwW2kOyjsT8ODdmQiNyeynNVgKKEzA=
Subject key identifier: E9:EC:F0:40:2A:1A:B1:E6:52:7D:89:74:56:04:50:6C:7C:59:DB:C2
Authority key identifier: B1:F7:13:CF:20:55:2D:6C:5C:23:F0:9E:7B:37:66:98:46:F9:CA:50
Certificate issuer: /CN=b1f713cf20552d6c5c23f09e7b37669846f9ca50
Certificate serial: 019D265F5196CAAEE5BAEF8379169EA336FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sfcTzyBVLWxcI_CeezdmmEb5ylA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.mft
Manifest number: 188B
Signing time: Wed 25 Mar 2026 19:01:14 +0000
Manifest this update: Wed 25 Mar 2026 19:01:14 +0000
Manifest next update: Thu 26 Mar 2026 19:01:14 +0000
Files and hashes: 1: 9TOqGu4162v0qWS1r5J3RslyKWk.asa (hash: blkV+1hYOV+uGdGMlHV2otVp88CM6pTuGTFsjZqUK1U=)
2: msFdZet1jGf9Pxj7w6VmCeW1jMQ.roa (hash: fyqpHHLV2QyOw8iBPdNynqjL383PMJfcyHqqNVPJBtE=)
3: sfcTzyBVLWxcI_CeezdmmEb5ylA.crl (hash: eSD5an6rT+vr+c8f3MNmSgOdHmakZt1aPDQam2W0veg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sfcTzyBVLWxcI_CeezdmmEb5ylA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:51:96:ca:ae:e5:ba:ef:83:79:16:9e:a3:36:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1f713cf20552d6c5c23f09e7b37669846f9ca50
Validity
Not Before: Mar 25 19:01:14 2026 GMT
Not After : Mar 26 19:01:14 2026 GMT
Subject: CN=e9ecf0402a1ab1e6527d89745604506c7c59dbc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:0a:40:25:3d:8b:24:b1:25:8a:05:3f:aa:86:
a6:5d:1b:f4:c8:13:e3:20:71:a2:bd:9c:a2:9e:ba:
5b:05:72:4a:bf:ab:f1:54:35:bc:6b:1f:89:3e:ee:
19:6f:fa:68:28:83:50:ee:b7:02:40:dd:fd:f1:26:
9b:7c:15:27:4d:f1:0c:68:f9:fc:3c:27:2b:3a:00:
60:3f:68:3c:3e:e2:62:9a:93:94:09:ad:d4:00:74:
4b:1e:ec:5b:2b:98:93:8c:38:5d:94:13:9d:50:cc:
1f:6b:b4:6d:7d:f8:8e:70:1f:50:0b:a2:b6:92:30:
9d:48:90:df:2d:a0:81:e3:3b:d8:ae:85:83:e8:f3:
83:47:ba:70:d9:a6:5d:3e:04:72:12:4b:18:2b:8b:
1c:61:77:3a:7e:16:2b:0b:97:eb:c7:4c:e7:ce:8f:
a9:34:db:66:b5:45:ea:83:aa:63:f9:2e:a3:7a:c4:
9d:a7:4f:07:3b:28:48:47:2b:8e:ed:24:7f:fb:5b:
86:a3:dc:a6:c0:d8:72:f7:7c:a0:47:8a:a3:f2:26:
2e:60:e7:3f:06:d3:fd:6d:d6:bf:2b:88:4e:e8:e8:
ce:0c:db:27:a4:1d:ba:d3:1b:12:9f:f2:3b:4d:2a:
fe:4a:d7:b9:63:c7:76:13:46:5c:78:c5:4d:f5:14:
7a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:EC:F0:40:2A:1A:B1:E6:52:7D:89:74:56:04:50:6C:7C:59:DB:C2
X509v3 Authority Key Identifier:
keyid:B1:F7:13:CF:20:55:2D:6C:5C:23:F0:9E:7B:37:66:98:46:F9:CA:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sfcTzyBVLWxcI_CeezdmmEb5ylA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:3c:14:3e:69:a4:df:d0:3f:59:a0:12:4e:80:3d:14:30:d5:
0e:59:71:a5:a5:5d:ff:b2:18:50:8b:64:73:c0:fd:a8:15:cb:
7b:3e:04:54:df:b1:fe:f7:c3:2a:c4:5a:b7:ed:69:02:10:9d:
2f:29:bd:dc:2c:f5:cd:82:06:57:71:5a:1e:b1:8d:83:c6:14:
95:55:d0:3f:d2:a0:b3:01:cb:c3:88:4e:6b:22:96:ce:01:49:
5a:4f:1d:87:e8:a3:89:e1:69:b2:7b:eb:2e:f6:0c:a6:ca:07:
32:2f:95:28:b2:2b:95:be:14:2a:9e:50:30:a1:83:1a:bc:5d:
27:94:84:63:eb:ea:0a:90:33:69:ef:d8:b4:00:4d:c9:02:b0:
a4:cc:67:3a:1e:30:e7:ea:9c:ff:5c:3b:8a:40:f8:42:ab:b8:
09:d8:c9:ee:40:88:6c:8f:2a:62:68:d7:be:51:6c:ba:61:83:
2a:bf:46:25:95:ac:12:5f:86:41:0c:7b:88:17:cf:b3:93:99:
fe:75:32:a4:64:78:a6:f3:ed:57:77:c7:f3:3a:73:24:4f:f5:
44:25:fe:9d:33:65:20:28:6a:4e:4c:49:6e:a2:11:82:86:1a:
28:af:8c:76:c8:f7:fe:19:9f:cd:bd:82:14:07:53:8b:43:a4:
a4:a9:e2:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:46:53 2026 by rpki-client