Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1d2f2d-a425-44ab-9b5d-8c3b40285566/1/SFF8v1-HKM7CSvPC6G7PuANT5g0.mft
File: SFF8v1-HKM7CSvPC6G7PuANT5g0.mft (raw, json)
Hash identifier: dcDCl4SCZutqfERGN0HN1Pb6Ef/zfoa+cbklaSvl6ts=
Subject key identifier: 9B:7D:A3:82:76:4E:EA:37:F3:88:14:66:D2:5B:D2:5E:8D:AC:F4:4A
Authority key identifier: 48:51:7C:BF:5F:87:28:CE:C2:4A:F3:C2:E8:6E:CF:B8:03:53:E6:0D
Certificate issuer: /CN=48517cbf5f8728cec24af3c2e86ecfb80353e60d
Certificate serial: 019D25843B28B6E6229F3A3CBE01929CB545
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFF8v1-HKM7CSvPC6G7PuANT5g0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2f2d-a425-44ab-9b5d-8c3b40285566/1/SFF8v1-HKM7CSvPC6G7PuANT5g0.mft
Manifest number: 0F65
Signing time: Wed 25 Mar 2026 15:01:55 +0000
Manifest this update: Wed 25 Mar 2026 15:01:55 +0000
Manifest next update: Thu 26 Mar 2026 15:01:55 +0000
Files and hashes: 1: SFF8v1-HKM7CSvPC6G7PuANT5g0.crl (hash: aj5PsRWwyLaaoZPCz3bmEq/cIWUDQcUwpquPTJkBs5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2f2d-a425-44ab-9b5d-8c3b40285566/1/SFF8v1-HKM7CSvPC6G7PuANT5g0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2f2d-a425-44ab-9b5d-8c3b40285566/1/SFF8v1-HKM7CSvPC6G7PuANT5g0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFF8v1-HKM7CSvPC6G7PuANT5g0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:3b:28:b6:e6:22:9f:3a:3c:be:01:92:9c:b5:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48517cbf5f8728cec24af3c2e86ecfb80353e60d
Validity
Not Before: Mar 25 15:01:55 2026 GMT
Not After : Mar 26 15:01:55 2026 GMT
Subject: CN=9b7da382764eea37f3881466d25bd25e8dacf44a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a8:1c:cb:ba:7f:4a:8b:e8:cf:3b:0b:bf:29:
c0:af:e1:a3:1a:02:07:79:0e:60:31:17:b4:26:15:
f0:7b:99:37:a8:7d:5b:33:6b:21:6c:09:96:30:e4:
9a:63:69:73:bb:44:29:f9:5a:21:15:4f:54:64:88:
ce:45:98:88:4e:53:48:a1:09:64:ab:d8:cf:5f:fb:
24:87:cf:b7:79:53:a5:79:fa:a1:1b:8a:d4:a5:83:
b9:7e:c4:db:cb:62:ea:de:24:7a:a0:27:28:be:c3:
48:a3:02:29:9b:31:20:ac:4f:43:02:4e:9e:09:3b:
94:7c:dd:9a:1c:e6:02:4f:ec:2c:79:d4:9a:68:33:
3a:94:38:18:3c:b1:77:08:59:f2:13:4b:b7:32:c6:
26:14:02:10:17:2f:99:31:71:1d:95:09:51:c9:cc:
6e:5a:75:56:9e:9a:46:e5:3b:63:c5:21:a4:cc:bc:
2a:2d:cd:c7:e6:55:1a:1f:88:6d:ae:4a:16:c7:fe:
ac:d3:be:02:18:c9:8d:0f:ad:22:aa:66:47:e5:84:
52:a7:c4:4a:18:81:d6:a3:95:3f:1b:16:a8:8e:b2:
0b:1c:c3:17:60:60:d0:93:99:ef:06:12:31:41:69:
aa:55:d3:69:73:b8:6d:09:f7:4f:4d:77:7d:5d:95:
5c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:7D:A3:82:76:4E:EA:37:F3:88:14:66:D2:5B:D2:5E:8D:AC:F4:4A
X509v3 Authority Key Identifier:
keyid:48:51:7C:BF:5F:87:28:CE:C2:4A:F3:C2:E8:6E:CF:B8:03:53:E6:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFF8v1-HKM7CSvPC6G7PuANT5g0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2f2d-a425-44ab-9b5d-8c3b40285566/1/SFF8v1-HKM7CSvPC6G7PuANT5g0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2f2d-a425-44ab-9b5d-8c3b40285566/1/SFF8v1-HKM7CSvPC6G7PuANT5g0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:38:fa:b9:4e:92:9d:20:9f:40:c4:7d:6f:91:cd:c4:69:26:
cc:70:c0:af:24:ad:31:f2:2d:85:63:a5:7d:4e:6f:7a:08:3c:
f4:14:61:5f:0f:6f:f5:b8:65:32:7e:a8:e9:a0:8a:ce:8f:12:
3f:83:56:bc:df:f0:8c:42:9b:f8:4b:41:b7:1b:59:3d:3b:db:
dc:c9:63:66:66:7d:a2:87:38:96:6e:f0:ad:3b:2f:44:9f:da:
31:a1:52:b6:24:64:69:d5:19:cc:ec:81:27:ff:29:3d:65:e9:
a0:ab:59:46:54:16:43:85:cb:0a:44:a9:f1:37:f0:69:4c:66:
33:fe:77:5f:c5:27:af:5a:06:ea:c3:91:a1:e0:e4:7f:4c:df:
28:80:1b:7f:fb:a8:b3:2c:be:cc:24:79:9d:a1:36:8d:17:63:
e8:df:43:19:ff:6d:9a:02:43:23:12:26:ee:f4:0b:cc:aa:01:
ab:6d:40:90:5f:9c:03:38:b5:a8:2a:4e:3f:89:ff:b3:54:0e:
0a:6f:61:72:cc:c9:88:1b:98:b2:8c:a8:9e:ec:b1:b2:c8:f2:
69:ea:8f:30:cb:20:cf:89:1a:54:0f:6c:91:08:bd:c4:43:da:
91:20:f6:9d:be:57:78:b4:7b:c2:5a:8d:88:36:b5:c2:5a:d8:
5a:a7:1c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:25 2026 by rpki-client