Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.mft
File: SfA190v2NQvDef8uJTiC0kaO9Yg.mft (raw, json)
Hash identifier: 3YQ4miU8npTvGe0dGfFaNR39aq0tPqR5DVEsMqzi9lk=
Subject key identifier: 08:75:CF:2B:FA:3A:B3:0A:21:7A:C8:04:2F:15:E9:A0:01:F2:92:73
Authority key identifier: 49:F0:35:F7:4B:F6:35:0B:C3:79:FF:2E:25:38:82:D2:46:8E:F5:88
Certificate issuer: /CN=49f035f74bf6350bc379ff2e253882d2468ef588
Certificate serial: 019D29CE44A9F0332751D608E464528AB9E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfA190v2NQvDef8uJTiC0kaO9Yg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.mft
Manifest number: 059D
Signing time: Thu 26 Mar 2026 11:01:16 +0000
Manifest this update: Thu 26 Mar 2026 11:01:16 +0000
Manifest next update: Fri 27 Mar 2026 11:01:16 +0000
Files and hashes: 1: SfA190v2NQvDef8uJTiC0kaO9Yg.crl (hash: XzLpErVK5ziEq6BGFAykW8bjK9fZQkxvRgdFvjr9gjA=)
2: r7-SCz1aeewC1b28_7aTBEERbc8.roa (hash: GlvMAyQ8rtSS7ofDdsa5bNcv30a7phC116f+dSElfio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SfA190v2NQvDef8uJTiC0kaO9Yg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:44:a9:f0:33:27:51:d6:08:e4:64:52:8a:b9:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f035f74bf6350bc379ff2e253882d2468ef588
Validity
Not Before: Mar 26 11:01:16 2026 GMT
Not After : Mar 27 11:01:16 2026 GMT
Subject: CN=0875cf2bfa3ab30a217ac8042f15e9a001f29273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7b:45:b3:b3:41:59:8e:ba:1c:f1:2c:99:fa:
ed:28:d0:91:6a:1e:35:4d:10:dd:d7:1b:b4:b1:e3:
b1:8b:26:ff:27:07:77:cf:c4:e8:4f:84:2d:67:a9:
77:66:65:f1:fa:31:2e:7c:d9:23:a1:7c:6c:48:3d:
ff:82:89:b2:a5:b5:5b:38:f2:24:2c:52:69:a5:72:
1a:4e:59:98:70:c7:34:35:ba:cd:cd:e8:aa:fa:d3:
91:63:ac:0a:a2:0e:4a:17:c7:0c:4d:80:ce:21:14:
a2:42:4b:e7:dd:f2:59:17:9c:74:ca:b7:a8:ad:47:
0e:eb:71:a4:9b:81:b7:76:9b:b0:89:09:75:d6:b6:
99:a0:25:18:90:13:b3:e6:20:67:35:2b:26:54:be:
38:60:93:5a:d2:6d:77:64:8e:56:7e:53:30:04:8c:
af:e4:1b:b1:3a:c8:eb:65:2e:08:16:ce:7e:7f:b1:
a5:5a:37:06:59:36:ef:53:86:81:60:4c:75:fe:1c:
9c:28:3f:c9:77:c1:f5:8c:e2:61:a9:f3:68:29:7b:
83:3d:67:29:ca:2f:1c:0b:ef:dc:ad:23:a8:14:a9:
5f:fe:ad:9c:78:af:db:4d:09:05:3f:07:3a:2a:75:
1e:ee:75:c2:b9:dd:85:81:07:7e:41:7b:60:b8:b4:
4f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:75:CF:2B:FA:3A:B3:0A:21:7A:C8:04:2F:15:E9:A0:01:F2:92:73
X509v3 Authority Key Identifier:
keyid:49:F0:35:F7:4B:F6:35:0B:C3:79:FF:2E:25:38:82:D2:46:8E:F5:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfA190v2NQvDef8uJTiC0kaO9Yg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:35:bc:f5:3e:e3:e2:b2:72:df:dc:aa:8b:02:f8:a5:11:f8:
8e:f3:51:e3:19:16:0d:8b:6c:d0:5a:87:7f:b8:95:40:86:05:
de:a1:57:d5:61:71:da:27:fe:e5:11:68:bf:ce:e3:8e:01:49:
f7:54:0c:ca:b8:d6:33:dc:3e:80:03:20:c5:b0:a0:b0:c5:a5:
0c:09:d5:4d:d9:f3:37:1f:bc:19:13:a2:8a:15:b6:18:53:27:
ed:b8:52:e5:57:6f:95:8c:3d:fc:23:81:9f:c9:44:37:54:05:
3d:e4:ae:39:2c:32:59:46:8d:ce:18:81:79:c9:e2:2a:45:fb:
29:9b:42:c8:6e:d0:d2:43:e7:e7:fe:b4:cc:2e:e6:80:d3:6c:
c6:b5:a0:77:ea:91:89:44:06:01:21:c1:e2:72:23:dd:18:c1:
aa:01:1e:c8:f1:49:42:15:7f:f3:00:39:77:1a:e2:80:d0:22:
45:1c:ab:17:9c:d2:f2:04:d0:7a:98:17:ce:58:a1:c3:c0:40:
2b:08:67:cc:ff:83:66:c1:88:ec:f7:23:3c:30:05:3b:8d:dc:
c2:ee:1e:50:2b:4a:aa:6a:61:24:73:7c:d7:fd:0c:c5:aa:d7:
1a:c3:de:8c:f3:7a:0d:6b:e1:bc:0a:26:72:39:6f:fb:7f:f3:
c9:34:82:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:39:24 2026 by rpki-client