Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft
File: SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft (raw, json)
Hash identifier: d4SBQAdg6LNWUwP7bS8OIA3Ml+iMtD8SyugEr0HSUOQ=
Subject key identifier: 35:90:54:57:94:6E:50:84:D0:B9:EF:B1:34:1B:10:82:56:82:C5:D8
Authority key identifier: 49:F8:06:97:FE:2E:2D:97:B5:91:AD:5B:91:58:05:55:A4:4D:03:88
Certificate issuer: /CN=49f80697fe2e2d97b591ad5b91580555a44d0388
Certificate serial: 019D2816D9E0609593104FDBAF59F156E684
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfgGl_4uLZe1ka1bkVgFVaRNA4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft
Manifest number: 1870
Signing time: Thu 26 Mar 2026 03:01:19 +0000
Manifest this update: Thu 26 Mar 2026 03:01:19 +0000
Manifest next update: Fri 27 Mar 2026 03:01:19 +0000
Files and hashes: 1: SfgGl_4uLZe1ka1bkVgFVaRNA4g.crl (hash: Ae/GLZycRWL3Ciq1Y5Pu4CuOfROJV2ssz52DuPc40DU=)
2: r_1SBfNhdBcm7JVeR9X_A84AJes.roa (hash: 5FQO7eCKudZ+J7HgNfZUcYEMcJXj0nI8UpKfM1ybpwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/SfgGl_4uLZe1ka1bkVgFVaRNA4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:d9:e0:60:95:93:10:4f:db:af:59:f1:56:e6:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f80697fe2e2d97b591ad5b91580555a44d0388
Validity
Not Before: Mar 26 03:01:19 2026 GMT
Not After : Mar 27 03:01:19 2026 GMT
Subject: CN=35905457946e5084d0b9efb1341b10825682c5d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fd:8c:f0:bf:b6:48:8b:a5:7b:38:b1:e1:b1:
40:c5:72:22:44:dd:5a:9f:af:93:84:4f:6a:d9:78:
da:ed:cb:ab:96:92:21:30:48:d3:d7:5b:c0:a1:70:
89:d2:6d:ac:b9:b4:a5:a8:a8:7c:ef:66:c3:e6:90:
16:c3:6e:7e:5f:99:10:7e:ae:6f:a0:a4:65:fe:e2:
9a:90:fd:5d:0c:1a:6a:48:3a:01:b3:df:32:96:9b:
cf:e8:b0:73:86:65:d0:d5:08:f4:88:e4:12:a8:5a:
ae:eb:fc:07:1a:9c:a8:b9:48:68:e2:d0:d9:43:e7:
2d:48:5a:08:79:63:55:f2:c1:72:8a:c8:66:13:35:
76:e6:c7:4e:c8:87:f5:7f:4a:e6:62:67:b1:e0:ea:
aa:6f:18:ce:6d:ab:6c:6e:43:af:7b:78:8e:b2:99:
6d:b9:96:23:9f:ff:ee:0c:49:70:9e:44:b6:1a:b7:
a4:0d:7e:8b:9b:03:c1:23:ed:52:fb:25:b8:56:ff:
f7:60:46:57:83:20:45:6a:f5:cb:49:30:bb:d8:8f:
29:e8:b2:67:99:9a:61:72:53:ee:ff:6c:5d:b6:3b:
bd:71:2c:ec:b7:f2:b2:9b:df:ac:08:65:aa:ae:21:
7f:0d:f5:fe:64:a1:79:21:91:26:d2:ab:d0:34:3b:
d9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:90:54:57:94:6E:50:84:D0:B9:EF:B1:34:1B:10:82:56:82:C5:D8
X509v3 Authority Key Identifier:
keyid:49:F8:06:97:FE:2E:2D:97:B5:91:AD:5B:91:58:05:55:A4:4D:03:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfgGl_4uLZe1ka1bkVgFVaRNA4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/24df72-fccc-48df-a5ae-1a64a8077b14/1/SfgGl_4uLZe1ka1bkVgFVaRNA4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ff:c5:35:52:41:e1:8b:db:e8:79:01:94:ab:06:54:22:df:
81:8e:cc:b7:77:a1:99:84:a6:97:8d:e1:94:c0:43:b4:92:40:
64:33:02:62:c6:b6:10:f1:69:83:60:70:4d:2c:33:11:b3:54:
33:61:2a:0a:28:d2:b9:58:31:d3:68:b1:5f:7d:ef:bd:76:a5:
78:24:a3:10:92:46:94:c7:2c:b1:a7:93:ff:a7:f5:7c:24:a2:
99:28:20:91:d5:bc:35:91:03:ea:62:96:1c:8d:8c:d2:fa:2b:
67:74:eb:db:8b:c1:90:ca:dc:81:e7:8d:80:00:41:12:9d:c2:
36:64:e2:7a:2b:83:b0:02:b3:8d:a1:ab:1a:58:6a:d7:21:db:
84:b7:89:6d:ab:a8:8c:ad:73:07:fd:ec:bf:0a:cb:99:97:7c:
d8:32:42:83:c4:7c:f4:f9:f1:af:fa:4f:f2:bf:93:df:9c:00:
00:fd:2c:76:f7:fc:21:7f:a2:81:38:b2:be:00:9c:25:d1:23:
e9:a5:32:f0:cd:09:df:6b:fc:2f:02:71:83:83:df:a7:27:d9:
9d:74:d7:93:cc:87:49:5f:4e:2d:0c:02:f1:4a:76:bf:51:26:
43:fb:33:3d:ec:29:cb:cb:57:26:05:af:bd:1a:05:6c:72:9e:
2b:68:26:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:27:06 2026 by rpki-client