Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.mft
File: sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.mft (raw, json)
Hash identifier: MDnRxmqDLOHhbIcAaXHAziHNYLzuCEZPeMbPP/Ev0CY=
Subject key identifier: 25:0E:72:41:EC:0F:23:79:0C:C1:A4:5D:83:1F:A3:49:78:DB:D4:72
Authority key identifier: B1:F0:25:2F:FA:42:08:3A:7D:FD:5C:6C:5E:72:7D:64:B9:11:CD:9F
Certificate issuer: /CN=b1f0252ffa42083a7dfd5c6c5e727d64b911cd9f
Certificate serial: 019D27047C4F8F6DC1AABACA5CE4CA99EFE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.mft
Manifest number: 0F95
Signing time: Wed 25 Mar 2026 22:01:38 +0000
Manifest this update: Wed 25 Mar 2026 22:01:38 +0000
Manifest next update: Thu 26 Mar 2026 22:01:38 +0000
Files and hashes: 1: sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.crl (hash: ERDy1hreEUw62IdQUV8OeJjKopIdi/kliL835hSOzBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:7c:4f:8f:6d:c1:aa:ba:ca:5c:e4:ca:99:ef:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1f0252ffa42083a7dfd5c6c5e727d64b911cd9f
Validity
Not Before: Mar 25 22:01:38 2026 GMT
Not After : Mar 26 22:01:38 2026 GMT
Subject: CN=250e7241ec0f23790cc1a45d831fa34978dbd472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:55:f9:6b:e0:71:41:c1:93:21:07:ec:56:2e:
74:54:c8:9b:16:83:ab:94:79:88:44:03:e6:24:3a:
b2:58:a6:a5:02:fb:ae:cb:c9:16:94:43:39:4a:e2:
44:a9:d1:6d:88:99:44:b3:28:55:ba:2e:43:13:4b:
b3:3c:85:c8:36:98:6f:c7:26:cd:d5:b9:0d:27:88:
72:06:07:34:8e:35:43:13:9c:e9:45:7a:1a:3e:f5:
82:06:e0:ad:27:dc:05:d5:6f:16:76:2b:3c:53:98:
71:13:ea:12:9e:c4:e8:c3:62:d4:2f:8e:fd:2e:df:
30:8f:86:8b:73:14:d7:6b:69:d4:2b:ad:2b:db:ae:
4b:8f:79:14:10:2c:07:3b:96:eb:e4:a2:23:dd:62:
19:e9:02:86:dd:a1:ae:7a:26:d8:ca:2f:c4:80:ab:
30:1a:44:41:5f:80:ea:68:87:24:69:94:68:05:e8:
f4:da:c0:ee:cd:d6:92:65:37:17:b9:b8:57:15:cb:
ae:80:2f:e1:e5:5d:6d:4b:d3:d3:90:89:6e:1e:a6:
33:c3:06:5f:3a:f0:1b:02:3e:00:a5:d9:5d:c8:12:
9c:9f:fc:be:61:cc:3e:2d:92:26:d1:b2:81:23:8c:
a0:64:0f:e5:90:84:f8:e2:6c:db:c1:1c:41:f9:e0:
b3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:0E:72:41:EC:0F:23:79:0C:C1:A4:5D:83:1F:A3:49:78:DB:D4:72
X509v3 Authority Key Identifier:
keyid:B1:F0:25:2F:FA:42:08:3A:7D:FD:5C:6C:5E:72:7D:64:B9:11:CD:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:95:be:c8:ef:cc:cd:97:35:21:59:df:be:22:07:2b:56:1a:
8f:9b:54:8c:41:8f:ab:2e:45:b7:1b:e9:70:3d:de:59:a3:41:
1c:37:08:19:75:94:58:07:7f:50:01:8e:93:16:30:a1:0b:8b:
50:ff:a5:96:95:6d:36:01:d1:ee:8b:66:36:36:00:24:03:e4:
2b:97:d2:d3:2f:1b:e5:ff:4f:7f:65:9c:8a:2a:47:6c:b9:7c:
ac:9e:25:68:bb:45:d6:4b:12:51:35:19:17:ad:ae:10:6d:fa:
0b:60:85:01:8b:5e:00:2a:fc:07:36:59:f0:b5:ae:c4:08:cb:
4f:cb:cb:c2:4a:35:ef:68:d0:6b:d7:97:c5:80:8f:11:17:16:
dc:e5:65:0e:15:8d:b6:cc:32:5a:c0:3e:27:5f:8b:d6:87:ef:
84:01:f1:9e:8a:e2:c7:dd:55:34:9d:dc:bc:23:f5:0d:83:0f:
e2:89:10:d4:5a:98:96:18:4e:db:c1:ea:a4:2e:48:10:70:bc:
f9:4c:30:3d:50:f8:db:e1:1d:42:bb:dc:d7:3a:f6:bb:ec:a7:
5d:ae:72:e0:b8:c9:44:c7:da:aa:e0:04:e4:f5:9e:5b:29:20:
7a:25:12:3e:fe:b5:92:bc:0b:ad:74:17:ec:a3:03:2d:6e:ed:
12:61:b4:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:21 2026 by rpki-client