Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/a998bb-3bc3-4597-8dcc-c4f22536ab05/1/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.mft
File: Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.mft (raw, json)
Hash identifier: uBAgXilPVBYLIllPPJY+E7jrmphkHXE22l40mjBUhGY=
Subject key identifier: 26:9F:C8:F7:81:A5:94:94:AA:7A:AB:CE:0D:2D:61:2D:A0:AE:B7:44
Authority key identifier: 49:F9:B8:80:F2:59:B8:81:90:70:2C:22:BF:83:21:71:B7:59:74:34
Certificate issuer: /CN=49f9b880f259b88190702c22bf832171b7597434
Certificate serial: 019D2704162C3AF247604FA20AC4424F6491
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/a998bb-3bc3-4597-8dcc-c4f22536ab05/1/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.mft
Manifest number: 14D9
Signing time: Wed 25 Mar 2026 22:01:12 +0000
Manifest this update: Wed 25 Mar 2026 22:01:12 +0000
Manifest next update: Thu 26 Mar 2026 22:01:12 +0000
Files and hashes: 1: Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.crl (hash: ZFjPWCHQ742ehGhUS3G5XU96UERxuWBqZg8XGnYlzxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/a998bb-3bc3-4597-8dcc-c4f22536ab05/1/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/a998bb-3bc3-4597-8dcc-c4f22536ab05/1/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:16:2c:3a:f2:47:60:4f:a2:0a:c4:42:4f:64:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f9b880f259b88190702c22bf832171b7597434
Validity
Not Before: Mar 25 22:01:12 2026 GMT
Not After : Mar 26 22:01:12 2026 GMT
Subject: CN=269fc8f781a59494aa7aabce0d2d612da0aeb744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:3e:24:a7:67:ed:a6:8e:35:e5:bc:ba:18:2d:
d6:fe:b4:d2:bb:0c:f5:af:f0:96:e1:02:34:c3:37:
c5:0c:cc:8c:97:87:97:f2:4d:a0:23:da:a5:16:cb:
47:6c:17:c0:db:f2:81:c3:f3:e3:cf:00:e0:2e:57:
46:50:ea:32:a5:c1:a5:72:6c:92:28:5a:3a:ce:30:
c7:be:85:8b:29:02:8c:98:b1:8f:a6:5a:e2:68:88:
16:59:86:34:8d:f8:87:58:22:1b:f2:e2:c0:bb:ca:
a9:f1:3a:03:ea:4f:02:16:1e:88:0b:8d:6c:57:d1:
75:aa:f9:01:1f:1f:8f:7f:f1:44:be:f5:46:88:06:
1f:58:c9:0d:e9:82:f3:dd:73:62:c9:bf:78:ae:b7:
3b:82:50:d6:7b:3a:db:b5:8f:8e:5c:d8:64:cd:a8:
7b:0e:74:06:5f:1e:72:07:e4:0d:ef:e0:c1:a5:1c:
ae:ae:b3:2b:d3:c5:86:b1:35:ac:55:39:ba:e7:bd:
5f:4d:0e:04:e5:83:df:88:d8:17:5d:49:81:b7:e3:
cd:bb:cd:04:fe:3b:89:b4:a8:be:fd:d1:71:49:d7:
94:51:e9:b4:f1:f6:b2:b3:e0:60:71:8a:91:2d:e0:
21:05:c7:75:7a:82:55:c9:da:8b:f0:f8:e2:70:12:
bf:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:9F:C8:F7:81:A5:94:94:AA:7A:AB:CE:0D:2D:61:2D:A0:AE:B7:44
X509v3 Authority Key Identifier:
keyid:49:F9:B8:80:F2:59:B8:81:90:70:2C:22:BF:83:21:71:B7:59:74:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a998bb-3bc3-4597-8dcc-c4f22536ab05/1/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a998bb-3bc3-4597-8dcc-c4f22536ab05/1/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:90:68:b3:3d:cf:83:93:46:f0:bb:46:8e:ea:7b:3c:01:d5:
6e:8d:4e:60:ed:10:db:7c:39:f5:c1:87:b1:c6:dc:b1:f8:4e:
ec:5f:e3:8a:a8:8e:5f:e3:fc:f5:ff:88:5a:8c:e3:91:63:f0:
af:90:fe:36:09:d5:b4:6b:17:bb:a0:c6:5a:7f:98:23:88:24:
43:ca:b5:1c:6a:90:03:14:af:d7:21:81:43:d1:6f:f1:7b:46:
78:e7:1d:ba:16:c6:fd:ff:ef:d8:85:ba:88:ed:58:2b:40:8d:
04:ab:ce:21:0c:25:22:a9:9a:b3:1a:1d:99:90:9c:45:93:58:
36:fa:de:ed:a9:42:2b:0b:73:72:1e:0f:c9:32:83:44:ce:9a:
7b:d2:68:df:be:48:5f:7d:fb:76:66:9a:3d:56:62:0f:ca:5d:
cb:69:83:08:ba:f3:b4:82:fd:91:f2:3b:f0:ee:a7:6d:da:d9:
37:fd:c0:e1:ec:b8:3a:90:ab:27:9d:ec:23:99:97:ad:3f:f3:
52:10:d3:c2:8b:ff:ab:1e:31:62:b6:1b:65:05:63:db:dd:26:
31:d8:40:a2:48:c2:89:ac:e2:5a:a1:63:5e:8d:31:27:52:57:
32:24:cd:2f:c5:f7:fd:4f:9c:bd:ea:4a:4d:34:60:a9:bd:70:
c6:5d:da:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBBYsOvJHYE+iCsRCT2SRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZjliODgwZjI1OWI4ODE5MDcwMmMyMmJmODMyMTcxYjc1
OTc0MzQwHhcNMjYwMzI1MjIwMTEyWhcNMjYwMzI2MjIwMTEyWjAzMTEwLwYDVQQD
EygyNjlmYzhmNzgxYTU5NDk0YWE3YWFiY2UwZDJkNjEyZGEwYWViNzQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6j4kp2ftpo415by6GC3W/rTSuwz1
r/CW4QI0wzfFDMyMl4eX8k2gI9qlFstHbBfA2/KBw/PjzwDgLldGUOoypcGlcmyS
KFo6zjDHvoWLKQKMmLGPplriaIgWWYY0jfiHWCIb8uLAu8qp8ToD6k8CFh6IC41s
V9F1qvkBHx+Pf/FEvvVGiAYfWMkN6YLz3XNiyb94rrc7glDWezrbtY+OXNhkzah7
DnQGXx5yB+QN7+DBpRyurrMr08WGsTWsVTm6571fTQ4E5YPfiNgXXUmBt+PNu80E
/juJtKi+/dFxSdeUUem08fays+BgcYqRLeAhBcd1eoJVydqL8PjicBK/rwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCafyPeBpZSUqnqrzg0tYS2grrdEMB8GA1UdIwQY
MBaAFEn5uIDyWbiBkHAsIr+DIXG3WXQ0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2ZtNGdQSlp1SUdRY0N3aXY0TWhjYmRaZERRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9hOTk4YmItM2JjMy00NTk3LThkY2Mt
YzRmMjI1MzZhYjA1LzEvU2ZtNGdQSlp1SUdRY0N3aXY0TWhjYmRaZERRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9hOTk4YmItM2JjMy00NTk3LThkY2MtYzRmMjI1MzZhYjA1
LzEvU2ZtNGdQSlp1SUdRY0N3aXY0TWhjYmRaZERRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAypBosz3P
g5NG8LtGjup7PAHVbo1OYO0Q23w59cGHscbcsfhO7F/jiqiOX+P89f+IWozjkWPw
r5D+NgnVtGsXu6DGWn+YI4gkQ8q1HGqQAxSv1yGBQ9Fv8XtGeOcduhbG/f/v2IW6
iO1YK0CNBKvOIQwlIqmasxodmZCcRZNYNvre7alCKwtzch4PyTKDRM6ae9Jo375I
X337dmaaPVZiD8pdy2mDCLrztIL9kfI78O6nbdrZN/3A4ey4OpCrJ53sI5mXrT/z
UhDTwov/qx4xYrYbZQVj290mMdhAokjCiaziWqFjXo0xJ1JXMiTNL8X3/U+cvepK
TTRgqb1wxl3aWQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:58:50 2026 by rpki-client