Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft
File: SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft (raw, json)
Hash identifier: v0iXmodNXqUO+yBJnq46azWPSH3922PF+OoIJSXh05s=
Subject key identifier: D1:46:B1:2B:CE:F1:90:4C:5B:14:FE:65:BA:F8:05:9A:D1:C5:B1:08
Authority key identifier: 48:53:75:19:1D:1C:2E:50:98:21:08:FD:D4:07:BB:CF:73:E9:79:5C
Certificate issuer: /CN=485375191d1c2e50982108fdd407bbcf73e9795c
Certificate serial: 019D27A91AB49D570A712D3412868557679F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFN1GR0cLlCYIQj91Ae7z3PpeVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft
Manifest number: 1253
Signing time: Thu 26 Mar 2026 01:01:26 +0000
Manifest this update: Thu 26 Mar 2026 01:01:26 +0000
Manifest next update: Fri 27 Mar 2026 01:01:26 +0000
Files and hashes: 1: SFN1GR0cLlCYIQj91Ae7z3PpeVw.crl (hash: PMO9hXHQjw5ykICSksfnrtaJRGz6TneCadIkJay+c20=)
2: d8KM-uWtl5I_naikawUKGzZuO94.roa (hash: 1CwXzGBT5z5cvBmqOXP3+kg+AY9+POz75YELMqDBG6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFN1GR0cLlCYIQj91Ae7z3PpeVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:1a:b4:9d:57:0a:71:2d:34:12:86:85:57:67:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485375191d1c2e50982108fdd407bbcf73e9795c
Validity
Not Before: Mar 26 01:01:26 2026 GMT
Not After : Mar 27 01:01:26 2026 GMT
Subject: CN=d146b12bcef1904c5b14fe65baf8059ad1c5b108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:f0:c6:4d:14:22:82:c3:dc:d8:61:1d:b4:a2:
8e:27:e7:6e:a4:3d:b9:54:54:94:6c:bb:db:d4:47:
de:64:d3:80:e6:15:61:ed:ff:b5:be:57:d7:60:93:
fb:b3:db:8e:76:b3:6a:47:72:e8:8e:8c:9c:f5:82:
9e:65:1c:6e:24:98:da:2f:99:e9:c4:29:96:86:ac:
5b:23:57:80:33:78:ae:1d:1c:b6:c3:94:1c:fd:f7:
9e:70:f7:7a:5f:10:00:99:2c:03:e6:9c:52:45:83:
7d:2f:0a:f3:c0:d1:c8:7e:94:43:a7:1a:45:b4:1a:
71:58:6d:ba:e9:eb:f6:ed:46:77:e6:05:c9:57:d9:
d2:0c:f6:76:b0:81:0d:4d:05:5b:4f:67:00:59:77:
7f:07:a6:f4:d5:3d:49:57:f0:d7:2d:dc:98:c2:4e:
d5:c0:cc:8c:cf:3d:05:a7:35:73:d6:41:cb:7d:6d:
7c:28:29:24:77:4e:21:8a:0d:d3:c8:c0:f6:42:16:
e9:40:1d:fa:18:14:94:54:41:ee:ce:f4:3d:86:48:
df:d3:32:96:42:ff:49:6c:84:59:4d:25:61:df:8f:
7f:eb:94:38:52:1a:47:ea:8d:76:f9:7c:c0:80:9e:
83:53:1d:7c:fe:2d:80:14:07:07:1b:bd:65:65:bc:
2a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:46:B1:2B:CE:F1:90:4C:5B:14:FE:65:BA:F8:05:9A:D1:C5:B1:08
X509v3 Authority Key Identifier:
keyid:48:53:75:19:1D:1C:2E:50:98:21:08:FD:D4:07:BB:CF:73:E9:79:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFN1GR0cLlCYIQj91Ae7z3PpeVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:01:68:6d:b4:c0:09:96:9d:9c:2d:59:c7:1d:bb:af:87:6c:
39:f9:ef:c3:98:74:62:98:84:bd:5d:3a:74:ba:c2:ae:33:47:
59:34:d8:b9:18:de:00:f0:9e:91:50:64:50:2e:7f:c2:db:63:
d9:49:44:d2:f2:92:c9:cc:ed:d7:32:96:2a:96:35:8c:ca:38:
89:d3:58:0a:bd:63:9d:c3:15:45:33:53:1c:4f:18:66:f7:71:
57:14:70:17:1e:9f:49:fc:d7:4c:cd:7e:1b:67:8b:8c:cd:f4:
82:1b:02:4f:92:10:68:96:03:60:6f:51:d5:b6:2a:26:e7:05:
a7:05:4a:29:b8:96:54:eb:53:1f:87:33:04:65:44:47:53:37:
c4:8e:92:f0:58:e0:ca:37:8e:8e:8a:9a:5d:6d:22:94:84:b2:
82:e4:52:76:77:39:76:2b:7f:48:53:04:61:4a:e8:98:8f:f6:
79:ff:19:c6:19:d4:0e:44:02:e0:bd:d8:54:10:11:ac:c8:68:
32:45:0e:be:e9:c3:26:8d:d0:52:6a:ea:bd:09:ec:46:96:32:
38:20:94:1a:10:6a:36:38:be:08:ff:6d:11:39:15:16:a1:9f:
fd:0c:66:e3:64:86:fb:15:5a:6c:a9:8e:34:d5:89:f2:b4:07:
84:63:e1:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:13 2026 by rpki-client