Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft
File: SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft (raw, json)
Hash identifier: OzJiO7w8BN/iorFqcr23Y/6E1IzwezTipmRdUXlC5VM=
Subject key identifier: 8B:46:CB:D8:F3:30:77:11:2D:48:A6:39:A0:1F:BF:97:8E:47:A1:A9
Authority key identifier: 49:F2:70:2D:1A:07:26:17:5E:39:AF:16:97:4E:53:75:DC:AE:FC:31
Certificate issuer: /CN=49f2702d1a0726175e39af16974e5375dcaefc31
Certificate serial: 019D28BB0FD8526EFEB960AD7E8A8C5AC4AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfJwLRoHJhdeOa8Wl05Tddyu_DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft
Manifest number: 17C7
Signing time: Thu 26 Mar 2026 06:00:41 +0000
Manifest this update: Thu 26 Mar 2026 06:00:41 +0000
Manifest next update: Fri 27 Mar 2026 06:00:41 +0000
Files and hashes: 1: 9MnmN8BJQf0kOHp6EAYtsFBmQ8A.roa (hash: GaU3NhS7R0xUqYKJ24HpGBHtr1NKfsNpWx13se1RpD8=)
2: SfJwLRoHJhdeOa8Wl05Tddyu_DE.crl (hash: JxkoNKBE+E+xQ3EsHL+oAxMOrOCpAPnLeA0cFhRedrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SfJwLRoHJhdeOa8Wl05Tddyu_DE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:0f:d8:52:6e:fe:b9:60:ad:7e:8a:8c:5a:c4:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f2702d1a0726175e39af16974e5375dcaefc31
Validity
Not Before: Mar 26 06:00:41 2026 GMT
Not After : Mar 27 06:00:41 2026 GMT
Subject: CN=8b46cbd8f33077112d48a639a01fbf978e47a1a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e3:32:71:2b:dc:79:80:54:62:43:1e:25:69:
b7:81:d4:27:8f:a9:97:80:5b:70:79:62:28:8a:69:
62:ae:f7:70:c2:5f:cf:01:cc:c0:7a:4f:ac:94:f0:
77:c1:9c:46:c8:66:7c:8f:24:08:fc:e9:f4:2d:a6:
37:a9:32:cb:49:9f:41:ce:52:e5:df:6c:87:64:77:
b0:3d:d2:0c:37:80:c7:60:63:e8:67:17:fa:95:56:
95:d1:0a:29:f3:c9:ae:9d:57:bc:f2:5c:7a:12:4d:
8e:5a:e4:78:82:88:dd:9b:4a:e4:98:42:44:f9:c1:
35:50:bb:b3:4c:58:2a:ae:3b:c7:df:69:ad:8f:ac:
4b:2f:91:e4:e9:ad:55:2f:af:f2:e5:78:4e:ea:44:
c1:35:26:ad:89:98:b4:25:9e:99:b6:fc:76:fc:b0:
59:11:58:84:1f:28:4e:bf:ab:83:07:5f:c4:43:db:
c6:01:3a:0e:a8:c6:9d:15:38:bd:95:17:42:96:b0:
c6:99:e7:ce:94:99:a1:87:de:ed:11:39:d8:f9:c3:
49:a1:72:d0:b2:67:ba:74:a6:56:a5:29:54:7e:bb:
cb:bf:76:67:2a:5e:ee:3f:46:0a:cb:de:bf:d5:92:
03:32:3e:14:c5:c2:27:70:91:6f:57:90:94:35:cf:
d1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:46:CB:D8:F3:30:77:11:2D:48:A6:39:A0:1F:BF:97:8E:47:A1:A9
X509v3 Authority Key Identifier:
keyid:49:F2:70:2D:1A:07:26:17:5E:39:AF:16:97:4E:53:75:DC:AE:FC:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfJwLRoHJhdeOa8Wl05Tddyu_DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:53:b2:0e:08:2a:cf:3e:a0:66:85:05:6f:53:3b:49:b1:cb:
c0:48:7e:2b:cf:e6:c9:18:b6:38:75:25:7d:6e:fb:01:48:b9:
0b:70:39:6a:bd:d2:bf:97:b6:eb:7f:d6:69:11:7d:47:19:36:
cb:31:22:bc:4e:61:18:56:1d:02:46:18:ad:26:86:c8:da:50:
42:92:4f:c5:47:e2:6c:12:af:88:ed:05:b0:55:36:c0:b4:db:
42:cf:26:31:11:85:87:4f:e5:7c:48:7e:ad:59:3d:12:62:e7:
fb:65:da:85:97:80:4d:f9:58:c8:6a:48:9a:b6:e5:47:88:09:
3f:34:38:03:38:40:1c:68:67:f4:11:dd:a4:3d:00:b3:91:02:
46:7a:ea:61:27:7b:76:1c:8a:ae:85:dd:a0:2b:8e:5e:9c:51:
b5:5b:92:3b:68:2f:4e:9a:3c:82:f2:2f:d6:10:5e:f2:b9:a3:
6a:01:6f:8a:da:95:f5:c1:6c:7d:57:50:3a:db:35:69:d3:20:
99:0c:a5:02:91:d3:55:d6:5e:04:1b:6d:bd:39:e0:26:99:60:
05:6b:c3:ae:56:14:78:11:0b:7c:d4:1d:23:43:3a:fa:c3:3e:
aa:18:e6:37:fb:27:0b:a7:6e:36:61:dd:4c:2c:aa:60:ee:da:
9a:3b:79:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:37:20 2026 by rpki-client