Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft
File: SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft (raw, json)
Hash identifier: ye+eJpJFOeTGo5ZmLDmHkwcc9KmEBOMG+aHsvUJHu58=
Subject key identifier: 0D:D8:0E:E7:A9:7A:BC:BD:16:14:68:48:1F:42:99:54:75:08:BD:0F
Authority key identifier: 49:F2:70:2D:1A:07:26:17:5E:39:AF:16:97:4E:53:75:DC:AE:FC:31
Certificate issuer: /CN=49f2702d1a0726175e39af16974e5375dcaefc31
Certificate serial: 01A1227823113BE18C1302228C537313D26C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfJwLRoHJhdeOa8Wl05Tddyu_DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft
Manifest number: 19D6
Signing time: Fri 09 Oct 2026 21:01:00 +0000
Manifest this update: Fri 09 Oct 2026 21:01:00 +0000
Manifest next update: Sat 10 Oct 2026 21:01:00 +0000
Files and hashes: 1: 9MnmN8BJQf0kOHp6EAYtsFBmQ8A.roa (hash: GaU3NhS7R0xUqYKJ24HpGBHtr1NKfsNpWx13se1RpD8=)
2: SfJwLRoHJhdeOa8Wl05Tddyu_DE.crl (hash: bDEfXgMgOGcax9zNw3qSM2sRos9KulUXKz5yynZ/8co=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SfJwLRoHJhdeOa8Wl05Tddyu_DE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 17:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:22:78:23:11:3b:e1:8c:13:02:22:8c:53:73:13:d2:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f2702d1a0726175e39af16974e5375dcaefc31
Validity
Not Before: Oct 9 21:01:00 2026 GMT
Not After : Oct 10 21:01:00 2026 GMT
Subject: CN=0dd80ee7a97abcbd161468481f4299547508bd0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:22:84:10:e8:a7:57:b1:84:49:ec:7e:90:fe:
bf:d4:e2:03:59:0a:a2:f4:e6:1a:26:97:58:96:77:
0c:01:4c:95:6c:da:14:b1:e8:87:5e:a2:c6:32:f1:
cf:1d:b1:6a:54:04:16:7a:10:ef:e9:e6:ad:6a:62:
d3:6b:56:45:1e:94:4c:6c:6a:b0:7f:4b:1e:ca:5e:
f1:a2:fd:b7:e4:99:f4:9f:91:a3:cb:de:b5:15:af:
55:eb:67:cf:99:35:0d:b1:4d:72:9c:77:6b:0b:66:
12:b7:b2:4c:5b:57:60:fd:b8:2e:70:8d:99:c0:8a:
77:0f:51:ad:76:d0:ea:58:72:e8:05:f1:35:5f:94:
68:7c:16:23:a2:d8:fe:b0:6c:03:d8:3c:ea:7a:6c:
d0:cb:df:ee:e6:7d:dc:a1:d2:e8:be:85:ff:c8:14:
85:75:1e:77:19:b0:6d:b4:d4:84:e1:11:de:9e:d9:
8d:20:d1:d2:70:7f:11:a9:25:28:29:8e:75:b9:e0:
d5:be:24:7d:b3:10:af:aa:2f:d3:96:90:f6:11:9e:
7e:53:35:c4:32:e6:5a:2d:cd:78:b0:ac:fe:23:23:
ad:e5:7d:1e:d6:fa:29:7b:24:06:ef:1c:a2:34:0d:
64:44:70:7c:0f:30:82:90:ff:75:e3:5b:16:33:bc:
80:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:D8:0E:E7:A9:7A:BC:BD:16:14:68:48:1F:42:99:54:75:08:BD:0F
X509v3 Authority Key Identifier:
keyid:49:F2:70:2D:1A:07:26:17:5E:39:AF:16:97:4E:53:75:DC:AE:FC:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfJwLRoHJhdeOa8Wl05Tddyu_DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ec:99:44:44:cb:a7:d6:4e:73:95:b8:2e:58:3a:bf:a8:1c:
cb:89:21:c5:84:d6:96:8a:7a:f6:7a:23:bd:67:e6:05:42:24:
b0:9f:c1:ac:a4:97:c8:90:3d:51:be:fe:f0:ed:21:03:50:f7:
7a:83:c5:71:33:48:06:86:2a:ca:ba:ad:56:22:9d:4e:d8:3c:
d8:39:14:c1:54:91:e9:32:9f:07:79:83:3a:1a:10:69:26:10:
11:a1:d9:ca:0f:1c:21:df:6e:69:ec:f2:b3:92:9a:4d:e7:cb:
a0:f6:b7:69:62:16:a8:33:2f:da:16:fa:2f:69:f0:07:d2:ee:
68:11:0a:b4:db:4d:d2:ca:06:2f:e2:6d:05:27:2d:7a:c2:72:
7e:ff:a4:9d:44:cc:e6:4d:1c:2c:34:e4:3a:69:dc:4e:28:8f:
67:96:33:fe:83:21:64:f4:26:49:6f:3a:c3:dc:63:c5:78:e6:
60:7f:d5:07:0c:21:03:83:b2:e5:19:98:19:bd:ff:ca:1a:90:
12:53:98:dc:2f:f0:f8:d0:92:df:73:ae:d2:ce:70:a3:a6:75:
1d:27:b1:6b:f8:dc:df:94:b9:98:f1:b8:04:4d:a8:df:16:11:
52:60:a6:09:ca:0e:7e:29:52:3e:41:7e:73:a7:09:c2:11:40:
3f:7e:fa:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 03:07:31 2026 by rpki-client