Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft
File: SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft (raw, json)
Hash identifier: 7WPe3/UatxSyhkH/FUaN+zRQfS9CJ6AKN1i8ezMiH50=
Subject key identifier: F6:9C:2E:AB:E8:46:E6:25:58:F3:21:98:46:C8:FC:BC:1C:9D:97:28
Authority key identifier: 49:F2:70:2D:1A:07:26:17:5E:39:AF:16:97:4E:53:75:DC:AE:FC:31
Certificate issuer: /CN=49f2702d1a0726175e39af16974e5375dcaefc31
Certificate serial: 019F94A4E40A5781840638F5A770ADB77D97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfJwLRoHJhdeOa8Wl05Tddyu_DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft
Manifest number: 1908
Signing time: Fri 24 Jul 2026 15:01:01 +0000
Manifest this update: Fri 24 Jul 2026 15:01:01 +0000
Manifest next update: Sat 25 Jul 2026 15:01:01 +0000
Files and hashes: 1: 9MnmN8BJQf0kOHp6EAYtsFBmQ8A.roa (hash: GaU3NhS7R0xUqYKJ24HpGBHtr1NKfsNpWx13se1RpD8=)
2: SfJwLRoHJhdeOa8Wl05Tddyu_DE.crl (hash: hCzvD+Wo60IStb13pejb0BuzM9PajptdkgupXw9laMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SfJwLRoHJhdeOa8Wl05Tddyu_DE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 15:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a4:e4:0a:57:81:84:06:38:f5:a7:70:ad:b7:7d:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f2702d1a0726175e39af16974e5375dcaefc31
Validity
Not Before: Jul 24 15:01:01 2026 GMT
Not After : Jul 25 15:01:01 2026 GMT
Subject: CN=f69c2eabe846e62558f3219846c8fcbc1c9d9728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:59:da:d5:30:8d:26:56:9c:72:fc:15:41:25:
08:4f:4c:75:52:33:63:15:1f:b5:31:01:e0:42:74:
c5:7a:31:d5:88:08:29:70:7c:75:3c:db:60:98:ea:
7c:2a:e7:4b:a4:74:ba:92:12:93:b8:48:a1:90:db:
40:4a:dd:e0:67:44:73:78:09:bf:0c:db:bf:3e:e5:
00:aa:83:4f:17:b2:ae:f0:0c:bd:7a:60:4d:91:07:
2a:40:30:cb:14:06:ba:0e:18:40:64:e2:7b:da:65:
fb:0e:cc:0e:f7:14:b1:e1:f7:6b:25:4a:4b:ff:f5:
3f:c1:d9:ed:c6:eb:04:6f:fa:e0:8f:c1:a0:6a:16:
50:bb:38:84:83:8e:c8:90:98:1d:08:b7:93:bf:a5:
10:c7:b9:d1:ab:b2:aa:4a:3c:2d:b2:fa:03:76:6d:
1b:ef:6c:7c:ee:10:d6:5a:23:d2:6b:2f:65:b0:77:
11:e4:af:bb:3a:7b:53:7d:7e:89:59:20:25:28:de:
2c:68:9c:25:42:c8:5b:fc:80:c7:88:50:ae:d7:cc:
61:d9:ad:63:4a:e8:0c:fb:1d:df:9d:6c:e0:ac:96:
78:4c:79:7b:a9:7d:ec:48:97:cb:bf:7b:22:b4:32:
7d:2f:8b:c6:86:81:af:0f:ef:b8:3c:df:39:50:de:
2e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:9C:2E:AB:E8:46:E6:25:58:F3:21:98:46:C8:FC:BC:1C:9D:97:28
X509v3 Authority Key Identifier:
keyid:49:F2:70:2D:1A:07:26:17:5E:39:AF:16:97:4E:53:75:DC:AE:FC:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfJwLRoHJhdeOa8Wl05Tddyu_DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:66:af:d7:52:8c:03:31:9b:ec:45:f2:3c:75:43:d6:e4:a1:
8c:9c:ea:b1:f4:2e:c5:c8:c5:5d:41:32:85:0e:32:0e:24:84:
e3:fa:d4:e4:83:a5:07:9c:a3:4c:9d:64:20:3b:cd:3d:26:38:
11:d0:63:20:28:de:f2:fd:af:a6:c3:cc:90:59:b2:5d:4a:65:
b0:f8:63:be:b2:54:74:fd:d5:43:d4:9a:09:55:b6:76:c9:e6:
bd:8f:3b:6d:46:aa:d9:ab:21:1d:f9:01:10:f9:e3:07:b0:58:
d5:46:bc:d4:b6:16:66:06:fe:cc:9b:7c:82:d8:58:0a:80:41:
79:40:a4:b0:67:ba:1c:73:12:e2:16:dd:c0:85:d2:4e:fb:51:
aa:9c:69:9d:32:9c:03:ba:b1:99:c8:a6:c9:b7:2a:4b:18:91:
86:f9:35:7b:d2:40:f1:53:e7:97:d7:99:8d:af:7c:75:09:ac:
4b:f2:41:ec:5c:16:3a:bb:e4:a6:a6:08:51:75:0a:52:32:bb:
e4:72:d6:ff:aa:2c:0b:de:60:a5:b6:5e:cd:77:d5:46:ce:fe:
cb:d0:2f:af:cb:c0:90:f1:32:ce:02:39:64:77:37:7f:6c:44:
bf:68:1d:d1:7a:00:6e:92:0d:80:13:c3:ae:c4:aa:90:16:90:
41:a1:10:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:13:56 2026 by rpki-client