Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.mft
File: SFldSlTtZEITxEYZXjb3jsGig5k.mft (raw, json)
Hash identifier: ughZyh0poQsitSgGIHUmW+TQvlVSHpkM7UnwvR1vZUk=
Subject key identifier: 10:4D:A5:5F:15:5B:B6:93:4A:B3:93:62:C1:33:F7:FA:78:52:01:72
Authority key identifier: 48:59:5D:4A:54:ED:64:42:13:C4:46:19:5E:36:F7:8E:C1:A2:83:99
Certificate issuer: /CN=48595d4a54ed644213c446195e36f78ec1a28399
Certificate serial: 019D39AF3950EBD84D64B288F9AAA141E9A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFldSlTtZEITxEYZXjb3jsGig5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 13:01:17 +0000
Manifest this update: Sun 29 Mar 2026 13:01:17 +0000
Manifest next update: Mon 30 Mar 2026 13:01:17 +0000
Files and hashes: 1: SFldSlTtZEITxEYZXjb3jsGig5k.crl (hash: S+gJCj1siRAcb4EuVRfaxiHm8m0UYy+Wv6jUILhNSE0=)
2: hLXYn7_sE8_0uE-9APcSyfa3cKM.roa (hash: OnfUzd7ri0bA88lhkI8jx6ukwUTJ7Iy7tmQtDjoFSz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFldSlTtZEITxEYZXjb3jsGig5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:39:50:eb:d8:4d:64:b2:88:f9:aa:a1:41:e9:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48595d4a54ed644213c446195e36f78ec1a28399
Validity
Not Before: Mar 29 13:01:17 2026 GMT
Not After : Mar 30 13:01:17 2026 GMT
Subject: CN=104da55f155bb6934ab39362c133f7fa78520172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b4:db:47:7d:01:b3:83:bb:c7:47:27:9b:e5:
eb:5c:a3:0d:52:b1:70:dd:de:9e:c6:72:94:52:16:
e6:de:c0:ee:fc:13:a0:cb:45:cb:8a:78:60:b5:c7:
3b:44:48:d1:99:d1:d4:87:c6:1a:13:9e:9c:6f:32:
17:d8:49:f5:61:3e:fd:91:83:15:a7:bb:68:e9:f5:
0f:6e:3c:b3:9d:ba:46:bc:0f:b7:0a:f8:95:84:29:
6f:2b:2f:93:02:50:01:19:a3:56:17:f3:1b:1f:6d:
82:a0:4f:92:37:42:6c:bf:60:69:09:bf:fa:40:b8:
96:f6:97:8d:a8:f1:e1:12:1d:2f:3d:8f:8e:41:28:
b0:61:cf:ae:04:aa:94:63:18:8f:bb:ab:51:76:94:
1c:a4:1e:0f:85:3e:57:95:93:1a:04:5d:d6:5b:c1:
74:b5:a1:23:06:4d:b0:3e:8a:1b:b7:8b:52:28:79:
4f:cc:9c:d0:c8:74:d6:ca:5d:28:e7:d4:1a:46:0f:
0c:1b:bf:53:17:f6:65:7f:c0:17:29:be:d4:ec:9a:
5d:3f:8e:2d:1b:2f:1b:6c:37:d8:ad:b9:58:ce:e3:
3e:85:87:96:78:58:95:98:33:1c:72:8c:83:4c:c7:
ae:63:76:92:e9:1e:ca:91:c3:74:4f:13:9f:45:40:
9f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:4D:A5:5F:15:5B:B6:93:4A:B3:93:62:C1:33:F7:FA:78:52:01:72
X509v3 Authority Key Identifier:
keyid:48:59:5D:4A:54:ED:64:42:13:C4:46:19:5E:36:F7:8E:C1:A2:83:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFldSlTtZEITxEYZXjb3jsGig5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:ad:b5:a3:25:cb:e7:f7:d1:d4:d5:81:df:c2:d2:c6:31:5b:
47:d4:ea:24:3a:48:ed:14:6f:98:7e:5c:f3:90:99:c5:ba:4a:
f9:5a:92:d0:be:b9:08:7e:37:24:5f:47:d0:42:2a:90:56:e4:
c6:a5:79:38:a3:21:6d:46:02:fe:63:33:21:ed:74:fc:95:6d:
86:ce:c2:2f:fe:93:3a:01:cd:6e:d1:c0:5b:91:c2:1c:a2:c4:
bc:f0:9f:2d:a5:84:12:38:5c:8e:de:35:bc:48:1e:27:44:e9:
1b:82:38:24:33:aa:ba:db:68:cc:4a:35:85:ea:96:71:b8:b5:
d4:62:6a:7b:58:9a:cc:33:8e:b2:24:dc:e5:11:b3:20:ab:68:
fe:45:9c:6d:fc:0a:2f:98:a0:15:87:f0:bb:91:7b:12:d6:ca:
fb:16:17:36:b6:5b:59:06:be:b6:87:c0:be:5d:20:8a:33:63:
9f:5e:7e:9b:61:c4:fd:08:04:73:67:a0:63:9c:1d:81:79:1d:
03:34:d8:89:bc:9d:d2:73:7f:c7:4f:1e:6d:23:98:ec:be:2b:
2b:c2:fe:3b:c5:a1:6d:cf:c7:01:f5:39:57:71:0d:66:61:2c:
b7:09:53:64:a1:c2:a0:88:b4:1b:4c:d9:bb:b0:ac:cd:3f:71:
f2:75:29:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:38 2026 by rpki-client