Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.mft
File: SFMhasnZIXM78_SEOTo0SVwOKmc.mft (raw, json)
Hash identifier: Te309HUMNH4KVORuJWhyCONqGlvjk0OttVdn3cUTDcI=
Subject key identifier: 73:03:48:08:3F:A8:BD:5A:B0:3B:38:CE:D6:EA:74:50:CC:67:0C:9C
Authority key identifier: 48:53:21:6A:C9:D9:21:73:3B:F3:F4:84:39:3A:34:49:5C:0E:2A:67
Certificate issuer: /CN=4853216ac9d921733bf3f484393a34495c0e2a67
Certificate serial: 019D394162953D18B8DF6619908438C1B64C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFMhasnZIXM78_SEOTo0SVwOKmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.mft
Manifest number: 0BED
Signing time: Sun 29 Mar 2026 11:01:19 +0000
Manifest this update: Sun 29 Mar 2026 11:01:19 +0000
Manifest next update: Mon 30 Mar 2026 11:01:19 +0000
Files and hashes: 1: 2ZDYJtflCnBB_8qwON088KKU-a4.roa (hash: tEciLezX+dLS/ImbpFLCNZihGdAn391R3qBRLACKNXQ=)
2: SFMhasnZIXM78_SEOTo0SVwOKmc.crl (hash: UFEQBP6/L8LRr7oQwOndEkWxWN9H3x3pd/rxJAciZ/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFMhasnZIXM78_SEOTo0SVwOKmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:62:95:3d:18:b8:df:66:19:90:84:38:c1:b6:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4853216ac9d921733bf3f484393a34495c0e2a67
Validity
Not Before: Mar 29 11:01:19 2026 GMT
Not After : Mar 30 11:01:19 2026 GMT
Subject: CN=730348083fa8bd5ab03b38ced6ea7450cc670c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ee:93:ff:aa:8a:4f:fb:6e:ff:76:5b:be:f2:
f5:cd:37:e8:0e:04:81:51:07:e0:3c:97:4b:47:0e:
5f:86:af:e7:5a:92:20:63:27:da:0a:36:17:d3:49:
2f:b8:ed:61:57:de:a0:ee:eb:de:5c:45:3b:02:63:
4a:92:a7:5b:23:67:96:a8:5b:dc:10:cc:a8:d2:d6:
51:96:bb:55:15:1a:d3:c2:90:5f:f9:9c:17:07:cc:
03:ab:63:31:b8:d5:3d:f8:9c:73:3a:f8:49:89:8e:
a9:54:a9:c5:71:59:f2:c0:33:50:e4:7b:3f:e9:09:
c3:28:28:01:fb:9a:38:1f:6f:8b:2a:66:ce:08:5d:
77:69:56:21:ea:25:e3:2f:f5:0a:f9:b3:b0:98:d5:
26:a2:ec:06:17:02:c4:c6:f9:22:8b:8b:cd:5a:ff:
30:0b:ed:32:be:ea:b8:bd:7a:c0:3c:92:c6:af:c5:
85:29:1f:ea:78:7c:f7:cc:b6:a5:0d:59:b9:b5:bc:
66:9f:23:ca:f4:a2:9a:a7:b0:a6:d6:08:6b:66:38:
a2:ab:cf:51:4c:1f:dc:48:14:80:94:8a:f0:4f:4c:
4d:56:f5:8e:5b:94:2b:dc:05:64:6d:44:a1:22:49:
9b:7c:da:79:6a:3d:0f:37:9a:11:44:53:f4:68:d6:
97:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:03:48:08:3F:A8:BD:5A:B0:3B:38:CE:D6:EA:74:50:CC:67:0C:9C
X509v3 Authority Key Identifier:
keyid:48:53:21:6A:C9:D9:21:73:3B:F3:F4:84:39:3A:34:49:5C:0E:2A:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFMhasnZIXM78_SEOTo0SVwOKmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/dfade9-3294-4fab-b607-2828c48e3599/1/SFMhasnZIXM78_SEOTo0SVwOKmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:98:6b:80:e2:03:22:9b:ca:9d:09:3a:58:79:2f:11:63:a4:
d7:b6:79:1d:12:4a:45:2b:a0:b0:e2:5b:20:9f:8c:65:7a:41:
d3:fb:dd:75:b5:f2:51:e9:bc:02:7c:51:d7:02:68:5e:0c:9c:
d3:5f:d8:d7:97:1c:06:44:db:08:e8:c8:24:24:7e:4d:96:7f:
1f:7a:58:b4:11:e7:2c:5d:9d:aa:a7:5d:3c:11:46:6c:5f:62:
02:df:f0:85:99:61:72:c3:c5:aa:93:56:a5:a4:dd:30:f3:0f:
d8:04:0d:94:a4:62:a5:1f:cc:97:c8:93:11:32:2c:be:a3:6d:
38:71:72:bb:10:11:38:47:6c:79:89:b0:6d:56:98:63:ce:7a:
30:9e:8b:09:d6:63:2e:43:21:23:09:54:4e:a0:de:35:25:17:
7e:a0:08:ff:ce:cd:5a:5d:b0:98:31:a0:5f:ff:ea:04:f5:63:
5e:1d:7a:17:4b:39:bf:15:4c:66:a4:b0:02:0c:4a:6f:16:58:
91:31:12:9e:37:de:4c:22:b3:dc:70:a6:d5:d5:a5:75:9e:ae:
ca:83:e8:a6:ee:87:92:a2:f2:6f:55:55:41:d2:c6:2d:06:3b:
c9:68:66:06:e8:9e:6b:eb:92:5e:d1:fa:e2:1b:ce:62:d8:e4:
53:fe:ff:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:13:21 2026 by rpki-client