Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft
File: SFGWc90KnPV4lVIK83wqgYPc4Wg.mft (raw, json)
Hash identifier: FzsZUjuIZOqi3y2HxGBuOhW1Fs0n5Dzpbzm9Rkv6YPw=
Subject key identifier: 67:F3:A2:F0:89:79:77:01:D1:F3:81:60:2F:A8:38:E7:5D:AF:49:69
Authority key identifier: 48:51:96:73:DD:0A:9C:F5:78:95:52:0A:F3:7C:2A:81:83:DC:E1:68
Certificate issuer: /CN=48519673dd0a9cf57895520af37c2a8183dce168
Certificate serial: 019CFA2B19FF380BF068C46B309AEC0AE1B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFGWc90KnPV4lVIK83wqgYPc4Wg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft
Manifest number: 1364
Signing time: Tue 17 Mar 2026 05:00:54 +0000
Manifest this update: Tue 17 Mar 2026 05:00:54 +0000
Manifest next update: Wed 18 Mar 2026 05:00:54 +0000
Files and hashes: 1: SFGWc90KnPV4lVIK83wqgYPc4Wg.crl (hash: fqP+3lVrW409kz5Zw1ChuPFLQQD8+8CKU8AR8n8wTJE=)
2: YZU5h2cJPs993oeBmAc82_JPG4k.roa (hash: JlU2N1oKnkfBo3YZbM9h2zkBZpc0rh/bJMlA2t9a81A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFGWc90KnPV4lVIK83wqgYPc4Wg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Mar 2026 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fa:2b:19:ff:38:0b:f0:68:c4:6b:30:9a:ec:0a:e1:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48519673dd0a9cf57895520af37c2a8183dce168
Validity
Not Before: Mar 17 05:00:54 2026 GMT
Not After : Mar 18 05:00:54 2026 GMT
Subject: CN=67f3a2f089797701d1f381602fa838e75daf4969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ec:97:20:ae:24:8e:68:34:d2:1d:01:45:c3:
b9:f7:aa:6c:e4:c2:ba:19:85:7d:89:47:07:34:5f:
66:97:5b:d5:34:3d:2b:a1:34:df:37:9d:3c:2a:67:
e7:62:d2:46:46:87:d1:92:f5:d5:b6:74:9d:e8:b8:
d0:c3:0f:56:6b:ba:64:fe:e3:0c:8b:8f:00:a1:d4:
b3:09:6b:1c:b0:0a:b9:99:10:00:15:96:0d:6e:3d:
91:36:8d:02:a4:06:af:12:43:8f:b1:6f:7f:74:13:
f4:ac:f7:32:b0:21:07:45:b3:fd:80:5f:02:9c:b7:
3e:77:b4:6c:5b:e8:48:22:be:52:c8:bd:ba:c7:6a:
a6:a9:b5:0d:62:14:7c:84:39:b1:29:b8:36:61:e7:
e9:83:54:7b:2b:6a:9f:1b:c5:d5:5a:bc:f5:9e:c3:
36:ca:53:83:89:5f:92:da:af:d5:5f:8b:ec:8e:23:
2b:39:40:66:03:b4:c8:43:1d:3b:19:21:e9:ec:7f:
1d:87:ff:13:1c:e7:4d:d4:f6:1a:cb:42:05:c6:75:
77:b3:09:98:37:0e:78:70:9f:0a:9a:bb:17:82:0e:
7f:f0:43:99:10:41:b6:41:6b:7b:e6:ed:09:3a:80:
82:96:4a:f0:72:85:42:e4:f6:5e:6e:bd:94:ec:8b:
7a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F3:A2:F0:89:79:77:01:D1:F3:81:60:2F:A8:38:E7:5D:AF:49:69
X509v3 Authority Key Identifier:
keyid:48:51:96:73:DD:0A:9C:F5:78:95:52:0A:F3:7C:2A:81:83:DC:E1:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFGWc90KnPV4lVIK83wqgYPc4Wg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:83:bb:85:95:f0:37:b7:11:c1:6e:91:5e:30:5a:22:16:f4:
48:8a:03:59:e9:a7:32:83:04:43:32:a8:66:99:f0:72:eb:ee:
82:37:aa:f3:97:26:85:92:da:9f:14:47:d1:a4:b8:33:70:cf:
88:6d:bc:c1:42:20:24:96:7e:89:a8:b7:aa:71:6a:2b:12:e7:
49:31:cf:c8:4d:db:92:00:41:f6:ab:c6:fa:77:5f:a6:32:95:
c9:2d:3f:04:3e:b5:07:96:13:10:3f:0d:e3:15:89:39:61:80:
d6:d9:b8:c9:bf:4f:d3:b8:e9:ca:93:c0:bf:98:c7:d6:f6:ed:
9e:a1:08:c6:0d:89:84:49:55:ed:7d:d3:90:29:60:41:70:e0:
e4:63:f6:f7:50:08:be:5f:33:de:2d:19:7b:e2:80:07:a8:cf:
21:5a:ba:f3:68:25:b1:9c:d9:41:d4:61:42:6d:d6:18:a9:8f:
3a:11:ba:3a:95:f8:24:34:fa:2f:7d:c3:81:6f:84:87:1b:79:
4f:08:6e:74:1e:df:9c:67:15:21:94:8e:82:ea:ea:b3:70:70:
c4:7e:08:2f:b5:61:b1:33:77:9d:6e:d7:fa:2d:46:62:ea:39:
62:5f:35:61:12:06:97:64:d3:31:d8:9f:9a:f3:cd:7e:ee:59:
ef:01:8a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 07:36:28 2026 by rpki-client