Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft
File: SFGWc90KnPV4lVIK83wqgYPc4Wg.mft (raw, json)
Hash identifier: wh750WmBF8w2lNhKwTqe2T/Y7jjsxv+iEOAym4Y57io=
Subject key identifier: BC:65:A0:A6:25:6A:D3:3C:F1:99:EB:FE:B0:7E:5D:33:9B:2E:50:14
Authority key identifier: 48:51:96:73:DD:0A:9C:F5:78:95:52:0A:F3:7C:2A:81:83:DC:E1:68
Certificate issuer: /CN=48519673dd0a9cf57895520af37c2a8183dce168
Certificate serial: 019EB845C426D94C924666E8A493A81D076B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFGWc90KnPV4lVIK83wqgYPc4Wg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft
Manifest number: 144B
Signing time: Thu 11 Jun 2026 20:00:40 +0000
Manifest this update: Thu 11 Jun 2026 20:00:40 +0000
Manifest next update: Fri 12 Jun 2026 20:00:40 +0000
Files and hashes: 1: SFGWc90KnPV4lVIK83wqgYPc4Wg.crl (hash: rnO23ftYqU4dHcNTFHrUNxU6kPjUKtQoGXAnqTpOTYc=)
2: YZU5h2cJPs993oeBmAc82_JPG4k.roa (hash: JlU2N1oKnkfBo3YZbM9h2zkBZpc0rh/bJMlA2t9a81A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFGWc90KnPV4lVIK83wqgYPc4Wg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:45:c4:26:d9:4c:92:46:66:e8:a4:93:a8:1d:07:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48519673dd0a9cf57895520af37c2a8183dce168
Validity
Not Before: Jun 11 20:00:40 2026 GMT
Not After : Jun 12 20:00:40 2026 GMT
Subject: CN=bc65a0a6256ad33cf199ebfeb07e5d339b2e5014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6f:3c:a0:76:83:63:fb:60:8a:78:b9:70:1c:
f6:41:f9:7d:1d:d4:0d:45:ad:7e:49:82:30:6a:bb:
45:75:0d:2c:bd:7d:bc:a2:48:e5:75:d7:4f:8c:6d:
a7:c6:49:8e:d0:df:35:dc:50:0e:74:4d:82:ad:c3:
06:1f:30:2a:b8:49:67:1d:ca:7c:0c:62:af:9a:8c:
ef:5c:66:b1:4d:08:52:f1:4b:7e:c4:b5:2a:58:f1:
42:ee:29:a5:00:fa:3d:53:4a:ee:99:2c:b7:c6:94:
eb:2f:be:6a:42:0e:49:30:13:4b:8a:51:02:ff:91:
74:a1:51:bd:9c:9a:10:9d:38:04:f4:bc:18:e9:3d:
33:24:7d:ca:97:e8:2e:3c:93:52:f2:4b:16:8d:fc:
4e:16:a8:10:cf:bd:be:08:5b:3f:b3:0a:63:41:7a:
f6:95:9f:90:8b:1c:d7:5a:21:56:fe:cf:46:11:74:
78:1c:69:2c:ed:cb:d9:80:9e:e0:3f:74:4b:e2:c2:
a6:be:7d:71:2d:4b:6b:ea:41:dd:43:44:54:3a:e9:
75:3b:44:15:66:81:d6:1a:cf:bf:5b:a0:d2:e2:78:
86:24:d2:06:f9:2d:26:84:3a:42:21:c7:5d:02:0b:
88:0a:6b:3f:37:0c:d0:f2:20:eb:e1:f3:93:87:dd:
0f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:65:A0:A6:25:6A:D3:3C:F1:99:EB:FE:B0:7E:5D:33:9B:2E:50:14
X509v3 Authority Key Identifier:
keyid:48:51:96:73:DD:0A:9C:F5:78:95:52:0A:F3:7C:2A:81:83:DC:E1:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFGWc90KnPV4lVIK83wqgYPc4Wg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:54:7e:98:e5:59:a9:d0:54:d4:1c:90:40:47:13:2d:cc:1b:
61:4a:2f:4c:17:77:78:1a:7e:f5:f6:87:2d:42:90:82:b0:ed:
97:49:d8:0f:b8:93:c3:05:f4:42:d7:cb:19:37:d9:6c:d9:86:
27:ef:8c:8a:aa:1b:71:bf:24:d5:76:19:0e:00:cf:61:45:0c:
b4:1b:cb:e2:a3:13:45:76:f4:8c:ce:b2:c9:49:d0:d5:cd:98:
7b:b4:fc:af:bf:be:42:2b:7b:8b:09:ee:28:86:a8:48:f5:7b:
3c:17:3d:76:6c:99:7d:1a:de:f2:d6:bf:ca:c0:98:7d:5b:d2:
ce:07:fa:dc:ec:a2:33:6e:7b:47:c3:01:76:1a:55:5c:29:fb:
0c:56:38:ee:da:4c:36:36:4b:f3:0b:df:03:2f:0f:7e:08:13:
f0:41:0d:12:b2:93:7f:d9:a6:16:11:0b:99:69:b5:a1:f9:1d:
fe:13:d2:78:18:2e:52:71:ff:c4:34:f2:ba:23:50:af:c7:10:
91:03:9a:54:5d:96:b3:d8:8a:e6:43:d4:28:17:0a:8f:b1:5c:
6f:fa:a9:44:11:63:61:b5:05:ba:33:70:a1:ea:13:d2:5c:bc:
d0:13:8d:ea:40:bc:26:9f:96:a8:aa:47:ca:7e:40:f1:96:0e:
ee:17:9b:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ64RcQm2UySRmbopJOoHQdrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4NTE5NjczZGQwYTljZjU3ODk1NTIwYWYzN2MyYTgxODNk
Y2UxNjgwHhcNMjYwNjExMjAwMDQwWhcNMjYwNjEyMjAwMDQwWjAzMTEwLwYDVQQD
EyhiYzY1YTBhNjI1NmFkMzNjZjE5OWViZmViMDdlNWQzMzliMmU1MDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl288oHaDY/tgini5cBz2Qfl9HdQN
Ra1+SYIwartFdQ0svX28okjldddPjG2nxkmO0N813FAOdE2CrcMGHzAquElnHcp8
DGKvmozvXGaxTQhS8Ut+xLUqWPFC7imlAPo9U0rumSy3xpTrL75qQg5JMBNLilEC
/5F0oVG9nJoQnTgE9LwY6T0zJH3Kl+guPJNS8ksWjfxOFqgQz72+CFs/swpjQXr2
lZ+QixzXWiFW/s9GEXR4HGks7cvZgJ7gP3RL4sKmvn1xLUtr6kHdQ0RUOul1O0QV
ZoHWGs+/W6DS4niGJNIG+S0mhDpCIcddAguICms/NwzQ8iDr4fOTh90PwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLxloKYlatM88Znr/rB+XTObLlAUMB8GA1UdIwQY
MBaAFEhRlnPdCpz1eJVSCvN8KoGD3OFoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0ZHV2M5MEtuUFY0bFZJSzgzd3FnWVBjNFdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8zYmQ1OWEtMmQwYy00MDkzLTkxM2Et
ZmUzNmNlZGE2MzE2LzEvU0ZHV2M5MEtuUFY0bFZJSzgzd3FnWVBjNFdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS8zYmQ1OWEtMmQwYy00MDkzLTkxM2EtZmUzNmNlZGE2MzE2
LzEvU0ZHV2M5MEtuUFY0bFZJSzgzd3FnWVBjNFdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoFR+mOVZ
qdBU1ByQQEcTLcwbYUovTBd3eBp+9faHLUKQgrDtl0nYD7iTwwX0QtfLGTfZbNmG
J++Miqobcb8k1XYZDgDPYUUMtBvL4qMTRXb0jM6yyUnQ1c2Ye7T8r7++Qit7iwnu
KIaoSPV7PBc9dmyZfRre8ta/ysCYfVvSzgf63OyiM257R8MBdhpVXCn7DFY47tpM
NjZL8wvfAy8PfggT8EENErKTf9mmFhELmWm1ofkd/hPSeBguUnH/xDTyuiNQr8cQ
kQOaVF2Ws9iK5kPUKBcKj7Fcb/qpRBFjYbUFujNwoeoT0ly80BON6kC8Jp+WqKpH
yn5A8ZYO7hebng==
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:39:42 2026 by rpki-client