Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.mft
File: SFAYtcL-8SSKtuwNB-lx7Lz3Oco.mft (raw, json)
Hash identifier: ue/IzmEnJYgUREfNJkP2L9gpPCiLRKVdLtZhkZBkIfo=
Subject key identifier: 48:2B:2A:BA:8E:8C:4B:EB:F1:EE:B8:D9:16:CB:9C:D2:2D:A7:42:8D
Authority key identifier: 48:50:18:B5:C2:FE:F1:24:8A:B6:EC:0D:07:E9:71:EC:BC:F7:39:CA
Certificate issuer: /CN=485018b5c2fef1248ab6ec0d07e971ecbcf739ca
Certificate serial: 019D1233E306F363642A5E6275AB5DE759A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.mft
Manifest number: 0261
Signing time: Sat 21 Mar 2026 21:01:23 +0000
Manifest this update: Sat 21 Mar 2026 21:01:23 +0000
Manifest next update: Sun 22 Mar 2026 21:01:23 +0000
Files and hashes: 1: Rn4SiK5tt6rA-g6mRu3ZOnBd6z8.roa (hash: 1RB9vRKs49M3yF98f580LlP8MNfzjcsdxXS3Wijgsnc=)
2: SFAYtcL-8SSKtuwNB-lx7Lz3Oco.crl (hash: TiYFS68JH+G2M5uTl4MnN4dewW7Uq453uOSlHg1a87A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:12:33:e3:06:f3:63:64:2a:5e:62:75:ab:5d:e7:59:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485018b5c2fef1248ab6ec0d07e971ecbcf739ca
Validity
Not Before: Mar 21 21:01:23 2026 GMT
Not After : Mar 22 21:01:23 2026 GMT
Subject: CN=482b2aba8e8c4bebf1eeb8d916cb9cd22da7428d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e4:c3:a3:6a:62:d6:8b:2b:82:6c:5b:e9:26:
bc:8c:71:ef:0b:d1:f1:ee:09:8d:0a:94:35:b6:0b:
d2:ee:c9:34:77:e7:ed:28:be:e6:71:28:ee:9a:0c:
10:9c:21:3e:6f:a8:60:3a:48:e5:38:2b:c3:21:9c:
d8:e5:62:2d:7e:26:1b:ef:ad:eb:3f:01:55:d8:d9:
22:d8:0e:b7:52:31:5d:48:01:3d:42:83:4b:1b:d1:
56:3d:94:5a:13:db:03:58:4d:26:43:c3:d0:10:97:
ba:fc:5b:80:ba:46:49:a2:f5:6c:75:26:76:24:a6:
c5:6d:42:02:32:7a:31:c3:76:b7:04:ca:04:0f:f4:
be:9d:8c:30:ac:4d:03:77:0d:da:72:9e:bb:a6:fe:
32:c6:7e:e6:a5:6d:c0:55:17:2b:6a:27:37:ac:b3:
85:66:3a:d1:f4:e7:e0:d1:35:f9:2b:f4:92:28:70:
ec:63:af:83:25:b8:ac:93:f9:e8:c6:6f:32:f3:10:
20:56:b6:4b:e3:2b:a2:39:38:e5:81:61:f2:c2:ba:
13:a1:c6:14:41:ec:d1:21:29:43:07:01:c7:3e:04:
7c:70:f3:6f:54:35:d0:8c:ab:0f:d4:cc:77:b3:7f:
34:00:2b:39:03:f5:1b:92:31:ab:1d:b3:ea:c2:89:
47:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:2B:2A:BA:8E:8C:4B:EB:F1:EE:B8:D9:16:CB:9C:D2:2D:A7:42:8D
X509v3 Authority Key Identifier:
keyid:48:50:18:B5:C2:FE:F1:24:8A:B6:EC:0D:07:E9:71:EC:BC:F7:39:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:c3:9b:d3:23:ab:a5:96:5d:e5:a3:ac:d9:e2:1f:f1:97:6e:
86:fd:21:d7:38:9a:04:87:42:1e:35:04:ab:e6:05:d8:63:bd:
7e:16:8c:6c:d4:12:30:9c:74:1c:e3:a4:60:08:91:c7:5f:26:
04:f8:67:63:0a:75:8e:4f:9f:4f:f1:56:f7:2e:e2:24:fc:1f:
0d:72:54:f6:ba:db:a4:f1:b8:7d:ac:1c:31:36:0f:e2:15:65:
ea:29:77:e7:de:49:74:52:ff:86:51:a3:74:7d:bf:66:32:c8:
f2:bd:f0:95:33:d9:bc:ea:ee:19:e1:bc:b7:1c:5f:fb:fa:9e:
7f:42:02:9a:73:21:02:9d:93:2e:b2:9c:82:32:0b:f8:85:ab:
14:c9:6a:e5:75:64:13:dc:dd:bd:50:55:d6:a7:18:51:51:28:
1c:34:81:c3:f0:15:b9:fc:bb:46:62:d8:9d:44:95:09:77:51:
db:97:a9:ac:2a:4d:81:0b:7a:a6:bb:ef:e1:b8:fe:24:c0:4f:
2c:f8:59:3b:07:0f:c6:23:de:7e:9d:f4:2f:65:9e:50:60:d7:
48:52:a5:b4:c4:05:9d:0b:c8:da:2f:91:80:89:96:a1:31:f4:
75:ef:33:58:57:c0:f9:03:fd:19:9a:60:51:be:64:06:6b:93:
32:69:16:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 00:09:24 2026 by rpki-client