Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.mft
File: SFAYtcL-8SSKtuwNB-lx7Lz3Oco.mft (raw, json)
Hash identifier: QWEx7CLEeJeUgGu5kwenSPpPRQo/zXUqaBR+DOMks6A=
Subject key identifier: FF:21:1B:F1:0D:CB:29:44:C4:BA:21:46:43:D2:A7:28:3D:63:94:19
Authority key identifier: 48:50:18:B5:C2:FE:F1:24:8A:B6:EC:0D:07:E9:71:EC:BC:F7:39:CA
Certificate issuer: /CN=485018b5c2fef1248ab6ec0d07e971ecbcf739ca
Certificate serial: 019DFBDFB3302DE7D3A075EB47ECC06A8A7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.mft
Manifest number: 02DA
Signing time: Wed 06 May 2026 06:00:34 +0000
Manifest this update: Wed 06 May 2026 06:00:34 +0000
Manifest next update: Thu 07 May 2026 06:00:34 +0000
Files and hashes: 1: Rn4SiK5tt6rA-g6mRu3ZOnBd6z8.roa (hash: 1RB9vRKs49M3yF98f580LlP8MNfzjcsdxXS3Wijgsnc=)
2: SFAYtcL-8SSKtuwNB-lx7Lz3Oco.crl (hash: /T+YXbivgmo3EGodIn/B4rnQyKUvWoffckUCSmWB5bs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 May 2026 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fb:df:b3:30:2d:e7:d3:a0:75:eb:47:ec:c0:6a:8a:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485018b5c2fef1248ab6ec0d07e971ecbcf739ca
Validity
Not Before: May 6 06:00:34 2026 GMT
Not After : May 7 06:00:34 2026 GMT
Subject: CN=ff211bf10dcb2944c4ba214643d2a7283d639419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f6:98:42:56:8f:b0:05:6e:8b:dd:52:96:aa:
cd:cc:09:fd:c3:b7:d7:fa:e5:5a:91:e5:d0:7d:d9:
c1:a3:59:af:99:46:33:5b:78:bb:ab:fc:ea:5f:16:
33:e5:8d:a9:e1:5e:00:b7:15:3e:54:86:3f:f1:40:
72:c5:dd:c6:3c:3f:e7:95:f9:76:31:c4:7a:17:2b:
8d:d2:6b:0c:a6:26:36:fa:3d:fa:09:07:65:bd:8b:
1c:e9:b2:7c:5d:86:67:c5:e8:73:84:6d:34:6b:35:
0e:61:5a:45:e0:b7:35:f2:e7:f4:d6:3c:ea:41:65:
34:94:6b:8f:56:d3:bd:4f:57:74:9c:4b:3b:63:c7:
17:5f:f5:d6:98:71:0d:e3:b0:43:09:80:7f:63:8f:
ab:cf:61:8d:27:89:e3:82:2a:74:06:31:96:0d:b3:
49:92:02:17:f8:48:80:54:c9:db:8a:b6:16:0f:d0:
aa:6c:b8:a6:32:29:8d:37:ea:f7:7f:df:64:0a:49:
9c:a0:ae:e8:b2:bf:a0:61:e7:5c:4b:7c:e6:6c:d2:
8d:40:56:14:af:58:1b:37:2a:b1:c2:ed:cd:b9:a4:
0b:9a:9e:68:9e:85:ad:c5:8e:ba:00:09:7a:bb:72:
b1:55:52:d9:0e:6c:8c:56:b0:b8:10:07:a1:7a:19:
53:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:21:1B:F1:0D:CB:29:44:C4:BA:21:46:43:D2:A7:28:3D:63:94:19
X509v3 Authority Key Identifier:
keyid:48:50:18:B5:C2:FE:F1:24:8A:B6:EC:0D:07:E9:71:EC:BC:F7:39:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:ba:09:05:45:2b:da:fc:e9:5a:52:2b:1e:f4:6a:1e:8d:e4:
d5:65:74:d0:c5:85:2f:c8:98:17:b7:72:55:2d:53:b7:72:47:
a2:7d:10:38:52:c5:95:b4:3f:2e:92:80:8f:01:e0:99:ee:33:
f1:9c:8a:14:52:07:12:b1:e8:5c:4e:58:b7:ed:ef:20:17:1a:
94:e6:b7:c9:ca:8a:20:4e:04:71:90:11:ed:70:99:6d:5d:39:
08:45:e3:c5:79:df:ff:26:30:f9:c7:36:08:3a:c4:ed:7b:07:
21:2a:dd:e8:41:cd:58:71:ca:7b:bd:53:2b:cf:bf:8c:0b:58:
31:b6:88:e4:4d:d9:7a:91:93:cb:0f:f8:44:f2:ab:eb:1b:32:
96:d1:45:d6:d2:32:25:c9:d5:4b:58:78:06:01:02:42:cd:e6:
b7:02:6b:2f:09:40:55:df:ec:4d:a4:a8:d1:1f:f1:86:09:3d:
83:73:4d:e3:57:4d:25:c1:85:d8:f4:5a:13:e2:05:3f:49:10:
fe:3d:9c:14:8f:68:7b:ee:14:49:8b:2a:51:2e:a8:7a:d8:96:
94:c4:be:5c:ed:06:f7:20:c1:12:61:c1:45:f6:d4:db:93:d0:
26:b7:a6:37:4e:30:4d:ca:3b:07:cc:92:fd:05:72:51:f9:dd:
e0:be:08:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3737MwLefToHXrR+zAaop+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4NTAxOGI1YzJmZWYxMjQ4YWI2ZWMwZDA3ZTk3MWVjYmNm
NzM5Y2EwHhcNMjYwNTA2MDYwMDM0WhcNMjYwNTA3MDYwMDM0WjAzMTEwLwYDVQQD
EyhmZjIxMWJmMTBkY2IyOTQ0YzRiYTIxNDY0M2QyYTcyODNkNjM5NDE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/aYQlaPsAVui91SlqrNzAn9w7fX
+uVakeXQfdnBo1mvmUYzW3i7q/zqXxYz5Y2p4V4AtxU+VIY/8UByxd3GPD/nlfl2
McR6FyuN0msMpiY2+j36CQdlvYsc6bJ8XYZnxehzhG00azUOYVpF4Lc18uf01jzq
QWU0lGuPVtO9T1d0nEs7Y8cXX/XWmHEN47BDCYB/Y4+rz2GNJ4njgip0BjGWDbNJ
kgIX+EiAVMnbirYWD9CqbLimMimNN+r3f99kCkmcoK7osr+gYedcS3zmbNKNQFYU
r1gbNyqxwu3NuaQLmp5onoWtxY66AAl6u3KxVVLZDmyMVrC4EAehehlTQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP8hG/ENyylExLohRkPSpyg9Y5QZMB8GA1UdIwQY
MBaAFEhQGLXC/vEkirbsDQfpcey89znKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0ZBWXRjTC04U1NLdHV3TkItbHg3THozT2NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny84NTNlOGYtZmNkNC00NTY2LWE2NDgt
ZTM3NDk5Njc5ZDQ2LzEvU0ZBWXRjTC04U1NLdHV3TkItbHg3THozT2NvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny84NTNlOGYtZmNkNC00NTY2LWE2NDgtZTM3NDk5Njc5ZDQ2
LzEvU0ZBWXRjTC04U1NLdHV3TkItbHg3THozT2NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANLoJBUUr
2vzpWlIrHvRqHo3k1WV00MWFL8iYF7dyVS1Tt3JHon0QOFLFlbQ/LpKAjwHgme4z
8ZyKFFIHErHoXE5Yt+3vIBcalOa3ycqKIE4EcZAR7XCZbV05CEXjxXnf/yYw+cc2
CDrE7XsHISrd6EHNWHHKe71TK8+/jAtYMbaI5E3ZepGTyw/4RPKr6xsyltFF1tIy
JcnVS1h4BgECQs3mtwJrLwlAVd/sTaSo0R/xhgk9g3NN41dNJcGF2PRaE+IFP0kQ
/j2cFI9oe+4USYsqUS6oetiWlMS+XO0G9yDBEmHBRfbU25PQJremN04wTco7B8yS
/QVyUfnd4L4IBA==
-----END CERTIFICATE-----
Generated at Wed May 6 10:03:38 2026 by rpki-client