Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.mft
File: SFAYtcL-8SSKtuwNB-lx7Lz3Oco.mft (raw, json)
Hash identifier: gtkLv/8KaFbNpUGz4nJc5KfCiLy4uk/lQoFhi0Xns0U=
Subject key identifier: C8:F2:C6:71:98:E6:BB:C2:0F:2C:2B:93:C9:59:FD:AF:76:E3:CB:12
Authority key identifier: 48:50:18:B5:C2:FE:F1:24:8A:B6:EC:0D:07:E9:71:EC:BC:F7:39:CA
Certificate issuer: /CN=485018b5c2fef1248ab6ec0d07e971ecbcf739ca
Certificate serial: 019EE58D66B1E79F04E9F60FE74AF9F6832D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.mft
Manifest number: 0353
Signing time: Sat 20 Jun 2026 15:01:48 +0000
Manifest this update: Sat 20 Jun 2026 15:01:48 +0000
Manifest next update: Sun 21 Jun 2026 15:01:48 +0000
Files and hashes: 1: Rn4SiK5tt6rA-g6mRu3ZOnBd6z8.roa (hash: 1RB9vRKs49M3yF98f580LlP8MNfzjcsdxXS3Wijgsnc=)
2: SFAYtcL-8SSKtuwNB-lx7Lz3Oco.crl (hash: FSpJF7CmlYWC3Vo5tkrZ98D0ff5TSYsTTZgaSpmtbXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Jun 2026 15:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e5:8d:66:b1:e7:9f:04:e9:f6:0f:e7:4a:f9:f6:83:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485018b5c2fef1248ab6ec0d07e971ecbcf739ca
Validity
Not Before: Jun 20 15:01:48 2026 GMT
Not After : Jun 21 15:01:48 2026 GMT
Subject: CN=c8f2c67198e6bbc20f2c2b93c959fdaf76e3cb12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b9:7b:37:de:bf:ca:57:83:7a:0b:d1:88:c6:
03:bc:ac:d5:d2:34:27:78:a7:42:3e:d5:04:63:80:
79:ed:ff:d6:61:3b:c4:33:ed:57:15:03:4e:60:fa:
b9:24:10:f9:98:6f:bb:a3:7c:c1:e9:fc:bc:2f:e6:
7d:79:42:4a:fc:93:36:66:9b:72:26:c5:42:4c:ee:
e8:84:43:0d:7a:6f:b6:af:dc:87:7b:23:0b:2e:c7:
26:56:a8:c6:fb:9d:43:15:c9:61:a4:07:21:53:e4:
33:af:b1:1e:2e:61:02:2f:53:b1:c9:c7:d1:33:f0:
f3:90:4a:07:91:c4:9e:b8:04:f3:bd:af:f6:45:94:
11:7d:70:77:22:78:a8:d3:56:4b:2b:ae:a7:e2:35:
05:b0:bc:f5:d1:6d:b9:77:c3:6c:01:ae:9a:88:cd:
92:c1:ed:c7:7c:39:0b:cd:70:80:36:96:4f:b3:01:
7f:52:98:1c:46:06:f2:6f:02:f9:ab:41:bb:b2:ab:
1c:f3:d8:ac:21:b0:6d:61:28:b8:95:b7:b3:db:07:
a9:19:57:e2:e0:1c:a8:09:b3:35:9d:55:bd:b5:82:
81:88:e8:2d:fc:9f:53:da:8a:d8:e8:e3:a8:63:1f:
57:57:40:d6:3a:f6:e9:69:88:ba:2e:10:0e:d4:e0:
22:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:F2:C6:71:98:E6:BB:C2:0F:2C:2B:93:C9:59:FD:AF:76:E3:CB:12
X509v3 Authority Key Identifier:
keyid:48:50:18:B5:C2:FE:F1:24:8A:B6:EC:0D:07:E9:71:EC:BC:F7:39:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:6e:b1:c2:bb:85:b7:e8:73:46:46:56:84:8e:ae:cc:66:4f:
31:86:92:a5:f3:2f:6d:ba:9b:21:ec:e5:fe:1d:a7:70:6e:cd:
e8:61:ea:5d:e4:cf:d7:52:fd:fd:1c:d5:8e:0c:4f:3d:7d:db:
31:a6:7d:c1:09:4a:52:b7:9f:f7:28:15:47:29:de:ea:51:d0:
5b:01:b6:a6:ed:69:c8:e1:0b:04:e0:26:c9:fc:b1:ce:28:3d:
7d:f5:18:cf:11:c7:8e:bc:a7:75:45:a1:bb:1a:06:b2:25:24:
10:7f:66:01:9f:8d:56:16:0f:01:60:65:03:87:4b:b1:38:13:
9b:55:4e:8a:22:42:92:e3:07:56:5b:37:cc:fd:43:45:9f:96:
d4:82:10:cc:0f:a0:8e:9b:18:eb:60:a8:e4:ca:6d:c0:ec:76:
b2:4e:3a:91:af:b0:a5:5b:1e:11:c8:d1:95:05:dc:5d:19:a6:
db:24:26:22:e0:a6:80:a4:9f:f4:41:fe:67:68:30:a1:3d:fc:
2d:50:9e:07:9a:65:c8:03:46:f3:e0:d6:54:8e:ef:21:36:c7:
ba:d9:65:49:0f:2c:09:bc:d9:1d:3a:33:55:0d:97:de:57:2f:
b7:a2:dd:9a:b3:b7:e8:80:47:bf:5c:c9:d2:16:8f:ec:09:52:
77:9b:82:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 00:45:08 2026 by rpki-client