Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/M_Sfp1royP2e6ml0oepQzr0Mjuc.mft
File: M_Sfp1royP2e6ml0oepQzr0Mjuc.mft (raw, json)
Hash identifier: 2yN7jsqY0KuERUxvIZjY9Il7gTcEn1prEmyO6QYF3m8=
Subject key identifier: D7:73:15:6B:D9:4A:4E:B4:10:C8:65:0D:60:67:9A:53:F8:51:3A:3A
Authority key identifier: 33:F4:9F:A7:5A:E8:C8:FD:9E:EA:69:74:A1:EA:50:CE:BD:0C:8E:E7
Certificate issuer: /CN=33f49fa75ae8c8fd9eea6974a1ea50cebd0c8ee7
Certificate serial: 01A1517689E08FF29BE2F5A7FA6EF222C34D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M_Sfp1royP2e6ml0oepQzr0Mjuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/M_Sfp1royP2e6ml0oepQzr0Mjuc.mft
Manifest number: 0128
Signing time: Mon 19 Oct 2026 00:01:25 +0000
Manifest this update: Mon 19 Oct 2026 00:01:25 +0000
Manifest next update: Tue 20 Oct 2026 00:01:25 +0000
Files and hashes: 1: IwDwlMvs50HlF4PAAohmN44UXSM.roa (hash: ODvZqgbe4hpWWyR/6qlx9W/NEch37pqGD3Hxlxzwjqw=)
2: M_Sfp1royP2e6ml0oepQzr0Mjuc.crl (hash: KplAtFhlJvojEDKaFuupF+yX0WGaoif7idxtdd/2fxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/M_Sfp1royP2e6ml0oepQzr0Mjuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/M_Sfp1royP2e6ml0oepQzr0Mjuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/M_Sfp1royP2e6ml0oepQzr0Mjuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 00:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:51:76:89:e0:8f:f2:9b:e2:f5:a7:fa:6e:f2:22:c3:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33f49fa75ae8c8fd9eea6974a1ea50cebd0c8ee7
Validity
Not Before: Oct 19 00:01:25 2026 GMT
Not After : Oct 20 00:01:25 2026 GMT
Subject: CN=d773156bd94a4eb410c8650d60679a53f8513a3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4a:e3:85:e1:38:28:99:74:07:a0:47:68:a2:
68:bd:08:fa:98:10:ce:1d:68:1c:1e:d3:b4:8d:3c:
25:35:54:33:63:9b:28:5a:d3:ff:7f:3a:74:16:39:
09:e4:85:54:9c:87:9d:4a:9b:76:70:eb:84:12:61:
e7:0f:94:d0:be:47:3f:44:de:88:c7:4c:50:1e:a9:
04:8e:0a:20:9a:9a:79:41:99:d2:1f:76:cd:80:1f:
76:59:6e:58:13:bb:05:a9:b5:ba:81:83:52:eb:97:
3f:7e:32:75:f9:3a:76:71:eb:3b:c5:6d:e3:1d:ea:
30:22:9e:d7:f6:77:70:b8:98:01:f0:f1:d1:50:2e:
b7:9f:4d:fa:12:a6:e1:f4:6d:06:d8:8e:63:f0:32:
fd:8a:e6:85:97:0f:4a:1d:4d:e8:49:1f:20:f7:cf:
4c:c3:09:33:17:8c:bd:4b:38:9e:04:48:79:91:06:
dd:64:47:76:43:6e:45:75:82:19:1b:84:0b:52:7b:
d9:99:99:60:ca:36:ff:88:5a:47:8f:55:a4:81:c6:
e9:ee:13:ac:5f:f6:19:9b:72:59:f1:e2:ea:33:20:
7a:62:b4:5f:58:1d:be:80:54:bc:f8:e0:3f:87:19:
98:2b:ae:4a:fb:14:f5:f5:66:71:d4:13:23:38:46:
44:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:73:15:6B:D9:4A:4E:B4:10:C8:65:0D:60:67:9A:53:F8:51:3A:3A
X509v3 Authority Key Identifier:
keyid:33:F4:9F:A7:5A:E8:C8:FD:9E:EA:69:74:A1:EA:50:CE:BD:0C:8E:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_Sfp1royP2e6ml0oepQzr0Mjuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/M_Sfp1royP2e6ml0oepQzr0Mjuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/M_Sfp1royP2e6ml0oepQzr0Mjuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:d6:57:68:04:05:a7:6f:41:07:61:03:7b:8d:0d:e7:57:ba:
b9:9b:36:2c:4e:b6:1a:23:d5:88:8e:10:a9:11:04:37:8c:e7:
2c:a5:df:4a:4b:23:b5:0e:69:21:17:b6:a1:51:66:9c:ca:5d:
e2:f8:3b:e8:9b:4c:89:01:a6:c0:1d:ed:0c:8b:5f:c3:37:6e:
3f:95:92:28:7c:b3:43:41:d6:9c:88:ff:3b:3b:19:9a:54:13:
9f:34:d8:60:0f:0a:f8:d8:95:f7:37:0b:04:19:3e:b2:92:77:
12:92:96:df:b6:ac:83:0a:d2:2b:05:3f:bf:67:9e:db:3a:36:
01:0d:d5:18:bc:5a:72:b3:6c:ac:b0:46:2b:35:16:74:c4:ec:
92:4f:79:8d:0e:7b:37:1e:63:84:a8:3d:a6:e5:fa:a2:d8:8f:
90:ac:b8:b6:66:84:1a:69:85:15:89:d0:33:08:aa:6b:f8:af:
ea:1a:8f:b9:91:23:9d:fd:c1:ff:41:09:bc:55:6e:cf:c8:86:
0e:27:d2:3a:48:61:a4:f1:a2:18:aa:a1:14:bd:e3:17:09:e8:
ed:2d:c4:fa:b4:21:38:6a:32:bc:0e:d0:fe:80:3e:9e:ea:14:
3f:3d:33:ed:28:5c:de:00:60:27:a2:3a:5c:d5:37:a5:26:d3:
4b:46:4f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 07:36:53 2026 by rpki-client