Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/804266-cc2e-4183-bcd7-c5a47dd7a9fe/1/sfInuSnKr9HOkVpUSUfJS1wAhtM.mft
File: sfInuSnKr9HOkVpUSUfJS1wAhtM.mft (raw, json)
Hash identifier: Lz1O52ldbGMOL394txKwvYXJdYnDAmaKVWV1ZwR16NI=
Subject key identifier: 27:14:BB:79:ED:1F:C5:B0:50:AB:3D:19:FE:65:97:FC:EE:EB:42:11
Authority key identifier: B1:F2:27:B9:29:CA:AF:D1:CE:91:5A:54:49:47:C9:4B:5C:00:86:D3
Certificate issuer: /CN=b1f227b929caafd1ce915a544947c94b5c0086d3
Certificate serial: 019D3865FACBEB2EAB06802160B42AD099FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sfInuSnKr9HOkVpUSUfJS1wAhtM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/804266-cc2e-4183-bcd7-c5a47dd7a9fe/1/sfInuSnKr9HOkVpUSUfJS1wAhtM.mft
Manifest number: 010F
Signing time: Sun 29 Mar 2026 07:01:40 +0000
Manifest this update: Sun 29 Mar 2026 07:01:40 +0000
Manifest next update: Mon 30 Mar 2026 07:01:40 +0000
Files and hashes: 1: sfInuSnKr9HOkVpUSUfJS1wAhtM.crl (hash: R9z3CDQQ3eCbLlo2TkrW+g15pFQabKX5qbVNxyDKpRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/804266-cc2e-4183-bcd7-c5a47dd7a9fe/1/sfInuSnKr9HOkVpUSUfJS1wAhtM.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/804266-cc2e-4183-bcd7-c5a47dd7a9fe/1/sfInuSnKr9HOkVpUSUfJS1wAhtM.mft
rsync://rpki.ripe.net/repository/DEFAULT/sfInuSnKr9HOkVpUSUfJS1wAhtM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:fa:cb:eb:2e:ab:06:80:21:60:b4:2a:d0:99:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1f227b929caafd1ce915a544947c94b5c0086d3
Validity
Not Before: Mar 29 07:01:40 2026 GMT
Not After : Mar 30 07:01:40 2026 GMT
Subject: CN=2714bb79ed1fc5b050ab3d19fe6597fceeeb4211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9e:ea:91:64:5c:ed:88:b4:dc:e6:a4:e5:f4:
f3:db:c8:4f:d8:e7:c8:e2:55:c2:81:4c:bd:a2:a1:
9b:fd:20:1a:7e:fb:8f:66:f5:af:5c:2a:ee:51:cc:
3d:e7:e2:eb:69:68:01:f5:d1:fe:be:44:87:3b:f8:
59:82:0d:98:3c:b5:12:0a:8a:91:b1:d7:e4:e0:9e:
4e:ac:08:d7:4b:3a:a4:0f:c2:37:39:99:6f:f6:a3:
33:ac:fd:e0:3d:d7:41:00:5c:6d:b2:5c:8f:27:da:
f0:51:1f:17:3c:88:b5:b1:81:7c:aa:b1:1e:b8:b1:
c1:f2:43:cd:3b:b6:98:5b:ff:1d:57:c7:df:e3:1b:
68:80:f6:b3:9f:ef:48:ed:b4:44:12:58:be:e1:97:
ee:25:3f:9a:29:eb:77:d7:5d:5a:3d:39:87:43:a6:
bf:73:a1:67:da:61:1c:cb:e8:1b:46:95:d9:27:2f:
17:29:db:ed:c5:f0:d8:82:b3:d0:99:e4:ea:90:dd:
9c:0c:93:77:8b:f2:22:28:6f:3d:66:7c:54:31:8f:
22:1a:7e:c2:7f:67:ee:f1:f6:e0:47:e2:08:30:28:
92:4e:8a:c1:8a:16:17:10:97:0a:93:56:be:37:7c:
e7:78:65:40:9c:1b:57:24:e0:dc:c0:9d:b3:e6:d7:
28:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:14:BB:79:ED:1F:C5:B0:50:AB:3D:19:FE:65:97:FC:EE:EB:42:11
X509v3 Authority Key Identifier:
keyid:B1:F2:27:B9:29:CA:AF:D1:CE:91:5A:54:49:47:C9:4B:5C:00:86:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sfInuSnKr9HOkVpUSUfJS1wAhtM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/804266-cc2e-4183-bcd7-c5a47dd7a9fe/1/sfInuSnKr9HOkVpUSUfJS1wAhtM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/804266-cc2e-4183-bcd7-c5a47dd7a9fe/1/sfInuSnKr9HOkVpUSUfJS1wAhtM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:58:b3:39:30:5a:81:30:c2:1c:25:98:02:0c:70:d6:57:4d:
3c:d3:bd:26:d8:82:7e:54:00:9c:eb:61:80:b8:0a:1e:16:6f:
d4:fb:a8:a4:bc:c2:9e:63:b3:38:29:10:0b:53:e5:35:22:9b:
8d:65:94:27:69:c7:ae:d3:83:fc:39:c3:4d:7a:7e:6c:a4:fe:
a6:7e:e6:fb:9b:34:2b:d2:4b:3b:f1:de:b9:de:5e:9f:87:a4:
c8:15:34:bd:7a:f5:fb:3b:42:ea:ed:f6:90:39:d4:90:b5:44:
a2:c9:3a:86:3b:29:26:e9:71:79:37:dd:76:5f:67:9d:05:61:
c8:50:61:19:de:57:77:c6:43:d4:b2:14:c0:46:7e:5c:a3:e1:
00:50:e4:f3:f2:bc:c8:22:70:97:6a:cf:39:26:25:c2:37:85:
a6:79:7b:ed:95:ff:7a:df:61:e1:49:61:70:f8:9b:57:14:a4:
77:d6:8d:7f:16:0f:45:4e:f2:26:51:49:49:b8:f4:7f:7e:db:
e4:70:63:3d:93:9d:c6:7f:2c:d0:9f:7d:81:3d:a8:47:ba:da:
4e:2c:d5:1a:47:03:84:39:a7:c7:80:f6:e3:c9:47:06:37:b7:
82:3e:06:42:62:14:34:f9:b2:cd:5f:7d:4b:24:10:90:af:d7:
ad:5d:1b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:18 2026 by rpki-client