Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.mft
File: SfCTu46K0RxMg07f0t9U1By0n3k.mft (raw, json)
Hash identifier: SxeW5L2tKwkMoIvzcrnCJHnxPkr0s3Osz2eoKiiokow=
Subject key identifier: 10:E8:4C:85:54:AC:74:0F:62:8A:C2:0B:36:7E:EE:C8:0A:7C:A1:8B
Authority key identifier: 49:F0:93:BB:8E:8A:D1:1C:4C:83:4E:DF:D2:DF:54:D4:1C:B4:9F:79
Certificate issuer: /CN=49f093bb8e8ad11c4c834edfd2df54d41cb49f79
Certificate serial: 01A180741A146A7AF2A91BD0D02359CE118D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfCTu46K0RxMg07f0t9U1By0n3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.mft
Manifest number: 0929
Signing time: Wed 28 Oct 2026 03:00:54 +0000
Manifest this update: Wed 28 Oct 2026 03:00:54 +0000
Manifest next update: Thu 29 Oct 2026 03:00:54 +0000
Files and hashes: 1: 3j6WlgdxqAXoRQPRjR6UJD1LhPw.roa (hash: T1exYoW+fjUwfB54PefmCuoIsw95ypDAm+V+z9pSMEQ=)
2: SfCTu46K0RxMg07f0t9U1By0n3k.crl (hash: xH4v7Ep1L/RUPBXB6LGWMbrAkrIDF/5ky26ySH7uyGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/SfCTu46K0RxMg07f0t9U1By0n3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 03:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:74:1a:14:6a:7a:f2:a9:1b:d0:d0:23:59:ce:11:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f093bb8e8ad11c4c834edfd2df54d41cb49f79
Validity
Not Before: Oct 28 03:00:54 2026 GMT
Not After : Oct 29 03:00:54 2026 GMT
Subject: CN=10e84c8554ac740f628ac20b367eeec80a7ca18b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4e:81:12:f9:41:54:f2:8a:62:7a:a9:12:f9:
98:24:a5:1c:42:88:e8:22:ff:6b:76:2f:a6:9c:3b:
3e:7d:cc:76:4f:4a:1b:0f:5b:c2:cd:31:e4:c4:78:
d8:f2:ec:13:50:7e:83:e4:3a:c4:ee:c8:63:aa:fd:
a8:20:35:4e:80:a6:87:5a:99:cd:73:09:2d:1a:83:
26:32:58:49:73:a9:89:c3:73:0b:e4:9a:57:f3:c1:
54:b0:ee:38:4d:47:7c:54:de:42:0c:5b:1f:3f:94:
9f:41:c6:eb:49:46:3f:71:fd:76:a6:d1:1b:a3:66:
7c:e8:b8:2c:71:cc:9c:95:04:0c:da:ce:0a:0d:af:
86:8e:76:78:60:22:14:3d:db:75:75:77:c8:69:e5:
1f:4c:40:1c:61:12:c8:7b:c6:44:51:32:4b:fa:6b:
f9:8a:d3:97:de:13:23:c5:4b:d5:37:98:1b:65:60:
a0:20:e8:f1:e4:83:98:9f:97:74:fc:58:d8:fa:a1:
87:c8:2d:65:2c:f5:e2:e3:45:68:c2:83:ce:ad:76:
bc:5d:cf:30:bf:c3:1b:0e:e2:b6:d9:63:0f:81:45:
0c:ae:6b:7c:20:0b:bd:06:17:9e:e5:af:2e:3d:bd:
31:df:4b:49:05:3f:15:4f:57:ce:8b:bd:4f:1b:2b:
06:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E8:4C:85:54:AC:74:0F:62:8A:C2:0B:36:7E:EE:C8:0A:7C:A1:8B
X509v3 Authority Key Identifier:
keyid:49:F0:93:BB:8E:8A:D1:1C:4C:83:4E:DF:D2:DF:54:D4:1C:B4:9F:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfCTu46K0RxMg07f0t9U1By0n3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:11:5d:dc:7a:4e:5f:bb:21:c2:89:cf:e1:4a:3d:5d:1f:e8:
2d:fe:2f:14:67:9d:a1:ba:f7:73:bb:32:32:77:d5:33:1d:c8:
49:e8:d0:6c:ec:0d:bc:3a:9f:98:0e:08:3a:bb:80:29:eb:70:
a2:b8:a3:48:c6:df:6f:60:4c:9e:8e:85:e2:21:cd:29:31:89:
48:5f:9b:69:be:d5:7b:7d:23:29:15:3a:65:47:1a:e3:19:c9:
14:40:fb:24:a2:ed:39:44:b7:ac:ad:17:d2:a5:98:7d:ba:cc:
2a:b3:ef:9d:29:4e:e5:7a:5e:c7:84:07:39:64:98:9a:6b:3e:
d2:2c:ee:cc:68:db:2d:5a:91:ce:49:a2:ee:e1:4f:2e:8b:ab:
ea:c7:ad:a7:8f:fc:52:05:cb:18:08:b5:a9:3b:9d:28:33:a9:
4f:15:4e:88:30:1c:ad:e5:51:d7:50:76:f5:f4:42:99:14:7e:
93:9b:e4:fc:4b:26:30:b0:8f:46:42:bb:6d:54:ce:e0:6b:86:
af:bf:d4:0e:1d:41:59:74:4a:cc:cb:4d:3c:fa:82:be:c7:13:
6a:77:ec:1b:be:8b:8b:75:86:60:e1:29:e0:a0:8c:66:3c:c2:
2e:6f:e3:85:9d:16:c4:77:d8:f9:40:2d:53:3d:40:27:5a:4a:
00:1c:b4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:03:23 2026 by rpki-client