Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.mft
File: sfcTzyBVLWxcI_CeezdmmEb5ylA.mft (raw, json)
Hash identifier: BhmH+Clri0XAcFurcn7mP5opKhFbd+FtFY6FJ9Q+vAE=
Subject key identifier: 99:81:19:1A:2C:E7:88:FE:78:A6:92:3F:CE:69:75:8A:1B:57:9C:DC
Authority key identifier: B1:F7:13:CF:20:55:2D:6C:5C:23:F0:9E:7B:37:66:98:46:F9:CA:50
Certificate issuer: /CN=b1f713cf20552d6c5c23f09e7b37669846f9ca50
Certificate serial: 019CF429B106BAA1FA5E0875C0CDC9CC9A4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sfcTzyBVLWxcI_CeezdmmEb5ylA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.mft
Manifest number: 1871
Signing time: Mon 16 Mar 2026 01:01:38 +0000
Manifest this update: Mon 16 Mar 2026 01:01:38 +0000
Manifest next update: Tue 17 Mar 2026 01:01:38 +0000
Files and hashes: 1: 9TOqGu4162v0qWS1r5J3RslyKWk.asa (hash: blkV+1hYOV+uGdGMlHV2otVp88CM6pTuGTFsjZqUK1U=)
2: msFdZet1jGf9Pxj7w6VmCeW1jMQ.roa (hash: fyqpHHLV2QyOw8iBPdNynqjL383PMJfcyHqqNVPJBtE=)
3: sfcTzyBVLWxcI_CeezdmmEb5ylA.crl (hash: SCz5PKV0qvaanIdl2VN+0wA12REcx9G8mwR6npOpuuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sfcTzyBVLWxcI_CeezdmmEb5ylA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f4:29:b1:06:ba:a1:fa:5e:08:75:c0:cd:c9:cc:9a:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1f713cf20552d6c5c23f09e7b37669846f9ca50
Validity
Not Before: Mar 16 01:01:38 2026 GMT
Not After : Mar 17 01:01:38 2026 GMT
Subject: CN=9981191a2ce788fe78a6923fce69758a1b579cdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c3:c9:5f:5b:4b:b9:94:b6:bc:e4:16:f5:f3:
50:8c:25:c1:d1:83:23:3e:cd:fd:91:2f:2a:c5:69:
1c:2e:d3:ad:26:89:82:63:d7:a3:a1:d2:43:9c:aa:
49:8c:10:1d:ba:51:14:a2:66:b4:0e:93:f0:4f:aa:
13:99:c1:cf:d9:d4:9b:f2:33:03:84:dc:ef:87:8b:
df:24:7b:b8:34:5a:b5:2a:1b:ef:ac:8b:3d:c6:99:
d8:97:5a:44:73:cc:6c:59:a5:c3:2e:e4:ab:57:26:
20:a5:18:8a:2d:be:c5:ff:18:ee:c9:b9:88:41:c5:
15:cd:ff:ce:b9:f1:90:78:d2:da:c4:25:be:bd:d9:
01:85:ad:6f:99:3b:6b:98:13:16:4c:8e:d9:0b:4f:
85:4c:4a:f7:a6:ea:8e:ff:b2:c6:6b:4c:5b:e2:7a:
cc:81:6e:c9:70:4c:35:47:6a:41:33:61:33:eb:09:
30:93:a5:a2:ee:7f:7c:4f:89:0e:69:92:d2:11:f1:
4d:d2:14:b3:3b:b1:4f:b8:c9:00:da:3b:22:3f:c2:
a0:23:2b:1f:e6:d1:6b:4e:51:54:30:34:b6:72:70:
14:1d:ba:12:f8:b7:2e:6c:67:d9:85:8e:70:58:07:
99:a4:3d:60:9b:df:c3:1a:2c:52:25:7b:77:a0:10:
f9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:81:19:1A:2C:E7:88:FE:78:A6:92:3F:CE:69:75:8A:1B:57:9C:DC
X509v3 Authority Key Identifier:
keyid:B1:F7:13:CF:20:55:2D:6C:5C:23:F0:9E:7B:37:66:98:46:F9:CA:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sfcTzyBVLWxcI_CeezdmmEb5ylA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:ff:b3:79:50:ba:23:fe:32:d3:16:15:e8:62:e5:07:6a:f9:
8f:26:c1:17:4e:ef:28:66:8c:87:e5:02:1f:4f:01:a7:9f:89:
ed:5f:cf:27:c0:56:bb:35:f7:c8:5a:31:ea:8b:77:56:fc:dc:
21:b0:62:8a:ba:b4:17:57:59:7e:c0:ed:4d:2f:64:2c:93:92:
ff:23:46:7b:a2:7a:6c:99:18:40:da:c1:2f:28:08:96:9c:63:
c8:ab:5b:45:80:6c:39:9c:bd:af:35:36:c0:50:3e:de:79:95:
e0:a3:ee:ef:f7:7b:0d:c0:81:49:5b:3a:98:ef:47:61:15:1c:
33:c7:ec:0d:19:b4:e1:d0:d4:90:22:6d:33:e9:c4:51:15:2e:
02:14:84:fe:5f:94:a7:67:a3:65:18:4e:af:f9:92:61:d4:fa:
db:13:6f:b9:18:8d:a8:33:fa:b5:81:68:a4:76:03:34:4d:1a:
f3:89:1d:19:3d:63:cc:6b:7d:38:93:57:16:5b:fd:46:fc:c0:
e1:61:15:7a:7f:d3:b8:d8:d4:90:28:62:05:11:ab:76:ce:33:
7b:7b:d0:34:1d:2d:51:20:84:6a:97:ce:44:46:12:1e:e6:dd:
c5:be:55:53:53:13:1e:5b:f8:14:2f:bb:8f:4e:11:b1:3f:7a:
75:a6:7e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 08:25:13 2026 by rpki-client