Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/1d2f2d-a425-44ab-9b5d-8c3b40285566/1/SFF8v1-HKM7CSvPC6G7PuANT5g0.mft
File: SFF8v1-HKM7CSvPC6G7PuANT5g0.mft (raw, json)
Hash identifier: z9FOmZJ9Op27JAVFCfPaoWwwTuvaJwfaMcs1nZEufL4=
Subject key identifier: FC:3B:35:0D:13:F3:49:B3:B3:C3:81:11:83:A3:D0:45:8F:88:C9:A7
Authority key identifier: 48:51:7C:BF:5F:87:28:CE:C2:4A:F3:C2:E8:6E:CF:B8:03:53:E6:0D
Certificate issuer: /CN=48517cbf5f8728cec24af3c2e86ecfb80353e60d
Certificate serial: 01A1743907D4DE4E5E49DA4A6C72CD10E993
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFF8v1-HKM7CSvPC6G7PuANT5g0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2f2d-a425-44ab-9b5d-8c3b40285566/1/SFF8v1-HKM7CSvPC6G7PuANT5g0.mft
Manifest number: 11A0
Signing time: Sun 25 Oct 2026 18:00:56 +0000
Manifest this update: Sun 25 Oct 2026 18:00:56 +0000
Manifest next update: Mon 26 Oct 2026 18:00:56 +0000
Files and hashes: 1: SFF8v1-HKM7CSvPC6G7PuANT5g0.crl (hash: 3qJSqQD6ZA9113aJObwiLr2zFNndGsQlxaQkLTdk06E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2f2d-a425-44ab-9b5d-8c3b40285566/1/SFF8v1-HKM7CSvPC6G7PuANT5g0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2f2d-a425-44ab-9b5d-8c3b40285566/1/SFF8v1-HKM7CSvPC6G7PuANT5g0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFF8v1-HKM7CSvPC6G7PuANT5g0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 18:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:39:07:d4:de:4e:5e:49:da:4a:6c:72:cd:10:e9:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48517cbf5f8728cec24af3c2e86ecfb80353e60d
Validity
Not Before: Oct 25 18:00:56 2026 GMT
Not After : Oct 26 18:00:56 2026 GMT
Subject: CN=fc3b350d13f349b3b3c3811183a3d0458f88c9a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4e:e5:7d:ae:f8:79:9f:86:70:45:32:b5:f9:
5f:3f:af:80:e3:f2:d5:f4:c8:a2:6f:49:8f:47:e9:
65:41:96:78:25:f6:d6:bf:b9:d8:2a:be:0a:2f:f5:
7c:9e:11:e6:3c:37:b7:ed:24:96:64:34:48:9c:11:
c2:40:b2:90:68:ba:fc:88:a1:a6:90:bc:6e:e4:4c:
b5:1d:29:0f:1f:41:2d:fa:50:f2:b9:7f:50:8a:db:
8c:35:0c:0c:22:9c:ed:1b:9d:1a:fe:14:d2:94:95:
ee:96:6b:05:ff:72:5a:a0:95:a0:3a:2d:04:e9:80:
b7:90:fa:66:b0:66:d3:17:d7:ba:73:0b:35:ff:17:
19:b5:f7:4e:ff:b4:80:9e:9e:65:45:6b:a7:c0:c9:
be:25:c1:6c:08:56:4a:16:41:89:d9:cb:32:66:35:
60:59:89:92:1c:a9:4b:1f:6e:e0:21:9d:2a:43:1a:
64:02:4b:aa:03:19:5c:70:79:f6:4a:0a:56:74:49:
3c:1b:0a:6d:64:f4:ca:fd:1e:e7:18:cb:00:d6:c5:
a8:d0:72:70:72:c9:fe:b5:ac:ce:6e:5e:52:e3:c7:
88:df:f5:67:45:8a:85:0a:6b:4c:45:20:46:22:ff:
98:86:ed:b5:38:2c:5c:92:0e:d3:b3:a8:4e:aa:f8:
fe:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:3B:35:0D:13:F3:49:B3:B3:C3:81:11:83:A3:D0:45:8F:88:C9:A7
X509v3 Authority Key Identifier:
keyid:48:51:7C:BF:5F:87:28:CE:C2:4A:F3:C2:E8:6E:CF:B8:03:53:E6:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFF8v1-HKM7CSvPC6G7PuANT5g0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2f2d-a425-44ab-9b5d-8c3b40285566/1/SFF8v1-HKM7CSvPC6G7PuANT5g0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2f2d-a425-44ab-9b5d-8c3b40285566/1/SFF8v1-HKM7CSvPC6G7PuANT5g0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:79:6f:d7:6f:23:f2:9e:2b:d7:a8:7c:fb:28:d0:50:d3:47:
b0:3f:23:ac:f9:5d:f9:e9:02:6a:73:f7:82:e6:f6:e6:41:de:
41:c5:38:f7:34:a7:16:00:21:ff:e6:e5:9a:9c:ec:fb:ba:f8:
d8:11:38:08:b5:c9:56:f3:7e:53:ac:fa:c5:52:47:2c:56:8f:
cb:da:94:ca:20:97:34:d7:9e:38:da:ae:9c:9b:7a:3c:ed:fd:
60:f9:13:15:99:da:29:80:75:79:a8:e5:6a:a6:af:78:8e:9d:
44:02:e7:0d:6e:4f:15:7e:a8:90:e1:e9:48:09:03:44:fa:97:
e5:40:f3:f9:1e:db:75:e5:2b:c6:69:8c:ce:87:9a:03:91:51:
48:ae:65:cc:12:5f:39:f4:ef:b8:72:56:2f:4c:49:30:9f:6c:
ed:de:3b:cc:68:0e:22:16:56:81:14:f6:47:68:e0:2a:b1:7d:
58:00:1e:fc:42:5c:84:b0:02:da:ed:f1:8a:41:69:e4:ad:45:
fc:68:cb:db:5e:c6:5a:a0:4c:32:88:72:c4:f4:51:0a:14:f1:
e0:72:aa:26:31:65:62:f0:f2:66:5d:d9:7d:ea:e7:1d:73:44:
31:d4:eb:dd:57:78:4f:73:c7:98:83:e6:67:82:26:59:35:b9:
30:e0:44:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 06:21:44 2026 by rpki-client