Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1d2f2d-a425-44ab-9b5d-8c3b40285566/1/SFF8v1-HKM7CSvPC6G7PuANT5g0.mft
File: SFF8v1-HKM7CSvPC6G7PuANT5g0.mft (raw, json)
Hash identifier: Kiw65Dlt3Z11IDJBD4zZ6cOMb5+YiBaCKz+SimzeWYg=
Subject key identifier: 2D:3A:99:03:0C:C6:C3:BA:03:6D:B3:40:19:F4:C2:8B:31:9E:D9:87
Authority key identifier: 48:51:7C:BF:5F:87:28:CE:C2:4A:F3:C2:E8:6E:CF:B8:03:53:E6:0D
Certificate issuer: /CN=48517cbf5f8728cec24af3c2e86ecfb80353e60d
Certificate serial: 019EB732F1C9F859320B4B7FEB1242A42718
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFF8v1-HKM7CSvPC6G7PuANT5g0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2f2d-a425-44ab-9b5d-8c3b40285566/1/SFF8v1-HKM7CSvPC6G7PuANT5g0.mft
Manifest number: 1035
Signing time: Thu 11 Jun 2026 15:00:29 +0000
Manifest this update: Thu 11 Jun 2026 15:00:29 +0000
Manifest next update: Fri 12 Jun 2026 15:00:29 +0000
Files and hashes: 1: SFF8v1-HKM7CSvPC6G7PuANT5g0.crl (hash: ZtzRNhvlW6kLN/g+MUWYRZ/FP42zLqhEAgu0m9Ze1RQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2f2d-a425-44ab-9b5d-8c3b40285566/1/SFF8v1-HKM7CSvPC6G7PuANT5g0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2f2d-a425-44ab-9b5d-8c3b40285566/1/SFF8v1-HKM7CSvPC6G7PuANT5g0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFF8v1-HKM7CSvPC6G7PuANT5g0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 15:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:32:f1:c9:f8:59:32:0b:4b:7f:eb:12:42:a4:27:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48517cbf5f8728cec24af3c2e86ecfb80353e60d
Validity
Not Before: Jun 11 15:00:29 2026 GMT
Not After : Jun 12 15:00:29 2026 GMT
Subject: CN=2d3a99030cc6c3ba036db34019f4c28b319ed987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b0:4d:37:be:dc:2c:6c:b1:18:33:01:ba:e5:
38:66:ee:5d:21:07:3e:41:65:3a:50:5d:8c:ec:fb:
07:a3:9f:a0:99:10:ec:c7:40:b7:7e:76:d2:26:f9:
91:38:bd:d9:ca:cd:5a:a6:e3:d3:70:72:fa:0a:f0:
c8:c6:22:23:f6:f9:ad:6d:31:39:0f:7b:c4:82:b3:
88:c0:c0:e8:cd:b3:58:16:8f:f9:66:46:5e:d4:84:
34:41:88:34:14:ab:73:83:f1:e5:3e:57:47:93:67:
72:4f:fc:59:04:1b:56:f6:a8:63:05:f3:4d:fb:83:
85:3f:8f:cd:ea:0a:1f:2e:3f:65:df:72:f8:09:70:
c1:4b:60:4b:4f:74:7e:e4:4b:a6:5c:81:cd:15:b6:
91:20:e6:37:0c:27:86:2b:ad:e3:ec:d5:3b:a0:63:
79:92:62:8d:19:e2:4e:b0:4d:41:43:2d:04:9f:17:
47:f6:57:24:29:1c:5b:7f:4d:a0:6e:0b:0a:3e:60:
d9:61:6d:d4:f1:3f:bc:9c:ce:26:81:23:84:07:8c:
c3:6d:00:bf:2b:da:23:51:bb:ee:68:3c:9d:40:93:
d3:5f:93:cb:62:6f:8b:41:d9:ec:df:02:dd:07:5f:
77:9d:d9:18:5c:38:ea:39:b5:2d:b2:1b:50:1a:04:
f2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:3A:99:03:0C:C6:C3:BA:03:6D:B3:40:19:F4:C2:8B:31:9E:D9:87
X509v3 Authority Key Identifier:
keyid:48:51:7C:BF:5F:87:28:CE:C2:4A:F3:C2:E8:6E:CF:B8:03:53:E6:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFF8v1-HKM7CSvPC6G7PuANT5g0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2f2d-a425-44ab-9b5d-8c3b40285566/1/SFF8v1-HKM7CSvPC6G7PuANT5g0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2f2d-a425-44ab-9b5d-8c3b40285566/1/SFF8v1-HKM7CSvPC6G7PuANT5g0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:2a:af:5a:9b:07:17:17:f3:de:ac:52:6e:20:a8:eb:1f:4b:
43:23:22:19:86:45:d9:fc:70:ae:28:2a:c7:3e:e0:18:c1:ec:
60:c7:7b:a6:20:9b:8f:90:f6:22:2a:b9:40:82:cf:ec:e8:31:
4f:90:51:fe:06:f1:9d:77:d8:59:20:ad:62:ba:8d:cc:6e:72:
8f:fd:65:88:fe:ac:85:d3:f8:52:29:13:9c:51:db:1b:bc:ec:
a8:fe:4c:21:0a:85:d5:73:2c:f9:a0:c3:56:bd:41:55:8f:46:
53:0e:66:20:ed:1e:24:e0:52:10:4b:f2:ed:9f:95:d0:bc:91:
af:77:57:1a:ed:d8:7c:fb:24:26:51:e8:e2:56:ce:e2:9f:7f:
76:d7:83:e4:fe:11:cd:3c:05:00:ff:58:e3:35:38:ae:95:c2:
8b:10:24:d5:58:70:14:25:d1:25:b0:c4:93:b9:13:f8:28:72:
b3:f4:7a:b1:ca:6d:6b:47:df:8d:1e:84:12:10:78:26:be:d4:
3a:52:f7:9f:f9:9e:d2:ef:f0:cc:35:6f:7e:41:26:61:6e:b3:
8d:f9:a6:51:70:33:71:0f:d2:c9:3d:8d:e2:cf:51:d7:74:fd:
ad:7c:7b:b7:0c:d4:43:a9:bd:b1:38:d7:cf:c6:3f:65:ea:58:
65:17:a2:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:07:19 2026 by rpki-client