Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.mft
File: SfA190v2NQvDef8uJTiC0kaO9Yg.mft (raw, json)
Hash identifier: g95DUjrtHJS8DlhEmL5R9iNt7dlTdy5uVqaz8jrX2Os=
Subject key identifier: 69:0A:B8:23:B4:E7:5B:0B:4A:D9:B8:F2:B1:78:50:19:0C:1E:6A:2F
Authority key identifier: 49:F0:35:F7:4B:F6:35:0B:C3:79:FF:2E:25:38:82:D2:46:8E:F5:88
Certificate issuer: /CN=49f035f74bf6350bc379ff2e253882d2468ef588
Certificate serial: 019D37530A3A7B8228A4BBC1640832E88F39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfA190v2NQvDef8uJTiC0kaO9Yg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.mft
Manifest number: 05A4
Signing time: Sun 29 Mar 2026 02:01:21 +0000
Manifest this update: Sun 29 Mar 2026 02:01:21 +0000
Manifest next update: Mon 30 Mar 2026 02:01:21 +0000
Files and hashes: 1: SfA190v2NQvDef8uJTiC0kaO9Yg.crl (hash: 3tx6li1YTkAYXS8I/ZOfQl+EFec0g3c+uRQBwxsjEto=)
2: r7-SCz1aeewC1b28_7aTBEERbc8.roa (hash: GlvMAyQ8rtSS7ofDdsa5bNcv30a7phC116f+dSElfio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SfA190v2NQvDef8uJTiC0kaO9Yg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:0a:3a:7b:82:28:a4:bb:c1:64:08:32:e8:8f:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f035f74bf6350bc379ff2e253882d2468ef588
Validity
Not Before: Mar 29 02:01:21 2026 GMT
Not After : Mar 30 02:01:21 2026 GMT
Subject: CN=690ab823b4e75b0b4ad9b8f2b17850190c1e6a2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ce:d5:fa:a3:b1:a4:63:01:2f:71:57:c2:3e:
64:01:1b:e1:e1:69:ca:4a:1b:c1:38:b8:92:39:d4:
c4:0b:00:08:8b:e5:dd:88:02:1d:16:e7:65:34:7f:
f9:73:8d:45:d4:cf:c5:f7:44:15:fc:54:f6:1c:ac:
37:4d:25:30:06:2c:ee:99:55:f4:48:bf:76:9e:48:
e1:73:8d:69:f7:18:dd:a9:4b:36:5a:dc:86:3e:d5:
7f:5e:00:79:ce:25:20:b0:ae:ec:63:30:a8:2c:bd:
6e:f4:23:3e:cb:f8:3a:ff:de:89:89:7d:95:7a:18:
fe:4e:e0:0f:d1:ac:42:0f:c1:d7:60:e6:ef:fc:c6:
99:a6:f6:1d:07:11:81:6c:f9:26:44:ec:4f:08:f1:
77:a0:67:7c:e5:b1:78:bc:21:39:6d:2e:16:91:53:
71:a3:e1:41:aa:12:80:64:84:c7:57:40:25:5d:6b:
39:a4:04:5a:67:49:76:a8:d7:e4:96:c7:b1:78:42:
c6:7a:ac:d5:13:f4:8c:25:2e:a6:9c:ab:62:1a:1a:
40:c9:ba:f2:72:7b:7c:05:b2:74:f2:5f:d8:9e:89:
ba:7b:c2:d4:a1:52:aa:93:02:d0:73:a7:c0:fb:87:
b7:70:f4:7a:4c:0a:19:8d:01:23:3f:ae:43:60:c1:
ee:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:0A:B8:23:B4:E7:5B:0B:4A:D9:B8:F2:B1:78:50:19:0C:1E:6A:2F
X509v3 Authority Key Identifier:
keyid:49:F0:35:F7:4B:F6:35:0B:C3:79:FF:2E:25:38:82:D2:46:8E:F5:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfA190v2NQvDef8uJTiC0kaO9Yg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:eb:3e:cb:e7:1a:8b:f7:e5:de:42:4f:e4:ed:e2:3a:23:12:
ed:93:8c:32:85:11:55:bb:82:2d:c8:a9:c3:e6:b1:c2:c7:86:
22:f7:48:7a:7a:83:ad:e2:29:e2:8b:a8:91:b0:70:36:e1:bd:
b3:8d:b1:63:a0:1a:37:29:b7:76:e6:d4:4b:97:37:07:b8:5c:
63:b9:57:22:ec:ed:75:95:57:84:f6:94:fe:5d:d2:bf:54:f0:
f2:d9:c1:7b:99:66:88:cc:7b:9a:9b:70:01:26:f7:44:ed:6e:
61:d7:4a:eb:9c:19:d3:c1:f3:bb:9e:b1:fa:20:fc:0f:b2:2a:
7f:05:08:72:4e:42:00:36:04:78:6a:ff:bb:19:46:13:74:cd:
d9:55:ae:4e:eb:69:34:27:83:6b:2e:85:6b:5b:ba:ff:53:b6:
99:f1:5b:9c:91:92:69:d1:8b:ad:a4:14:d4:46:24:81:fa:7b:
10:3b:5e:d2:4e:7a:7e:c7:70:e9:96:ee:4e:9d:b2:f6:d8:b3:
71:d9:68:d8:58:cd:46:32:3a:c0:62:5f:56:b3:0a:01:36:7f:
a3:2f:37:fb:28:d7:94:c9:98:25:89:c8:1d:89:50:13:34:05:
0a:a7:d8:a5:c6:e8:26:be:39:ee:35:76:d0:01:06:73:db:0e:
a6:22:41:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:19 2026 by rpki-client