Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.mft
File: sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.mft (raw, json)
Hash identifier: Rxgwfpuy846kyfk/tqJKZeHbO3MzO6DkJQ563JfrpAY=
Subject key identifier: 3F:AC:A6:31:D6:19:9E:9A:84:74:5A:60:BC:0B:74:70:FD:14:F3:D2
Authority key identifier: B1:F0:25:2F:FA:42:08:3A:7D:FD:5C:6C:5E:72:7D:64:B9:11:CD:9F
Certificate issuer: /CN=b1f0252ffa42083a7dfd5c6c5e727d64b911cd9f
Certificate serial: 019D38658C3F06B3DFC67206A530A970E226
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.mft
Manifest number: 0F9E
Signing time: Sun 29 Mar 2026 07:01:12 +0000
Manifest this update: Sun 29 Mar 2026 07:01:12 +0000
Manifest next update: Mon 30 Mar 2026 07:01:12 +0000
Files and hashes: 1: sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.crl (hash: zYFgfKAJWlN0iVlr0e9uhx83NQ79Q4UGSqS5+FRb7po=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:8c:3f:06:b3:df:c6:72:06:a5:30:a9:70:e2:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1f0252ffa42083a7dfd5c6c5e727d64b911cd9f
Validity
Not Before: Mar 29 07:01:12 2026 GMT
Not After : Mar 30 07:01:12 2026 GMT
Subject: CN=3faca631d6199e9a84745a60bc0b7470fd14f3d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2d:7d:3a:56:dc:38:a4:35:8c:6d:b9:7b:9c:
22:6c:c6:3d:0e:c6:18:cb:bc:8b:f1:04:e9:36:00:
23:84:58:b2:e9:6a:ef:55:c9:7e:39:ba:4b:47:1b:
a0:d5:98:3c:26:a2:cc:e2:5f:c5:b2:79:51:4a:68:
e0:2b:72:b4:d6:d8:51:ad:b8:08:e3:ec:51:a9:97:
06:5b:3f:ea:11:09:76:1e:90:4e:19:28:3d:71:51:
dd:4e:1d:a5:24:b5:a3:05:08:51:6e:7e:ea:f0:1e:
aa:4a:ab:d9:54:33:3f:18:a5:92:b3:23:24:c9:5c:
98:e7:13:d5:d3:79:e3:c4:44:d0:02:b6:6b:88:0d:
98:07:a7:9e:13:6e:a4:c5:1c:a2:14:d1:c3:4a:7f:
d0:60:9d:08:50:ea:3d:43:5f:40:6d:7d:34:bf:bc:
69:6b:19:c4:20:9b:7d:11:a1:02:dd:07:b3:d4:b1:
01:4b:5f:1f:84:5a:20:51:f1:34:7b:b6:4c:89:0c:
ff:bf:76:15:54:43:fd:27:a0:e2:e9:71:96:4b:4a:
01:4c:e3:9a:31:a3:a3:1b:5f:52:5e:e6:f9:62:5b:
ce:1d:dd:e3:28:49:24:de:7b:b6:fc:48:64:d0:43:
84:8f:47:4a:17:1e:c5:a9:fd:f2:73:ca:5e:98:05:
b7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:AC:A6:31:D6:19:9E:9A:84:74:5A:60:BC:0B:74:70:FD:14:F3:D2
X509v3 Authority Key Identifier:
keyid:B1:F0:25:2F:FA:42:08:3A:7D:FD:5C:6C:5E:72:7D:64:B9:11:CD:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:39:f3:0d:8d:9a:87:06:b1:69:df:58:ab:c7:04:2a:48:90:
d6:e6:36:51:e2:42:0c:9e:e0:c5:62:fa:07:52:34:a4:46:a2:
f7:1a:d8:b0:41:ad:c0:d0:aa:f4:a2:60:3c:df:43:4d:ff:de:
71:ab:67:cb:ff:b6:e4:52:4b:e9:40:5b:10:28:03:58:f0:6d:
a7:1e:b1:17:9f:ff:8d:fa:ba:90:bb:68:ad:39:2b:01:11:cc:
21:0a:76:6f:62:bb:c5:df:9c:df:0e:45:0d:c9:4e:c0:fe:41:
92:ac:ef:a4:a3:e5:b6:1c:05:6b:c4:8f:0a:e6:51:70:7f:23:
c9:47:1c:db:4f:34:4d:a0:13:dc:b0:c0:8a:08:43:07:6a:ad:
96:cf:97:3c:49:78:2e:15:73:1a:21:84:31:6c:e3:fd:f5:92:
3a:70:54:67:17:66:c9:d2:42:5a:30:50:42:eb:73:7b:1c:f4:
d0:ff:a1:91:5c:2e:1d:86:d9:ef:19:a8:8c:11:33:d2:99:b7:
a4:0e:4d:0b:50:0a:a1:49:bd:f2:bd:7d:13:78:47:62:91:75:
bc:67:c6:6e:27:2b:c1:67:07:ad:fe:d4:22:28:69:a0:50:5d:
b3:6d:69:a7:9e:b7:b0:1b:2e:ad:3d:71:09:7f:56:4f:4d:f9:
45:60:26:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:43 2026 by rpki-client