Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft
File: SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft (raw, json)
Hash identifier: wKIXRA59b/Lswv33UYwxqH9kYL3JSnVSzoqCMx76vqQ=
Subject key identifier: 4D:94:25:00:82:74:70:D5:55:9F:CB:D7:47:FA:EA:59:34:8C:EE:BC
Authority key identifier: 48:53:75:19:1D:1C:2E:50:98:21:08:FD:D4:07:BB:CF:73:E9:79:5C
Certificate issuer: /CN=485375191d1c2e50982108fdd407bbcf73e9795c
Certificate serial: 019E56DB7678D7086068A485E2B30EC3063B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFN1GR0cLlCYIQj91Ae7z3PpeVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft
Manifest number: 12F0
Signing time: Sat 23 May 2026 22:01:23 +0000
Manifest this update: Sat 23 May 2026 22:01:23 +0000
Manifest next update: Sun 24 May 2026 22:01:23 +0000
Files and hashes: 1: SFN1GR0cLlCYIQj91Ae7z3PpeVw.crl (hash: HiV4a16HeUSMQPVCar/WZNajCRoXH0nlCO24XFZ+8Dc=)
2: d8KM-uWtl5I_naikawUKGzZuO94.roa (hash: 1CwXzGBT5z5cvBmqOXP3+kg+AY9+POz75YELMqDBG6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFN1GR0cLlCYIQj91Ae7z3PpeVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 May 2026 20:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:56:db:76:78:d7:08:60:68:a4:85:e2:b3:0e:c3:06:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485375191d1c2e50982108fdd407bbcf73e9795c
Validity
Not Before: May 23 22:01:23 2026 GMT
Not After : May 24 22:01:23 2026 GMT
Subject: CN=4d942500827470d5559fcbd747faea59348ceebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:0e:55:6b:44:67:df:5c:81:0e:8b:fc:ed:0c:
c2:53:cf:b3:04:99:3a:dd:cd:58:84:76:c0:22:ab:
49:d6:23:6b:71:86:e5:73:98:26:5c:e3:09:bd:71:
67:03:d3:44:62:e8:fd:0e:87:c5:db:37:c4:20:fb:
c4:61:47:62:4e:ca:c0:41:36:64:6a:fd:1d:cd:3f:
db:17:8f:22:7d:9d:6f:6d:6d:fc:07:7c:d3:40:66:
2e:73:73:77:58:7c:2f:60:a1:e4:31:04:3f:aa:47:
63:d4:92:57:b1:a5:ef:23:89:33:66:42:a9:ba:0f:
fb:ab:40:c3:a1:99:82:bb:d5:74:9a:ac:3a:77:1e:
0e:65:30:80:c9:d1:7c:36:05:1e:33:95:04:ac:23:
83:2c:19:d3:e9:c5:48:03:52:85:f1:1c:d1:09:70:
ba:fa:a6:78:89:ee:76:eb:f6:63:2f:30:7f:3b:19:
03:a5:85:8c:9b:90:25:55:9d:f6:99:ff:47:05:50:
28:3b:ae:45:a0:5c:96:04:5e:5f:c5:1f:84:1f:1f:
ac:cc:bc:33:ba:71:60:d3:5b:2e:6e:36:26:a0:e4:
f4:bc:29:ad:54:48:d5:cd:48:1b:7e:d4:ae:0c:31:
4a:63:d8:84:87:1a:3d:66:b0:6b:33:d2:21:a8:21:
32:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:94:25:00:82:74:70:D5:55:9F:CB:D7:47:FA:EA:59:34:8C:EE:BC
X509v3 Authority Key Identifier:
keyid:48:53:75:19:1D:1C:2E:50:98:21:08:FD:D4:07:BB:CF:73:E9:79:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFN1GR0cLlCYIQj91Ae7z3PpeVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:db:6b:a4:e1:ba:02:54:7b:96:b8:23:27:f8:61:d8:00:55:
d0:80:e4:ef:53:9c:a1:b1:a6:13:fb:b9:76:09:4e:77:5b:9c:
38:bf:29:23:9a:5b:db:9d:2a:26:d1:45:b2:98:72:13:c2:ec:
91:51:a4:fb:aa:fa:ec:8d:a3:ec:3f:2c:ab:98:1c:d0:c3:cf:
bf:d7:65:3e:72:bf:e9:3e:4b:2c:03:b9:e8:9f:8f:2a:79:b8:
0d:b5:cc:e6:db:08:47:ee:51:11:96:aa:c0:76:ae:83:2f:2d:
2d:ed:4a:b4:58:92:05:8b:91:1e:8a:a2:2f:18:91:ee:bf:be:
8d:17:1c:1c:42:5f:6d:03:26:51:c1:cd:3e:bc:1d:a9:95:17:
97:96:85:03:a0:c5:5b:14:28:3c:ff:6a:7d:61:e7:6d:44:b6:
1c:a1:57:fc:31:45:d2:e8:c6:2c:29:33:32:13:5d:4e:38:2b:
0c:fe:20:f3:27:de:52:0c:8c:3b:e5:0f:ec:e9:fd:7a:fc:22:
c5:d8:24:ae:2a:4e:c5:8f:9c:5c:7c:6d:97:1f:c9:99:f4:b7:
9a:b5:1f:fa:b0:5e:b7:7d:30:a2:5b:8f:61:fd:be:ed:e0:7f:
8d:bf:49:fe:f0:74:bf:61:07:33:e8:6f:04:16:ef:ca:33:f1:
7c:ef:1f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 04:37:56 2026 by rpki-client