Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft
File: SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft (raw, json)
Hash identifier: VKjHSoy3jU0nv7chOW0U9lyq9rWip+uSOxmbdu8jsnE=
Subject key identifier: 03:AF:D7:78:07:97:F4:2F:33:64:12:37:E5:1B:BC:44:25:46:69:AA
Authority key identifier: 48:53:75:19:1D:1C:2E:50:98:21:08:FD:D4:07:BB:CF:73:E9:79:5C
Certificate issuer: /CN=485375191d1c2e50982108fdd407bbcf73e9795c
Certificate serial: 019D1FEEE81FA25ACFE0690D6EA9B23D3D33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFN1GR0cLlCYIQj91Ae7z3PpeVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft
Manifest number: 124F
Signing time: Tue 24 Mar 2026 13:00:43 +0000
Manifest this update: Tue 24 Mar 2026 13:00:43 +0000
Manifest next update: Wed 25 Mar 2026 13:00:43 +0000
Files and hashes: 1: SFN1GR0cLlCYIQj91Ae7z3PpeVw.crl (hash: vpp4ayvboaHTHfxNFUGyiFXX3UkVrISCioEuBPKsy1A=)
2: d8KM-uWtl5I_naikawUKGzZuO94.roa (hash: 1CwXzGBT5z5cvBmqOXP3+kg+AY9+POz75YELMqDBG6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFN1GR0cLlCYIQj91Ae7z3PpeVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 25 Mar 2026 13:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1f:ee:e8:1f:a2:5a:cf:e0:69:0d:6e:a9:b2:3d:3d:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485375191d1c2e50982108fdd407bbcf73e9795c
Validity
Not Before: Mar 24 13:00:43 2026 GMT
Not After : Mar 25 13:00:43 2026 GMT
Subject: CN=03afd7780797f42f33641237e51bbc44254669aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1b:d0:11:7b:94:01:54:02:5a:37:6c:2c:0c:
02:4b:1c:be:12:61:8a:20:fe:75:95:01:00:22:8b:
86:ec:47:ad:34:5d:e5:52:fd:23:7e:f6:a9:ba:c5:
01:d9:12:26:d4:3e:bd:21:b4:3a:06:21:ee:d8:28:
2c:ba:b6:91:53:9a:58:4f:7f:5a:0e:01:6c:8f:a3:
a5:c5:4b:3b:58:c9:26:31:dc:90:04:57:95:b7:73:
87:38:df:e2:f4:da:f9:88:70:25:70:ed:a8:ae:59:
46:3e:4f:7f:ec:65:73:e9:d8:0f:89:b7:00:a6:db:
a6:f8:e2:a7:0c:d5:34:23:c0:71:6e:44:20:8d:fa:
24:3f:6d:27:c8:54:81:7a:78:44:eb:5f:be:49:b6:
0c:2d:57:8c:b3:b7:00:6b:f8:92:ac:65:43:1f:b6:
fd:b5:d1:ce:25:20:30:f6:a8:f3:9c:d1:4f:0d:83:
ec:9b:ca:d7:07:04:a1:5b:4c:fc:2a:11:f9:ef:70:
c1:13:05:c3:a9:cc:83:27:f0:ed:54:da:4a:37:68:
cd:81:c6:86:e0:8c:e3:cd:bd:af:51:69:1f:12:84:
8e:c8:7c:3d:6d:f0:63:67:aa:1b:38:07:cd:ef:33:
6d:ca:93:cf:71:a0:72:3c:4e:92:f9:0e:3d:2b:2a:
bf:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:AF:D7:78:07:97:F4:2F:33:64:12:37:E5:1B:BC:44:25:46:69:AA
X509v3 Authority Key Identifier:
keyid:48:53:75:19:1D:1C:2E:50:98:21:08:FD:D4:07:BB:CF:73:E9:79:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFN1GR0cLlCYIQj91Ae7z3PpeVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:ea:db:5d:79:e9:bc:4d:90:21:72:32:5d:4e:b9:ea:81:94:
fe:5f:9a:c1:96:d8:d8:1f:04:e0:4a:57:82:09:7a:af:94:88:
b9:65:66:fe:90:36:ae:b1:36:b6:21:82:7c:94:af:66:9a:3f:
8a:43:50:3a:9e:11:9f:bb:50:b2:f6:fe:41:10:1c:3f:49:27:
28:fa:3d:a4:d8:62:66:24:2b:d1:3d:28:17:22:94:73:03:c2:
e1:eb:25:e6:22:9f:3c:5c:96:f6:d6:79:e6:00:af:9e:fc:9b:
00:50:26:3e:fe:b7:a5:d7:49:1a:4d:d6:ff:4a:32:e0:0b:0f:
ba:52:ce:43:68:54:d0:42:8c:8d:21:5a:b1:cd:39:60:87:8d:
62:4c:4e:43:87:a1:a8:c6:65:12:cd:ba:1b:75:b1:9a:ae:29:
a3:ae:38:16:1d:80:11:24:04:45:45:83:c2:0b:d2:06:b2:43:
e4:1e:2a:f1:f9:c0:99:52:6d:b2:64:e3:98:42:59:fe:bf:23:
3c:48:8d:ba:4b:c5:9f:d9:32:ee:10:53:5d:f2:59:9a:d8:e0:
58:0c:2b:41:a4:1f:48:05:d5:37:62:a4:bc:74:b9:3c:4e:84:
0d:be:09:89:8b:15:9a:61:74:ae:5f:74:b4:77:74:00:11:60:
8d:78:c3:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0f7ugfolrP4GkNbqmyPT0zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4NTM3NTE5MWQxYzJlNTA5ODIxMDhmZGQ0MDdiYmNmNzNl
OTc5NWMwHhcNMjYwMzI0MTMwMDQzWhcNMjYwMzI1MTMwMDQzWjAzMTEwLwYDVQQD
EygwM2FmZDc3ODA3OTdmNDJmMzM2NDEyMzdlNTFiYmM0NDI1NDY2OWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRvQEXuUAVQCWjdsLAwCSxy+EmGK
IP51lQEAIouG7EetNF3lUv0jfvapusUB2RIm1D69IbQ6BiHu2CgsuraRU5pYT39a
DgFsj6OlxUs7WMkmMdyQBFeVt3OHON/i9Nr5iHAlcO2orllGPk9/7GVz6dgPibcA
ptum+OKnDNU0I8BxbkQgjfokP20nyFSBenhE61++SbYMLVeMs7cAa/iSrGVDH7b9
tdHOJSAw9qjznNFPDYPsm8rXBwShW0z8KhH573DBEwXDqcyDJ/DtVNpKN2jNgcaG
4Izjzb2vUWkfEoSOyHw9bfBjZ6obOAfN7zNtypPPcaByPE6S+Q49Kyq/sQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAOv13gHl/QvM2QSN+UbvEQlRmmqMB8GA1UdIwQY
MBaAFEhTdRkdHC5QmCEI/dQHu89z6XlcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0ZOMUdSMGNMbENZSVFqOTFBZTd6M1BwZVZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9iMjYwOWItYWUzOS00MjlmLWE1MDUt
NmViZmY2NGJjYTFjLzEvU0ZOMUdSMGNMbENZSVFqOTFBZTd6M1BwZVZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9iMjYwOWItYWUzOS00MjlmLWE1MDUtNmViZmY2NGJjYTFj
LzEvU0ZOMUdSMGNMbENZSVFqOTFBZTd6M1BwZVZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiOrbXXnp
vE2QIXIyXU656oGU/l+awZbY2B8E4EpXggl6r5SIuWVm/pA2rrE2tiGCfJSvZpo/
ikNQOp4Rn7tQsvb+QRAcP0knKPo9pNhiZiQr0T0oFyKUcwPC4esl5iKfPFyW9tZ5
5gCvnvybAFAmPv63pddJGk3W/0oy4AsPulLOQ2hU0EKMjSFasc05YIeNYkxOQ4eh
qMZlEs26G3Wxmq4po644Fh2AESQERUWDwgvSBrJD5B4q8fnAmVJtsmTjmEJZ/r8j
PEiNukvFn9ky7hBTXfJZmtjgWAwrQaQfSAXVN2KkvHS5PE6EDb4JiYsVmmF0rl90
tHd0ABFgjXjD1w==
-----END CERTIFICATE-----
Generated at Tue Mar 24 20:46:22 2026 by rpki-client