Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft
File: SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft (raw, json)
Hash identifier: GB7ZeNvjeBdxskLUdHenmHDIoz/wSk5Pem87CzcgmfU=
Subject key identifier: C3:22:E7:BB:4D:97:07:19:21:FA:17:F3:0D:66:2F:8B:79:7E:64:8F
Authority key identifier: 49:F2:70:2D:1A:07:26:17:5E:39:AF:16:97:4E:53:75:DC:AE:FC:31
Certificate issuer: /CN=49f2702d1a0726175e39af16974e5375dcaefc31
Certificate serial: 019EB68DE922B7AB773E85747D0312419E40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfJwLRoHJhdeOa8Wl05Tddyu_DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft
Manifest number: 1895
Signing time: Thu 11 Jun 2026 12:00:14 +0000
Manifest this update: Thu 11 Jun 2026 12:00:14 +0000
Manifest next update: Fri 12 Jun 2026 12:00:14 +0000
Files and hashes: 1: 9MnmN8BJQf0kOHp6EAYtsFBmQ8A.roa (hash: GaU3NhS7R0xUqYKJ24HpGBHtr1NKfsNpWx13se1RpD8=)
2: SfJwLRoHJhdeOa8Wl05Tddyu_DE.crl (hash: KOX4Se+N4zHcTmSkmDPtlDgyCveV8bXWogf9ZT7KTGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SfJwLRoHJhdeOa8Wl05Tddyu_DE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 12:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:8d:e9:22:b7:ab:77:3e:85:74:7d:03:12:41:9e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f2702d1a0726175e39af16974e5375dcaefc31
Validity
Not Before: Jun 11 12:00:14 2026 GMT
Not After : Jun 12 12:00:14 2026 GMT
Subject: CN=c322e7bb4d97071921fa17f30d662f8b797e648f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c4:52:c2:cc:67:76:c5:a6:02:b7:fb:32:d7:
be:58:f1:b2:e9:09:ec:e2:46:af:1a:3a:11:83:9c:
96:93:ca:9b:b5:ff:7e:41:79:d2:96:45:c0:ac:8c:
19:88:cf:a5:f7:3c:d1:0c:d4:36:f8:c3:16:9c:a4:
47:82:0d:bc:2a:d0:a6:d9:3b:30:ee:ed:8f:87:bc:
75:57:5b:fc:62:f3:1b:b6:4a:9b:2b:07:68:f0:b3:
93:5b:ca:7e:4b:9b:e6:8e:9a:14:36:99:60:33:51:
34:60:dc:79:b3:62:7b:fe:ce:e7:18:8f:eb:3b:59:
3f:63:47:f3:1e:64:31:28:b3:9a:aa:c0:6c:f8:dd:
aa:d0:87:5e:b8:2f:43:84:f0:3e:16:eb:78:0f:6e:
36:b3:c7:4c:23:da:01:39:fb:cd:b6:75:c9:f6:a5:
bd:59:0d:e5:60:ce:b8:c8:72:62:ca:bd:b8:ab:47:
b4:9d:7b:3c:d1:77:3a:ef:53:25:27:15:81:2e:58:
77:00:a8:f1:b7:ad:b1:63:00:b1:5b:a4:69:9c:5a:
dd:72:97:20:79:63:b5:19:fd:50:4d:8e:2c:8d:e7:
78:53:ac:f7:7e:c4:f4:33:01:c6:2e:a8:c1:f3:43:
d8:2a:f7:40:cf:b6:59:7e:a6:b6:ed:0a:a3:ca:97:
0d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:22:E7:BB:4D:97:07:19:21:FA:17:F3:0D:66:2F:8B:79:7E:64:8F
X509v3 Authority Key Identifier:
keyid:49:F2:70:2D:1A:07:26:17:5E:39:AF:16:97:4E:53:75:DC:AE:FC:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfJwLRoHJhdeOa8Wl05Tddyu_DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:cd:2e:f2:c0:a3:5d:0d:8a:2b:15:23:97:7f:b0:6c:8b:aa:
fb:8e:3f:e3:fe:20:eb:25:bb:6d:56:1c:c0:f0:8b:4e:98:8f:
e2:e8:32:8c:4e:56:e4:7a:07:ad:b1:87:89:30:b6:7f:1c:97:
c8:9a:80:58:f6:9e:b9:12:08:e0:63:b3:64:2f:60:36:f7:6a:
85:58:8d:01:0a:eb:5e:02:40:16:01:44:01:2a:fd:b3:3a:9d:
24:fb:3a:c2:f9:cb:d5:8a:2d:bf:2a:eb:29:36:be:43:f6:fa:
55:43:f4:84:5d:93:df:4f:92:65:60:7c:5e:2d:43:61:b5:8b:
5d:7b:66:5c:11:01:a7:d1:68:57:b5:9a:ec:c0:ab:17:15:50:
e3:b9:65:83:13:f4:4d:6f:b2:96:41:07:29:89:a3:0a:4f:79:
18:c2:63:ec:d4:34:4e:fc:51:13:75:9a:13:b3:8c:3a:35:e2:
ad:ae:ca:f3:1c:e4:12:f0:74:6a:24:1c:4c:00:b5:23:73:b6:
ea:ca:32:de:36:d6:39:a0:7e:7d:fa:27:31:8e:5b:22:06:5a:
2a:c8:29:e8:3a:c4:a5:27:f6:94:36:cc:ef:6b:96:4d:3c:f5:
78:98:f0:1a:91:a7:a8:57:26:fa:e2:cb:97:3a:a9:d8:8e:0d:
56:12:60:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 18:59:45 2026 by rpki-client