Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft
File: SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft (raw, json)
Hash identifier: NlhIrPy9gZ6qKXqW+8oHJpX0bOEqA5gR7WssZmr/lvk=
Subject key identifier: 7F:1A:06:95:47:5A:05:43:36:3D:6D:CC:4C:88:F8:3F:B7:12:F9:59
Authority key identifier: 49:F2:70:2D:1A:07:26:17:5E:39:AF:16:97:4E:53:75:DC:AE:FC:31
Certificate issuer: /CN=49f2702d1a0726175e39af16974e5375dcaefc31
Certificate serial: 01A089E79CF621B36167B71E3EC18B9CF489
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfJwLRoHJhdeOa8Wl05Tddyu_DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft
Manifest number: 1987
Signing time: Thu 10 Sep 2026 06:00:52 +0000
Manifest this update: Thu 10 Sep 2026 06:00:52 +0000
Manifest next update: Fri 11 Sep 2026 06:00:52 +0000
Files and hashes: 1: 9MnmN8BJQf0kOHp6EAYtsFBmQ8A.roa (hash: GaU3NhS7R0xUqYKJ24HpGBHtr1NKfsNpWx13se1RpD8=)
2: SfJwLRoHJhdeOa8Wl05Tddyu_DE.crl (hash: RCJKp7HSVxwLtYpt64kEnhB9uaqcrQn+8n/gYAYqtWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SfJwLRoHJhdeOa8Wl05Tddyu_DE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:e7:9c:f6:21:b3:61:67:b7:1e:3e:c1:8b:9c:f4:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f2702d1a0726175e39af16974e5375dcaefc31
Validity
Not Before: Sep 10 06:00:52 2026 GMT
Not After : Sep 11 06:00:52 2026 GMT
Subject: CN=7f1a0695475a0543363d6dcc4c88f83fb712f959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:97:4d:09:6a:86:54:f4:20:00:fe:f1:04:18:
b5:77:b6:f6:ff:15:8a:45:01:c5:5f:0c:04:2b:ac:
80:21:ac:1b:fa:17:e4:0c:ba:57:a1:28:7b:92:d4:
85:9e:6f:67:00:22:ab:f2:59:a7:0d:d8:f3:9f:35:
6c:8d:d2:dc:b4:99:19:e2:c4:58:d9:ca:62:e3:99:
a8:f2:7f:11:0e:b4:b3:54:cb:a0:a3:86:68:ed:9b:
76:71:dd:9e:3c:b8:0e:d0:20:08:24:61:3f:dd:47:
8f:41:fb:53:cc:a7:80:c8:bb:a7:4e:d2:2d:28:14:
77:47:e9:b8:5b:27:c0:f1:b9:62:7d:af:63:e4:15:
83:aa:68:db:a5:49:79:97:af:8c:04:0e:9d:84:16:
95:32:51:0a:03:b7:84:fb:43:8d:87:7d:bb:19:7c:
62:05:2a:69:ef:67:57:46:60:df:47:22:e1:a7:43:
36:9d:6f:75:8b:0f:62:9e:71:85:3e:31:a3:08:98:
f3:d7:8c:c4:1a:4a:61:c9:67:11:4f:61:c2:2a:fc:
46:ec:1f:b0:e2:dc:97:fd:5b:db:49:8e:40:93:5d:
3d:43:95:ae:39:a0:d9:0e:4b:02:06:b4:d3:9b:2c:
c9:35:e3:03:bd:52:73:d0:56:cf:aa:79:c3:c3:14:
f3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:1A:06:95:47:5A:05:43:36:3D:6D:CC:4C:88:F8:3F:B7:12:F9:59
X509v3 Authority Key Identifier:
keyid:49:F2:70:2D:1A:07:26:17:5E:39:AF:16:97:4E:53:75:DC:AE:FC:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfJwLRoHJhdeOa8Wl05Tddyu_DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:33:30:b4:8c:76:4c:38:96:3a:18:95:2a:e3:82:f6:db:7c:
f3:b9:9a:d9:04:78:43:e9:1a:40:5b:50:92:18:af:aa:f3:b1:
21:80:10:ca:1d:b5:05:ae:fd:af:55:b4:51:d0:10:b1:1b:24:
80:54:5f:26:df:db:63:85:e4:ec:b8:8b:84:f5:8c:e9:1a:00:
8a:3b:cc:d0:bb:90:ea:05:a8:50:8a:d6:6d:25:ec:e4:f2:05:
ba:12:c6:3d:90:6d:3d:72:2e:e4:3a:46:f7:49:58:ec:cc:5f:
48:d4:80:6d:0e:91:e6:ea:e6:77:f2:93:f6:8f:43:38:ac:80:
36:4d:00:81:ad:2b:95:72:5f:3c:6e:18:3a:57:7d:fa:89:5d:
c8:f8:28:cb:61:be:d5:c4:71:ae:50:49:80:fd:d2:9d:ae:fa:
14:ed:cd:8f:e4:55:06:af:b6:a4:ae:2f:73:86:03:ef:0e:16:
64:26:e2:1e:5b:87:72:2b:8f:ce:27:67:cf:31:e3:3b:be:82:
19:5a:a2:b6:5e:33:4d:48:e0:27:7c:34:4d:bf:4e:59:c4:1d:
21:5b:de:1e:ab:5c:9d:ee:c0:90:58:0e:84:b3:c6:5f:f8:79:
ef:a8:af:d7:2e:69:e2:e9:7d:d7:e9:ce:cb:8b:17:4c:3b:35:
59:9d:cc:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 08:14:09 2026 by rpki-client