Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.mft
File: SfJiM_W7QibCp6e5ADAI0Z40eFs.mft (raw, json)
Hash identifier: okSWIMudpAKJCLy5ozX9mGkP7fUEUEp8hKmyPslpvuo=
Subject key identifier: 0A:4D:01:CF:AA:9C:B3:C1:B3:67:88:A0:FC:94:2A:98:90:90:B5:2D
Authority key identifier: 49:F2:62:33:F5:BB:42:26:C2:A7:A7:B9:00:30:08:D1:9E:34:78:5B
Certificate issuer: /CN=49f26233f5bb4226c2a7a7b9003008d19e34785b
Certificate serial: 019D386591D610072838CD09C568FE29DC78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfJiM_W7QibCp6e5ADAI0Z40eFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.mft
Manifest number: 141E
Signing time: Sun 29 Mar 2026 07:01:13 +0000
Manifest this update: Sun 29 Mar 2026 07:01:13 +0000
Manifest next update: Mon 30 Mar 2026 07:01:13 +0000
Files and hashes: 1: C3S7Z7lno_9rFEN5rI9k-GVilAM.roa (hash: 6gStCupXXahtcP47ABJrQ8W9WPHJoBRJRpku34DxbVI=)
2: SfJiM_W7QibCp6e5ADAI0Z40eFs.crl (hash: 9fILJOVTEtHdaKXnlvWX8XqKqTPoesupCZYF2Tdp834=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SfJiM_W7QibCp6e5ADAI0Z40eFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:91:d6:10:07:28:38:cd:09:c5:68:fe:29:dc:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f26233f5bb4226c2a7a7b9003008d19e34785b
Validity
Not Before: Mar 29 07:01:13 2026 GMT
Not After : Mar 30 07:01:13 2026 GMT
Subject: CN=0a4d01cfaa9cb3c1b36788a0fc942a989090b52d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:09:01:f0:e1:df:5a:c5:21:9c:1c:d3:70:f2:
47:18:3f:7c:c9:96:e7:c0:35:3a:fa:47:35:20:1f:
9c:6e:f2:29:55:46:30:64:77:b7:cc:77:5e:25:fe:
0b:bc:9f:7e:06:ec:78:57:a4:86:fb:5c:d4:db:a5:
4f:54:21:ec:c3:44:ee:8d:84:65:87:fe:19:6d:38:
17:17:99:a3:14:85:a5:16:89:a3:26:e9:b3:89:34:
fc:ee:c8:a9:0a:53:d7:d7:f9:55:8b:f6:a0:a1:5f:
a1:ce:17:ad:da:df:66:b7:0a:4c:a9:73:92:78:a4:
a7:d0:5f:2b:7c:ec:8d:d3:2b:56:a5:46:ce:39:42:
7d:36:d2:30:2f:76:95:f5:32:d9:18:11:f7:d4:c2:
c0:84:dd:5d:c4:b6:49:27:ae:ae:44:44:3f:39:31:
14:d6:d4:a0:29:ad:b5:d7:ee:34:3c:6a:8e:be:01:
a9:9d:f3:fb:f0:84:0f:44:a5:d9:2c:4e:c5:71:29:
ac:6d:5e:32:0b:62:bf:09:61:da:fc:70:e2:21:5f:
61:e1:e7:eb:01:9c:29:9b:77:72:5d:79:aa:f4:de:
e6:9c:21:3c:8d:00:14:26:70:e8:db:bf:98:6d:73:
8b:9d:dd:fb:02:d1:cc:56:38:a5:99:02:ae:86:af:
0d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:4D:01:CF:AA:9C:B3:C1:B3:67:88:A0:FC:94:2A:98:90:90:B5:2D
X509v3 Authority Key Identifier:
keyid:49:F2:62:33:F5:BB:42:26:C2:A7:A7:B9:00:30:08:D1:9E:34:78:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfJiM_W7QibCp6e5ADAI0Z40eFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:f2:36:bb:c6:1c:0f:2a:54:5d:03:40:26:ff:60:32:de:1b:
95:a3:04:6f:b4:9b:c2:2c:72:c8:91:c0:1b:d0:aa:92:84:69:
88:6b:69:d1:ab:00:6b:d0:c9:47:f9:1f:5d:dd:2e:dd:fa:ac:
60:11:e9:2e:7e:a7:ad:08:df:37:1f:c9:cb:d8:61:fc:be:22:
ba:c7:a9:95:59:55:6a:9f:0e:8f:87:98:94:a4:02:52:c4:c3:
9b:11:64:7f:af:80:fd:47:70:8a:88:21:80:0a:10:77:95:57:
83:41:14:6a:bb:ea:55:cf:96:9c:d3:24:67:be:d1:07:2a:3b:
86:26:c1:97:ab:3d:2c:64:96:96:06:1b:51:23:75:fb:5a:83:
75:3a:9f:ce:66:13:96:5d:10:ea:9b:66:59:32:0e:b0:5e:2a:
08:fb:29:58:6a:6b:69:65:c0:5d:e5:2e:2a:9a:2c:ed:54:0b:
7d:79:18:29:c3:23:32:fb:58:60:00:4c:18:2e:c6:87:54:34:
30:40:d4:06:12:53:e1:53:a5:27:c7:4f:27:32:10:fa:d8:dc:
2a:f4:e4:c6:af:f4:ba:35:b5:f6:35:94:f7:f5:7e:90:6e:3c:
f2:76:69:f0:d1:8e:c0:66:aa:f6:d4:1e:c4:14:3f:13:f8:24:
f0:43:ec:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:40 2026 by rpki-client