Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft
File: SFGWc90KnPV4lVIK83wqgYPc4Wg.mft (raw, json)
Hash identifier: YPN9L3Hlb7ZprjnvlXQrGZaJDaPMOdexST3Iv9Dp+1s=
Subject key identifier: 33:3B:6D:D4:A8:45:33:E4:23:C1:F4:0C:84:AF:E8:2A:7F:3B:88:2A
Authority key identifier: 48:51:96:73:DD:0A:9C:F5:78:95:52:0A:F3:7C:2A:81:83:DC:E1:68
Certificate issuer: /CN=48519673dd0a9cf57895520af37c2a8183dce168
Certificate serial: 019D9A74C2D0457014BDAAA98667960508C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFGWc90KnPV4lVIK83wqgYPc4Wg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft
Manifest number: 13B7
Signing time: Fri 17 Apr 2026 08:00:36 +0000
Manifest this update: Fri 17 Apr 2026 08:00:36 +0000
Manifest next update: Sat 18 Apr 2026 08:00:36 +0000
Files and hashes: 1: SFGWc90KnPV4lVIK83wqgYPc4Wg.crl (hash: wrXmMZDLqvE2JpYHf/btJmJtznqQ5Oxxz9e07JNRZSQ=)
2: YZU5h2cJPs993oeBmAc82_JPG4k.roa (hash: JlU2N1oKnkfBo3YZbM9h2zkBZpc0rh/bJMlA2t9a81A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFGWc90KnPV4lVIK83wqgYPc4Wg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:c2:d0:45:70:14:bd:aa:a9:86:67:96:05:08:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48519673dd0a9cf57895520af37c2a8183dce168
Validity
Not Before: Apr 17 08:00:36 2026 GMT
Not After : Apr 18 08:00:36 2026 GMT
Subject: CN=333b6dd4a84533e423c1f40c84afe82a7f3b882a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a7:b1:17:42:c4:5d:c6:2a:bc:68:61:c7:00:
87:b1:35:ac:04:4b:c0:a8:85:c6:08:91:72:13:19:
aa:01:08:af:d6:3e:f4:89:4d:65:2c:b5:50:24:26:
d6:a4:08:3c:fb:0a:18:9d:4b:b4:cc:8b:23:d7:4c:
71:ea:3a:5c:5d:a2:0f:8b:05:65:79:35:bc:fa:e9:
44:82:e2:7b:97:42:6a:88:08:64:02:9d:1e:42:ac:
b8:fb:53:36:d0:a3:eb:e6:b3:e0:49:83:7d:3d:09:
51:de:3b:9e:78:44:e4:f5:94:73:d8:50:4d:74:fd:
9c:d7:69:5a:48:12:d6:6c:fe:96:15:24:d9:9f:a4:
a8:f5:50:39:a6:66:90:14:e8:ab:96:aa:57:32:20:
f6:76:5f:96:9d:22:aa:c4:89:e7:3c:30:ac:2e:e5:
6f:e2:db:55:5a:69:68:31:95:a0:a9:52:79:de:ab:
bd:0c:58:82:a7:12:0a:47:d4:9e:bf:a4:12:e1:8c:
3b:c4:07:8c:36:5c:7e:3f:1a:f5:f5:8e:89:03:cd:
af:aa:4f:af:5f:36:2e:3e:d1:e6:1f:8a:19:79:3d:
c7:a6:95:d4:74:70:7f:22:2f:c3:a2:ec:ef:0e:84:
cd:b5:0c:a1:b3:92:b4:fb:e6:30:2c:d2:2a:d9:49:
a1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:3B:6D:D4:A8:45:33:E4:23:C1:F4:0C:84:AF:E8:2A:7F:3B:88:2A
X509v3 Authority Key Identifier:
keyid:48:51:96:73:DD:0A:9C:F5:78:95:52:0A:F3:7C:2A:81:83:DC:E1:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFGWc90KnPV4lVIK83wqgYPc4Wg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:4f:b3:46:dc:40:15:ac:02:2d:ac:eb:d0:e4:4e:0a:f2:8f:
07:e9:4d:e7:0a:3c:d7:48:8a:18:27:30:38:3f:0d:b9:f4:7b:
e3:b8:24:c4:ea:99:69:ef:2e:a4:f9:e8:35:4c:c4:34:3e:3d:
b5:be:c8:d8:d6:9a:b3:c0:79:91:d7:e5:a5:78:f2:00:57:48:
c2:ed:0c:fc:9c:33:08:86:de:94:39:da:14:a0:78:9e:78:a4:
b7:98:d6:97:62:4e:3d:c7:23:1b:e0:6d:91:cb:af:1c:9a:14:
61:1f:e7:39:68:ca:45:21:9a:20:3a:46:be:cd:12:b6:2f:d2:
52:6e:3c:1b:2f:a6:f5:94:42:b8:3e:cd:89:8a:32:81:c9:ee:
65:e3:0c:77:96:d7:03:b8:44:61:7e:60:37:ba:ff:1f:2d:0a:
f2:76:39:d5:99:d1:a0:86:04:24:aa:58:c9:83:65:db:c7:d0:
2b:33:61:f7:84:fe:14:55:51:8b:b7:11:42:12:da:92:f1:0b:
29:35:7e:bb:7e:cf:70:a0:11:70:cc:a8:f6:e6:5f:dd:85:3a:
46:6a:f7:7a:b2:ca:e6:0d:ef:6c:fc:ec:74:92:38:a4:92:96:
7f:4a:3b:a7:06:bf:a5:b1:8e:2c:93:4f:84:0e:6c:ed:af:2e:
5f:0a:55:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2adMLQRXAUvaqphmeWBQjFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4NTE5NjczZGQwYTljZjU3ODk1NTIwYWYzN2MyYTgxODNk
Y2UxNjgwHhcNMjYwNDE3MDgwMDM2WhcNMjYwNDE4MDgwMDM2WjAzMTEwLwYDVQQD
EygzMzNiNmRkNGE4NDUzM2U0MjNjMWY0MGM4NGFmZTgyYTdmM2I4ODJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqexF0LEXcYqvGhhxwCHsTWsBEvA
qIXGCJFyExmqAQiv1j70iU1lLLVQJCbWpAg8+woYnUu0zIsj10xx6jpcXaIPiwVl
eTW8+ulEguJ7l0JqiAhkAp0eQqy4+1M20KPr5rPgSYN9PQlR3jueeETk9ZRz2FBN
dP2c12laSBLWbP6WFSTZn6So9VA5pmaQFOirlqpXMiD2dl+WnSKqxInnPDCsLuVv
4ttVWmloMZWgqVJ53qu9DFiCpxIKR9Sev6QS4Yw7xAeMNlx+Pxr19Y6JA82vqk+v
XzYuPtHmH4oZeT3HppXUdHB/Ii/DouzvDoTNtQyhs5K0++YwLNIq2UmhXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDM7bdSoRTPkI8H0DISv6Cp/O4gqMB8GA1UdIwQY
MBaAFEhRlnPdCpz1eJVSCvN8KoGD3OFoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0ZHV2M5MEtuUFY0bFZJSzgzd3FnWVBjNFdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8zYmQ1OWEtMmQwYy00MDkzLTkxM2Et
ZmUzNmNlZGE2MzE2LzEvU0ZHV2M5MEtuUFY0bFZJSzgzd3FnWVBjNFdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS8zYmQ1OWEtMmQwYy00MDkzLTkxM2EtZmUzNmNlZGE2MzE2
LzEvU0ZHV2M5MEtuUFY0bFZJSzgzd3FnWVBjNFdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYU+zRtxA
FawCLazr0OROCvKPB+lN5wo810iKGCcwOD8NufR747gkxOqZae8upPnoNUzEND49
tb7I2Naas8B5kdflpXjyAFdIwu0M/JwzCIbelDnaFKB4nnikt5jWl2JOPccjG+Bt
kcuvHJoUYR/nOWjKRSGaIDpGvs0Sti/SUm48Gy+m9ZRCuD7NiYoygcnuZeMMd5bX
A7hEYX5gN7r/Hy0K8nY51ZnRoIYEJKpYyYNl28fQKzNh94T+FFVRi7cRQhLakvEL
KTV+u37PcKARcMyo9uZf3YU6Rmr3erLK5g3vbPzsdJI4pJKWf0o7pwa/pbGOLJNP
hA5s7a8uXwpVEg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:23:35 2026 by rpki-client