Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft
File: SFGWc90KnPV4lVIK83wqgYPc4Wg.mft (raw, json)
Hash identifier: 62jDyxIDPSe5bQKdWgPeZmRYvrdsrtMz0TCkwy6TrE0=
Subject key identifier: BF:31:1B:59:A0:6E:EF:D5:A5:4D:AD:8C:95:36:CD:11:B0:66:33:0E
Authority key identifier: 48:51:96:73:DD:0A:9C:F5:78:95:52:0A:F3:7C:2A:81:83:DC:E1:68
Certificate issuer: /CN=48519673dd0a9cf57895520af37c2a8183dce168
Certificate serial: 019CAAFD3D21A12FD407CFD928AB0CC27740
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFGWc90KnPV4lVIK83wqgYPc4Wg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft
Manifest number: 133B
Signing time: Sun 01 Mar 2026 20:00:48 +0000
Manifest this update: Sun 01 Mar 2026 20:00:48 +0000
Manifest next update: Mon 02 Mar 2026 20:00:48 +0000
Files and hashes: 1: SFGWc90KnPV4lVIK83wqgYPc4Wg.crl (hash: mic6kMddHx3GglguFm+kU0LYgdtyprq6cQ8/pmukGe4=)
2: YZU5h2cJPs993oeBmAc82_JPG4k.roa (hash: JlU2N1oKnkfBo3YZbM9h2zkBZpc0rh/bJMlA2t9a81A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFGWc90KnPV4lVIK83wqgYPc4Wg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:3d:21:a1:2f:d4:07:cf:d9:28:ab:0c:c2:77:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48519673dd0a9cf57895520af37c2a8183dce168
Validity
Not Before: Mar 1 20:00:48 2026 GMT
Not After : Mar 2 20:00:48 2026 GMT
Subject: CN=bf311b59a06eefd5a54dad8c9536cd11b066330e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:12:d3:55:ee:7e:12:9f:2b:b9:d1:59:f7:e8:
04:fb:1a:ad:03:a6:63:e7:e3:5b:a8:bb:0e:45:86:
4a:c1:a1:97:2c:fc:ed:31:70:e6:69:b2:25:56:6d:
bc:4d:14:8c:d8:cd:f0:df:55:01:3d:fe:75:1b:9e:
4a:e0:c2:1b:96:62:b9:9b:bb:2a:bd:32:30:f7:89:
8b:d7:74:e7:98:98:6b:e9:a6:5f:c1:9e:11:59:fb:
32:ff:9f:85:25:9c:83:46:e9:ea:1f:f1:5a:6c:bc:
03:99:d0:16:8c:e4:97:47:d5:01:a4:9c:a2:55:87:
3e:98:e4:fe:06:46:e8:0c:2c:35:c5:9f:38:18:7d:
86:ca:eb:74:41:44:3c:97:87:4e:7f:dd:f8:0c:f0:
a3:95:73:a1:c5:3a:f5:fc:95:c9:1f:15:82:d4:fd:
d1:21:9c:18:a3:a3:d6:7d:a3:fe:1c:a3:82:2a:28:
d0:b0:4c:c2:dc:5d:60:8d:8e:8c:82:0a:7f:07:41:
23:54:c2:c9:0a:df:83:40:74:60:38:0f:8d:1a:ee:
e2:71:67:f1:8f:50:8a:9c:77:12:b7:93:81:ab:5c:
92:7a:bb:3b:19:35:34:a2:b6:74:ca:23:d3:2a:b4:
24:c8:fe:b5:86:b4:5e:24:1d:6c:13:64:c8:47:96:
2f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:31:1B:59:A0:6E:EF:D5:A5:4D:AD:8C:95:36:CD:11:B0:66:33:0E
X509v3 Authority Key Identifier:
keyid:48:51:96:73:DD:0A:9C:F5:78:95:52:0A:F3:7C:2A:81:83:DC:E1:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFGWc90KnPV4lVIK83wqgYPc4Wg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3bd59a-2d0c-4093-913a-fe36ceda6316/1/SFGWc90KnPV4lVIK83wqgYPc4Wg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:a9:2c:3e:c1:e2:ca:e1:13:2f:a6:a2:95:11:b1:6c:4d:22:
da:7f:e2:29:7e:18:2a:67:0a:57:e2:a3:db:59:db:b1:81:39:
93:8e:1d:36:b1:b8:f1:7d:70:b3:a2:41:d3:28:76:8e:69:48:
2b:ad:4b:3a:61:7b:2e:36:4b:11:c4:94:4e:cf:f3:7d:5f:df:
14:44:3e:06:1b:8c:cb:4d:c4:f2:90:d1:58:2a:c9:86:a9:01:
d4:3a:a2:af:bf:3b:11:83:a7:e7:e3:41:58:01:ae:05:0c:97:
da:33:43:54:e6:cd:f9:ec:13:be:ec:38:0b:6e:e0:52:4b:7e:
2a:b2:6e:78:0f:15:c3:18:48:d7:e7:44:aa:f7:f3:ea:52:1b:
26:65:06:8f:65:8d:7d:20:07:77:ab:20:73:18:22:6b:bf:36:
c4:eb:0b:d1:43:c8:04:55:ba:97:e4:10:03:42:73:dc:75:12:
28:35:88:9a:ee:08:98:9a:fa:1c:cf:9e:ce:32:c9:bb:61:4d:
b6:a2:40:9a:8a:bf:a3:07:32:2b:fa:9d:8c:ec:e5:93:e7:00:
a6:44:35:c6:53:d9:8b:e1:8b:3e:27:ce:f1:6b:8e:fb:f9:50:
dd:f7:d0:6b:dc:5d:33:79:a3:a9:32:b0:fe:c1:4e:30:53:84:
90:84:7a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:06:28 2026 by rpki-client