Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.mft
File: SFAYtcL-8SSKtuwNB-lx7Lz3Oco.mft (raw, json)
Hash identifier: ur5zvAh7k7RL1qV3A9i5ZdFrDuPFKk+s5XQion5Zij0=
Subject key identifier: A0:37:E9:A3:37:A6:41:32:C4:68:13:C0:D3:69:46:89:A6:DB:B6:6A
Authority key identifier: 48:50:18:B5:C2:FE:F1:24:8A:B6:EC:0D:07:E9:71:EC:BC:F7:39:CA
Certificate issuer: /CN=485018b5c2fef1248ab6ec0d07e971ecbcf739ca
Certificate serial: 019CABD9E4CD58CC8782B1537203148DE781
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.mft
Manifest number: 022C
Signing time: Mon 02 Mar 2026 00:01:49 +0000
Manifest this update: Mon 02 Mar 2026 00:01:49 +0000
Manifest next update: Tue 03 Mar 2026 00:01:49 +0000
Files and hashes: 1: Rn4SiK5tt6rA-g6mRu3ZOnBd6z8.roa (hash: 1RB9vRKs49M3yF98f580LlP8MNfzjcsdxXS3Wijgsnc=)
2: SFAYtcL-8SSKtuwNB-lx7Lz3Oco.crl (hash: bd2VQiT1SIVvOTp2qhgXIR7M6ZJTzY/EQds+FhsXR9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:e4:cd:58:cc:87:82:b1:53:72:03:14:8d:e7:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485018b5c2fef1248ab6ec0d07e971ecbcf739ca
Validity
Not Before: Mar 2 00:01:49 2026 GMT
Not After : Mar 3 00:01:49 2026 GMT
Subject: CN=a037e9a337a64132c46813c0d3694689a6dbb66a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:18:89:d2:be:09:ee:71:60:4b:99:e8:40:f6:
96:97:df:5d:d7:ef:2e:33:18:2b:0c:cb:42:0b:ac:
27:d5:c8:27:1c:64:40:0f:41:7e:88:8d:53:99:2c:
03:93:5c:44:5c:6c:d1:2c:dd:c4:11:22:d9:5f:f7:
68:3c:e3:a0:41:51:47:3b:6c:8b:e9:c6:ce:3d:cd:
9b:53:85:87:b2:be:e7:87:43:a8:c5:1b:c6:72:c2:
e3:57:e5:4d:a8:7b:56:e3:fb:29:7b:63:9e:0f:bf:
56:af:e6:49:fe:cb:02:32:e0:7f:2f:ed:73:b6:66:
df:b7:04:75:79:d8:b3:8c:6d:f5:8c:1e:61:8e:9e:
e9:a7:0e:3b:f4:9e:87:34:cc:c5:5d:50:0e:af:12:
6a:14:da:48:67:0a:ae:60:1f:7b:4c:3c:b7:f5:03:
6d:01:39:53:8f:4a:93:23:f0:5c:c2:33:89:73:3a:
51:9a:2b:ef:c5:bd:d4:29:a6:6c:85:03:56:92:a7:
e7:1f:f3:79:25:99:37:16:ef:ff:e2:73:98:ee:ce:
80:04:49:0d:22:ab:23:a1:1c:6e:04:1f:b5:00:97:
a4:44:f7:fa:ad:1c:44:8c:9b:ec:39:54:68:86:50:
11:4d:23:c7:6a:9e:bb:48:a0:37:76:67:42:97:ad:
c0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:37:E9:A3:37:A6:41:32:C4:68:13:C0:D3:69:46:89:A6:DB:B6:6A
X509v3 Authority Key Identifier:
keyid:48:50:18:B5:C2:FE:F1:24:8A:B6:EC:0D:07:E9:71:EC:BC:F7:39:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:ca:91:37:1a:db:0c:ab:60:d4:78:2a:fb:32:79:2d:17:44:
1b:82:b8:89:8a:45:d6:c2:39:a1:ff:06:04:11:ed:7d:86:dc:
ec:b2:47:f1:d7:23:b7:d2:03:40:8e:12:e2:ed:1c:31:fa:6f:
0e:04:4e:61:17:c3:ad:11:eb:fc:29:f8:75:64:fc:80:f4:d9:
60:a4:28:bf:8a:76:8c:86:39:88:bf:94:1d:57:cf:f8:2a:ad:
d1:7c:b6:4c:f9:28:08:cf:a9:ad:fa:f5:15:fc:fa:bc:2e:29:
0e:76:bb:eb:ef:d1:5b:74:f2:2d:6f:d3:29:7d:b4:5c:13:2b:
26:dc:96:c9:7b:79:70:6a:3f:e0:a4:d5:70:06:ea:c8:65:39:
9c:fb:54:9b:51:a7:a0:5a:9f:da:f6:dd:a9:b6:c4:19:15:8e:
ce:d8:a5:c7:ea:0a:67:ff:7b:84:d6:a6:e6:4f:23:48:90:7f:
2e:78:a0:16:8d:68:70:53:5b:04:10:a4:88:b5:0c:e9:c6:c5:
0a:86:f3:7d:e4:25:7e:b8:ad:fd:98:11:28:37:6b:fb:af:ea:
f1:39:25:ed:0f:b1:45:c3:12:3b:4e:57:27:e6:58:28:29:75:
8b:0b:da:28:bb:7a:85:ca:90:d0:7b:46:3a:1c:51:33:a4:8b:
45:eb:8d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:00:55 2026 by rpki-client