Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.mft
File: SFAYtcL-8SSKtuwNB-lx7Lz3Oco.mft (raw, json)
Hash identifier: C47McAmN2DT/d7w8YMFTFqTB5cXDKyBSSrCkZ56onAQ=
Subject key identifier: 72:9E:5A:10:61:8A:91:33:B9:36:23:1C:EC:82:A8:05:09:11:D5:70
Authority key identifier: 48:50:18:B5:C2:FE:F1:24:8A:B6:EC:0D:07:E9:71:EC:BC:F7:39:CA
Certificate issuer: /CN=485018b5c2fef1248ab6ec0d07e971ecbcf739ca
Certificate serial: 019DA4F98027C5529BB38AF9DF271939AB71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.mft
Manifest number: 02AD
Signing time: Sun 19 Apr 2026 09:01:47 +0000
Manifest this update: Sun 19 Apr 2026 09:01:47 +0000
Manifest next update: Mon 20 Apr 2026 09:01:47 +0000
Files and hashes: 1: Rn4SiK5tt6rA-g6mRu3ZOnBd6z8.roa (hash: 1RB9vRKs49M3yF98f580LlP8MNfzjcsdxXS3Wijgsnc=)
2: SFAYtcL-8SSKtuwNB-lx7Lz3Oco.crl (hash: 2RfttiAjYDnFFGi+m/Ut7C8rqfEVFCAQupQ3feq3VPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 09:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:f9:80:27:c5:52:9b:b3:8a:f9:df:27:19:39:ab:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485018b5c2fef1248ab6ec0d07e971ecbcf739ca
Validity
Not Before: Apr 19 09:01:47 2026 GMT
Not After : Apr 20 09:01:47 2026 GMT
Subject: CN=729e5a10618a9133b936231cec82a8050911d570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ea:60:eb:c2:9d:96:70:93:ae:31:78:70:8e:
63:2c:61:69:01:3a:a4:a5:a4:e3:be:76:ba:1b:61:
8d:e7:93:95:9e:4b:c7:f8:eb:da:85:af:1e:05:6d:
38:1c:af:89:e6:68:0c:b1:c3:95:6a:89:3d:bf:1a:
95:24:21:31:e2:bb:1d:91:77:d2:5a:15:6d:23:d5:
2c:10:09:10:75:18:42:ab:99:b7:66:e3:ba:f6:31:
bf:73:d1:46:45:ed:96:ea:b1:e1:c1:01:cc:fb:f1:
a4:ae:21:74:bb:ce:72:07:30:bd:c9:f1:04:37:84:
dd:56:c6:14:4d:1a:57:9f:7d:42:ba:a0:f5:b0:cd:
bc:72:e1:d6:6c:27:cc:b4:c3:5d:78:83:d8:1d:58:
64:a7:75:d5:b0:8c:2d:7e:cf:b5:10:98:4b:4c:88:
15:5f:f9:9f:c0:f5:b8:87:07:54:d4:6e:26:25:eb:
47:35:76:59:48:c4:c4:3f:4b:9e:79:cb:26:c1:63:
55:5c:88:5e:45:09:fd:d5:bf:72:03:4b:39:0b:4a:
99:9d:b2:fe:19:d7:70:f7:39:33:35:01:d5:ce:a3:
49:b5:a6:dc:0b:54:10:94:96:8a:f9:30:5d:02:3d:
51:ef:05:8a:90:ed:00:d9:6e:3d:44:d7:35:cf:bc:
60:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:9E:5A:10:61:8A:91:33:B9:36:23:1C:EC:82:A8:05:09:11:D5:70
X509v3 Authority Key Identifier:
keyid:48:50:18:B5:C2:FE:F1:24:8A:B6:EC:0D:07:E9:71:EC:BC:F7:39:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:b9:cc:9a:61:0b:98:12:fb:bc:db:43:cd:3a:7a:53:ef:9f:
37:f6:ad:c1:08:92:89:c1:c4:b6:7b:c1:8d:09:93:f6:d7:a1:
13:2f:92:89:6a:da:2f:a9:08:79:97:08:d3:a4:49:54:b4:a8:
0f:8b:07:f4:93:49:57:e0:09:4d:1d:11:a4:d4:44:84:7f:b9:
6e:f3:b5:f8:3e:35:57:19:bb:96:5c:2c:4f:29:7a:db:62:89:
6a:73:ba:ff:b7:cc:72:68:fe:54:df:dc:9f:2d:94:e0:25:22:
09:71:80:88:40:a7:6e:d9:db:00:c0:1f:f7:41:06:1f:02:c4:
cb:78:d0:32:93:fb:4f:5f:c0:b4:c2:bf:38:ee:26:c0:8d:30:
e3:02:4e:e3:6a:df:1a:4f:cb:bc:09:f3:37:27:e9:51:34:da:
da:cf:39:4b:a7:fd:b5:48:ea:29:03:19:38:54:06:a3:5f:e2:
1e:c1:4b:f0:4d:23:72:0e:b4:8f:65:4e:de:fd:4b:fd:7b:cf:
e4:35:5f:a3:44:ac:26:85:7f:77:95:15:3c:35:c1:cf:a6:74:
56:0b:51:09:05:e3:9a:b4:74:c1:32:9f:53:44:6e:30:ca:85:
ee:17:4f:e0:3a:61:28:c0:51:b6:91:ea:c9:ac:d1:59:32:55:
88:d4:3c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 17:22:10 2026 by rpki-client