Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.mft
File: SFk-QNpaUvMi21oEwg-0htThVQI.mft (raw, json)
Hash identifier: A2cFSQhSULXhJp7yXk2AiScLeYB31c+rosE4T2jS7Hg=
Subject key identifier: 25:7C:46:6C:83:B2:2C:11:6B:A8:1B:D0:D3:2B:E4:07:D7:0C:29:F0
Authority key identifier: 48:59:3E:40:DA:5A:52:F3:22:DB:5A:04:C2:0F:B4:86:D4:E1:55:02
Certificate issuer: /CN=48593e40da5a52f322db5a04c20fb486d4e15502
Certificate serial: 019FACE3924B2C1BD207FEF84E11DCB43C4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFk-QNpaUvMi21oEwg-0htThVQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.mft
Manifest number: 1690
Signing time: Wed 29 Jul 2026 08:00:22 +0000
Manifest this update: Wed 29 Jul 2026 08:00:22 +0000
Manifest next update: Thu 30 Jul 2026 08:00:22 +0000
Files and hashes: 1: SFk-QNpaUvMi21oEwg-0htThVQI.crl (hash: QpCsIqQDzEJBkEvDewS3s4TcJSdi77fAxGl5eZQ2cXQ=)
2: VFzP0FGh0SQzSyAC9MEO9bnaqZU.roa (hash: DwjrXgZVVBQjvwjFMKe9t4mZj6kib5GRnctDIksFE5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFk-QNpaUvMi21oEwg-0htThVQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e3:92:4b:2c:1b:d2:07:fe:f8:4e:11:dc:b4:3c:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48593e40da5a52f322db5a04c20fb486d4e15502
Validity
Not Before: Jul 29 08:00:22 2026 GMT
Not After : Jul 30 08:00:22 2026 GMT
Subject: CN=257c466c83b22c116ba81bd0d32be407d70c29f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a5:b8:63:bc:39:78:d5:19:90:c3:66:11:66:
2b:9f:77:62:39:4f:25:73:5b:d0:bf:a9:27:68:75:
cb:0d:0c:b0:f1:23:ca:de:8e:6e:cb:27:78:63:1d:
30:75:cf:dd:b4:ba:f9:3a:2b:1c:d6:da:45:d4:92:
b8:c7:67:b1:a8:26:64:06:a5:ce:37:77:cb:a9:15:
47:9e:9f:d7:36:79:dc:d8:6c:1c:69:1b:cd:e2:47:
4e:86:65:54:61:79:b3:83:38:3c:45:c7:50:6b:1c:
02:40:20:fe:13:1d:cf:85:1d:30:95:a2:7c:2f:68:
58:15:45:cb:9c:38:51:83:ac:25:84:7b:fa:d1:f4:
a7:38:d9:55:53:cb:97:7d:30:87:0b:2a:1e:39:1e:
f7:91:97:b5:2c:4e:d3:73:a5:57:51:bc:30:25:20:
4a:a0:22:c3:04:85:72:5c:af:9d:be:a2:df:b0:f1:
a4:73:0b:b3:2c:a9:da:a2:10:2f:46:5b:82:7b:b3:
23:e5:8f:68:ab:48:45:9d:10:89:f2:10:9d:05:71:
ed:9a:f5:3a:cb:1b:50:9f:21:d7:07:ca:61:30:24:
71:f6:c5:8c:3c:c6:5d:52:b6:8f:b3:3d:67:10:33:
53:10:a8:4e:2e:d6:74:33:dd:b7:4c:f0:0b:10:3d:
39:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:7C:46:6C:83:B2:2C:11:6B:A8:1B:D0:D3:2B:E4:07:D7:0C:29:F0
X509v3 Authority Key Identifier:
keyid:48:59:3E:40:DA:5A:52:F3:22:DB:5A:04:C2:0F:B4:86:D4:E1:55:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFk-QNpaUvMi21oEwg-0htThVQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:3d:07:9b:c1:35:2b:7e:a5:83:df:0d:a7:ee:85:59:90:06:
ba:44:07:be:ff:c8:00:5f:c7:74:fb:49:b3:a4:d3:95:84:fe:
68:cb:f3:2e:fe:dd:18:05:7d:14:d9:67:29:81:2e:8f:35:32:
8d:17:36:e8:b7:56:1b:e9:a3:2e:4a:42:19:c9:e0:c9:52:66:
79:c4:b1:57:44:0d:43:5c:49:51:64:d9:1e:a6:b5:15:66:d7:
b8:93:5d:cb:c3:a0:eb:43:01:65:c0:09:fa:04:73:ca:26:5b:
21:1b:dd:2f:8e:0b:00:a7:11:60:84:18:50:86:44:eb:b4:6c:
2f:ca:d5:fc:06:d1:bd:51:66:3e:f0:97:17:d4:73:21:a0:93:
69:94:01:d4:4f:49:fe:1c:2f:19:98:4f:7e:92:41:5a:bf:6c:
f1:48:05:ce:35:66:ee:bf:55:da:21:9b:25:ea:c9:fe:15:b4:
ee:41:fc:ee:66:9b:c1:9c:84:8d:4e:b0:b3:80:c1:fa:0a:bf:
5f:0e:d6:ce:85:33:31:0c:43:f0:ec:f6:da:99:17:d4:cf:24:
84:79:20:0b:01:0d:a4:39:0e:b9:b7:b4:c7:11:bf:fa:17:b5:
93:c5:93:75:00:9f:2f:21:4b:4b:54:98:50:e6:8a:78:c1:68:
a9:d8:6d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 16:32:58 2026 by rpki-client