Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.mft
File: SFk-QNpaUvMi21oEwg-0htThVQI.mft (raw, json)
Hash identifier: sfMSpSQYU/p9CjapTeQBKeqZVdZ/BIHaXZvZoSr/kGs=
Subject key identifier: 3E:B0:2D:F1:F0:F3:92:9D:27:9E:71:1F:47:77:63:B0:89:66:FF:3A
Authority key identifier: 48:59:3E:40:DA:5A:52:F3:22:DB:5A:04:C2:0F:B4:86:D4:E1:55:02
Certificate issuer: /CN=48593e40da5a52f322db5a04c20fb486d4e15502
Certificate serial: 01A0DE05C8B20A4D0DB97AF665E83C48872A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFk-QNpaUvMi21oEwg-0htThVQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.mft
Manifest number: 172E
Signing time: Sat 26 Sep 2026 14:01:55 +0000
Manifest this update: Sat 26 Sep 2026 14:01:55 +0000
Manifest next update: Sun 27 Sep 2026 14:01:55 +0000
Files and hashes: 1: SFk-QNpaUvMi21oEwg-0htThVQI.crl (hash: UZk4dxUymNs6HiqsBjAQewT1XB063Yc93EsRiAKrUT4=)
2: VFzP0FGh0SQzSyAC9MEO9bnaqZU.roa (hash: DwjrXgZVVBQjvwjFMKe9t4mZj6kib5GRnctDIksFE5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFk-QNpaUvMi21oEwg-0htThVQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:05:c8:b2:0a:4d:0d:b9:7a:f6:65:e8:3c:48:87:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48593e40da5a52f322db5a04c20fb486d4e15502
Validity
Not Before: Sep 26 14:01:55 2026 GMT
Not After : Sep 27 14:01:55 2026 GMT
Subject: CN=3eb02df1f0f3929d279e711f477763b08966ff3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:38:8c:23:90:2c:63:2e:b3:d1:a4:87:ab:4d:
12:a1:e6:0b:3a:7d:f2:b3:35:5d:bc:80:5e:16:7e:
c5:81:0c:aa:86:03:ad:bc:bd:4d:aa:7d:bd:c0:65:
39:05:22:f1:36:35:c2:37:cf:48:f9:76:af:bd:42:
7f:03:8e:39:74:be:cc:57:8c:c3:64:58:32:b9:5c:
94:19:6c:b3:61:ec:92:69:af:4e:b4:8b:1b:3e:ea:
44:bb:5c:06:7b:b8:d9:a3:04:7c:5d:fb:af:5b:ea:
14:ee:c8:d4:95:01:3d:b8:8a:97:13:3f:d7:9e:9f:
6a:53:b3:88:13:ad:75:fd:b7:42:38:6f:df:f7:da:
e7:dd:4b:dd:d1:ea:8c:42:67:76:31:e1:ec:74:cb:
e9:d8:e2:45:e1:29:bc:72:fd:9d:b9:bc:04:8d:b7:
b0:b8:80:8f:70:ae:62:33:4d:16:5b:d9:a7:4c:0a:
06:c2:16:a3:2c:4a:cd:ae:a6:18:c5:6d:fd:d9:67:
d9:41:ac:30:e1:34:eb:4a:9c:e4:9e:71:fb:15:ff:
c5:32:f6:03:26:43:24:7b:fa:e8:96:d2:b5:de:28:
06:76:1b:fc:18:79:73:71:4c:04:67:a2:25:c8:8e:
e9:35:39:fa:9d:1f:11:93:9a:b7:ed:d2:2a:db:ae:
65:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B0:2D:F1:F0:F3:92:9D:27:9E:71:1F:47:77:63:B0:89:66:FF:3A
X509v3 Authority Key Identifier:
keyid:48:59:3E:40:DA:5A:52:F3:22:DB:5A:04:C2:0F:B4:86:D4:E1:55:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFk-QNpaUvMi21oEwg-0htThVQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:79:05:65:65:d7:bf:78:8a:41:33:42:d5:fe:cb:6b:6d:87:
52:91:12:f4:9e:59:fa:86:e8:ef:95:86:2f:e8:2d:60:6f:da:
dd:be:69:67:34:61:ff:ff:3d:3e:7b:99:5c:bb:04:10:7d:8d:
14:cf:55:af:21:1b:94:74:f6:ed:4b:ae:09:6a:17:cd:df:07:
90:82:12:3a:55:f6:08:bb:c4:b5:45:4e:94:2a:ce:87:2d:ce:
a5:20:78:f9:1b:28:11:53:cb:5c:ed:65:15:33:7f:09:15:25:
54:dd:d1:71:df:f9:fc:7a:d4:af:86:f0:df:fa:4c:3d:5a:95:
67:04:04:c3:07:aa:92:81:0f:c0:02:f4:9a:9f:e1:14:4d:f7:
e7:8d:38:ac:7a:82:4f:69:d4:96:a1:a2:a0:9b:22:75:87:c9:
32:1a:2a:27:88:e6:bd:1d:8c:89:0a:9a:a3:fe:c3:10:0a:2d:
fc:03:55:e2:3f:ec:ba:ee:d8:f1:d9:8e:df:b5:cc:08:0d:9f:
44:ea:5f:08:4b:d4:68:5f:54:bb:d5:cb:73:e2:1a:a3:ae:39:
22:d8:cf:44:ad:d8:d1:7f:55:51:24:a7:f6:3f:e9:22:36:b9:
ca:b8:5b:81:3e:d9:f5:e2:4b:b2:24:31:b8:85:b3:76:0d:b6:
e6:58:84:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 19:52:50 2026 by rpki-client