Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.mft
File: sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.mft (raw, json)
Hash identifier: pcB3MGiL+8m83EFJuuI3LHtkrj+q5jHAYEysPEEEqAA=
Subject key identifier: B9:65:41:DC:76:66:08:5D:2D:F1:92:B2:8F:83:2E:5B:22:AA:2E:D0
Authority key identifier: B1:F0:25:2F:FA:42:08:3A:7D:FD:5C:6C:5E:72:7D:64:B9:11:CD:9F
Certificate issuer: /CN=b1f0252ffa42083a7dfd5c6c5e727d64b911cd9f
Certificate serial: 019D9CD14C72EB8BFE4C55C2B2E9602B5884
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.mft
Manifest number: 0FD2
Signing time: Fri 17 Apr 2026 19:00:55 +0000
Manifest this update: Fri 17 Apr 2026 19:00:55 +0000
Manifest next update: Sat 18 Apr 2026 19:00:55 +0000
Files and hashes: 1: sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.crl (hash: TbE+jKcklHzV+nPnH2zxs/Pi2c3ZCNKq2DTNRTCX4eE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:d1:4c:72:eb:8b:fe:4c:55:c2:b2:e9:60:2b:58:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1f0252ffa42083a7dfd5c6c5e727d64b911cd9f
Validity
Not Before: Apr 17 19:00:55 2026 GMT
Not After : Apr 18 19:00:55 2026 GMT
Subject: CN=b96541dc7666085d2df192b28f832e5b22aa2ed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a8:41:df:3b:bb:90:ba:be:cc:65:bc:28:c4:
bf:c5:d5:19:7e:3a:4a:ee:de:b5:20:d2:ce:1f:ca:
c5:34:2f:6e:67:3f:95:07:ee:48:ef:82:89:c6:7b:
4f:d2:6d:61:76:75:44:e8:e0:6d:52:63:08:40:43:
15:5c:13:39:d2:84:5b:c6:ca:39:3a:95:76:39:f4:
a5:53:54:3a:a0:22:e8:a5:f0:68:00:c6:22:77:6f:
12:fe:e3:4c:39:71:40:c2:c8:36:02:10:15:9b:4e:
74:4b:aa:7c:1d:1d:44:b7:c5:c6:81:6b:4e:9c:de:
2b:0e:f3:78:1a:67:54:40:cf:2e:7d:32:df:5a:a7:
c3:4b:43:ad:0b:73:c5:45:4a:e1:00:f3:06:f7:98:
e3:76:8c:c5:44:b6:7c:df:58:e3:5e:84:5f:ac:12:
a2:cf:7b:b5:6c:cd:c3:7c:85:b3:a8:1b:8c:03:f9:
38:23:39:dc:ac:89:92:41:3a:2d:c8:ca:c5:b8:74:
5f:06:a6:ee:bd:8c:23:77:0d:f4:1f:85:02:eb:87:
67:97:3e:39:98:96:60:27:87:e4:34:65:f3:4a:8c:
81:ba:c6:3f:85:5e:b0:11:c4:ed:99:5f:6d:33:60:
22:cb:08:2d:d8:f4:fa:b6:53:ad:6f:32:7b:b9:fb:
e9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:65:41:DC:76:66:08:5D:2D:F1:92:B2:8F:83:2E:5B:22:AA:2E:D0
X509v3 Authority Key Identifier:
keyid:B1:F0:25:2F:FA:42:08:3A:7D:FD:5C:6C:5E:72:7D:64:B9:11:CD:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:02:07:98:3c:3c:45:2b:e8:33:e9:a3:4f:d8:80:75:cf:cb:
e3:c2:7a:1f:ce:4a:51:98:5a:34:37:58:00:36:ef:92:29:b5:
44:4d:a3:86:cd:88:79:7d:ec:b6:fa:f8:d9:49:83:bf:aa:50:
7d:c7:52:b1:16:9e:b8:f9:e0:69:59:a8:f7:64:74:d7:93:5c:
0e:df:24:f4:e8:f7:b2:d8:9b:33:10:3e:11:b3:6c:68:16:61:
41:1f:0b:bc:f4:2f:90:14:65:bb:45:7b:49:91:74:fd:97:87:
57:a5:7a:82:70:bf:af:37:51:18:18:63:ac:bd:ca:f7:c9:9d:
f7:ed:64:8a:b6:bb:69:d6:29:f3:fd:ff:87:30:e6:36:e4:c5:
05:c8:ba:67:8a:6b:7f:f7:d8:e5:51:4b:f9:6d:6b:82:64:f1:
1b:fc:ae:51:50:18:89:10:1f:01:9e:52:e0:af:e6:21:64:81:
53:ea:c4:bb:b7:69:e6:b0:66:21:99:06:41:97:b5:af:fd:4e:
3e:84:7f:de:c3:97:55:42:84:70:9d:7f:39:15:86:0c:f8:a2:
45:3f:1c:70:6b:fe:d6:9b:6d:18:e3:b0:25:e6:69:1c:c1:0d:
77:6d:41:0f:ba:b6:09:9b:41:39:30:74:d6:ec:68:5c:f6:c9:
75:f9:1e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:39:55 2026 by rpki-client