
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.mft
File: sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.mft (raw, json)
Hash identifier: 9GQwVVaT97jZwdqvRiU2EZSMd32Ju0aFh6DVuWA4wxM=
Subject key identifier: ED:A8:9F:D4:3B:86:1D:BC:99:6B:97:46:FB:64:27:00:BD:C1:4D:C6
Authority key identifier: B1:F0:25:2F:FA:42:08:3A:7D:FD:5C:6C:5E:72:7D:64:B9:11:CD:9F
Certificate issuer: /CN=b1f0252ffa42083a7dfd5c6c5e727d64b911cd9f
Certificate serial: 019CAD5971E29DB27FC7F6E1328F70D5C968
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.mft
Manifest number: 0F56
Signing time: Mon 02 Mar 2026 07:00:45 +0000
Manifest this update: Mon 02 Mar 2026 07:00:45 +0000
Manifest next update: Tue 03 Mar 2026 07:00:45 +0000
Files and hashes: 1: sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.crl (hash: yMKi6TZDWfoqMLyyMjRQUKmVH+LjoKJ6UZi8JmPA5IQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:71:e2:9d:b2:7f:c7:f6:e1:32:8f:70:d5:c9:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1f0252ffa42083a7dfd5c6c5e727d64b911cd9f
Validity
Not Before: Mar 2 07:00:45 2026 GMT
Not After : Mar 3 07:00:45 2026 GMT
Subject: CN=eda89fd43b861dbc996b9746fb642700bdc14dc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8d:64:26:74:ad:18:0a:66:e5:7b:1b:96:6f:
ec:43:c5:71:af:1f:a8:b5:ec:b3:28:a2:50:aa:16:
93:f9:00:45:54:e1:8f:69:a0:90:d3:79:fe:b9:2f:
3b:05:94:b9:d7:d3:d3:40:9a:84:e7:fe:da:1b:79:
9c:f2:87:89:85:48:cd:68:96:29:d7:8c:f1:12:fa:
15:60:c2:4d:97:af:31:2e:10:c2:8c:da:99:3a:eb:
f1:48:10:d0:70:d2:1b:90:cf:fa:b6:1f:d0:39:a2:
8d:e9:1d:b5:b5:59:f0:ab:c7:1e:46:27:a5:2c:8c:
a1:e4:62:a7:96:9b:d6:08:b8:25:76:fc:dd:bf:f0:
c4:09:81:0a:bd:d9:b9:8d:01:2d:54:51:ae:bb:67:
03:19:26:4c:82:83:12:39:a9:40:91:43:7f:ee:39:
31:a0:28:af:55:51:7c:34:e2:4f:42:78:1f:b7:29:
88:e2:b5:94:8c:c4:cb:bf:01:78:d4:1e:6e:90:b2:
90:9a:9b:32:aa:07:d9:10:4b:93:2d:26:6f:7b:f5:
24:78:64:65:ac:a3:43:f1:a6:f5:94:73:f3:47:90:
be:47:4c:55:79:75:5b:9a:e9:ea:b7:21:94:69:5a:
44:80:84:87:94:65:98:d6:13:fe:fe:07:78:ce:cc:
46:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A8:9F:D4:3B:86:1D:BC:99:6B:97:46:FB:64:27:00:BD:C1:4D:C6
X509v3 Authority Key Identifier:
keyid:B1:F0:25:2F:FA:42:08:3A:7D:FD:5C:6C:5E:72:7D:64:B9:11:CD:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:da:8c:d9:1e:0d:6a:37:f1:5c:b0:c6:af:43:89:ea:92:b1:
57:7b:a4:40:19:64:07:62:34:ef:9c:2e:74:f5:3f:20:9a:da:
2f:24:e1:67:ba:86:6b:42:59:c0:28:8b:33:de:a4:04:90:d2:
e8:b5:b6:ee:f0:6e:6b:94:27:5a:06:a4:0e:8a:96:97:be:4f:
03:06:3c:be:bd:21:36:eb:60:e7:45:2c:84:dd:8d:49:af:e2:
ff:d7:45:e0:22:b6:7b:e6:08:d8:da:df:aa:b4:11:78:0a:e9:
9d:05:ff:33:ce:2f:25:8d:b9:be:43:e1:dc:3e:2d:9a:c9:75:
22:41:47:8f:62:06:12:9e:06:a2:b5:28:42:b0:ea:5d:05:58:
3f:55:21:81:23:83:e8:d3:55:e3:29:e2:b8:04:02:ec:14:e7:
63:59:bb:9b:d2:ed:63:2f:82:9d:ee:97:76:5d:b0:3b:eb:d4:
36:83:8b:be:f7:f5:1a:fb:dc:db:a6:1d:28:2e:3d:ad:2e:d3:
49:f4:4f:cd:8f:29:20:c8:eb:d9:5a:ba:24:af:10:8e:61:40:
b1:d8:92:7f:35:2d:82:59:4a:99:01:f3:18:35:cc:67:19:93:
07:5b:8b:82:31:68:f0:f5:e8:6e:ad:e7:ba:8a:ca:54:83:b3:
db:c9:1f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:23:52 2026 by rpki-client