Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/a998bb-3bc3-4597-8dcc-c4f22536ab05/1/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.mft
File: Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.mft (raw, json)
Hash identifier: uHtrD6NgmopmDFKdb0KLNTuRj20N0YD3uFyrHiGM3iU=
Subject key identifier: 0F:D2:EA:93:0C:10:9F:7D:D8:23:D5:46:83:B9:BC:39:F4:0D:AE:24
Authority key identifier: 49:F9:B8:80:F2:59:B8:81:90:70:2C:22:BF:83:21:71:B7:59:74:34
Certificate issuer: /CN=49f9b880f259b88190702c22bf832171b7597434
Certificate serial: 019D98F531C3212A71C28C141937E2AE024B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/a998bb-3bc3-4597-8dcc-c4f22536ab05/1/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.mft
Manifest number: 1514
Signing time: Fri 17 Apr 2026 01:01:38 +0000
Manifest this update: Fri 17 Apr 2026 01:01:38 +0000
Manifest next update: Sat 18 Apr 2026 01:01:38 +0000
Files and hashes: 1: Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.crl (hash: 6kowtKd5WH1WyRh2VeJ2i5dE8a2vp9dy/JHeCtX7Uig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/a998bb-3bc3-4597-8dcc-c4f22536ab05/1/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/a998bb-3bc3-4597-8dcc-c4f22536ab05/1/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:31:c3:21:2a:71:c2:8c:14:19:37:e2:ae:02:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f9b880f259b88190702c22bf832171b7597434
Validity
Not Before: Apr 17 01:01:38 2026 GMT
Not After : Apr 18 01:01:38 2026 GMT
Subject: CN=0fd2ea930c109f7dd823d54683b9bc39f40dae24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a0:6e:9f:d3:04:fd:2d:a8:1c:19:d6:ec:0f:
0c:db:f6:be:47:a9:fa:17:b3:3f:04:74:5c:67:0f:
7e:38:97:6d:af:21:ba:96:a7:69:24:4e:61:37:b6:
69:cf:17:db:58:72:7f:eb:d2:15:f4:41:89:38:66:
7f:c7:97:5b:32:40:dd:17:b0:b8:66:66:19:64:e6:
26:c9:1f:7f:e2:1f:44:11:9a:fd:32:0f:00:45:0c:
d9:80:a5:af:3c:bf:6a:27:aa:7a:36:c4:28:ae:50:
6c:c9:2a:e2:fd:3d:26:36:9f:97:ec:96:89:3a:93:
e8:52:9e:af:59:49:f9:c8:99:d5:81:39:1a:7a:89:
9a:0d:6b:ff:8c:64:1b:c6:b7:31:6f:20:a1:89:d0:
85:82:2e:40:0e:d4:57:2b:77:5a:97:b9:af:94:d7:
9b:64:92:02:c7:7f:56:02:44:0b:4b:d5:13:b4:16:
ce:a9:9b:b3:66:6a:32:0f:67:6a:5e:c1:a3:60:e7:
58:54:3b:d0:5b:0d:fb:df:cf:2f:33:44:99:e2:6c:
41:7a:cc:4d:04:e3:c8:40:ae:3a:22:de:27:6a:a7:
63:67:1b:ed:f9:d0:dd:a8:f5:2b:59:39:ae:11:50:
23:3a:d6:34:cd:6e:5f:0b:5e:f8:2b:eb:1a:cd:2c:
37:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D2:EA:93:0C:10:9F:7D:D8:23:D5:46:83:B9:BC:39:F4:0D:AE:24
X509v3 Authority Key Identifier:
keyid:49:F9:B8:80:F2:59:B8:81:90:70:2C:22:BF:83:21:71:B7:59:74:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a998bb-3bc3-4597-8dcc-c4f22536ab05/1/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a998bb-3bc3-4597-8dcc-c4f22536ab05/1/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:16:68:f3:8f:5e:f3:7c:36:89:61:ad:2d:b9:e1:27:20:3b:
ec:4f:70:50:ea:6a:32:b4:02:63:75:15:b4:7f:cf:5b:53:08:
49:1d:8b:bf:9c:95:b8:b9:92:1a:ef:b9:71:79:d0:78:68:16:
08:29:a3:c7:84:0f:a0:2d:99:d6:4d:95:e3:83:11:1c:ef:74:
b3:37:ec:b8:3b:13:6d:1e:2d:dd:b0:42:b0:82:60:46:c8:ec:
33:2d:54:d7:fc:ab:1e:74:be:cb:43:ba:bf:3c:a7:e0:81:52:
6b:e6:81:6c:b8:99:e6:58:8f:81:0b:4c:96:07:ef:18:b4:32:
33:12:60:b0:04:89:5f:c8:0e:cb:28:e1:70:d7:20:93:5a:1c:
6f:4c:ee:0a:d9:d9:b4:9e:2d:f3:66:4f:f5:1e:3b:81:40:b0:
61:2a:fc:6c:f4:99:fd:fd:3e:85:d6:2a:3f:4d:c6:2f:f0:db:
97:4e:e6:8e:4e:5f:06:90:51:11:c0:f8:64:2f:93:1b:be:2d:
56:43:d3:58:be:15:a6:00:82:d7:c6:79:de:0c:1f:5e:f9:a0:
e8:4f:a5:52:fc:51:50:7b:d6:3f:f2:fb:cb:23:03:06:e6:b8:
fb:62:92:29:31:6a:11:98:ac:a0:23:e4:66:59:6c:2e:6e:0e:
95:19:e6:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9THDISpxwowUGTfirgJLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZjliODgwZjI1OWI4ODE5MDcwMmMyMmJmODMyMTcxYjc1
OTc0MzQwHhcNMjYwNDE3MDEwMTM4WhcNMjYwNDE4MDEwMTM4WjAzMTEwLwYDVQQD
EygwZmQyZWE5MzBjMTA5ZjdkZDgyM2Q1NDY4M2I5YmMzOWY0MGRhZTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKBun9ME/S2oHBnW7A8M2/a+R6n6
F7M/BHRcZw9+OJdtryG6lqdpJE5hN7ZpzxfbWHJ/69IV9EGJOGZ/x5dbMkDdF7C4
ZmYZZOYmyR9/4h9EEZr9Mg8ARQzZgKWvPL9qJ6p6NsQorlBsySri/T0mNp+X7JaJ
OpPoUp6vWUn5yJnVgTkaeomaDWv/jGQbxrcxbyChidCFgi5ADtRXK3dal7mvlNeb
ZJICx39WAkQLS9UTtBbOqZuzZmoyD2dqXsGjYOdYVDvQWw37388vM0SZ4mxBesxN
BOPIQK46It4naqdjZxvt+dDdqPUrWTmuEVAjOtY0zW5fC174K+sazSw33wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA/S6pMMEJ992CPVRoO5vDn0Da4kMB8GA1UdIwQY
MBaAFEn5uIDyWbiBkHAsIr+DIXG3WXQ0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2ZtNGdQSlp1SUdRY0N3aXY0TWhjYmRaZERRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9hOTk4YmItM2JjMy00NTk3LThkY2Mt
YzRmMjI1MzZhYjA1LzEvU2ZtNGdQSlp1SUdRY0N3aXY0TWhjYmRaZERRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9hOTk4YmItM2JjMy00NTk3LThkY2MtYzRmMjI1MzZhYjA1
LzEvU2ZtNGdQSlp1SUdRY0N3aXY0TWhjYmRaZERRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARxZo849e
83w2iWGtLbnhJyA77E9wUOpqMrQCY3UVtH/PW1MISR2Lv5yVuLmSGu+5cXnQeGgW
CCmjx4QPoC2Z1k2V44MRHO90szfsuDsTbR4t3bBCsIJgRsjsMy1U1/yrHnS+y0O6
vzyn4IFSa+aBbLiZ5liPgQtMlgfvGLQyMxJgsASJX8gOyyjhcNcgk1ocb0zuCtnZ
tJ4t82ZP9R47gUCwYSr8bPSZ/f0+hdYqP03GL/Dbl07mjk5fBpBREcD4ZC+TG74t
VkPTWL4VpgCC18Z53gwfXvmg6E+lUvxRUHvWP/L7yyMDBua4+2KSKTFqEZisoCPk
ZllsLm4OlRnm4A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:45:25 2026 by rpki-client