Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/a998bb-3bc3-4597-8dcc-c4f22536ab05/1/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.mft
File: Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.mft (raw, json)
Hash identifier: bMkHGNmQ9hpH0z1v5lxiV0lDLNQ25ClrNb6YN5dcXck=
Subject key identifier: 9D:58:5E:D9:56:A0:65:6E:63:F5:BF:C9:82:9C:D5:54:65:3E:60:2C
Authority key identifier: 49:F9:B8:80:F2:59:B8:81:90:70:2C:22:BF:83:21:71:B7:59:74:34
Certificate issuer: /CN=49f9b880f259b88190702c22bf832171b7597434
Certificate serial: 019CAB6BA30B525F1B17CCB72A37E2289B48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/a998bb-3bc3-4597-8dcc-c4f22536ab05/1/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.mft
Manifest number: 1499
Signing time: Sun 01 Mar 2026 22:01:23 +0000
Manifest this update: Sun 01 Mar 2026 22:01:23 +0000
Manifest next update: Mon 02 Mar 2026 22:01:23 +0000
Files and hashes: 1: Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.crl (hash: i+jrkyV+zLyTbdr1Pm+EAUeyLO714K/Yxdth/Vz/3CQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/a998bb-3bc3-4597-8dcc-c4f22536ab05/1/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/a998bb-3bc3-4597-8dcc-c4f22536ab05/1/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:a3:0b:52:5f:1b:17:cc:b7:2a:37:e2:28:9b:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f9b880f259b88190702c22bf832171b7597434
Validity
Not Before: Mar 1 22:01:23 2026 GMT
Not After : Mar 2 22:01:23 2026 GMT
Subject: CN=9d585ed956a0656e63f5bfc9829cd554653e602c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ac:2b:16:80:64:28:c4:f0:7e:09:42:f8:6d:
53:1e:5c:7d:94:8c:f3:0a:6e:2b:07:9b:60:94:33:
32:79:ad:38:83:aa:f9:18:69:94:d4:31:c8:7b:92:
c6:76:b3:61:e9:7f:f3:a9:bd:f8:0e:6d:e9:0f:43:
52:7b:cc:eb:ac:86:70:aa:8d:a5:01:22:66:03:c1:
1c:2b:f2:b6:26:02:e2:37:e3:60:93:15:76:30:c9:
21:db:33:59:5d:fe:79:78:f7:47:11:96:11:dc:d0:
04:de:f3:c2:38:e4:ce:3c:56:59:f9:d8:96:45:89:
f7:db:a6:30:b0:8f:20:99:f3:41:5f:3f:89:81:16:
8e:fb:8c:5d:d5:70:e9:11:a5:bd:7f:90:da:b6:ce:
cf:85:f6:2a:6e:7b:22:2e:6a:4a:ba:01:66:06:3f:
77:aa:6e:85:d5:13:63:aa:4f:f7:5e:e4:c5:dd:5e:
63:1b:45:69:b7:9e:81:7b:79:46:2a:1a:c2:b0:88:
c4:2b:a8:3b:1e:5c:8b:46:f7:23:6f:1a:80:6b:04:
f7:26:17:53:5e:4a:0b:58:f9:76:80:3a:32:f2:d7:
38:b4:dc:bc:c5:62:11:bc:e3:08:f8:fc:d8:cf:d6:
da:1d:3f:da:b5:0f:6f:c5:53:77:e2:75:60:16:2f:
27:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:58:5E:D9:56:A0:65:6E:63:F5:BF:C9:82:9C:D5:54:65:3E:60:2C
X509v3 Authority Key Identifier:
keyid:49:F9:B8:80:F2:59:B8:81:90:70:2C:22:BF:83:21:71:B7:59:74:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a998bb-3bc3-4597-8dcc-c4f22536ab05/1/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a998bb-3bc3-4597-8dcc-c4f22536ab05/1/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:34:29:56:79:11:a3:b4:27:ec:7d:73:9e:42:da:58:32:7e:
77:1f:f3:af:12:6e:13:dd:3b:3a:ef:33:17:af:86:9b:f0:c1:
b0:04:6c:72:35:8c:69:86:88:70:24:1d:eb:13:ec:d3:60:92:
31:b2:2c:7f:87:45:3f:b6:e0:72:75:18:b0:11:8c:45:e2:f3:
52:a1:9f:ac:ab:3d:a4:07:cb:8f:ca:de:c9:e4:9a:12:ae:16:
72:26:9c:ce:35:12:ad:ea:12:a3:74:2a:0b:12:87:35:82:bd:
0f:4b:f1:0e:f4:fb:8e:ba:64:ab:96:15:49:42:4d:ea:6b:02:
51:e7:bd:8c:cf:64:8d:38:06:8b:91:79:33:cb:37:b6:0b:4e:
52:cb:dc:52:41:02:6a:e5:a6:f4:2a:16:6b:87:38:b2:8d:00:
39:be:c4:2c:12:ac:a3:5f:3d:a0:41:20:8f:a7:76:c7:d7:3d:
a0:3e:3c:bc:3d:e0:e6:cf:db:e6:87:f8:c2:a2:40:0a:26:25:
30:b1:bf:74:d7:ee:3d:ea:c6:8c:83:b3:50:c5:47:29:42:af:
54:2d:71:21:ba:ff:b2:2d:09:ae:25:41:84:e6:49:a4:84:4a:
13:d7:3f:f5:11:38:8b:e5:54:8d:4e:d2:25:f6:4a:47:3e:f3:
0e:ff:11:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:07:59 2026 by rpki-client