Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft
File: SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft (raw, json)
Hash identifier: nB4I3WRoSM5cu+Q9ujlr9dBx7s3NxI0I6q+/dAz4kBw=
Subject key identifier: 36:6C:28:12:2B:DE:4C:A8:AC:B3:97:01:CB:06:22:CA:28:DE:9F:B7
Authority key identifier: 48:53:75:19:1D:1C:2E:50:98:21:08:FD:D4:07:BB:CF:73:E9:79:5C
Certificate issuer: /CN=485375191d1c2e50982108fdd407bbcf73e9795c
Certificate serial: 019CAC0FFB09AE98B7C4C79DDCF7735B40D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFN1GR0cLlCYIQj91Ae7z3PpeVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft
Manifest number: 1213
Signing time: Mon 02 Mar 2026 01:00:54 +0000
Manifest this update: Mon 02 Mar 2026 01:00:54 +0000
Manifest next update: Tue 03 Mar 2026 01:00:54 +0000
Files and hashes: 1: SFN1GR0cLlCYIQj91Ae7z3PpeVw.crl (hash: 18+YrEHewvB/A5aOsAyniLZn9dPUQXV9O3LPxF2KogI=)
2: d8KM-uWtl5I_naikawUKGzZuO94.roa (hash: 1CwXzGBT5z5cvBmqOXP3+kg+AY9+POz75YELMqDBG6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFN1GR0cLlCYIQj91Ae7z3PpeVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:fb:09:ae:98:b7:c4:c7:9d:dc:f7:73:5b:40:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485375191d1c2e50982108fdd407bbcf73e9795c
Validity
Not Before: Mar 2 01:00:54 2026 GMT
Not After : Mar 3 01:00:54 2026 GMT
Subject: CN=366c28122bde4ca8acb39701cb0622ca28de9fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:62:a2:4d:fb:67:29:f3:9a:b5:84:44:7e:89:
10:15:c6:a1:56:b4:00:6d:31:77:21:ae:d1:ef:60:
52:3b:58:39:76:fb:03:17:48:07:8e:e8:d4:ae:e1:
b2:bc:8a:21:9d:a5:14:39:84:84:1f:4c:10:e3:be:
ec:64:75:fd:d5:bc:d1:d9:44:10:07:49:bd:52:86:
9d:f1:a5:9c:38:2e:6c:f6:0c:f8:7b:9b:8f:1d:05:
c4:dc:a5:64:70:fb:24:37:e8:93:41:a1:97:cc:da:
17:74:4a:92:78:f4:65:ba:20:fc:29:5b:8d:40:e2:
26:70:4e:9f:cd:ba:5a:94:e0:1f:04:12:5b:0a:90:
f1:91:19:f6:a3:bf:4d:0c:d3:92:d0:17:4e:c3:e2:
ee:ee:74:4a:27:f4:ff:18:00:1c:3b:c0:8e:14:30:
a6:ee:73:0d:e0:4c:5e:9f:84:f0:0b:dd:f9:8d:eb:
f8:89:14:61:84:b8:ab:12:61:91:ed:df:fb:6a:4f:
d2:28:c3:c5:07:b5:82:9f:83:39:d6:1d:d5:76:67:
1f:bc:f6:e8:a7:83:67:b9:c7:00:ab:56:4c:ac:e7:
4a:32:56:45:61:76:87:47:bf:48:f9:35:98:06:bb:
ce:3d:69:ee:87:83:31:08:9f:f9:85:24:c1:d1:82:
25:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:6C:28:12:2B:DE:4C:A8:AC:B3:97:01:CB:06:22:CA:28:DE:9F:B7
X509v3 Authority Key Identifier:
keyid:48:53:75:19:1D:1C:2E:50:98:21:08:FD:D4:07:BB:CF:73:E9:79:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFN1GR0cLlCYIQj91Ae7z3PpeVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:d8:bf:b9:c4:1d:b9:9a:bf:a0:06:10:18:d0:c3:b0:68:0c:
4b:45:9f:db:4e:86:2e:c5:4a:03:1e:93:f3:f9:74:c9:d7:61:
cc:de:ac:c8:b0:f3:db:dc:11:e9:93:5c:e4:bf:b8:95:9c:f8:
79:21:c3:f9:ef:5b:43:d7:d7:4f:0d:a0:77:f3:55:21:cb:06:
9d:73:13:34:ab:19:f1:89:ea:ea:ee:95:7a:66:78:03:19:a1:
f0:34:e3:2d:07:d8:55:c7:df:40:83:15:ab:c2:a1:d8:63:a8:
04:a2:de:9a:ab:4c:ae:49:68:fd:0e:b7:ed:76:c4:11:6f:99:
0c:3c:2f:02:68:e0:00:9e:37:a5:a6:71:a0:01:bc:b2:6f:ed:
27:e6:01:e2:ab:61:05:e6:86:af:ee:a0:cc:d4:c6:b0:f3:de:
fa:16:75:6e:75:07:c8:7c:c5:73:c1:c1:13:78:76:79:b5:0c:
0b:e3:51:15:11:27:d7:0c:70:77:25:df:58:df:3a:2a:6e:39:
89:9d:01:36:6a:4a:a4:e3:2b:ea:50:fa:c1:36:a1:01:cc:22:
c5:fe:fc:12:d8:14:1d:04:a0:9a:7f:ad:41:cc:63:8a:9c:96:
7d:14:dc:44:09:ba:d9:f2:63:26:78:f7:d7:ca:bc:ad:c3:88:
ab:13:ce:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:38:54 2026 by rpki-client