Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft
File: SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft (raw, json)
Hash identifier: 7vfcuulhdaW/RLElj1+3cKgT52KnjgvICEGD1mHxyJk=
Subject key identifier: 48:76:AD:62:E3:51:EA:1C:96:80:F0:DD:0E:5E:59:61:34:F6:2E:1F
Authority key identifier: 48:53:75:19:1D:1C:2E:50:98:21:08:FD:D4:07:BB:CF:73:E9:79:5C
Certificate issuer: /CN=485375191d1c2e50982108fdd407bbcf73e9795c
Certificate serial: 019DA34190B20BBCCB92281BA387E577039A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFN1GR0cLlCYIQj91Ae7z3PpeVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft
Manifest number: 1293
Signing time: Sun 19 Apr 2026 01:01:16 +0000
Manifest this update: Sun 19 Apr 2026 01:01:16 +0000
Manifest next update: Mon 20 Apr 2026 01:01:16 +0000
Files and hashes: 1: SFN1GR0cLlCYIQj91Ae7z3PpeVw.crl (hash: 7NdSLmp8pQskpd3DMU4+rw2EcNJCu95tEVtHna8AFog=)
2: d8KM-uWtl5I_naikawUKGzZuO94.roa (hash: 1CwXzGBT5z5cvBmqOXP3+kg+AY9+POz75YELMqDBG6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFN1GR0cLlCYIQj91Ae7z3PpeVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 01:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:41:90:b2:0b:bc:cb:92:28:1b:a3:87:e5:77:03:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485375191d1c2e50982108fdd407bbcf73e9795c
Validity
Not Before: Apr 19 01:01:16 2026 GMT
Not After : Apr 20 01:01:16 2026 GMT
Subject: CN=4876ad62e351ea1c9680f0dd0e5e596134f62e1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:60:85:02:f0:83:8e:2b:ca:77:bf:72:12:37:
52:a6:09:27:b5:56:b1:c6:1f:ac:e9:88:0d:db:7c:
fd:ba:52:86:b4:04:29:02:72:e6:5e:0f:bb:e0:20:
f2:20:52:65:e0:38:42:ce:d4:e5:6c:76:d0:9f:b3:
e1:e6:91:bc:72:f9:06:6f:41:02:ce:1a:f4:7d:42:
5c:c4:05:d4:ea:37:14:e2:21:bc:ec:89:8b:09:43:
13:e0:b1:19:11:01:eb:06:48:68:f0:74:a4:30:6c:
a7:92:26:0e:f4:c1:e0:5b:da:21:92:5c:69:bf:46:
35:c7:2c:49:2e:2a:3b:ab:c6:c0:5d:6f:83:94:b8:
f1:f8:b3:36:1a:c3:1a:af:d1:38:79:af:c1:d4:6e:
01:c7:cf:dc:6f:9a:64:4f:34:54:d1:d5:9a:ae:1b:
f6:69:ca:4f:03:ab:d4:60:e6:01:d5:81:67:9e:c9:
fa:fc:ad:2f:f4:41:0e:0f:b7:d5:24:d1:ed:b5:52:
02:11:25:4d:4e:6b:ff:a0:02:35:d8:c8:4d:3d:f0:
7c:ac:42:16:ca:33:7f:b6:60:e3:55:75:ec:3b:1a:
b9:3d:38:bc:9d:ea:bf:08:ed:ad:b3:9a:77:08:05:
5a:fb:f1:3d:47:51:5c:36:aa:65:78:fe:ec:fa:80:
01:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:76:AD:62:E3:51:EA:1C:96:80:F0:DD:0E:5E:59:61:34:F6:2E:1F
X509v3 Authority Key Identifier:
keyid:48:53:75:19:1D:1C:2E:50:98:21:08:FD:D4:07:BB:CF:73:E9:79:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFN1GR0cLlCYIQj91Ae7z3PpeVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b2609b-ae39-429f-a505-6ebff64bca1c/1/SFN1GR0cLlCYIQj91Ae7z3PpeVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:c1:e8:c0:ca:6f:32:5b:08:08:54:bd:f4:a2:5c:b6:7d:74:
a1:1f:5d:a5:3f:84:d4:cd:ef:dd:8b:c1:17:97:77:3c:09:93:
38:06:de:72:37:59:19:4f:7a:41:0c:80:ba:28:da:ce:d1:cf:
6f:d6:a1:36:65:14:30:1d:27:e5:b4:bb:0f:1d:ef:30:bc:38:
5b:a9:53:1d:79:af:a0:78:4f:93:c8:e1:13:64:90:23:01:aa:
4f:17:1c:3e:2b:d8:ac:b1:03:aa:57:35:34:5b:b2:cf:95:e0:
b3:c2:97:bc:53:9a:d7:2c:84:b7:01:84:e0:ac:21:75:f6:b7:
21:75:e2:9e:7f:10:b5:40:c6:cb:e5:30:ce:3c:39:0d:d1:9f:
18:dc:cd:8d:fb:b7:4d:d8:e5:f5:38:76:8a:e7:72:e4:c9:70:
a3:ff:27:48:14:8d:42:2e:ce:70:0c:c7:a2:86:2c:6e:a6:be:
c5:91:8c:fe:47:6e:33:c7:9b:cb:e7:da:7f:0c:73:40:b5:42:
22:3b:d2:08:3e:1c:1f:e7:c8:06:7a:47:d5:6b:96:e6:a0:9f:
f3:b9:07:4e:77:48:65:6f:47:fc:3c:6f:fb:d1:8f:eb:b6:1c:
70:39:b4:f3:06:e3:b2:33:f9:34:59:85:b4:2c:b8:bf:18:4e:
c3:dc:59:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:51:55 2026 by rpki-client