Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft
File: SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft (raw, json)
Hash identifier: nYdMAI7/aMwHipADOUCMlnBZH5TcIbA7uei0zrPa9Fo=
Subject key identifier: 74:0C:19:77:51:E7:86:3D:16:FB:5D:BE:54:0C:8B:7C:42:9C:60:B8
Authority key identifier: 49:F2:70:2D:1A:07:26:17:5E:39:AF:16:97:4E:53:75:DC:AE:FC:31
Certificate issuer: /CN=49f2702d1a0726175e39af16974e5375dcaefc31
Certificate serial: 01A12C200CFFE1E8EA19241A62CF0F7F918D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfJwLRoHJhdeOa8Wl05Tddyu_DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft
Manifest number: 19DB
Signing time: Sun 11 Oct 2026 18:01:00 +0000
Manifest this update: Sun 11 Oct 2026 18:01:00 +0000
Manifest next update: Mon 12 Oct 2026 18:01:00 +0000
Files and hashes: 1: 9MnmN8BJQf0kOHp6EAYtsFBmQ8A.roa (hash: GaU3NhS7R0xUqYKJ24HpGBHtr1NKfsNpWx13se1RpD8=)
2: SfJwLRoHJhdeOa8Wl05Tddyu_DE.crl (hash: wUxNXnx4AOHstju0FWP/t8fWYqsl6w3U+B1fwBOA1HA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SfJwLRoHJhdeOa8Wl05Tddyu_DE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 18:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:20:0c:ff:e1:e8:ea:19:24:1a:62:cf:0f:7f:91:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f2702d1a0726175e39af16974e5375dcaefc31
Validity
Not Before: Oct 11 18:01:00 2026 GMT
Not After : Oct 12 18:01:00 2026 GMT
Subject: CN=740c197751e7863d16fb5dbe540c8b7c429c60b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e0:a6:d2:d3:76:92:63:91:2c:e3:0e:37:10:
e5:96:f5:98:e7:61:bc:fa:4b:4c:9a:06:7e:be:7b:
d7:02:d7:68:30:e2:12:1d:3f:bc:34:13:aa:23:cc:
1e:10:ed:6c:4f:18:ff:16:7d:78:a9:60:09:b2:76:
3a:fb:cd:00:25:fa:8f:7b:01:77:d6:93:61:44:12:
8e:2a:5e:42:9f:09:2d:3c:53:a6:43:c6:eb:ed:6c:
23:6d:d3:24:a8:56:c1:69:a7:6f:2e:0d:00:7d:bf:
cb:47:8f:d3:49:46:52:f8:80:04:c5:d2:bb:d0:e1:
d8:1e:ae:e1:68:87:fd:c1:8f:6e:6a:c7:0a:cb:b4:
0a:79:49:19:79:5f:96:1b:5a:03:78:dd:cf:04:d7:
fe:b4:ab:c8:68:82:ae:52:0e:a6:4d:1f:fb:48:43:
c1:62:2a:24:dd:e7:a9:03:34:99:91:d6:d6:7d:96:
d3:3e:75:f8:b9:41:64:28:e0:10:d8:0d:dc:60:fc:
96:1d:6f:ca:52:ef:25:29:bd:48:8f:d0:45:41:b5:
87:75:8e:53:cb:c1:12:68:d6:76:6f:ec:0f:3f:62:
5f:0e:65:79:e4:49:ff:b9:50:ce:7e:ab:46:53:fb:
97:94:23:ed:07:ad:a7:89:2a:f8:09:ac:7f:f8:49:
fd:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:0C:19:77:51:E7:86:3D:16:FB:5D:BE:54:0C:8B:7C:42:9C:60:B8
X509v3 Authority Key Identifier:
keyid:49:F2:70:2D:1A:07:26:17:5E:39:AF:16:97:4E:53:75:DC:AE:FC:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfJwLRoHJhdeOa8Wl05Tddyu_DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:41:98:4d:be:9c:83:f9:3f:b4:68:ae:bc:6d:ab:8d:0f:f6:
d9:a5:64:f6:fd:f0:60:ca:f5:12:32:5b:ad:86:0e:40:c9:b1:
37:95:fc:8f:4f:4e:d0:f8:df:4e:4f:81:b4:97:b3:76:99:6d:
f7:a7:40:5a:21:73:78:1b:2b:cf:2f:9e:28:af:b2:17:8e:ef:
c5:5d:50:f8:c0:62:74:99:47:6b:6a:b6:fe:cc:53:fc:28:c5:
ea:f0:b9:a9:f6:e0:89:ff:3d:99:f9:a4:69:7c:61:96:b9:58:
2a:39:89:08:b6:15:99:fb:a6:74:30:cb:da:d1:23:84:83:2d:
12:60:8d:56:4a:83:72:de:28:d9:b7:31:cd:a5:5d:03:d2:d4:
98:12:5b:c4:dc:26:5a:fe:42:d7:8e:e9:1a:14:d9:d8:06:75:
0c:d2:c9:1f:63:f8:9c:dd:b9:c2:79:d7:a1:a8:29:cf:07:c4:
10:ae:16:63:7a:72:ca:f8:1b:82:65:b1:4a:c7:8d:b1:93:51:
ac:19:68:65:ef:bd:f9:ba:29:6d:72:14:1c:93:08:ef:fb:dd:
8c:6a:f6:f9:d1:f6:97:2a:50:66:4d:f3:d3:04:70:ca:80:7b:
a7:48:4f:10:38:98:1d:fc:64:3a:91:f5:16:30:d5:2f:22:10:
60:5f:b4:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 03:27:53 2026 by rpki-client