Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft
File: SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft (raw, json)
Hash identifier: qHC77GQxg9DgSJMyfaTjZOkT4SjZ+KQH5VvzJMKI158=
Subject key identifier: 3E:D1:78:F1:9E:5E:6E:9D:F4:31:2E:30:F9:8D:D2:7F:D2:5D:7B:80
Authority key identifier: 49:F2:70:2D:1A:07:26:17:5E:39:AF:16:97:4E:53:75:DC:AE:FC:31
Certificate issuer: /CN=49f2702d1a0726175e39af16974e5375dcaefc31
Certificate serial: 019CAB33DA2D51C4C52EC4A9B4E119F3BF89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfJwLRoHJhdeOa8Wl05Tddyu_DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft
Manifest number: 1786
Signing time: Sun 01 Mar 2026 21:00:27 +0000
Manifest this update: Sun 01 Mar 2026 21:00:27 +0000
Manifest next update: Mon 02 Mar 2026 21:00:27 +0000
Files and hashes: 1: 9MnmN8BJQf0kOHp6EAYtsFBmQ8A.roa (hash: GaU3NhS7R0xUqYKJ24HpGBHtr1NKfsNpWx13se1RpD8=)
2: SfJwLRoHJhdeOa8Wl05Tddyu_DE.crl (hash: MllJzTk3jtDDTjo7WA7Q9KghTYU8tdaDuHtrAPolKnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SfJwLRoHJhdeOa8Wl05Tddyu_DE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:33:da:2d:51:c4:c5:2e:c4:a9:b4:e1:19:f3:bf:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f2702d1a0726175e39af16974e5375dcaefc31
Validity
Not Before: Mar 1 21:00:27 2026 GMT
Not After : Mar 2 21:00:27 2026 GMT
Subject: CN=3ed178f19e5e6e9df4312e30f98dd27fd25d7b80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2c:37:14:96:c5:ca:42:04:68:ee:f3:26:db:
4a:1a:90:56:73:93:fb:d9:42:78:9d:33:39:f9:e6:
7d:9a:6b:d8:21:15:8c:42:5d:18:40:b0:6d:dd:d5:
6c:86:fd:bb:ba:ee:34:c5:b5:b0:e7:2a:a7:9f:f1:
4f:04:ad:20:4c:ae:c8:3f:79:3c:2b:42:c8:f6:c1:
ef:3f:7b:7d:0f:16:b0:27:0f:e5:59:17:3f:47:75:
94:ad:b3:3b:94:df:ad:83:04:a0:d5:fd:82:36:ce:
90:de:65:9d:85:e4:2c:ba:76:17:a2:af:84:1d:8c:
cc:1e:42:80:79:1a:49:f2:51:83:73:f1:64:1d:f8:
21:3d:a3:96:da:95:bc:34:06:e0:48:a0:7c:3e:d3:
dc:3f:ea:93:1d:59:b4:ab:8a:17:56:d5:5d:c9:35:
34:8f:71:e1:57:78:29:35:bd:75:69:8d:c8:48:99:
2b:19:b0:2f:29:99:59:32:7b:8e:56:a3:8a:00:ed:
42:71:da:17:36:9a:6e:d9:05:c9:6f:5f:40:bd:0b:
3e:c8:fb:97:0e:35:9a:5b:3c:d5:6d:b2:03:ab:1f:
dd:c1:3a:aa:33:b4:26:52:8b:9c:7e:45:e2:3c:9c:
43:86:71:67:17:02:8d:37:d9:20:55:8a:67:7c:16:
be:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D1:78:F1:9E:5E:6E:9D:F4:31:2E:30:F9:8D:D2:7F:D2:5D:7B:80
X509v3 Authority Key Identifier:
keyid:49:F2:70:2D:1A:07:26:17:5E:39:AF:16:97:4E:53:75:DC:AE:FC:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfJwLRoHJhdeOa8Wl05Tddyu_DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/cf23e7-73be-4e30-a9e8-3d1a0ebd0f59/1/SfJwLRoHJhdeOa8Wl05Tddyu_DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:25:a6:6d:69:98:61:2f:76:12:0f:dd:ee:de:07:2d:03:79:
05:3a:a1:f9:bb:8b:8e:c3:ba:8b:ea:1a:3a:d0:12:9d:65:4f:
4b:68:ca:27:e0:59:fa:ca:1b:23:59:ce:6b:10:8c:a8:d2:a9:
ce:51:c7:0c:ae:83:ee:61:08:bf:c6:23:6d:5a:51:3f:2d:19:
38:04:4e:eb:e8:61:d8:73:f3:89:e8:d8:60:4b:ea:94:a8:39:
09:1a:f0:ee:db:be:cd:23:99:d0:31:bc:1f:31:aa:25:f8:25:
8b:4a:f5:e3:ce:0f:d1:66:a4:79:60:80:44:9c:39:da:63:44:
4d:fc:d5:88:44:84:6e:19:36:e7:7e:9d:40:7f:12:ef:41:f8:
60:dd:7d:01:ee:bf:af:96:bb:e8:82:39:cf:68:e8:da:f4:f7:
6e:8e:be:2a:68:43:aa:12:07:9d:fb:c0:f9:b5:1f:f8:ef:80:
10:55:61:9f:d3:b7:6a:fc:f1:65:82:4f:a6:a4:68:e4:ae:aa:
40:9e:33:45:6c:90:b3:f7:b1:28:b4:8c:28:93:89:99:fb:90:
bd:cc:48:8b:46:98:fe:f0:b2:97:3c:5c:8a:b5:25:75:bf:31:
d7:81:5b:fd:cb:ed:09:fd:7d:2e:22:ea:d4:1a:a2:f1:97:85:
24:30:85:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:51:42 2026 by rpki-client