Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.mft
File: SfJiM_W7QibCp6e5ADAI0Z40eFs.mft (raw, json)
Hash identifier: /Fqr4xsWDVuNZpk+TCZGJ9npDxr/4g1SzKFwS4EfSqw=
Subject key identifier: 4B:0F:92:63:8E:DA:B6:68:60:E5:6C:6C:F9:5F:FB:EF:27:71:A0:67
Authority key identifier: 49:F2:62:33:F5:BB:42:26:C2:A7:A7:B9:00:30:08:D1:9E:34:78:5B
Certificate issuer: /CN=49f26233f5bb4226c2a7a7b9003008d19e34785b
Certificate serial: 019CAB6B96146D2B6DBEF0C48D4B7F2F58D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfJiM_W7QibCp6e5ADAI0Z40eFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.mft
Manifest number: 13D5
Signing time: Sun 01 Mar 2026 22:01:20 +0000
Manifest this update: Sun 01 Mar 2026 22:01:20 +0000
Manifest next update: Mon 02 Mar 2026 22:01:20 +0000
Files and hashes: 1: C3S7Z7lno_9rFEN5rI9k-GVilAM.roa (hash: 6gStCupXXahtcP47ABJrQ8W9WPHJoBRJRpku34DxbVI=)
2: SfJiM_W7QibCp6e5ADAI0Z40eFs.crl (hash: E1C5qdDli4TVdMy/ziuJe8n9I1vrXYeOEpxb9Xposto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SfJiM_W7QibCp6e5ADAI0Z40eFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:96:14:6d:2b:6d:be:f0:c4:8d:4b:7f:2f:58:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f26233f5bb4226c2a7a7b9003008d19e34785b
Validity
Not Before: Mar 1 22:01:20 2026 GMT
Not After : Mar 2 22:01:20 2026 GMT
Subject: CN=4b0f92638edab66860e56c6cf95ffbef2771a067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:65:d0:02:d6:fe:c2:24:35:e4:62:9f:e0:ca:
65:b7:db:34:f8:a2:15:62:94:16:1a:85:b7:ec:6e:
89:20:bf:65:b0:b8:33:2a:92:66:9a:4b:fb:54:fb:
d6:0b:e6:0d:99:ac:cd:f4:38:73:ab:66:40:18:65:
d7:e9:90:83:bc:9d:9d:74:81:d5:08:74:50:dd:cc:
3f:88:b9:a8:82:69:2b:92:cf:dc:12:da:67:b2:f4:
b9:d9:61:9d:e5:de:a8:82:a9:f6:7b:58:be:64:64:
08:4f:c4:9e:cd:69:d4:fe:9c:1d:52:39:62:95:f8:
eb:64:a7:ce:28:ec:ea:21:8e:09:6b:ac:84:2c:17:
a2:6c:fb:af:e3:64:78:01:c5:40:c3:b7:5f:34:de:
3f:bf:d8:fd:59:b7:cf:f1:f6:a5:37:7f:d2:3c:8f:
31:34:0c:f4:7a:c6:ce:a9:61:d5:6f:81:31:d9:32:
ed:01:85:a7:68:80:cb:ed:d3:45:fa:8d:32:d7:d9:
0d:e8:f8:72:59:3c:20:bc:ca:09:46:6b:e1:91:7f:
ee:bf:77:c5:14:5a:b1:29:ab:b6:d1:b0:c6:05:8f:
2f:36:8f:68:26:9a:f3:5f:c1:96:a0:64:ad:63:60:
7f:7f:22:6a:ae:90:25:21:fa:bf:39:3f:39:94:f1:
32:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:0F:92:63:8E:DA:B6:68:60:E5:6C:6C:F9:5F:FB:EF:27:71:A0:67
X509v3 Authority Key Identifier:
keyid:49:F2:62:33:F5:BB:42:26:C2:A7:A7:B9:00:30:08:D1:9E:34:78:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfJiM_W7QibCp6e5ADAI0Z40eFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:0b:1a:1a:33:bf:2c:0a:34:e1:56:17:c9:0d:e5:49:d5:a6:
cd:c1:1d:43:f6:a4:b7:91:b7:64:29:8f:1d:aa:3c:c8:6b:2e:
0a:f0:84:63:c7:5e:6b:b5:ed:c2:8f:59:45:af:50:8d:fd:bc:
33:29:1b:cf:41:2b:c0:21:e4:c2:d3:e8:e8:32:76:6e:25:5c:
1d:8c:a5:4b:6d:3c:f3:f4:22:b1:2f:ba:7d:4c:cb:69:7a:7c:
3e:29:07:ab:2c:fb:c3:42:7d:c2:d6:51:db:bd:5b:a9:41:ff:
a6:78:16:4f:b3:cb:55:7a:27:4f:ae:52:83:6a:28:56:5c:ba:
1d:19:55:22:82:00:64:96:a3:ef:4e:5c:5c:58:78:14:85:40:
c5:cf:88:3a:d4:40:5a:a2:02:3a:f6:24:6a:4d:f7:d3:0b:fc:
20:89:01:0d:81:5c:9a:73:bd:bc:76:a5:ed:6b:04:d8:61:3e:
2f:fc:39:75:89:a1:80:cd:20:bf:20:26:0a:90:47:5d:f2:9e:
0c:ff:75:c5:ff:ab:6d:9b:2e:30:5e:31:e7:8b:1b:69:59:de:
6d:6f:48:9d:93:2c:63:b4:30:8b:58:1a:60:ab:99:f8:97:1d:
1b:31:cf:94:63:08:22:87:92:b0:31:f4:75:99:56:b4:d4:83:
a6:8f:cd:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:47:58 2026 by rpki-client