Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.mft
File: SXjTKLzeUpTzcnZcEa7vKBVbDwI.mft (raw, json)
Hash identifier: 98oacRrt03XCbAUs0CATqTGrF8BrwP49spm/JuCiYwQ=
Subject key identifier: A9:D8:52:34:6C:47:0F:80:94:BF:52:02:C2:99:79:4E:04:C4:74:D6
Authority key identifier: 49:78:D3:28:BC:DE:52:94:F3:72:76:5C:11:AE:EF:28:15:5B:0F:02
Certificate issuer: /CN=4978d328bcde5294f372765c11aeef28155b0f02
Certificate serial: 019D38658D698DA98BC8060862808503A6EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SXjTKLzeUpTzcnZcEa7vKBVbDwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.mft
Manifest number: 1895
Signing time: Sun 29 Mar 2026 07:01:12 +0000
Manifest this update: Sun 29 Mar 2026 07:01:12 +0000
Manifest next update: Mon 30 Mar 2026 07:01:12 +0000
Files and hashes: 1: SXjTKLzeUpTzcnZcEa7vKBVbDwI.crl (hash: kDlymDzGvw71Qyf+Yc+M+exaNpFc28T4gnbou0PHE/U=)
2: z4VLYtswGcmvOrd3jGwZx5w_uAg.roa (hash: MY7QPHqZSOiP3oaWW8od9BPKvJMoZCzW1Qh7mRvMMC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SXjTKLzeUpTzcnZcEa7vKBVbDwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:8d:69:8d:a9:8b:c8:06:08:62:80:85:03:a6:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4978d328bcde5294f372765c11aeef28155b0f02
Validity
Not Before: Mar 29 07:01:12 2026 GMT
Not After : Mar 30 07:01:12 2026 GMT
Subject: CN=a9d852346c470f8094bf5202c299794e04c474d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7d:30:9b:57:f8:8e:ca:5c:ee:2b:05:8a:b5:
12:4c:0c:b8:75:22:44:3a:10:5d:4e:f1:c0:84:ff:
46:38:d5:6a:5f:6b:3a:8c:a2:7a:b4:db:9d:49:e6:
c2:ff:15:f4:64:1f:df:79:95:97:5b:53:fd:6a:75:
06:ef:d2:7a:68:06:75:02:71:8e:a2:da:75:7f:dd:
8b:34:84:72:3d:a2:15:d6:5a:5e:42:76:fd:ee:da:
5b:41:cf:16:2f:6e:8e:c1:29:e2:7d:aa:de:bb:4f:
6a:54:dc:73:50:c2:31:a4:70:9b:ee:f9:12:9e:f7:
18:9d:5c:75:d0:42:57:21:b5:da:29:6f:e9:33:c5:
db:a2:59:9b:61:58:a3:d6:40:5b:1d:b5:7c:bf:46:
7a:ec:f8:f9:d4:c1:a0:af:04:2f:9d:89:37:11:15:
d5:09:38:bc:f0:e2:70:5b:1c:de:df:5f:48:bb:27:
af:8a:20:5d:9e:52:b3:b4:a3:a2:2c:6b:cc:13:33:
13:d3:ef:07:58:91:15:bc:ad:21:61:ed:ee:2d:c4:
6f:ee:44:e0:e5:4a:3a:42:ef:ed:f7:ac:5b:d4:71:
73:c2:cb:64:f1:62:a6:ac:dc:67:f6:76:10:0b:e9:
6d:8d:46:a4:de:19:cf:9a:f6:f8:00:e7:68:7b:22:
5c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:D8:52:34:6C:47:0F:80:94:BF:52:02:C2:99:79:4E:04:C4:74:D6
X509v3 Authority Key Identifier:
keyid:49:78:D3:28:BC:DE:52:94:F3:72:76:5C:11:AE:EF:28:15:5B:0F:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SXjTKLzeUpTzcnZcEa7vKBVbDwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:eb:20:b1:42:5a:41:b5:28:b8:54:77:31:b2:11:c8:2b:2a:
1e:49:74:cc:b1:5a:17:14:63:1c:dd:aa:25:81:75:17:ff:aa:
e0:6b:43:ea:43:bc:3e:cf:4a:f1:96:e0:7a:f1:2e:b6:df:88:
2b:09:97:c4:1a:8d:34:90:f8:10:b5:09:e0:0c:75:a2:e6:0c:
8c:78:95:fc:2f:00:a7:27:48:44:30:e2:34:db:6b:8c:f4:5b:
6e:a5:69:69:c5:8f:1b:03:3d:be:d9:bc:5b:c2:52:e2:06:07:
77:32:d6:fd:39:f3:5c:fc:a0:85:9c:42:e8:23:ce:ec:39:51:
cc:de:15:9f:92:8b:0d:dc:47:33:f1:c4:39:de:5b:06:cd:68:
78:e5:b2:d3:fb:fd:98:a1:4b:4b:2c:71:27:7d:47:23:b0:82:
41:54:00:b9:55:ac:47:c6:3f:4f:12:3a:5b:22:bd:a1:c8:38:
db:f6:39:8c:37:f7:a4:2f:4e:5a:c7:66:78:f3:b5:67:47:fc:
61:1b:7a:7f:e8:47:20:b8:e7:d0:88:73:14:71:a6:59:1c:3d:
9c:cc:fc:4c:d1:68:82:5d:ac:27:0e:1e:85:54:0b:60:3d:44:
7c:df:77:50:73:6e:29:d4:7c:a8:f5:19:a0:8e:be:b1:4e:45:
b6:42:68:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:28 2026 by rpki-client