Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.mft
File: rSRGM37TPO3jTe_1VxBdxxwDqRY.mft (raw, json)
Hash identifier: 7SoT8GbV1cis/L/qkYuUgcZzAPhlP8vH95rkxdx/muM=
Subject key identifier: 12:64:F6:0F:83:06:28:1A:B8:3E:89:3A:CA:BF:B5:E3:AB:CC:68:C0
Authority key identifier: AD:24:46:33:7E:D3:3C:ED:E3:4D:EF:F5:57:10:5D:C7:1C:03:A9:16
Certificate issuer: /CN=ad2446337ed33cede34deff557105dc71c03a916
Certificate serial: 019D3A545418DF99E0EFFDCD9085D9921C6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSRGM37TPO3jTe_1VxBdxxwDqRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.mft
Manifest number: 0821
Signing time: Sun 29 Mar 2026 16:01:38 +0000
Manifest this update: Sun 29 Mar 2026 16:01:38 +0000
Manifest next update: Mon 30 Mar 2026 16:01:38 +0000
Files and hashes: 1: rSRGM37TPO3jTe_1VxBdxxwDqRY.crl (hash: OS3a0lU+y3NH6tbPk2MDpD2c9b1IJGcdj89HdqCGrCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSRGM37TPO3jTe_1VxBdxxwDqRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:54:18:df:99:e0:ef:fd:cd:90:85:d9:92:1c:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2446337ed33cede34deff557105dc71c03a916
Validity
Not Before: Mar 29 16:01:38 2026 GMT
Not After : Mar 30 16:01:38 2026 GMT
Subject: CN=1264f60f8306281ab83e893acabfb5e3abcc68c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:08:81:3b:22:52:7b:a4:fa:6b:0f:b2:6c:25:
8d:ff:b4:45:6d:65:70:c2:f9:4a:9e:50:d1:64:80:
52:e0:73:45:89:b1:b3:3f:c5:d4:bc:56:f9:02:70:
60:56:f3:62:a9:e8:30:75:2b:8c:0d:bf:0a:c8:18:
9a:11:6b:a8:70:a2:70:1d:56:74:99:8a:61:f5:13:
51:95:29:eb:e6:96:98:00:dc:16:ab:ac:6e:0e:31:
39:f3:3c:2f:98:d7:e9:5d:e3:90:23:91:81:36:07:
d9:b9:dd:cb:c1:2f:71:77:45:d0:ab:84:d4:91:13:
e0:28:0a:b9:2b:f3:f3:0f:18:79:69:61:ec:50:06:
3d:03:8d:c7:77:6e:6e:c1:50:ff:f4:aa:6b:2b:5c:
e3:7f:01:83:7f:ae:c8:c7:97:fc:55:85:bf:c2:4a:
5a:85:1a:a0:80:56:37:87:6e:63:9d:07:d1:a5:df:
24:3f:0a:44:0b:a6:ee:ea:f6:bb:5a:b2:00:38:34:
3a:fd:82:d3:94:7a:2f:f3:f5:ba:52:b2:2f:7e:8b:
57:5e:7e:21:86:59:b7:4d:e5:c9:b8:1e:b1:af:a0:
43:6d:7e:5f:04:81:49:f6:1a:75:ce:ec:ad:b6:9e:
58:fe:b6:5d:2d:29:9c:52:da:70:15:02:95:90:43:
1c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:64:F6:0F:83:06:28:1A:B8:3E:89:3A:CA:BF:B5:E3:AB:CC:68:C0
X509v3 Authority Key Identifier:
keyid:AD:24:46:33:7E:D3:3C:ED:E3:4D:EF:F5:57:10:5D:C7:1C:03:A9:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSRGM37TPO3jTe_1VxBdxxwDqRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:2f:d0:77:15:a3:69:8d:69:cf:24:92:d3:6d:61:ab:8f:fd:
c8:62:d8:d8:84:73:ba:06:b3:ae:8b:4d:3d:02:4e:5b:ac:fa:
3b:31:1c:fb:a7:d2:4c:bb:bd:f2:f8:a8:dc:1c:53:f5:72:0f:
e4:f9:20:d4:7c:b1:a0:94:cc:a5:cc:78:93:77:bf:d5:02:dd:
29:e3:f7:06:2f:1f:f5:2a:69:61:2e:5a:2a:9d:58:e7:71:c7:
df:b1:67:b3:34:54:a0:9e:43:8f:5d:48:11:e5:a9:1e:1c:04:
d9:b8:26:49:40:f2:7b:ec:f4:39:4e:61:89:26:6d:ac:39:b8:
1b:e8:68:94:56:c8:d7:d6:30:49:b9:7e:30:87:09:ee:fe:f4:
83:c6:ea:8b:a5:49:59:10:7c:53:bb:90:ef:88:c1:c1:88:e1:
0f:a0:16:5f:22:8d:3c:33:ba:a7:04:0b:58:40:c9:db:70:35:
49:c5:0e:13:95:e1:f9:3d:c4:f9:06:11:58:51:8c:9d:ba:85:
85:70:2a:e3:53:9a:00:81:79:cf:17:75:ed:70:d6:71:13:ec:
29:87:02:03:73:f2:6e:54:01:11:80:cf:f9:03:f3:2f:af:5a:
c6:c6:07:e7:7a:68:ee:eb:fe:c0:21:df:25:d5:e5:f8:4d:1a:
5e:58:99:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:39:06 2026 by rpki-client