Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.mft
File: sjQvyZcw8qNNCe5LXukheHVs1NE.mft (raw, json)
Hash identifier: rf6Y5j3S/ydSSquWfg5W1O8wT5X6qcFjP1aj8OWeFf8=
Subject key identifier: 6F:1C:42:EC:5E:AD:8A:59:1C:45:92:FB:DD:A5:8E:B4:F5:46:D2:B7
Authority key identifier: B2:34:2F:C9:97:30:F2:A3:4D:09:EE:4B:5E:E9:21:78:75:6C:D4:D1
Certificate issuer: /CN=b2342fc99730f2a34d09ee4b5ee92178756cd4d1
Certificate serial: 019D3865F0B1954DF0EBD3B99BB83253B17C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sjQvyZcw8qNNCe5LXukheHVs1NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.mft
Manifest number: 093B
Signing time: Sun 29 Mar 2026 07:01:37 +0000
Manifest this update: Sun 29 Mar 2026 07:01:37 +0000
Manifest next update: Mon 30 Mar 2026 07:01:37 +0000
Files and hashes: 1: sjQvyZcw8qNNCe5LXukheHVs1NE.crl (hash: UDVY8kE6hbAsYDYa34mKMOQ4lncmYO9LtiTG+Y3HEf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sjQvyZcw8qNNCe5LXukheHVs1NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:f0:b1:95:4d:f0:eb:d3:b9:9b:b8:32:53:b1:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2342fc99730f2a34d09ee4b5ee92178756cd4d1
Validity
Not Before: Mar 29 07:01:37 2026 GMT
Not After : Mar 30 07:01:37 2026 GMT
Subject: CN=6f1c42ec5ead8a591c4592fbdda58eb4f546d2b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6a:b8:3c:8f:2d:9c:70:25:7a:db:f2:4e:9e:
2a:ce:62:21:8c:72:d8:02:ed:3c:31:2c:cd:be:db:
2f:d6:43:2a:1f:a4:81:71:83:f3:8a:9c:1b:06:74:
03:cd:6e:9e:52:d2:76:04:eb:ac:7d:11:93:5e:f7:
39:ee:26:d1:41:1e:b8:95:af:a1:41:7d:dc:81:90:
a7:37:40:68:ad:56:23:fb:bf:23:41:2b:23:72:52:
da:ba:df:b1:30:c7:c3:db:53:ec:df:a1:24:87:be:
4b:b5:b9:1f:27:3d:5a:fb:4d:b9:ce:31:c5:a3:e4:
e1:43:eb:89:f8:29:fe:65:72:ca:e1:6e:e6:a8:bb:
ec:65:9c:e7:ae:d6:17:b9:8c:f2:8d:64:20:5d:ca:
9f:b9:d4:b8:7c:eb:71:e3:35:5f:e4:09:3a:51:a4:
b4:bd:0a:cc:ed:70:00:9f:b2:69:d1:cd:10:19:60:
0c:4e:ca:b9:e6:8e:8b:15:9b:0e:e3:05:7c:8c:c0:
88:a1:c9:c2:88:73:0f:42:5b:f9:ca:94:36:36:89:
53:d3:39:5b:2b:b3:75:32:f8:88:db:b1:a0:7f:ad:
79:1f:54:c3:ad:e4:97:be:f9:69:be:76:11:1e:ed:
aa:37:c5:14:fd:cd:ab:8f:67:4b:e3:d0:ff:88:0f:
f3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:1C:42:EC:5E:AD:8A:59:1C:45:92:FB:DD:A5:8E:B4:F5:46:D2:B7
X509v3 Authority Key Identifier:
keyid:B2:34:2F:C9:97:30:F2:A3:4D:09:EE:4B:5E:E9:21:78:75:6C:D4:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjQvyZcw8qNNCe5LXukheHVs1NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:0d:3b:37:38:b5:df:07:d3:40:90:26:b3:3b:73:cb:45:7b:
2d:80:a2:2a:a6:bf:8d:78:fe:9d:ae:8c:87:19:83:af:b5:fe:
3b:99:69:31:a2:47:82:32:49:53:0b:39:26:7b:bc:ac:ba:20:
4b:02:56:69:f4:94:73:95:b4:b6:42:a5:2b:b7:9e:4d:82:78:
1f:4a:24:16:e8:8b:c6:a5:7d:3f:76:7d:ed:54:a6:96:e7:a9:
a5:39:a9:10:14:22:1d:51:e0:f3:07:18:d0:b4:cf:2e:34:d5:
28:f5:b2:8e:87:b2:b7:fe:ce:f4:32:03:4d:26:02:28:ec:00:
e5:73:07:f3:cc:26:b8:80:ca:38:2c:cd:1f:33:37:ea:80:88:
72:e9:df:f0:93:1f:30:cf:ff:8f:18:17:e3:de:45:84:da:f3:
e4:16:a4:a6:b5:57:61:de:ea:85:13:68:6a:8a:7d:26:f4:1b:
0b:bd:d3:a5:de:c3:85:0d:60:6d:20:c8:cf:eb:e4:04:49:03:
26:fa:85:6e:d1:32:2e:1d:5c:d9:61:81:8c:17:d2:93:d8:59:
08:88:ca:ca:5a:27:31:3c:93:d7:f9:e7:84:fd:f5:ed:d0:3b:
2b:d7:08:90:41:14:4b:ab:f3:42:df:4f:7a:36:34:e6:5b:f4:
f1:ec:42:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:32 2026 by rpki-client