Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/Sbp0yMvh4n-spcZ-idP2I8Hwml4.mft
File: Sbp0yMvh4n-spcZ-idP2I8Hwml4.mft (raw, json)
Hash identifier: ikBn19FArtq5l74eehQ68LRnOXIZHscHI0mc1TyfuTs=
Subject key identifier: A2:98:71:37:37:A3:39:E5:91:15:1E:AA:4B:B8:61:EA:98:1A:A4:07
Authority key identifier: 49:BA:74:C8:CB:E1:E2:7F:AC:A5:C6:7E:89:D3:F6:23:C1:F0:9A:5E
Certificate issuer: /CN=49ba74c8cbe1e27faca5c67e89d3f623c1f09a5e
Certificate serial: 019D37C088CCDDCFB2AEB64A778ACA5BDFF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sbp0yMvh4n-spcZ-idP2I8Hwml4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/Sbp0yMvh4n-spcZ-idP2I8Hwml4.mft
Manifest number: 1324
Signing time: Sun 29 Mar 2026 04:00:57 +0000
Manifest this update: Sun 29 Mar 2026 04:00:57 +0000
Manifest next update: Mon 30 Mar 2026 04:00:57 +0000
Files and hashes: 1: Sbp0yMvh4n-spcZ-idP2I8Hwml4.crl (hash: wpgwwz/CxF9/wqg+Tr9kruL1Hz+DuG+UA8kvBEzLNs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/Sbp0yMvh4n-spcZ-idP2I8Hwml4.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/Sbp0yMvh4n-spcZ-idP2I8Hwml4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sbp0yMvh4n-spcZ-idP2I8Hwml4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:88:cc:dd:cf:b2:ae:b6:4a:77:8a:ca:5b:df:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49ba74c8cbe1e27faca5c67e89d3f623c1f09a5e
Validity
Not Before: Mar 29 04:00:57 2026 GMT
Not After : Mar 30 04:00:57 2026 GMT
Subject: CN=a298713737a339e591151eaa4bb861ea981aa407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ac:bb:d0:5f:21:49:14:fa:a8:20:03:1a:5b:
28:c4:35:79:1e:fe:7c:75:aa:c6:43:d3:50:82:60:
c1:ca:ca:5c:de:1b:a8:cf:0e:5d:b7:8e:9b:1e:00:
b6:cc:77:d9:68:ef:72:e4:12:be:32:f7:d6:76:c4:
e4:60:43:b8:e3:84:f9:45:fc:06:8e:64:ee:41:68:
f7:6e:18:7d:fe:f3:cc:b8:0f:50:41:81:86:e1:3a:
66:69:e0:e7:e4:7a:1a:00:e7:ff:d5:93:ce:cb:f6:
88:ee:74:c4:a1:a9:a2:46:f9:73:64:5a:95:59:da:
78:6b:da:be:7d:3f:80:55:99:4b:38:1a:06:e6:d8:
0c:e9:d7:fb:c7:01:8d:c5:96:8a:e1:52:4e:88:ce:
09:3c:6c:93:b6:59:a7:86:76:24:49:22:4e:79:4f:
a2:76:9c:af:25:dc:37:4e:a9:08:d9:8d:12:f1:54:
22:02:18:2c:2d:cb:54:7e:9b:39:44:e8:76:7d:4b:
d5:0a:e8:74:1a:72:0a:dc:15:88:35:cf:74:23:d0:
e0:ec:cc:55:1e:b1:0c:62:94:0a:76:fa:83:a6:e5:
89:7e:b6:b6:e3:c1:6e:e0:b1:62:dc:a0:a4:96:9a:
a1:9f:16:0f:c3:b0:1b:48:9e:6e:2c:14:11:d2:39:
86:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:98:71:37:37:A3:39:E5:91:15:1E:AA:4B:B8:61:EA:98:1A:A4:07
X509v3 Authority Key Identifier:
keyid:49:BA:74:C8:CB:E1:E2:7F:AC:A5:C6:7E:89:D3:F6:23:C1:F0:9A:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sbp0yMvh4n-spcZ-idP2I8Hwml4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/Sbp0yMvh4n-spcZ-idP2I8Hwml4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/Sbp0yMvh4n-spcZ-idP2I8Hwml4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:34:5b:50:cb:a7:32:cf:ad:90:5a:74:e0:8b:25:3b:bc:49:
4d:74:8e:f7:2d:dd:1c:d7:60:a6:5b:2a:93:aa:11:89:6a:4a:
73:0b:60:53:98:4b:e2:eb:2c:66:e4:dd:30:ce:8f:2f:a5:02:
74:21:48:5d:1c:da:f7:69:e1:c5:b5:a8:21:bd:f7:dd:bf:57:
ca:96:16:57:1b:70:e5:49:ce:3e:02:6a:1b:f7:c9:ae:7a:f0:
6d:3e:ca:34:28:57:c1:ed:2c:fb:88:0b:e6:4b:01:68:a5:4e:
0e:9a:fd:3b:47:fb:91:43:08:6f:a5:9d:50:d2:13:6b:5e:da:
94:8d:97:ae:fd:f6:8a:68:5e:b7:86:a3:b5:06:3c:5e:77:e4:
0c:3a:08:04:0c:fe:de:a8:f3:93:0e:92:e0:98:bd:91:16:91:
a2:06:44:8d:e9:24:bd:b4:c4:66:1f:c9:bf:c4:2c:09:73:86:
8d:61:bb:08:6f:5d:fe:17:82:6a:3e:cf:de:50:f3:4a:77:c5:
53:6d:c6:bc:c2:02:3a:e0:bd:29:c6:a7:69:e9:82:38:c1:1d:
fa:26:01:a6:69:4e:e6:cb:ea:0d:a1:68:3d:4c:11:9d:46:32:
17:81:83:f6:5b:14:42:e4:6c:66:31:06:4d:2e:d5:2e:71:cf:
8c:9c:26:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:43:30 2026 by rpki-client