Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/97c916-81b1-4b3a-9fee-356a19f55506/1/Sh7Uv1AsDy2LyHAmwYrJhZsPHew.mft
File: Sh7Uv1AsDy2LyHAmwYrJhZsPHew.mft (raw, json)
Hash identifier: 2wExeFlmxj87rH64q+sFpCumQo9QdxQdFbxpXmSjThA=
Subject key identifier: 3A:D3:D0:4B:37:17:35:D3:C8:0C:7C:A4:AA:7A:5B:EF:B6:56:A2:72
Authority key identifier: 4A:1E:D4:BF:50:2C:0F:2D:8B:C8:70:26:C1:8A:C9:85:9B:0F:1D:EC
Certificate issuer: /CN=4a1ed4bf502c0f2d8bc87026c18ac9859b0f1dec
Certificate serial: 019D3909BFB9705D61031036B77F366B9C5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sh7Uv1AsDy2LyHAmwYrJhZsPHew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/97c916-81b1-4b3a-9fee-356a19f55506/1/Sh7Uv1AsDy2LyHAmwYrJhZsPHew.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 10:00:33 +0000
Manifest this update: Sun 29 Mar 2026 10:00:33 +0000
Manifest next update: Mon 30 Mar 2026 10:00:33 +0000
Files and hashes: 1: Sh7Uv1AsDy2LyHAmwYrJhZsPHew.crl (hash: wPsCyRFyvhXtmPk4aPO8eGX7DLnKMp3mtNYtcvnaGas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/97c916-81b1-4b3a-9fee-356a19f55506/1/Sh7Uv1AsDy2LyHAmwYrJhZsPHew.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/97c916-81b1-4b3a-9fee-356a19f55506/1/Sh7Uv1AsDy2LyHAmwYrJhZsPHew.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sh7Uv1AsDy2LyHAmwYrJhZsPHew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:bf:b9:70:5d:61:03:10:36:b7:7f:36:6b:9c:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a1ed4bf502c0f2d8bc87026c18ac9859b0f1dec
Validity
Not Before: Mar 29 10:00:33 2026 GMT
Not After : Mar 30 10:00:33 2026 GMT
Subject: CN=3ad3d04b371735d3c80c7ca4aa7a5befb656a272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:62:0d:d3:cf:c2:e1:79:e5:66:28:61:38:07:
7d:6b:c0:ef:2e:82:bc:ec:03:92:6e:7f:0a:1a:d2:
c3:d6:ac:99:13:54:e9:3f:37:b7:45:99:64:e5:79:
42:3e:7d:74:d4:87:88:09:fb:51:d8:b7:91:2c:ba:
ed:dc:3e:89:4e:c6:5e:da:ac:0c:ee:34:d6:b9:25:
de:65:f4:eb:08:9b:59:48:51:00:f2:36:cf:5c:a0:
d3:a8:58:9e:f5:48:1f:ac:a8:24:80:e3:54:5a:e1:
1a:c0:ac:4b:71:c0:2b:33:b5:a3:40:bc:ad:32:4b:
76:6e:08:19:23:51:e5:eb:ce:2a:de:b8:c4:59:85:
67:43:6b:bc:81:48:93:bd:36:f1:14:3e:f1:1d:a0:
3e:ea:5c:66:b7:9e:27:56:5e:83:d1:4c:88:1a:fb:
73:19:99:ab:17:79:c7:be:b1:8b:fc:37:c2:e3:c8:
00:5d:77:5c:aa:c0:be:c3:40:73:ba:e6:c7:78:6c:
a1:5e:47:27:00:11:2a:56:a5:ae:ed:6f:ee:c9:d1:
d8:bc:46:92:9c:bd:91:dc:ec:5f:81:82:49:a3:36:
e0:d9:e7:80:d3:d8:45:cd:7d:d9:6f:49:0a:6c:56:
c8:80:38:84:bc:be:68:71:cf:91:14:01:0e:f8:1e:
cf:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:D3:D0:4B:37:17:35:D3:C8:0C:7C:A4:AA:7A:5B:EF:B6:56:A2:72
X509v3 Authority Key Identifier:
keyid:4A:1E:D4:BF:50:2C:0F:2D:8B:C8:70:26:C1:8A:C9:85:9B:0F:1D:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sh7Uv1AsDy2LyHAmwYrJhZsPHew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/97c916-81b1-4b3a-9fee-356a19f55506/1/Sh7Uv1AsDy2LyHAmwYrJhZsPHew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/97c916-81b1-4b3a-9fee-356a19f55506/1/Sh7Uv1AsDy2LyHAmwYrJhZsPHew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:5d:29:be:14:83:8b:d4:69:11:12:3f:71:1e:58:86:7c:0b:
90:67:55:6f:4a:87:cf:ac:fa:08:45:f7:06:cd:e1:bc:3c:02:
47:d3:36:be:19:4a:74:4b:c5:11:8e:93:8c:ea:23:7a:ce:8f:
52:a8:05:fc:39:e4:e2:e0:24:cd:63:02:50:eb:7c:16:ce:67:
86:b2:1c:a3:4e:a3:4a:58:6b:e7:b2:3b:f9:bd:ba:30:39:d0:
0b:91:7d:00:65:37:1f:5b:cd:4f:51:26:04:fb:bf:3e:32:e3:
cb:ed:59:d8:48:72:37:04:6c:0b:c7:ec:0d:72:73:b4:74:06:
49:2a:23:33:0a:c7:88:ca:2e:0e:41:2c:db:d0:8f:80:9e:02:
ed:ce:0e:52:dc:52:c4:f4:69:b0:10:9d:87:bd:d2:69:f6:69:
a8:27:eb:da:48:7c:17:ef:eb:8d:41:64:35:98:66:b9:55:40:
4e:af:0e:d8:4d:df:ff:1f:b2:51:2a:14:b6:6c:de:2c:24:4f:
58:07:69:4f:dd:88:cb:38:4b:f7:14:46:9c:3a:1c:16:d4:b8:
4e:c8:fe:ae:2e:ea:55:a9:7a:62:22:2d:aa:4e:f9:fb:21:8b:
48:41:15:cf:c2:94:eb:23:a4:03:3b:eb:88:43:2b:de:ed:11:
81:80:56:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:28:27 2026 by rpki-client