Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.mft
File: SP34H7869DBnKkv2Qnc7lZxFCKY.mft (raw, json)
Hash identifier: dZpb61gUULUhwQicoPeYM1FkwK49KcYYumbv1UVDX+w=
Subject key identifier: 04:94:FE:A1:14:07:8A:46:6B:E0:DD:37:C7:94:55:A9:C3:25:36:3E
Authority key identifier: 48:FD:F8:1F:BF:3A:F4:30:67:2A:4B:F6:42:77:3B:95:9C:45:08:A6
Certificate issuer: /CN=48fdf81fbf3af430672a4bf642773b959c4508a6
Certificate serial: 019D3752A633106592A95CA09BE7138D8330
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SP34H7869DBnKkv2Qnc7lZxFCKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.mft
Manifest number: 1441
Signing time: Sun 29 Mar 2026 02:00:56 +0000
Manifest this update: Sun 29 Mar 2026 02:00:56 +0000
Manifest next update: Mon 30 Mar 2026 02:00:56 +0000
Files and hashes: 1: SP34H7869DBnKkv2Qnc7lZxFCKY.crl (hash: DXuDLl6q8KzZNCAMtmyb5hR3QLZIQ6YuDq7cqwQUpUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SP34H7869DBnKkv2Qnc7lZxFCKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:a6:33:10:65:92:a9:5c:a0:9b:e7:13:8d:83:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48fdf81fbf3af430672a4bf642773b959c4508a6
Validity
Not Before: Mar 29 02:00:56 2026 GMT
Not After : Mar 30 02:00:56 2026 GMT
Subject: CN=0494fea114078a466be0dd37c79455a9c325363e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:47:24:2b:c7:96:19:50:c4:a5:8e:44:df:c0:
b0:7c:ff:53:50:98:3e:f8:7f:e1:f4:a4:17:a9:6a:
50:f8:64:1a:e2:71:c2:87:27:26:ab:60:29:5e:ce:
eb:ba:a7:dc:26:11:1b:ad:c1:15:1a:b3:0a:e5:82:
16:ff:07:0b:44:64:a0:d5:8a:4d:19:55:0a:c2:ca:
08:4b:83:49:16:f8:12:0e:40:09:d8:46:a4:ff:d7:
71:2f:83:b1:b7:e9:46:4f:8a:9b:ed:ac:26:1e:92:
02:8c:9b:7f:09:4a:e4:5c:bd:3d:ab:86:17:6e:6a:
8a:6e:24:b7:ba:59:7c:ef:1a:52:3f:8c:dc:39:ea:
14:8f:e9:ab:22:24:d9:12:80:5f:29:8a:32:da:c5:
43:bd:9b:31:5a:83:fc:d1:50:f4:51:b6:f2:c5:9a:
93:76:b8:ef:04:12:29:97:63:9e:55:1c:7d:ef:05:
86:da:f4:f9:14:4e:1a:33:0b:a9:65:da:20:88:64:
de:d9:47:a3:b2:bf:18:de:84:87:6b:62:06:9b:bd:
d9:69:1b:17:ae:bb:a8:b6:8a:e9:e8:d3:22:49:63:
c5:c0:e0:cf:aa:3b:41:03:0d:e5:ed:e9:e0:46:2e:
fc:1f:98:f0:89:bb:0d:98:ba:05:3f:3e:7d:c2:92:
a8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:94:FE:A1:14:07:8A:46:6B:E0:DD:37:C7:94:55:A9:C3:25:36:3E
X509v3 Authority Key Identifier:
keyid:48:FD:F8:1F:BF:3A:F4:30:67:2A:4B:F6:42:77:3B:95:9C:45:08:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SP34H7869DBnKkv2Qnc7lZxFCKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:93:a9:23:bd:fb:d1:66:f0:bd:ca:d3:b6:d6:39:f5:63:63:
25:fa:86:1d:af:8a:c1:e7:07:3f:fe:43:38:91:ce:55:55:2c:
32:83:1a:07:ba:17:81:e8:30:55:1e:bd:d7:0c:a1:a5:dc:df:
d5:66:7d:df:54:68:62:d6:18:9b:a8:72:f7:72:40:31:d7:35:
5f:5b:ee:b7:2c:30:a2:03:21:ad:f7:55:d1:0f:e2:97:fd:1e:
00:fb:6b:a6:77:b4:1a:56:1e:9f:82:f2:d5:ca:2e:44:20:42:
e6:c5:63:e9:99:97:c9:39:44:11:a4:af:6d:63:13:d7:b3:8f:
dc:2f:c4:cf:0b:da:9b:2c:e6:9c:1f:06:87:1b:3d:dd:9d:4d:
67:c0:32:e5:8b:c1:6b:93:87:68:b0:94:97:4c:8b:c9:8b:43:
9b:f4:ee:26:73:12:8f:2a:6c:a2:a0:32:1a:f9:1d:46:79:d0:
9e:73:31:56:fa:c1:e4:39:5b:2f:83:19:17:83:cd:e6:3b:b6:
bc:b1:cb:c4:a9:a0:5f:7b:e3:f4:9f:b9:12:8b:52:7b:b9:b8:
4f:dc:b8:ae:c5:4e:f9:36:03:17:b5:fa:20:3c:c3:73:8c:7b:
a2:cb:37:63:74:97:21:06:1e:ad:f3:8c:e1:db:0d:27:77:67:
47:0c:5f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:14 2026 by rpki-client