Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft
File: 15-SXhc4vDUrxrXPX_lRs9gTrjk.mft (raw, json)
Hash identifier: qmpdUIG2cF/+E86DPR+rdStGlFPj2op60OwxuyrE6K8=
Subject key identifier: 78:86:D5:C0:76:23:5F:8D:77:6D:7F:BA:C6:45:B5:E1:AD:9C:16:58
Authority key identifier: D7:9F:92:5E:17:38:BC:35:2B:C6:B5:CF:5F:F9:51:B3:D8:13:AE:39
Certificate issuer: /CN=d79f925e1738bc352bc6b5cf5ff951b3d813ae39
Certificate serial: 019D39AE55F4719A315FD0498F9997433AC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft
Manifest number: 0912
Signing time: Sun 29 Mar 2026 13:00:19 +0000
Manifest this update: Sun 29 Mar 2026 13:00:19 +0000
Manifest next update: Mon 30 Mar 2026 13:00:19 +0000
Files and hashes: 1: 15-SXhc4vDUrxrXPX_lRs9gTrjk.crl (hash: XfOySQPUD15uf4UtEcDG4TSxQIP0bgWLZM3UApMGpGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:55:f4:71:9a:31:5f:d0:49:8f:99:97:43:3a:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79f925e1738bc352bc6b5cf5ff951b3d813ae39
Validity
Not Before: Mar 29 13:00:19 2026 GMT
Not After : Mar 30 13:00:19 2026 GMT
Subject: CN=7886d5c076235f8d776d7fbac645b5e1ad9c1658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:57:f8:5f:5f:36:b6:06:7d:0b:9a:d8:be:7d:
a7:a5:a2:a7:ff:3a:5d:83:bd:24:2d:a5:fe:ea:25:
a1:80:21:9f:22:90:9a:4f:06:61:8b:03:fa:1d:1c:
8a:6a:48:09:7b:6a:35:06:e9:ce:c8:72:93:2d:90:
6e:20:99:9d:be:f6:2e:10:2a:b4:bd:7c:37:be:8e:
d8:0c:1c:77:dc:16:ee:c3:dc:25:c7:18:03:03:00:
0c:d5:bc:8b:5e:1b:9f:b6:17:b1:94:d3:3f:0d:1d:
82:6e:1f:18:e6:c1:30:17:65:00:f1:db:fe:9f:fd:
98:47:b0:e0:f7:a3:c3:83:d4:25:ff:5e:04:e2:e2:
85:35:43:e2:ca:8b:c3:82:14:2d:3d:bb:00:a9:22:
99:6f:60:ad:af:50:ab:36:51:4e:74:17:cd:09:c4:
30:c4:24:26:81:fe:bd:c8:dd:47:d9:07:34:6e:d3:
60:72:17:13:aa:4d:c4:45:82:31:e8:02:73:f5:d5:
67:51:e3:4e:3c:12:b2:6b:ef:bb:c9:44:44:8a:29:
e2:f4:13:d6:b8:46:81:1c:d4:44:5c:f6:82:08:eb:
26:e0:ba:28:39:6d:27:86:fb:64:d5:84:9e:61:64:
18:ca:35:99:ac:3e:90:9a:8f:22:e4:e7:e5:da:44:
42:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:86:D5:C0:76:23:5F:8D:77:6D:7F:BA:C6:45:B5:E1:AD:9C:16:58
X509v3 Authority Key Identifier:
keyid:D7:9F:92:5E:17:38:BC:35:2B:C6:B5:CF:5F:F9:51:B3:D8:13:AE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:52:65:8a:cc:8d:f4:a2:6a:09:65:d6:a5:13:06:c6:f0:dd:
6d:28:c3:a2:51:6a:97:e7:a0:aa:1a:20:73:f7:e0:3b:27:00:
ad:05:20:4a:2f:36:9b:1f:49:f5:f3:46:2e:0d:a9:26:5d:1c:
8f:8a:f7:32:ac:dd:1a:70:90:7b:6b:04:fb:16:25:a7:6e:c4:
13:5e:12:a2:8a:eb:bf:7c:8d:a4:4a:54:60:bb:3c:3b:15:24:
61:46:f5:13:86:15:66:ad:95:d1:da:27:f5:8a:98:0c:68:18:
b3:03:95:5a:80:bf:8a:11:fd:d9:f1:c5:f4:c8:4f:3b:e4:bd:
8f:56:18:34:56:92:f0:9e:50:c4:cd:0d:d1:f4:bc:fd:b6:60:
5f:57:80:64:8a:49:a5:13:86:d1:e4:ac:21:51:e6:37:94:a7:
75:3d:a8:16:6b:4e:d6:30:30:13:3c:17:a5:13:90:1d:b4:e9:
1a:ee:24:5f:d6:73:ac:d7:0f:d6:a4:91:ed:9c:d9:b1:21:22:
19:85:9b:c1:cb:35:59:37:41:51:49:20:ce:d4:7f:24:e9:ef:
f1:ef:ee:fd:d3:31:92:dd:3c:13:57:8e:b7:6f:11:3d:da:67:
53:9c:55:69:ef:fd:84:3a:8d:31:be:ca:54:6d:e8:d5:ec:51:
a2:ba:71:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:03:11 2026 by rpki-client