Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7544b6-e0a9-4df8-9db5-e934dbf93631/1/sVKsjTaZEe8sE_k_mZumY8GOETM.mft
File: sVKsjTaZEe8sE_k_mZumY8GOETM.mft (raw, json)
Hash identifier: r181miSDBwPUWAgn1TKKRcpohPmMVgRK1CSR0vTGBx8=
Subject key identifier: B1:46:B8:2D:BE:C4:8F:1D:A0:B0:68:E5:29:FB:54:F6:F7:5C:40:78
Authority key identifier: B1:52:AC:8D:36:99:11:EF:2C:13:F9:3F:99:9B:A6:63:C1:8E:11:33
Certificate issuer: /CN=b152ac8d369911ef2c13f93f999ba663c18e1133
Certificate serial: 019D3A8AD4DD2D05F2BFEBBA89A0BA83799B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVKsjTaZEe8sE_k_mZumY8GOETM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7544b6-e0a9-4df8-9db5-e934dbf93631/1/sVKsjTaZEe8sE_k_mZumY8GOETM.mft
Manifest number: 1398
Signing time: Sun 29 Mar 2026 17:01:10 +0000
Manifest this update: Sun 29 Mar 2026 17:01:10 +0000
Manifest next update: Mon 30 Mar 2026 17:01:10 +0000
Files and hashes: 1: LNuvW2EbklD_rPCUVu8iuKxEXmQ.roa (hash: wPUxThCCBF05g0fTbeBHjNHbYdl0RItVLzPHmSaC9kA=)
2: sVKsjTaZEe8sE_k_mZumY8GOETM.crl (hash: srkrynTeIlXpBjn5i/CEJngHBreWPOBQMrrPOYQzhsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7544b6-e0a9-4df8-9db5-e934dbf93631/1/sVKsjTaZEe8sE_k_mZumY8GOETM.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/7544b6-e0a9-4df8-9db5-e934dbf93631/1/sVKsjTaZEe8sE_k_mZumY8GOETM.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVKsjTaZEe8sE_k_mZumY8GOETM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:8a:d4:dd:2d:05:f2:bf:eb:ba:89:a0:ba:83:79:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b152ac8d369911ef2c13f93f999ba663c18e1133
Validity
Not Before: Mar 29 17:01:10 2026 GMT
Not After : Mar 30 17:01:10 2026 GMT
Subject: CN=b146b82dbec48f1da0b068e529fb54f6f75c4078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:07:22:29:ae:24:3c:3b:c3:67:ce:46:8e:88:
e9:47:0b:a8:d9:05:e1:e1:a5:6d:cb:ce:e8:bf:02:
26:c2:9f:c1:34:35:e5:d7:f6:7c:7c:ad:bf:2f:ac:
bf:39:a9:23:b1:28:a5:4b:2d:3b:be:c4:a6:aa:e2:
7d:d8:e1:64:71:83:4c:51:9d:5a:88:ee:9a:f0:b4:
19:69:5a:a1:05:ea:1c:50:cd:4e:5e:4c:1c:b7:ed:
19:bf:b5:0b:fe:dd:a4:5d:e1:9b:97:a1:9f:f8:68:
cf:82:71:36:01:f6:f6:ac:12:f9:ad:be:48:da:2e:
07:60:e6:65:a9:41:53:2a:a0:19:82:50:bd:e8:e7:
c3:98:a3:1e:71:96:47:34:b2:90:9d:f1:2c:de:19:
4b:23:d5:fc:c4:72:bb:40:7c:0f:c0:20:79:56:f2:
e1:f7:a0:a0:09:16:63:65:6f:de:5c:b6:e6:d0:1a:
c0:0c:63:38:97:98:e5:01:7c:28:37:f3:27:85:9f:
26:93:e3:53:5a:42:28:44:f1:f0:d2:c9:dc:78:97:
4a:df:df:a5:1b:08:4a:00:e7:63:ca:f5:ed:da:03:
29:d1:1f:e7:b7:e6:d8:cf:3a:8c:24:f6:c4:2d:6c:
60:c6:eb:cb:56:62:d2:2f:c1:e3:40:35:36:24:fc:
ec:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:46:B8:2D:BE:C4:8F:1D:A0:B0:68:E5:29:FB:54:F6:F7:5C:40:78
X509v3 Authority Key Identifier:
keyid:B1:52:AC:8D:36:99:11:EF:2C:13:F9:3F:99:9B:A6:63:C1:8E:11:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVKsjTaZEe8sE_k_mZumY8GOETM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7544b6-e0a9-4df8-9db5-e934dbf93631/1/sVKsjTaZEe8sE_k_mZumY8GOETM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7544b6-e0a9-4df8-9db5-e934dbf93631/1/sVKsjTaZEe8sE_k_mZumY8GOETM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:6d:c2:37:0f:ba:30:c8:95:33:8d:e8:34:fb:ba:45:78:e3:
41:d2:7b:4c:3c:3a:5b:c7:bd:9d:8e:97:8e:6f:60:db:53:11:
c2:59:22:df:dc:f7:07:80:2d:24:3a:25:3f:38:3d:b3:ef:53:
60:5d:53:97:55:d4:98:8b:ab:67:d7:83:92:46:ee:39:77:e3:
70:55:37:49:26:02:ea:84:bf:d1:ce:cb:4a:ef:d3:a0:89:42:
14:24:85:23:74:62:47:64:29:9b:c7:73:3c:e3:8a:12:c2:6d:
f9:6e:c5:a2:29:92:a6:7c:60:83:c4:2e:b4:5f:2d:d5:d9:68:
ba:41:8f:4f:a6:95:64:8c:8b:20:f0:b9:66:8e:fc:56:a0:ac:
85:af:a8:1a:2f:43:df:08:48:c9:72:a8:81:4c:92:ab:a5:ec:
6b:f5:4c:df:89:a2:3c:82:c9:a0:25:4e:e2:5e:98:86:f6:9d:
eb:73:1d:93:9d:a5:bd:5c:15:b2:42:b1:69:c2:87:0f:af:f5:
04:15:54:19:eb:e2:3a:c6:46:a3:14:fe:f1:5f:d7:ab:1c:fc:
40:e9:79:c4:5b:d1:e8:5d:37:05:d6:f3:46:bd:c0:7f:dc:a7:
33:29:7e:f4:af:45:9c:6c:f5:78:48:cc:94:00:cd:62:2e:d1:
ff:0a:2e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:51:30 2026 by rpki-client