Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/41ba4c-8323-40ad-8268-67ef9c308389/1/SRujNfWFuA6Nx0ZCi4A1cAae1jc.mft
File: SRujNfWFuA6Nx0ZCi4A1cAae1jc.mft (raw, json)
Hash identifier: jw8sZ92aLe/AwQLFhE+/lHlkgFuFE0BSxoSmO/RVYvI=
Subject key identifier: BE:41:CF:50:ED:DB:54:23:4C:0F:5D:A0:B8:FA:2E:1A:E9:D3:0D:4F
Authority key identifier: 49:1B:A3:35:F5:85:B8:0E:8D:C7:46:42:8B:80:35:70:06:9E:D6:37
Certificate issuer: /CN=491ba335f585b80e8dc746428b803570069ed637
Certificate serial: 019D39776F9058E7E50CE652DAE5AFA783AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SRujNfWFuA6Nx0ZCi4A1cAae1jc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/41ba4c-8323-40ad-8268-67ef9c308389/1/SRujNfWFuA6Nx0ZCi4A1cAae1jc.mft
Manifest number: 31
Signing time: Sun 29 Mar 2026 12:00:21 +0000
Manifest this update: Sun 29 Mar 2026 12:00:21 +0000
Manifest next update: Mon 30 Mar 2026 12:00:21 +0000
Files and hashes: 1: SRujNfWFuA6Nx0ZCi4A1cAae1jc.crl (hash: sOwXborrVLSGx6Bcmku7u2nHjTtmxTNX8iZw6zbfqlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/41ba4c-8323-40ad-8268-67ef9c308389/1/SRujNfWFuA6Nx0ZCi4A1cAae1jc.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/41ba4c-8323-40ad-8268-67ef9c308389/1/SRujNfWFuA6Nx0ZCi4A1cAae1jc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SRujNfWFuA6Nx0ZCi4A1cAae1jc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:6f:90:58:e7:e5:0c:e6:52:da:e5:af:a7:83:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=491ba335f585b80e8dc746428b803570069ed637
Validity
Not Before: Mar 29 12:00:21 2026 GMT
Not After : Mar 30 12:00:21 2026 GMT
Subject: CN=be41cf50eddb54234c0f5da0b8fa2e1ae9d30d4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d6:7a:01:a4:af:36:75:45:d7:bf:2b:3b:84:
08:20:14:07:45:e6:a7:dd:79:8e:86:84:d0:01:71:
20:1b:4c:4a:9b:01:4b:80:9d:e7:15:ae:2a:f1:c6:
8d:bf:12:7e:f6:94:38:16:a4:a7:6a:19:65:3c:5e:
e9:03:57:b6:5c:9f:56:db:58:7c:50:62:fa:2c:61:
5b:82:43:41:a5:4b:42:a5:9f:26:61:a3:2d:36:c5:
4a:2c:1d:4b:fe:a1:43:50:6f:68:32:ca:40:d0:7d:
8c:8a:ab:69:e8:fe:f2:38:a9:78:ac:34:ea:38:3f:
4d:8d:a5:f8:ac:b9:06:ed:6f:b1:48:ac:5d:86:2a:
a0:e9:08:21:d0:24:91:d9:07:5d:78:12:46:45:96:
ed:c1:bc:8f:33:d1:5e:ca:4f:12:40:59:7a:de:1e:
99:70:21:1f:79:cb:f0:ed:bd:be:6b:d4:a4:ed:9d:
7f:f5:95:a4:01:d8:7b:e2:17:6a:87:4f:d2:00:e4:
40:7b:18:31:da:c5:17:0d:dc:45:c5:f3:1a:95:34:
6c:21:e9:7a:0f:06:be:59:c7:96:c2:3a:62:38:c6:
61:35:78:46:bf:bb:55:ec:5e:3a:12:ac:de:24:73:
74:6b:7d:ba:6e:26:0f:1e:0d:1b:f5:37:67:5a:da:
a5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:41:CF:50:ED:DB:54:23:4C:0F:5D:A0:B8:FA:2E:1A:E9:D3:0D:4F
X509v3 Authority Key Identifier:
keyid:49:1B:A3:35:F5:85:B8:0E:8D:C7:46:42:8B:80:35:70:06:9E:D6:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SRujNfWFuA6Nx0ZCi4A1cAae1jc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/41ba4c-8323-40ad-8268-67ef9c308389/1/SRujNfWFuA6Nx0ZCi4A1cAae1jc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/41ba4c-8323-40ad-8268-67ef9c308389/1/SRujNfWFuA6Nx0ZCi4A1cAae1jc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:8f:80:a7:87:ed:16:fe:78:c9:32:5c:91:0e:48:1f:bd:04:
8e:4e:ca:ed:42:1f:f9:c9:12:19:9f:73:99:a6:eb:f6:57:01:
28:b3:f7:c2:07:f8:d9:02:d3:65:d6:24:17:65:6c:98:2e:47:
2f:12:00:59:b0:15:e1:bb:7d:d4:05:2d:04:12:fd:f6:2e:65:
71:3f:45:f9:67:51:3a:f5:03:df:22:70:3e:5a:3f:1a:6a:38:
39:76:78:10:0d:a5:67:44:c5:6e:a3:77:00:1d:d0:78:33:8e:
56:48:b9:97:a8:6f:7a:01:09:09:0d:df:9c:0f:16:b7:1c:36:
20:f5:c2:c0:5d:db:58:47:cf:38:b0:b5:23:85:fe:da:77:35:
c9:fb:47:0f:a9:2d:49:32:55:29:51:31:dc:c0:ad:6f:f6:c3:
ac:cc:ca:3f:34:14:32:42:49:66:d3:f4:db:9f:63:f0:6b:d7:
f7:22:37:67:d7:a1:2b:c7:cf:0a:f5:c9:80:26:9a:0d:6f:3e:
db:2a:c3:94:7c:15:cc:ed:89:8a:99:ef:4d:09:06:b6:52:67:
52:b5:8d:8e:0c:74:2e:30:fc:73:33:3f:83:0a:fd:b2:7f:6b:
53:19:a1:e1:4a:74:fd:3f:cd:5e:c2:f4:75:db:57:09:c2:69:
24:21:0b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:14:25 2026 by rpki-client