Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/edaa32-c5d9-4013-84bb-9b2adc74b52d/1/SdWTfY5gK0jLL_UXFtmV0jofPho.mft
File: SdWTfY5gK0jLL_UXFtmV0jofPho.mft (raw, json)
Hash identifier: CrMpbTRXP6TBxjRS695uDs09I1JiT0F0TrwXO0yVKJk=
Subject key identifier: 66:00:98:40:94:5B:5F:9B:EB:2A:62:73:96:CF:85:E1:4F:2D:81:84
Authority key identifier: 49:D5:93:7D:8E:60:2B:48:CB:2F:F5:17:16:D9:95:D2:3A:1F:3E:1A
Certificate issuer: /CN=49d5937d8e602b48cb2ff51716d995d23a1f3e1a
Certificate serial: 019CE55A88607293914E907B67D159F33A03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SdWTfY5gK0jLL_UXFtmV0jofPho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/edaa32-c5d9-4013-84bb-9b2adc74b52d/1/SdWTfY5gK0jLL_UXFtmV0jofPho.mft
Manifest number: 1127
Signing time: Fri 13 Mar 2026 04:00:41 +0000
Manifest this update: Fri 13 Mar 2026 04:00:41 +0000
Manifest next update: Sat 14 Mar 2026 04:00:41 +0000
Files and hashes: 1: SdWTfY5gK0jLL_UXFtmV0jofPho.crl (hash: MgU8RnyL0/kvLF0WcHbWNJwHKPPAN9CYWt76jM7yZtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/edaa32-c5d9-4013-84bb-9b2adc74b52d/1/SdWTfY5gK0jLL_UXFtmV0jofPho.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/edaa32-c5d9-4013-84bb-9b2adc74b52d/1/SdWTfY5gK0jLL_UXFtmV0jofPho.mft
rsync://rpki.ripe.net/repository/DEFAULT/SdWTfY5gK0jLL_UXFtmV0jofPho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:5a:88:60:72:93:91:4e:90:7b:67:d1:59:f3:3a:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49d5937d8e602b48cb2ff51716d995d23a1f3e1a
Validity
Not Before: Mar 13 04:00:41 2026 GMT
Not After : Mar 14 04:00:41 2026 GMT
Subject: CN=66009840945b5f9beb2a627396cf85e14f2d8184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f9:20:37:55:a1:32:b3:d9:56:6e:c3:91:54:
2f:ea:e2:c2:a5:5d:ca:66:f7:7d:b1:52:13:f2:20:
4b:d8:04:f9:45:37:1f:62:b8:10:a2:a0:63:5a:a5:
53:1b:fa:87:7e:ac:2c:59:3e:10:c1:82:71:fc:d0:
67:b2:e0:c5:21:96:e3:48:b0:35:e7:9c:74:07:9b:
d8:de:48:f9:31:9b:34:b1:f9:bf:10:42:5b:d6:cd:
f5:63:57:cb:6e:bc:96:aa:a0:54:ed:bc:76:de:ad:
71:a4:d4:34:b1:15:81:b4:78:32:5b:1a:48:1b:e2:
bf:2a:c1:51:1e:fa:39:9c:bd:dc:05:9d:da:7d:0f:
3a:36:8e:44:1a:ac:0e:3e:b8:91:af:06:8f:0c:4f:
0f:5a:b2:f8:05:a9:fc:e7:23:e5:a5:8a:c5:0b:b5:
4c:84:2f:3c:88:82:8b:3d:bc:46:63:0b:b4:d1:36:
83:3c:34:af:a2:3d:16:13:09:d6:e0:94:6c:60:91:
f0:a9:35:94:8c:5e:90:4a:48:33:4a:3c:6e:51:98:
d7:e0:41:6d:b4:36:80:b2:0c:4c:a9:ae:2e:e5:8a:
ce:90:dc:66:71:52:4b:d3:26:40:ea:35:b8:87:86:
64:72:2c:d3:cb:75:fb:58:36:5f:21:a1:32:cc:ed:
6c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:00:98:40:94:5B:5F:9B:EB:2A:62:73:96:CF:85:E1:4F:2D:81:84
X509v3 Authority Key Identifier:
keyid:49:D5:93:7D:8E:60:2B:48:CB:2F:F5:17:16:D9:95:D2:3A:1F:3E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SdWTfY5gK0jLL_UXFtmV0jofPho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/edaa32-c5d9-4013-84bb-9b2adc74b52d/1/SdWTfY5gK0jLL_UXFtmV0jofPho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/edaa32-c5d9-4013-84bb-9b2adc74b52d/1/SdWTfY5gK0jLL_UXFtmV0jofPho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:0a:1a:c3:19:dd:1c:8d:d4:0b:c7:a2:9e:09:6a:13:6e:f8:
2e:49:e7:ed:cc:d7:7c:03:40:a5:6d:fb:0e:40:64:65:3f:63:
6c:0a:f9:f2:05:13:a0:26:e4:54:24:94:b6:2b:e9:e7:7c:53:
eb:a9:32:00:6f:4f:c6:82:08:36:b4:d4:65:83:cc:e3:4c:08:
ee:a8:ce:3e:d7:00:b1:c7:2c:62:61:05:37:50:05:9f:57:47:
b3:3e:73:bc:89:f2:d0:60:57:39:c5:6a:89:38:8c:0b:c0:13:
81:4d:d9:0e:21:09:1c:c1:31:b9:2d:42:ec:85:cb:98:ce:59:
c4:06:63:62:7e:1f:d7:4c:67:0a:d0:52:5b:c8:e7:be:a9:29:
39:b8:e6:ac:2a:46:8a:06:7d:ea:5c:0b:17:d8:e7:af:fb:13:
f0:51:ce:52:25:90:4f:8f:cf:f5:7c:ca:4b:06:a5:72:09:4e:
8f:53:33:98:f6:5c:2d:19:ea:19:2a:dd:08:db:a9:46:ef:61:
14:ea:03:20:91:1b:7d:09:c7:dd:d0:07:39:36:5f:f3:35:d7:
09:37:87:ad:58:15:b4:c0:31:61:49:67:a5:4d:16:73:31:bb:
de:e1:58:f9:4f:f1:8c:9c:1e:59:a2:f1:3d:b9:f1:45:1d:ea:
37:e6:30:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:43:52 2026 by rpki-client