Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/79b797-0922-4df6-827d-3681f5b7f86b/1/SRHEgJhyKUvlgXsVnlnynlBgljY.mft
File: SRHEgJhyKUvlgXsVnlnynlBgljY.mft (raw, json)
Hash identifier: UBrdn4nyt2144gMnb8tFCgCHTpm9Mc/0cMTaT38RD9U=
Subject key identifier: 5E:84:01:28:67:EC:AC:C3:28:43:C6:ED:A9:F6:5F:A0:7A:E6:39:97
Authority key identifier: 49:11:C4:80:98:72:29:4B:E5:81:7B:15:9E:59:F2:9E:50:60:96:36
Certificate issuer: /CN=4911c4809872294be5817b159e59f29e50609636
Certificate serial: 019D38D387AD2E7C04D3C09FC31D89BD0490
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SRHEgJhyKUvlgXsVnlnynlBgljY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/79b797-0922-4df6-827d-3681f5b7f86b/1/SRHEgJhyKUvlgXsVnlnynlBgljY.mft
Manifest number: 02E0
Signing time: Sun 29 Mar 2026 09:01:19 +0000
Manifest this update: Sun 29 Mar 2026 09:01:19 +0000
Manifest next update: Mon 30 Mar 2026 09:01:19 +0000
Files and hashes: 1: SRHEgJhyKUvlgXsVnlnynlBgljY.crl (hash: 5VDI9qhmeXCGaWXNVZMV5cJUS80YCJnjIFp9sG0lzEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/79b797-0922-4df6-827d-3681f5b7f86b/1/SRHEgJhyKUvlgXsVnlnynlBgljY.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/79b797-0922-4df6-827d-3681f5b7f86b/1/SRHEgJhyKUvlgXsVnlnynlBgljY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SRHEgJhyKUvlgXsVnlnynlBgljY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:87:ad:2e:7c:04:d3:c0:9f:c3:1d:89:bd:04:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4911c4809872294be5817b159e59f29e50609636
Validity
Not Before: Mar 29 09:01:19 2026 GMT
Not After : Mar 30 09:01:19 2026 GMT
Subject: CN=5e84012867ecacc32843c6eda9f65fa07ae63997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8a:2b:09:99:fb:ab:de:e0:01:c0:5d:bc:78:
cb:e7:2e:38:6f:22:a4:1c:e9:ec:c8:07:ed:ec:ae:
2e:7b:f3:00:de:13:d0:4c:f6:56:6b:81:cd:ee:71:
b5:35:ec:ec:f5:01:9c:d3:ba:cf:b1:c5:4d:be:83:
a8:1e:8e:fb:f9:fd:93:3d:9b:c5:4b:9c:0a:78:95:
f5:a6:8b:0d:55:1f:d1:ec:03:93:8c:8e:65:62:e1:
ad:ba:2f:bb:ef:0d:ae:96:18:4f:70:ef:c3:fe:0e:
4d:c5:95:90:21:4f:31:26:07:e0:a2:0f:85:53:93:
9c:d8:ab:0a:78:91:8d:5c:84:d2:a9:ad:b3:30:8f:
00:ac:34:93:8a:34:7c:7b:ea:24:bd:aa:41:e1:1f:
73:43:41:d5:ea:23:68:32:62:85:37:34:24:ef:a8:
57:2d:40:ab:55:bd:c5:30:da:c4:9e:90:50:41:e9:
d1:08:c7:ea:47:2e:36:26:8d:b0:9a:58:1c:24:e9:
16:78:b5:53:b3:8c:fc:0c:50:69:05:6a:a2:cc:bc:
b1:72:ab:22:7d:03:44:f9:b5:51:19:b6:44:be:19:
23:95:b6:87:76:a3:1e:da:03:01:f5:3a:63:20:1b:
29:27:46:62:2b:1b:a7:62:c9:f6:be:8c:4f:14:4b:
a2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:84:01:28:67:EC:AC:C3:28:43:C6:ED:A9:F6:5F:A0:7A:E6:39:97
X509v3 Authority Key Identifier:
keyid:49:11:C4:80:98:72:29:4B:E5:81:7B:15:9E:59:F2:9E:50:60:96:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SRHEgJhyKUvlgXsVnlnynlBgljY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/79b797-0922-4df6-827d-3681f5b7f86b/1/SRHEgJhyKUvlgXsVnlnynlBgljY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/79b797-0922-4df6-827d-3681f5b7f86b/1/SRHEgJhyKUvlgXsVnlnynlBgljY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:a5:4b:0f:b6:be:bd:42:03:a5:b2:d3:15:5f:4e:f2:ca:91:
80:70:1f:c3:3f:29:ef:23:74:da:0b:71:42:67:77:0e:f4:c4:
24:cb:cb:97:d7:9f:e2:cc:95:cd:2e:54:59:01:78:2c:49:ed:
4b:83:ac:24:7b:ec:e6:57:30:91:64:dd:db:82:81:a7:56:df:
90:f0:5c:57:d7:a8:f0:52:8c:b5:04:70:4a:77:ab:f5:f9:07:
96:e9:14:76:4d:8c:49:9c:66:25:c8:07:6e:99:b9:00:f5:b2:
2f:2f:1e:d9:39:92:b2:df:cc:22:1d:cf:f4:29:1c:73:0b:b5:
35:5b:25:45:eb:e5:ce:b9:cb:d5:58:64:64:d3:21:76:fd:56:
26:7c:1a:7f:ba:a2:2a:03:92:66:92:af:22:eb:93:4a:6f:84:
cc:4a:9b:a9:e3:e7:a4:db:05:fa:39:01:bf:0e:9f:79:66:08:
ac:13:f9:38:cb:f7:7e:ba:f9:73:68:62:e1:e9:06:24:ec:6d:
82:80:30:1f:27:2e:b3:17:5a:bf:9e:18:a8:ae:da:fb:1a:3c:
a4:02:9e:c9:7e:fa:a9:8a:00:dc:0b:c8:00:c4:b4:20:a5:90:
ed:0a:d9:49:cb:b6:8e:44:95:5e:24:9b:75:98:b3:2d:da:d1:
0e:3e:90:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:50 2026 by rpki-client