Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/919b01-7a20-4c00-86af-e919c37e4ebc/1/savnP_2tb4YrC92JTUQyfCyUp9U.mft
File: savnP_2tb4YrC92JTUQyfCyUp9U.mft (raw, json)
Hash identifier: 6nDk+FO+GKNR39gnvcr2A07yjcqcEp84AGATWQ4MMCM=
Subject key identifier: 02:1A:52:C6:DE:22:07:89:BF:21:7B:46:9E:82:69:81:AB:E5:DF:40
Authority key identifier: B1:AB:E7:3F:FD:AD:6F:86:2B:0B:DD:89:4D:44:32:7C:2C:94:A7:D5
Certificate issuer: /CN=b1abe73ffdad6f862b0bdd894d44327c2c94a7d5
Certificate serial: 019D37C0641AFCE22E122FBC10986352AE98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/savnP_2tb4YrC92JTUQyfCyUp9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/919b01-7a20-4c00-86af-e919c37e4ebc/1/savnP_2tb4YrC92JTUQyfCyUp9U.mft
Manifest number: 0665
Signing time: Sun 29 Mar 2026 04:00:48 +0000
Manifest this update: Sun 29 Mar 2026 04:00:48 +0000
Manifest next update: Mon 30 Mar 2026 04:00:48 +0000
Files and hashes: 1: savnP_2tb4YrC92JTUQyfCyUp9U.crl (hash: H5pVsbLJFLmN9eq/6P+wiGWxCNd187dg02kpxYAFsTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/919b01-7a20-4c00-86af-e919c37e4ebc/1/savnP_2tb4YrC92JTUQyfCyUp9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/919b01-7a20-4c00-86af-e919c37e4ebc/1/savnP_2tb4YrC92JTUQyfCyUp9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/savnP_2tb4YrC92JTUQyfCyUp9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:64:1a:fc:e2:2e:12:2f:bc:10:98:63:52:ae:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1abe73ffdad6f862b0bdd894d44327c2c94a7d5
Validity
Not Before: Mar 29 04:00:48 2026 GMT
Not After : Mar 30 04:00:48 2026 GMT
Subject: CN=021a52c6de220789bf217b469e826981abe5df40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ae:3e:36:42:f9:86:67:95:c2:13:30:1f:ad:
e0:67:01:c7:c6:9b:27:3c:a8:46:fe:b3:c7:50:b7:
13:de:d7:08:57:dd:57:31:fb:28:84:12:33:c6:a4:
f8:98:7c:40:a0:96:47:b1:a9:c7:82:98:c3:b9:86:
55:db:8d:63:39:6b:2f:f5:c4:0c:80:96:9c:8c:f3:
0f:3c:a4:09:02:43:6d:e8:79:d0:cc:70:bc:4a:55:
33:00:b3:82:fe:1c:fc:f2:93:d6:91:a6:22:46:2e:
e8:dc:ba:1c:97:fa:b9:6f:be:b5:a1:a1:23:27:57:
4b:a4:9a:96:f4:ff:13:d5:d8:50:1f:f9:12:f3:70:
3b:3b:ed:97:e0:e4:bc:48:d0:09:85:ed:70:3f:b6:
b8:3c:47:99:69:1e:97:aa:d9:57:49:a9:de:2f:69:
3a:d4:e4:18:26:d5:8b:1e:fb:b1:27:0e:ca:ac:df:
e2:75:84:e3:25:88:6d:be:a3:51:b6:df:3a:6e:35:
fe:8c:04:da:94:97:5f:d2:f0:ca:70:b6:ec:37:31:
53:13:3d:ad:12:99:31:ec:f8:b6:17:2c:5b:8a:26:
c4:37:2c:b3:c4:c1:10:a5:b4:b3:df:86:2b:36:2b:
b5:09:73:25:14:07:50:cb:03:e7:68:e5:81:00:ff:
80:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:1A:52:C6:DE:22:07:89:BF:21:7B:46:9E:82:69:81:AB:E5:DF:40
X509v3 Authority Key Identifier:
keyid:B1:AB:E7:3F:FD:AD:6F:86:2B:0B:DD:89:4D:44:32:7C:2C:94:A7:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/savnP_2tb4YrC92JTUQyfCyUp9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/919b01-7a20-4c00-86af-e919c37e4ebc/1/savnP_2tb4YrC92JTUQyfCyUp9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/919b01-7a20-4c00-86af-e919c37e4ebc/1/savnP_2tb4YrC92JTUQyfCyUp9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:d7:fb:01:e2:b3:2a:93:ef:f3:86:c5:c6:4b:03:7e:9a:15:
14:67:c2:69:40:f9:9e:9b:24:f6:1c:e7:50:9b:16:74:a6:28:
f6:10:b4:bd:db:dd:0e:e3:62:11:1c:73:a3:56:3e:f1:5e:1e:
59:f9:6c:35:47:bb:4e:65:e1:d2:e2:f9:3e:75:13:f9:52:29:
ca:bc:ab:e7:42:9c:3a:49:72:1c:7e:f3:6a:51:b8:d7:c5:df:
af:4a:de:b8:6d:66:cb:34:d4:08:6b:f8:8a:fc:2b:d5:8b:f2:
16:32:e3:7d:b9:e8:ba:48:25:40:3d:c3:57:d0:24:e6:60:bd:
4f:c1:79:86:25:01:2f:e1:5d:a1:37:48:a8:ba:d3:87:7f:40:
ef:0f:ff:9e:56:07:a0:78:50:45:82:2d:e3:9c:71:60:d1:22:
b4:0d:ca:0a:e5:85:f6:d3:bb:5e:be:ee:4f:ba:e0:b6:d8:12:
2d:7b:0e:30:54:4c:6d:72:0b:a3:0b:05:97:e6:e3:d5:69:39:
2f:38:45:70:77:30:ce:df:9d:ed:12:6e:ab:7c:ee:df:58:ed:
08:71:55:6e:c4:ba:90:a2:b2:05:35:8d:30:da:bb:a9:65:ee:
18:c0:8f:e0:cc:ac:ef:36:95:91:48:69:37:a0:d5:4b:68:55:
86:81:45:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:48 2026 by rpki-client