Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.mft
File: _sQT3TZn54GV5SaKooWupRa8sZk.mft (raw, json)
Hash identifier: gD7/5il7XRNf1CMybPpJuxiDt95jm8Dh4VciJNi/LY8=
Subject key identifier: 7A:1B:8B:F5:65:53:5F:4E:FF:46:2A:49:F5:EC:E3:24:AE:E6:23:8D
Authority key identifier: FE:C4:13:DD:36:67:E7:81:95:E5:26:8A:A2:85:AE:A5:16:BC:B1:99
Certificate issuer: /CN=fec413dd3667e78195e5268aa285aea516bcb199
Certificate serial: 019D37C04E936120F096DFBC69986D28C4E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sQT3TZn54GV5SaKooWupRa8sZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.mft
Manifest number: 15B8
Signing time: Sun 29 Mar 2026 04:00:43 +0000
Manifest this update: Sun 29 Mar 2026 04:00:43 +0000
Manifest next update: Mon 30 Mar 2026 04:00:43 +0000
Files and hashes: 1: _sQT3TZn54GV5SaKooWupRa8sZk.crl (hash: L17iYupZ9AYYKXZJe5yGNKVS4WgEB+X0dntsfMrGPMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_sQT3TZn54GV5SaKooWupRa8sZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:4e:93:61:20:f0:96:df:bc:69:98:6d:28:c4:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fec413dd3667e78195e5268aa285aea516bcb199
Validity
Not Before: Mar 29 04:00:43 2026 GMT
Not After : Mar 30 04:00:43 2026 GMT
Subject: CN=7a1b8bf565535f4eff462a49f5ece324aee6238d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1a:1d:75:ce:eb:0a:fa:e0:9f:be:b6:58:6e:
7e:1a:02:91:b0:5e:fd:04:53:14:ec:8f:7f:94:4a:
b5:7f:99:74:96:18:2c:19:52:b4:a7:46:50:23:bf:
e5:0d:b1:84:f6:4c:56:60:f1:fe:b0:cb:d8:04:b7:
c4:34:fe:44:81:78:e6:f5:06:37:be:b2:23:64:57:
6a:0b:7f:60:ce:05:92:ce:82:05:48:83:52:22:41:
98:cd:1d:36:74:36:50:7c:e2:64:c9:e1:0d:31:31:
d6:3e:28:a5:6e:45:e5:f3:9e:66:66:1a:3e:b3:38:
9c:20:6e:60:cb:26:77:75:6f:9d:47:88:bf:72:b7:
5d:16:81:84:af:12:25:c8:a1:b2:15:c1:99:1f:20:
4a:43:e1:a1:79:f0:f2:2a:e2:e2:e6:af:7a:1c:db:
7e:a9:38:3a:cb:d3:f9:56:2b:50:8c:f7:d2:49:7d:
31:43:38:2d:ee:55:a3:a4:17:21:02:5e:90:4e:2e:
80:0a:58:72:23:66:b0:62:28:13:67:76:32:7a:9c:
34:fe:1d:cc:3e:28:18:66:41:5f:ef:7f:c2:84:87:
f4:9d:49:14:04:d9:8a:af:10:c2:a4:e6:8d:f8:b5:
8d:63:50:ed:97:a0:02:7f:4d:3c:90:15:6d:99:09:
2f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:1B:8B:F5:65:53:5F:4E:FF:46:2A:49:F5:EC:E3:24:AE:E6:23:8D
X509v3 Authority Key Identifier:
keyid:FE:C4:13:DD:36:67:E7:81:95:E5:26:8A:A2:85:AE:A5:16:BC:B1:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sQT3TZn54GV5SaKooWupRa8sZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:50:da:38:3d:ba:4e:c0:7f:c8:0f:a5:11:66:7d:21:05:07:
fa:8a:58:83:3a:12:56:cd:a7:e5:2c:9d:0d:1e:01:d6:87:f4:
19:68:02:3c:38:ed:a0:1a:6a:c9:db:a0:89:8f:c1:08:58:6b:
5f:9c:57:26:d8:6c:39:44:b9:93:bc:8a:e0:a5:0f:14:a3:ca:
42:eb:88:02:58:74:ba:43:f8:50:9d:1b:11:9e:5b:e7:37:1d:
2e:a3:b2:4a:48:4a:8f:7e:49:46:15:88:9c:cc:09:9c:b1:fb:
b7:5e:2e:ce:66:28:64:06:95:4f:c6:a0:01:46:48:30:18:1b:
8b:15:e2:7a:42:d3:05:02:45:7b:b8:9d:38:74:42:36:2b:32:
3d:47:f2:7e:fc:95:0c:13:68:88:1a:34:61:f5:28:e6:11:45:
19:cd:70:77:2b:62:69:ce:9b:e5:34:64:06:3f:2f:20:50:95:
2e:79:a9:35:89:18:ff:bc:e5:76:17:c1:71:89:8a:87:f9:ca:
a5:fe:89:b5:4a:54:ba:c7:d1:14:26:0f:f7:ad:fb:30:2c:3b:
b1:73:4c:1e:c2:e9:72:7f:c7:94:81:64:13:72:46:26:38:ae:
6b:80:4f:0c:b2:4a:06:f7:c1:a1:ef:ec:e7:f6:10:60:0d:5a:
1b:01:81:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:53 2026 by rpki-client