Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9b19be-4b6c-4dd8-9b68-48f677fe255d/1/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.mft
File: SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.mft (raw, json)
Hash identifier: beINuK/oCwyw9FtHpXepl3TZ6h89nZQSZgsH/vtPzD8=
Subject key identifier: B2:F9:67:ED:F1:0F:01:58:73:61:F3:0C:76:70:0C:AB:C3:0F:F3:FC
Authority key identifier: 49:29:99:FD:50:A6:9F:D0:41:20:65:49:0F:5A:CC:75:A1:59:DE:B7
Certificate issuer: /CN=492999fd50a69fd0412065490f5acc75a159deb7
Certificate serial: 019D39AEE76AC0348AAA58A7C827B8332EA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9b19be-4b6c-4dd8-9b68-48f677fe255d/1/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.mft
Manifest number: 17EA
Signing time: Sun 29 Mar 2026 13:00:56 +0000
Manifest this update: Sun 29 Mar 2026 13:00:56 +0000
Manifest next update: Mon 30 Mar 2026 13:00:56 +0000
Files and hashes: 1: SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.crl (hash: uJrYSN6R442cTAeAHmJRK0qprv29do3jhB83WgcAsok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9b19be-4b6c-4dd8-9b68-48f677fe255d/1/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9b19be-4b6c-4dd8-9b68-48f677fe255d/1/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:e7:6a:c0:34:8a:aa:58:a7:c8:27:b8:33:2e:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=492999fd50a69fd0412065490f5acc75a159deb7
Validity
Not Before: Mar 29 13:00:56 2026 GMT
Not After : Mar 30 13:00:56 2026 GMT
Subject: CN=b2f967edf10f01587361f30c76700cabc30ff3fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a1:1a:2e:4b:9a:b8:25:36:99:8f:e0:57:7a:
a4:b8:ea:12:d9:70:b3:6e:22:78:f7:17:e1:9e:24:
ef:2d:6b:7d:90:26:dc:34:24:6e:36:38:75:fa:8b:
b7:b1:32:85:ed:71:42:77:75:50:14:5c:95:cf:e7:
3f:e4:38:cc:77:fd:d6:9c:dc:2d:bf:13:42:83:f9:
be:05:38:ca:d2:f9:1f:ba:8e:03:37:15:31:59:57:
4a:2a:bb:5a:ee:c5:0c:8f:c3:67:ba:3b:48:fc:dc:
e9:9f:ca:ff:7d:06:f6:a8:ae:01:42:b8:6a:c4:f9:
2a:92:b5:df:f8:f8:8e:41:e5:29:49:9f:7d:27:6a:
7c:0c:77:33:6b:53:8b:15:70:03:6d:9b:15:3d:d7:
6e:ee:59:11:d4:db:c9:89:46:25:f2:f4:ae:77:8a:
64:8f:eb:8f:f0:56:d9:b1:fe:ec:9e:b8:f6:25:16:
b2:6e:b2:7d:e3:6f:7d:43:b9:15:31:09:f2:2d:e1:
c3:42:9a:87:e8:90:22:e9:f4:7b:47:1b:54:43:24:
91:0e:b5:05:55:5e:97:95:e1:cc:0c:f1:95:51:b8:
17:cb:24:41:8e:b6:aa:71:a8:1f:41:34:29:cf:bc:
ea:05:9f:a5:70:e2:db:63:50:35:fb:83:b2:7f:69:
c2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:F9:67:ED:F1:0F:01:58:73:61:F3:0C:76:70:0C:AB:C3:0F:F3:FC
X509v3 Authority Key Identifier:
keyid:49:29:99:FD:50:A6:9F:D0:41:20:65:49:0F:5A:CC:75:A1:59:DE:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9b19be-4b6c-4dd8-9b68-48f677fe255d/1/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9b19be-4b6c-4dd8-9b68-48f677fe255d/1/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:14:83:4f:1e:c5:ed:6c:be:71:5c:db:77:93:c9:0e:7d:99:
ac:48:22:8f:ce:60:55:51:7b:f5:7a:8b:e1:83:d3:2d:d8:49:
7e:bb:5b:ff:10:4a:0e:01:22:49:28:a0:5a:1a:92:75:d9:0d:
27:dc:ae:ef:b7:35:47:89:0c:8f:97:0f:5c:dd:31:f4:5e:48:
c2:d1:57:4a:8b:a8:09:a1:4d:5b:b9:7a:63:2d:94:7a:c8:bc:
59:36:2e:dd:0d:b1:86:89:dc:b2:46:f4:6f:0a:4c:28:8a:c6:
1e:bf:9d:31:3c:54:2c:3a:d8:1f:4e:f7:fb:f8:d1:d4:cc:ea:
18:eb:e7:70:e4:1a:21:16:c7:5b:7d:3f:f3:93:b8:a2:3e:70:
72:d8:27:e6:ff:58:69:fb:19:ef:22:df:25:40:e7:ea:9f:ef:
6f:79:8e:3e:41:bd:8e:b3:d5:a7:dd:6c:06:e3:29:3b:29:40:
e0:ed:9b:73:f0:ae:f6:bc:98:78:9a:33:39:39:e4:d2:d8:0b:
6a:b7:b6:fc:0a:76:7c:ca:3e:71:c6:e1:d0:78:24:bc:be:d9:
a3:fc:aa:5e:91:11:af:ff:65:38:14:99:1a:21:08:e7:be:4b:
17:0d:a2:20:9a:6c:38:5f:da:7e:2f:3e:33:a1:55:a1:56:e7:
96:38:08:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:36 2026 by rpki-client