Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/dadf34-1f3f-4cea-8001-e3d5d7ef4232/1/sUgIa40dx_EOND_RZXGSOadVvTQ.mft
File: sUgIa40dx_EOND_RZXGSOadVvTQ.mft (raw, json)
Hash identifier: FMb62qe3SuHpo2EjcFkfDTONyCllE6WITcZ7PBgnuFk=
Subject key identifier: 7B:73:DB:D1:24:E3:46:45:1A:94:F9:E0:CF:DE:85:1D:29:15:77:50
Authority key identifier: B1:48:08:6B:8D:1D:C7:F1:0E:34:3F:D1:65:71:92:39:A7:55:BD:34
Certificate issuer: /CN=b148086b8d1dc7f10e343fd165719239a755bd34
Certificate serial: 019D38D39EA164EB87AD2C80211E3A684C6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUgIa40dx_EOND_RZXGSOadVvTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/dadf34-1f3f-4cea-8001-e3d5d7ef4232/1/sUgIa40dx_EOND_RZXGSOadVvTQ.mft
Manifest number: 120B
Signing time: Sun 29 Mar 2026 09:01:25 +0000
Manifest this update: Sun 29 Mar 2026 09:01:25 +0000
Manifest next update: Mon 30 Mar 2026 09:01:25 +0000
Files and hashes: 1: sUgIa40dx_EOND_RZXGSOadVvTQ.crl (hash: 5LzL93nFtq8dPOutvSCaLY8lJ5W9IiZ6sHEmIsf7L4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/dadf34-1f3f-4cea-8001-e3d5d7ef4232/1/sUgIa40dx_EOND_RZXGSOadVvTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/dadf34-1f3f-4cea-8001-e3d5d7ef4232/1/sUgIa40dx_EOND_RZXGSOadVvTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sUgIa40dx_EOND_RZXGSOadVvTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:9e:a1:64:eb:87:ad:2c:80:21:1e:3a:68:4c:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b148086b8d1dc7f10e343fd165719239a755bd34
Validity
Not Before: Mar 29 09:01:25 2026 GMT
Not After : Mar 30 09:01:25 2026 GMT
Subject: CN=7b73dbd124e346451a94f9e0cfde851d29157750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:39:cf:23:31:55:9f:72:54:ee:74:e6:43:82:
8b:2c:1e:ab:cb:b7:79:fb:fa:db:8d:ea:57:92:6f:
59:54:02:bc:dc:a0:a8:7d:d9:b3:bb:44:04:a8:d3:
c2:bf:52:9c:82:22:13:15:2d:06:4e:f4:ef:86:ad:
55:82:76:25:d5:bd:5c:0e:77:2f:f3:a1:00:9e:7c:
ea:f3:1a:01:94:1e:02:e1:4e:73:a4:9d:21:bf:48:
e4:be:70:a9:1f:24:1d:43:7b:06:88:7d:3a:59:36:
20:58:14:aa:88:9a:d9:2a:6c:7f:bf:b2:6f:54:24:
c0:82:51:4d:99:64:7b:e7:9f:31:d3:43:6c:3d:aa:
5d:ce:9e:33:09:e8:c6:86:d6:ae:26:41:20:31:a4:
5c:44:51:a7:6f:f0:b8:9e:09:19:74:91:af:ef:5a:
21:67:cc:68:82:5e:bd:cc:33:50:ac:6d:9f:85:d9:
ed:22:09:61:de:b8:56:e6:b3:55:cb:23:0d:f7:6f:
61:c5:dd:74:1d:11:c5:23:5d:38:45:56:68:ce:f9:
98:3e:f4:1a:a9:cc:da:16:d2:06:8d:b6:74:c9:fc:
3f:5d:b4:c0:8c:dc:2d:8a:98:4d:0e:52:f3:c9:fc:
ec:a0:db:00:16:53:84:96:1c:c4:6f:68:f0:6d:80:
12:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:73:DB:D1:24:E3:46:45:1A:94:F9:E0:CF:DE:85:1D:29:15:77:50
X509v3 Authority Key Identifier:
keyid:B1:48:08:6B:8D:1D:C7:F1:0E:34:3F:D1:65:71:92:39:A7:55:BD:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUgIa40dx_EOND_RZXGSOadVvTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dadf34-1f3f-4cea-8001-e3d5d7ef4232/1/sUgIa40dx_EOND_RZXGSOadVvTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dadf34-1f3f-4cea-8001-e3d5d7ef4232/1/sUgIa40dx_EOND_RZXGSOadVvTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:87:04:59:e6:58:5e:27:a4:6c:15:16:3e:fa:e5:76:4c:be:
a4:07:26:5e:4d:af:9c:ee:50:a5:43:36:49:3d:e2:06:99:14:
f3:0f:7b:b2:ae:3f:a5:0f:92:35:db:11:33:bb:59:f5:c6:79:
1c:b7:8c:85:1c:f0:d5:22:0e:72:35:e9:c6:af:5b:79:72:96:
b7:27:cb:15:91:64:25:15:48:d8:7b:fb:46:ed:0b:bd:32:a2:
b6:f6:d1:f8:a8:b7:f9:26:f5:e5:68:09:f2:e9:f5:7d:de:05:
da:28:58:a6:eb:d9:34:c0:d6:22:e4:77:bf:65:65:19:bf:57:
7f:7a:3f:d0:2f:34:30:77:5e:68:52:a3:0e:c6:bc:fe:77:cf:
3a:86:39:82:3a:64:3d:5b:a5:ce:b4:81:23:2b:ef:5e:d4:6d:
43:41:57:b3:cf:40:b8:d1:0b:14:7f:66:50:65:84:51:1f:17:
5d:4a:6b:5b:98:99:9e:f8:6c:54:c6:21:93:b3:e8:6b:cf:06:
bc:e7:97:a4:de:f8:6e:77:4c:fb:5a:6a:d4:3e:1d:fb:23:a7:
e8:22:be:49:db:23:66:dc:3f:6c:bc:24:26:48:b0:d3:c3:0d:
c6:92:53:67:00:0e:47:4d:ea:67:0c:ce:76:b8:ce:21:a6:af:
87:44:0e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:41:42 2026 by rpki-client