Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/2e2194-3f91-4939-a830-aa80b4e7f2fd/1/SRrcI2V17CPX67-9wgQ5kYAmvvw.mft
File: SRrcI2V17CPX67-9wgQ5kYAmvvw.mft (raw, json)
Hash identifier: sY7Jdq7Qy1UJ03Xs0YNQr0OdsX+EZZVJ+yqu+Cq8ux4=
Subject key identifier: 17:A2:E7:E4:3B:2F:58:03:32:79:E9:53:D7:C6:9A:D1:40:7F:0F:AD
Authority key identifier: 49:1A:DC:23:65:75:EC:23:D7:EB:BF:BD:C2:04:39:91:80:26:BE:FC
Certificate issuer: /CN=491adc236575ec23d7ebbfbdc20439918026befc
Certificate serial: 019D2703BAEF8BE920E30BE0043E28C890F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SRrcI2V17CPX67-9wgQ5kYAmvvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/2e2194-3f91-4939-a830-aa80b4e7f2fd/1/SRrcI2V17CPX67-9wgQ5kYAmvvw.mft
Manifest number: 15AD
Signing time: Wed 25 Mar 2026 22:00:49 +0000
Manifest this update: Wed 25 Mar 2026 22:00:49 +0000
Manifest next update: Thu 26 Mar 2026 22:00:49 +0000
Files and hashes: 1: SRrcI2V17CPX67-9wgQ5kYAmvvw.crl (hash: aOQElocxSuZUR5u/YnOeSpfU67Q1nvxOpu/NyNE+ZBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/2e2194-3f91-4939-a830-aa80b4e7f2fd/1/SRrcI2V17CPX67-9wgQ5kYAmvvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/2e2194-3f91-4939-a830-aa80b4e7f2fd/1/SRrcI2V17CPX67-9wgQ5kYAmvvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/SRrcI2V17CPX67-9wgQ5kYAmvvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:ba:ef:8b:e9:20:e3:0b:e0:04:3e:28:c8:90:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=491adc236575ec23d7ebbfbdc20439918026befc
Validity
Not Before: Mar 25 22:00:49 2026 GMT
Not After : Mar 26 22:00:49 2026 GMT
Subject: CN=17a2e7e43b2f58033279e953d7c69ad1407f0fad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:80:f6:b1:a7:bd:dd:ed:99:e9:10:2a:81:7a:
fa:b4:9d:05:c1:f0:c5:87:a2:45:6b:54:d6:92:de:
14:81:bc:eb:12:4f:24:fe:b6:63:d7:2f:dc:dd:de:
7d:fd:30:a7:65:30:8d:80:51:65:05:7c:fb:f0:51:
9f:a6:eb:fd:ac:71:db:f8:1d:7d:1f:1c:cd:e2:42:
75:53:c9:eb:7c:0a:b0:84:0a:9c:74:e4:05:94:0f:
03:9d:96:e7:e5:d7:5a:ca:68:39:0a:d1:1f:56:b1:
dc:ce:2d:01:f2:93:ae:46:36:dd:94:8b:7d:be:47:
ff:0f:02:7b:1b:72:86:fc:f4:39:1f:43:a1:ee:97:
a5:8a:38:19:3e:e9:45:bc:f3:eb:7d:88:10:00:c7:
45:1a:3f:d8:df:bd:f6:48:c5:b2:59:c5:7e:01:99:
9e:a6:ae:9d:5a:23:af:9a:6a:73:e9:b8:cf:b9:55:
10:70:1a:74:29:2f:e7:dd:99:e3:ab:31:9f:bf:19:
96:9c:a0:a5:67:f8:68:4d:ee:89:f4:ee:fa:74:5c:
f8:6f:e2:06:8a:72:e5:99:d5:f4:07:9c:4c:c0:3a:
67:74:d9:1f:6e:36:d5:8e:43:3c:ef:a7:ed:75:e2:
cd:7a:66:90:0d:fb:fe:88:d2:36:0e:00:3a:a7:57:
71:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A2:E7:E4:3B:2F:58:03:32:79:E9:53:D7:C6:9A:D1:40:7F:0F:AD
X509v3 Authority Key Identifier:
keyid:49:1A:DC:23:65:75:EC:23:D7:EB:BF:BD:C2:04:39:91:80:26:BE:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SRrcI2V17CPX67-9wgQ5kYAmvvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/2e2194-3f91-4939-a830-aa80b4e7f2fd/1/SRrcI2V17CPX67-9wgQ5kYAmvvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/2e2194-3f91-4939-a830-aa80b4e7f2fd/1/SRrcI2V17CPX67-9wgQ5kYAmvvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:8e:3b:9b:2d:95:09:85:ce:04:f1:fe:b3:80:11:7b:6d:c4:
3b:67:9b:e0:ac:e5:1c:aa:bf:71:c0:43:8d:a8:a4:3d:71:38:
1f:ea:51:a1:c1:60:61:74:95:d7:8b:32:d0:25:96:1b:fe:d0:
da:be:77:f2:70:5f:22:c8:d9:e5:56:3d:8d:cd:66:dc:74:ad:
10:a7:3f:44:ac:b9:65:a1:c1:cc:cc:14:8e:56:47:5a:0f:e1:
48:5c:31:28:67:e5:19:f3:e1:ee:86:99:5f:95:39:65:3f:27:
5e:85:31:99:46:92:a0:9e:f0:fc:38:1b:30:2e:a3:b7:67:02:
bc:4b:f2:6f:dd:cc:6a:9f:c4:ce:5e:07:bc:04:a5:df:6b:5b:
16:09:b0:02:46:86:d9:b2:d7:aa:60:a1:83:c0:1b:3e:8e:60:
08:b5:d4:b0:2e:31:bb:dd:43:52:f7:7b:93:e3:81:bf:45:ef:
46:5d:92:85:e7:01:97:b3:c6:83:1d:c1:b8:9e:65:58:31:0b:
11:c1:bc:37:b7:18:99:2f:40:15:64:dd:37:c5:b8:8a:3e:d5:
9b:47:24:48:b8:17:ff:37:57:fc:a7:34:b5:40:32:bf:5d:40:
b9:72:b4:6a:74:c2:24:ec:ef:4f:8c:b2:28:09:cd:03:0a:7c:
74:c9:91:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:25:55 2026 by rpki-client