Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/Sbp0yMvh4n-spcZ-idP2I8Hwml4.mft
File: Sbp0yMvh4n-spcZ-idP2I8Hwml4.mft (raw, json)
Hash identifier: Rb/8iYrcsnRl1yxnG7wftnmT65lv/mC1yEqOYB3TLbQ=
Subject key identifier: B4:9D:97:F6:DE:A2:72:4E:7A:67:47:35:3A:E4:AB:11:F3:0F:F8:FA
Authority key identifier: 49:BA:74:C8:CB:E1:E2:7F:AC:A5:C6:7E:89:D3:F6:23:C1:F0:9A:5E
Certificate issuer: /CN=49ba74c8cbe1e27faca5c67e89d3f623c1f09a5e
Certificate serial: 019D2A3B9FB364084B96C8222D36584D8E04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sbp0yMvh4n-spcZ-idP2I8Hwml4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/Sbp0yMvh4n-spcZ-idP2I8Hwml4.mft
Manifest number: 131D
Signing time: Thu 26 Mar 2026 13:00:43 +0000
Manifest this update: Thu 26 Mar 2026 13:00:43 +0000
Manifest next update: Fri 27 Mar 2026 13:00:43 +0000
Files and hashes: 1: Sbp0yMvh4n-spcZ-idP2I8Hwml4.crl (hash: z0MXFVSR+mk238CEUUPV2nxDz1I1Ska0epry9+HpmRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/Sbp0yMvh4n-spcZ-idP2I8Hwml4.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/Sbp0yMvh4n-spcZ-idP2I8Hwml4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sbp0yMvh4n-spcZ-idP2I8Hwml4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:9f:b3:64:08:4b:96:c8:22:2d:36:58:4d:8e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49ba74c8cbe1e27faca5c67e89d3f623c1f09a5e
Validity
Not Before: Mar 26 13:00:43 2026 GMT
Not After : Mar 27 13:00:43 2026 GMT
Subject: CN=b49d97f6dea2724e7a6747353ae4ab11f30ff8fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b4:f1:31:c9:58:57:37:cd:cc:06:a6:67:40:
7f:99:b8:f3:c2:45:0a:75:43:88:b2:7c:98:1a:44:
b1:5d:c8:1b:69:68:46:e4:c0:58:74:b8:63:62:6a:
c1:2b:55:d0:7c:46:d3:5f:f5:40:22:c3:25:a6:11:
0c:4a:42:b3:8d:40:e6:87:f2:d2:6c:1b:f4:90:1b:
58:97:c3:d2:1e:b1:cf:09:f7:78:df:f4:f7:a3:5d:
12:47:ae:ea:58:da:92:3c:39:f3:2f:05:bc:03:5e:
02:f0:ea:3e:d3:45:e8:e2:b4:7e:e0:48:fb:08:db:
2e:f5:5b:70:d8:16:32:85:b3:11:12:7c:ae:1f:cc:
4a:98:7d:c9:0d:8a:1e:a6:82:01:db:06:ca:5a:f9:
7c:55:a2:e9:a2:97:b1:ca:90:74:87:2b:98:fd:fc:
92:7c:94:5c:1a:0d:1e:76:6a:8a:56:6b:7d:f2:ab:
23:8b:ed:ee:d5:88:39:10:7a:ff:46:04:01:b7:42:
21:70:44:6b:2a:24:ce:d9:24:57:e7:8b:6a:e8:83:
c9:78:4c:16:6d:4a:35:7e:40:37:7d:70:6c:36:18:
86:05:b5:ff:d7:94:79:4f:53:db:26:15:c7:c1:a2:
9a:79:38:7f:cf:a6:54:fd:3d:f1:3a:dd:0d:f3:30:
c0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:9D:97:F6:DE:A2:72:4E:7A:67:47:35:3A:E4:AB:11:F3:0F:F8:FA
X509v3 Authority Key Identifier:
keyid:49:BA:74:C8:CB:E1:E2:7F:AC:A5:C6:7E:89:D3:F6:23:C1:F0:9A:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sbp0yMvh4n-spcZ-idP2I8Hwml4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/Sbp0yMvh4n-spcZ-idP2I8Hwml4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/Sbp0yMvh4n-spcZ-idP2I8Hwml4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:e1:6f:ca:93:81:54:ae:54:28:e9:0d:2c:44:9c:11:92:34:
b1:31:5f:37:71:a3:27:64:3b:3f:20:bf:bc:fa:28:b2:f3:e7:
77:f9:18:e0:1f:60:18:71:d1:e4:a9:ea:fd:0a:50:b4:4e:e4:
5d:3b:6c:f6:9c:5c:9a:dd:12:09:be:7d:e2:48:b4:9a:be:77:
fa:32:bb:64:ec:37:4e:2d:54:cc:05:c6:9d:40:92:bc:c9:a2:
5f:62:80:f6:11:2c:90:d6:32:80:c9:9f:ce:a3:1f:30:99:39:
a9:54:43:e2:ca:2d:44:9d:41:fc:3f:21:c5:0b:2e:7d:0b:e0:
58:5a:56:a3:0c:91:bb:d9:43:54:52:17:c5:7b:a4:ac:58:9b:
b3:ef:86:dd:b7:c8:f4:b0:ed:41:4f:98:f2:64:d4:92:70:fb:
73:28:64:da:13:5e:73:7a:03:ae:2a:06:7e:82:52:a9:ce:e3:
29:eb:29:6f:ce:db:69:c2:97:93:ce:c3:7d:07:a3:5d:d2:ce:
c0:71:62:3c:a8:58:cd:19:b2:52:64:8a:b7:25:e0:d8:cf:50:
ab:e1:7c:13:2b:6e:07:32:65:c5:95:f1:ea:1b:a4:f7:88:31:
85:49:93:25:b8:aa:01:e4:ee:70:7b:3c:6a:c9:d8:bc:7d:3d:
4e:d3:e5:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:54:48 2026 by rpki-client