Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.mft
File: SP34H7869DBnKkv2Qnc7lZxFCKY.mft (raw, json)
Hash identifier: TrwS4Y2qYwmb9+9Oxm8d6VP/WQucbp+zAAnIXvWg3ag=
Subject key identifier: F1:1B:4A:5C:17:1B:8F:5A:BC:E3:01:10:00:A7:99:A5:01:B3:58:5E
Authority key identifier: 48:FD:F8:1F:BF:3A:F4:30:67:2A:4B:F6:42:77:3B:95:9C:45:08:A6
Certificate issuer: /CN=48fdf81fbf3af430672a4bf642773b959c4508a6
Certificate serial: 019D25F11839B21B37A607D22B404A06C1A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SP34H7869DBnKkv2Qnc7lZxFCKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.mft
Manifest number: 1438
Signing time: Wed 25 Mar 2026 17:00:50 +0000
Manifest this update: Wed 25 Mar 2026 17:00:50 +0000
Manifest next update: Thu 26 Mar 2026 17:00:50 +0000
Files and hashes: 1: SP34H7869DBnKkv2Qnc7lZxFCKY.crl (hash: D0v0+bC6MxoDtmatKiTNeLiWvBk11WiaeprNr1BhPh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SP34H7869DBnKkv2Qnc7lZxFCKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:18:39:b2:1b:37:a6:07:d2:2b:40:4a:06:c1:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48fdf81fbf3af430672a4bf642773b959c4508a6
Validity
Not Before: Mar 25 17:00:50 2026 GMT
Not After : Mar 26 17:00:50 2026 GMT
Subject: CN=f11b4a5c171b8f5abce3011000a799a501b3585e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9c:71:a5:e3:d2:a3:91:b9:54:bf:71:c2:5c:
bf:de:fd:90:fd:44:b1:bd:60:2e:d9:8b:0d:47:62:
c7:2e:4d:1c:0a:18:c2:c8:6b:bb:8a:cd:38:5b:d9:
12:cf:d0:2a:6a:04:0b:65:f8:99:71:e6:88:81:e7:
4f:44:7e:3a:e1:fb:53:13:a0:d0:08:64:0e:d8:bb:
91:72:e4:c9:d7:6f:53:78:82:5f:c6:9b:79:9e:48:
dc:e5:bf:f5:9d:fa:ef:3d:46:db:93:2f:fe:ab:d4:
95:5e:13:92:39:1a:c7:1e:a0:c5:ff:1c:aa:58:18:
dd:43:5b:45:3d:4d:22:13:85:f2:58:a3:6c:31:e2:
b7:d4:0c:b0:cc:a3:17:9d:4d:2e:6d:c0:57:71:6f:
d0:2c:0d:cf:d6:fd:3b:a2:80:0c:71:1f:22:95:cb:
5c:c0:b5:4d:d3:47:8e:1c:dc:13:f1:82:d8:55:43:
d1:bd:08:82:15:ea:20:c5:ab:51:00:81:2d:b0:02:
d0:59:ca:e6:45:aa:30:0d:59:bf:84:6b:75:8e:c7:
75:07:cb:67:fe:22:5f:35:cc:7e:e1:fd:1b:a1:7d:
3e:bd:56:71:dd:0e:94:59:13:9f:2d:33:0f:b6:e5:
5a:34:a8:db:20:ff:f4:a1:c9:47:5c:5c:d5:30:9a:
f0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:1B:4A:5C:17:1B:8F:5A:BC:E3:01:10:00:A7:99:A5:01:B3:58:5E
X509v3 Authority Key Identifier:
keyid:48:FD:F8:1F:BF:3A:F4:30:67:2A:4B:F6:42:77:3B:95:9C:45:08:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SP34H7869DBnKkv2Qnc7lZxFCKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:1b:50:10:03:c9:aa:75:7f:df:27:0c:dc:b8:41:44:80:8f:
bf:51:b8:5e:4b:4b:3f:c5:2f:66:dc:51:e2:8b:95:5c:1c:34:
c1:62:5e:59:da:94:5b:3d:2b:0d:89:66:f3:dc:a4:e2:64:6b:
88:87:b1:f8:82:00:be:41:1d:f4:99:92:57:7e:71:f2:42:7a:
27:4e:f8:30:69:10:03:0f:c8:6a:5f:e8:f4:38:56:cc:ad:9e:
8e:fb:10:30:0d:6d:41:c2:df:52:e3:b1:35:d8:7e:34:3d:82:
48:15:ef:03:50:62:8c:10:6a:a1:c2:b6:41:39:0d:27:52:ba:
10:cf:5b:41:b0:ba:18:0c:17:71:a7:cc:89:8f:87:22:ba:0e:
84:5c:9b:13:84:d7:c2:c3:05:7c:1b:f9:8d:2b:28:91:5a:51:
80:b1:e0:81:06:8b:a3:ac:52:7d:68:88:0a:ad:28:4b:88:ab:
c6:3c:f9:96:09:d1:fb:1e:ff:d6:aa:d3:59:b9:66:f9:36:c5:
36:56:e1:b4:bd:84:68:8f:ae:b4:8d:9d:88:f2:2d:68:18:07:
da:e6:96:95:02:23:53:45:f4:92:36:3d:f6:91:d9:e8:77:ff:
f6:0b:a5:e8:e6:f0:3f:35:a0:c3:d6:57:be:7a:f6:56:04:0a:
83:14:aa:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8Rg5shs3pgfSK0BKBsGlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4ZmRmODFmYmYzYWY0MzA2NzJhNGJmNjQyNzczYjk1OWM0
NTA4YTYwHhcNMjYwMzI1MTcwMDUwWhcNMjYwMzI2MTcwMDUwWjAzMTEwLwYDVQQD
EyhmMTFiNGE1YzE3MWI4ZjVhYmNlMzAxMTAwMGE3OTlhNTAxYjM1ODVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpxxpePSo5G5VL9xwly/3v2Q/USx
vWAu2YsNR2LHLk0cChjCyGu7is04W9kSz9AqagQLZfiZceaIgedPRH464ftTE6DQ
CGQO2LuRcuTJ129TeIJfxpt5nkjc5b/1nfrvPUbbky/+q9SVXhOSORrHHqDF/xyq
WBjdQ1tFPU0iE4XyWKNsMeK31AywzKMXnU0ubcBXcW/QLA3P1v07ooAMcR8ilctc
wLVN00eOHNwT8YLYVUPRvQiCFeogxatRAIEtsALQWcrmRaowDVm/hGt1jsd1B8tn
/iJfNcx+4f0boX0+vVZx3Q6UWROfLTMPtuVaNKjbIP/0oclHXFzVMJrwBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPEbSlwXG49avOMBEACnmaUBs1heMB8GA1UdIwQY
MBaAFEj9+B+/OvQwZypL9kJ3O5WcRQimMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1AzNEg3ODY5REJuS2t2MlFuYzdsWnhGQ0tZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8wNzk1MDYtYWNkYS00YWFiLTlmYTIt
MDgxZDEyMTQ2ZmEzLzEvU1AzNEg3ODY5REJuS2t2MlFuYzdsWnhGQ0tZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8wNzk1MDYtYWNkYS00YWFiLTlmYTItMDgxZDEyMTQ2ZmEz
LzEvU1AzNEg3ODY5REJuS2t2MlFuYzdsWnhGQ0tZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjxtQEAPJ
qnV/3ycM3LhBRICPv1G4XktLP8UvZtxR4ouVXBw0wWJeWdqUWz0rDYlm89yk4mRr
iIex+IIAvkEd9JmSV35x8kJ6J074MGkQAw/Ial/o9DhWzK2ejvsQMA1tQcLfUuOx
Ndh+ND2CSBXvA1BijBBqocK2QTkNJ1K6EM9bQbC6GAwXcafMiY+HIroOhFybE4TX
wsMFfBv5jSsokVpRgLHggQaLo6xSfWiICq0oS4irxjz5lgnR+x7/1qrTWblm+TbF
NlbhtL2EaI+utI2diPItaBgH2uaWlQIjU0X0kjY99pHZ6Hf/9gul6ObwPzWgw9ZX
vnr2VgQKgxSqqA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:20 2026 by rpki-client