Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft
File: 15-SXhc4vDUrxrXPX_lRs9gTrjk.mft (raw, json)
Hash identifier: wrEz8zU5hQrbI1KFUD38NAelio9wNBbCNhypWk/ughg=
Subject key identifier: CD:0C:8D:37:9C:2A:7F:32:4B:EA:22:A4:7B:B2:39:66:5F:61:A9:DB
Authority key identifier: D7:9F:92:5E:17:38:BC:35:2B:C6:B5:CF:5F:F9:51:B3:D8:13:AE:39
Certificate issuer: /CN=d79f925e1738bc352bc6b5cf5ff951b3d813ae39
Certificate serial: 019D265FEDF7F0C584A0C01346A93D8876D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft
Manifest number: 0908
Signing time: Wed 25 Mar 2026 19:01:54 +0000
Manifest this update: Wed 25 Mar 2026 19:01:54 +0000
Manifest next update: Thu 26 Mar 2026 19:01:54 +0000
Files and hashes: 1: 15-SXhc4vDUrxrXPX_lRs9gTrjk.crl (hash: XrE3rWLddad12Ks8+iM2i8khQ0nJSTpqipZ57V4DnrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:ed:f7:f0:c5:84:a0:c0:13:46:a9:3d:88:76:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79f925e1738bc352bc6b5cf5ff951b3d813ae39
Validity
Not Before: Mar 25 19:01:54 2026 GMT
Not After : Mar 26 19:01:54 2026 GMT
Subject: CN=cd0c8d379c2a7f324bea22a47bb239665f61a9db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7e:6c:bb:ab:ce:67:84:dc:a1:43:5c:a7:d7:
a6:67:14:f4:05:da:e9:d4:42:c6:73:fa:11:74:3c:
c5:6c:00:7c:d8:8d:3b:eb:47:59:d4:40:d2:d6:e4:
9c:36:49:f0:f7:ea:9d:8d:db:fb:9f:f4:26:01:ce:
cc:4b:8b:63:1b:33:af:42:f7:89:4e:f3:1b:9d:d5:
87:35:59:93:c3:7e:5f:53:81:1b:f0:52:95:b3:da:
31:2f:fe:9e:12:25:0b:43:1e:60:58:4d:83:8f:2c:
5d:31:bb:96:c9:5b:f9:ca:63:f8:0c:6a:c8:c7:09:
c4:57:72:5e:45:ef:a2:0d:ab:41:4c:06:c6:dd:ca:
f5:d6:81:b1:c7:cf:a3:7f:f4:9f:19:ec:fb:93:87:
c5:4a:0b:e3:12:1d:7b:bc:0b:9b:de:62:ec:6f:28:
46:19:04:9e:51:9a:40:0c:39:88:41:6f:5a:73:2e:
43:d4:d7:22:a5:38:0e:4c:47:cc:4a:9d:2d:82:a3:
9e:8e:2e:86:aa:c8:bc:c1:01:f4:ee:a8:39:4d:ba:
88:35:cc:30:ca:4b:5a:92:b3:1d:c1:7e:e2:8f:7b:
72:b0:71:0c:5e:3b:30:0c:c5:19:e1:6d:f8:8d:4b:
f9:57:e7:bb:87:6b:8a:08:4a:ce:9a:61:c9:2f:95:
46:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:0C:8D:37:9C:2A:7F:32:4B:EA:22:A4:7B:B2:39:66:5F:61:A9:DB
X509v3 Authority Key Identifier:
keyid:D7:9F:92:5E:17:38:BC:35:2B:C6:B5:CF:5F:F9:51:B3:D8:13:AE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:bf:8f:7e:64:be:8a:79:3d:9e:1a:b3:21:e3:df:64:b8:e1:
68:4a:56:75:1a:6b:3b:2f:1a:bf:e9:02:6b:0a:01:eb:ce:31:
8b:62:de:55:df:cb:f8:4e:95:64:11:21:ae:23:8a:de:69:05:
25:b3:d2:0c:ef:38:ce:72:35:6e:20:4f:11:0e:e3:0c:e0:02:
50:ce:4e:bd:16:ef:47:ad:7a:20:09:53:18:06:ed:1f:d1:ab:
75:49:2b:ed:e8:44:c4:15:8a:28:ad:44:39:de:9e:27:31:0a:
85:96:24:f5:79:54:a3:c3:bf:f6:c0:c7:15:3c:be:7c:f4:e0:
b6:9a:6b:52:97:f9:00:bd:8b:45:06:db:48:24:88:02:ff:bf:
76:fb:fe:7f:39:9f:13:af:21:6b:cf:73:bd:ee:58:32:eb:5d:
21:f0:f1:d5:2e:59:f6:04:0b:e3:6f:3e:6c:a2:93:a5:96:c2:
a5:88:3a:9c:e3:1b:0e:9d:b7:4b:dc:02:52:75:2e:17:5d:4d:
7b:a7:9a:29:44:b6:ca:1d:0b:d2:fd:ed:7f:b1:c6:b0:88:a8:
91:61:3d:ce:84:62:96:0f:67:23:ca:1b:90:ea:06:fe:f9:8f:
e9:8d:17:70:11:42:fd:1b:25:8f:92:8d:28:db:0e:ee:fb:d5:
76:07:e0:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:57:26 2026 by rpki-client