Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/295c95-e367-4ca2-9bd5-ab997fc650e4/1/a-SeWhSwy_QQTANLVyoPnxVKmXU.mft
File: a-SeWhSwy_QQTANLVyoPnxVKmXU.mft (raw, json)
Hash identifier: cxgqatQY9wQ1M3saOrqWOOdAovJaGpYgaR0yvjgXPOA=
Subject key identifier: 82:CC:50:8D:20:2C:5A:96:07:99:39:91:AA:0A:8D:1D:30:90:22:63
Authority key identifier: 6B:E4:9E:5A:14:B0:CB:F4:10:4C:03:4B:57:2A:0F:9F:15:4A:99:75
Certificate issuer: /CN=6be49e5a14b0cbf4104c034b572a0f9f154a9975
Certificate serial: 019D27A87FDA0FD1F5890E6CC1B58FD6D543
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-SeWhSwy_QQTANLVyoPnxVKmXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/295c95-e367-4ca2-9bd5-ab997fc650e4/1/a-SeWhSwy_QQTANLVyoPnxVKmXU.mft
Manifest number: 072B
Signing time: Thu 26 Mar 2026 01:00:47 +0000
Manifest this update: Thu 26 Mar 2026 01:00:47 +0000
Manifest next update: Fri 27 Mar 2026 01:00:47 +0000
Files and hashes: 1: a-SeWhSwy_QQTANLVyoPnxVKmXU.crl (hash: ZAP/VkbAoNCiR/06UcnFZJq8iXkgfanx4bNUqyWLtFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/295c95-e367-4ca2-9bd5-ab997fc650e4/1/a-SeWhSwy_QQTANLVyoPnxVKmXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/295c95-e367-4ca2-9bd5-ab997fc650e4/1/a-SeWhSwy_QQTANLVyoPnxVKmXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/a-SeWhSwy_QQTANLVyoPnxVKmXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:7f:da:0f:d1:f5:89:0e:6c:c1:b5:8f:d6:d5:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6be49e5a14b0cbf4104c034b572a0f9f154a9975
Validity
Not Before: Mar 26 01:00:47 2026 GMT
Not After : Mar 27 01:00:47 2026 GMT
Subject: CN=82cc508d202c5a9607993991aa0a8d1d30902263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a9:5d:40:81:5d:f5:97:9a:22:d6:69:48:3c:
b9:28:97:d4:43:34:11:b1:d8:0a:bf:af:02:11:c4:
a5:fe:66:bd:d2:1c:fb:c0:81:66:3e:cf:a3:48:78:
84:b2:fd:4c:eb:ea:f8:19:92:d3:46:cc:6e:04:59:
aa:ff:45:11:9f:0f:d6:de:4e:88:b3:f0:ba:5e:ca:
ba:55:79:de:08:49:bd:e9:40:a8:6d:86:db:e8:54:
b2:9f:ae:b6:53:28:96:15:69:86:da:82:e5:21:5c:
52:cb:c3:35:4e:f1:13:31:48:44:7f:bc:a7:91:8d:
de:cb:9a:19:5e:bb:54:22:ce:8e:6c:37:94:21:7f:
b8:93:21:c0:38:31:ba:ef:f2:0c:03:8e:0a:3f:1e:
b5:30:3a:5e:1d:96:bd:b4:b3:22:f1:d3:92:55:9f:
83:bc:40:cd:e7:ba:58:c3:77:48:e2:e3:08:c3:28:
b2:ee:c1:2b:2a:c0:af:3a:de:19:47:93:d5:a6:3f:
41:2b:d8:e7:34:ca:07:76:d5:4a:55:32:cf:8c:ba:
a8:13:fd:d6:9c:02:7c:20:88:fc:b5:0b:4f:53:5f:
1d:96:03:07:2d:e3:ad:a2:7c:d3:a9:45:d5:c3:a5:
c7:e1:9d:7b:b4:cb:cb:71:63:cb:17:7c:f5:79:d6:
41:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:CC:50:8D:20:2C:5A:96:07:99:39:91:AA:0A:8D:1D:30:90:22:63
X509v3 Authority Key Identifier:
keyid:6B:E4:9E:5A:14:B0:CB:F4:10:4C:03:4B:57:2A:0F:9F:15:4A:99:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-SeWhSwy_QQTANLVyoPnxVKmXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/295c95-e367-4ca2-9bd5-ab997fc650e4/1/a-SeWhSwy_QQTANLVyoPnxVKmXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/295c95-e367-4ca2-9bd5-ab997fc650e4/1/a-SeWhSwy_QQTANLVyoPnxVKmXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:23:86:87:40:28:15:cb:b5:55:e7:3e:09:bc:01:21:29:b1:
4c:2d:0b:7a:31:0e:64:5d:ec:47:1c:5c:44:67:c3:c3:a5:d3:
30:2d:4b:f4:69:8e:bf:25:8c:b1:92:e9:16:f8:98:3e:d2:86:
fd:25:74:f8:06:29:31:e4:14:45:0f:ea:6e:64:7d:02:67:5f:
36:ae:d9:58:2c:50:26:85:39:9f:51:84:d0:6b:48:70:a4:63:
80:01:1b:75:8c:2c:44:61:43:4b:79:d5:16:e0:aa:12:b6:11:
31:ae:9f:3e:46:2a:49:88:81:0c:54:62:aa:47:e0:3c:ef:a3:
29:7e:07:5c:dc:ad:85:38:49:df:c5:0a:f6:3b:26:30:29:01:
4e:3a:18:3d:c3:69:0c:ff:6c:cb:f6:eb:db:b6:59:31:76:1a:
86:3f:36:b8:65:d1:76:09:5f:69:13:a6:05:a3:e2:bc:24:64:
f1:95:18:9e:14:e1:4b:13:f7:f8:2b:8d:99:4f:c2:83:6b:73:
85:0f:0b:0a:de:b5:ee:e2:a3:e6:0f:ed:1e:01:99:44:ac:16:
ef:0d:ba:7b:60:83:01:40:e7:cf:bb:36:ae:fe:19:f9:b9:6c:
14:4b:eb:e0:d8:dd:42:9b:bd:7f:f6:86:a6:b8:d8:42:7b:da:
bd:37:a4:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:37:32 2026 by rpki-client