Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7544b6-e0a9-4df8-9db5-e934dbf93631/1/sVKsjTaZEe8sE_k_mZumY8GOETM.mft
File: sVKsjTaZEe8sE_k_mZumY8GOETM.mft (raw, json)
Hash identifier: D34TXRbuL85r28GjPRrdx4FjFWDHF3SrKsbE32NSmJQ=
Subject key identifier: 5A:45:1F:3C:6E:AC:2A:CA:47:E1:1E:4F:34:7B:DB:33:02:8D:50:8D
Authority key identifier: B1:52:AC:8D:36:99:11:EF:2C:13:F9:3F:99:9B:A6:63:C1:8E:11:33
Certificate issuer: /CN=b152ac8d369911ef2c13f93f999ba663c18e1133
Certificate serial: 019D292909B06C38A8D7082AD26529209D06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVKsjTaZEe8sE_k_mZumY8GOETM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7544b6-e0a9-4df8-9db5-e934dbf93631/1/sVKsjTaZEe8sE_k_mZumY8GOETM.mft
Manifest number: 138F
Signing time: Thu 26 Mar 2026 08:00:48 +0000
Manifest this update: Thu 26 Mar 2026 08:00:48 +0000
Manifest next update: Fri 27 Mar 2026 08:00:48 +0000
Files and hashes: 1: LNuvW2EbklD_rPCUVu8iuKxEXmQ.roa (hash: wPUxThCCBF05g0fTbeBHjNHbYdl0RItVLzPHmSaC9kA=)
2: sVKsjTaZEe8sE_k_mZumY8GOETM.crl (hash: iwLfTGE9ip1+XA8j1ib7Y6YklvM1mKfN9FdNMW4md6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7544b6-e0a9-4df8-9db5-e934dbf93631/1/sVKsjTaZEe8sE_k_mZumY8GOETM.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/7544b6-e0a9-4df8-9db5-e934dbf93631/1/sVKsjTaZEe8sE_k_mZumY8GOETM.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVKsjTaZEe8sE_k_mZumY8GOETM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:09:b0:6c:38:a8:d7:08:2a:d2:65:29:20:9d:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b152ac8d369911ef2c13f93f999ba663c18e1133
Validity
Not Before: Mar 26 08:00:48 2026 GMT
Not After : Mar 27 08:00:48 2026 GMT
Subject: CN=5a451f3c6eac2aca47e11e4f347bdb33028d508d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c6:6e:5a:34:d3:a8:d5:9a:eb:96:84:32:bd:
1f:75:89:8a:a7:dd:00:f3:e8:19:82:cb:ac:c1:7c:
53:8b:c2:85:05:ff:67:dc:25:22:1f:8c:18:73:7f:
67:0f:c7:af:d4:00:ed:f4:28:b4:07:02:65:b1:c2:
29:af:80:3c:15:95:83:d7:a1:46:b2:a0:0e:cd:70:
29:62:2a:e0:fe:5b:9b:b6:ed:ba:a4:55:ac:bd:db:
04:b1:ba:75:b9:fc:65:cc:70:66:b7:35:a4:6e:1e:
4f:e2:80:de:ab:40:2b:b4:49:b6:ae:8c:6a:0d:d0:
57:93:e3:f6:13:07:7f:4c:ac:b0:bb:30:f3:f5:ea:
78:cd:55:0f:a6:74:d8:46:64:74:17:19:06:b6:54:
bf:14:fb:24:52:d5:94:cf:38:81:61:ea:42:0f:78:
be:28:98:56:ca:60:74:6c:9c:11:aa:7c:7b:9f:7b:
0c:4d:41:37:91:35:d0:b4:1f:4b:06:b2:c7:c0:f9:
18:03:e8:15:df:e7:18:8e:72:45:d4:66:d7:98:1c:
46:aa:34:33:11:94:a0:5c:df:c2:e5:48:4a:26:d3:
71:f5:7a:fa:89:88:a7:34:e7:9a:f1:67:75:e5:bc:
3d:53:27:6f:ed:35:bd:8e:4d:b7:df:fd:c3:5a:15:
67:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:45:1F:3C:6E:AC:2A:CA:47:E1:1E:4F:34:7B:DB:33:02:8D:50:8D
X509v3 Authority Key Identifier:
keyid:B1:52:AC:8D:36:99:11:EF:2C:13:F9:3F:99:9B:A6:63:C1:8E:11:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVKsjTaZEe8sE_k_mZumY8GOETM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7544b6-e0a9-4df8-9db5-e934dbf93631/1/sVKsjTaZEe8sE_k_mZumY8GOETM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7544b6-e0a9-4df8-9db5-e934dbf93631/1/sVKsjTaZEe8sE_k_mZumY8GOETM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:16:b5:29:bb:2a:e4:52:66:37:4f:b3:ac:87:b3:d2:ea:a8:
3f:30:21:6e:4b:5e:c0:28:34:0d:95:fd:6f:e0:38:61:e6:74:
d3:b6:b4:d5:d4:7d:a2:39:24:b9:74:46:43:e4:0a:2a:c4:9f:
fc:b2:31:a8:2c:fd:e9:17:4d:cb:82:2f:34:92:16:d0:05:9f:
85:c7:ed:a9:25:29:ce:41:88:cc:a8:bd:e9:8e:ba:f6:c0:18:
a1:bd:1b:32:93:78:ea:e8:df:75:b7:98:e9:de:e1:70:eb:ee:
cd:41:48:22:a8:ff:33:f1:51:73:5e:b4:39:e6:b2:00:d4:05:
4a:04:bb:71:eb:18:d4:0c:d7:6b:6c:c4:d7:79:b6:6d:d2:48:
38:d5:f0:9f:3b:64:5e:1d:94:10:fa:34:e9:9c:71:74:1d:6d:
dc:60:17:45:7a:b2:d9:d1:76:bc:2a:5a:1d:09:63:f9:b7:26:
ad:00:62:79:ec:61:1c:ff:79:25:d1:cd:86:41:dd:ef:4b:8a:
05:ca:d7:de:3d:97:fc:51:bc:9e:61:26:4f:e9:59:3c:eb:77:
dc:39:f9:9c:1e:23:fe:5c:ec:d2:05:fc:57:8a:3e:af:11:89:
be:f9:7f:35:d5:75:1e:0a:39:97:45:d7:28:ea:a7:64:a5:fa:
2f:9d:25:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:38:19 2026 by rpki-client