Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/41ba4c-8323-40ad-8268-67ef9c308389/1/SRujNfWFuA6Nx0ZCi4A1cAae1jc.mft
File: SRujNfWFuA6Nx0ZCi4A1cAae1jc.mft (raw, json)
Hash identifier: lVgimiAKDLsUL7OAfFnGL558FZKxJSdxwT8hwmMLwsE=
Subject key identifier: 19:19:3A:15:36:09:2E:FA:A2:99:FF:9A:64:B2:48:A9:3D:17:18:6B
Authority key identifier: 49:1B:A3:35:F5:85:B8:0E:8D:C7:46:42:8B:80:35:70:06:9E:D6:37
Certificate issuer: /CN=491ba335f585b80e8dc746428b803570069ed637
Certificate serial: 019D31BEC3732D3B05381C2EDF9817482755
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SRujNfWFuA6Nx0ZCi4A1cAae1jc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/41ba4c-8323-40ad-8268-67ef9c308389/1/SRujNfWFuA6Nx0ZCi4A1cAae1jc.mft
Manifest number: 2D
Signing time: Sat 28 Mar 2026 00:01:18 +0000
Manifest this update: Sat 28 Mar 2026 00:01:18 +0000
Manifest next update: Sun 29 Mar 2026 00:01:18 +0000
Files and hashes: 1: SRujNfWFuA6Nx0ZCi4A1cAae1jc.crl (hash: efAuLTeFKSf/IhSA3MfsegTIcdDp2RPgQ1lATWCRy7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/41ba4c-8323-40ad-8268-67ef9c308389/1/SRujNfWFuA6Nx0ZCi4A1cAae1jc.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/41ba4c-8323-40ad-8268-67ef9c308389/1/SRujNfWFuA6Nx0ZCi4A1cAae1jc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SRujNfWFuA6Nx0ZCi4A1cAae1jc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:31:be:c3:73:2d:3b:05:38:1c:2e:df:98:17:48:27:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=491ba335f585b80e8dc746428b803570069ed637
Validity
Not Before: Mar 28 00:01:18 2026 GMT
Not After : Mar 29 00:01:18 2026 GMT
Subject: CN=19193a1536092efaa299ff9a64b248a93d17186b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:aa:5c:d2:8a:39:1c:f6:a8:a8:28:47:c8:92:
e5:94:ef:ba:8a:64:d0:83:9c:7d:76:c8:15:21:3f:
e0:a7:19:ee:08:ee:76:bd:9e:5d:36:49:1d:84:20:
ce:d7:c1:10:30:07:9e:ea:a1:f1:c5:23:bc:f0:a6:
5e:d0:14:d5:f7:db:f4:07:7e:0a:be:66:9f:e5:95:
9d:33:73:6a:ee:cf:12:a1:f5:75:42:0a:4f:0b:1a:
fe:02:d6:e1:d1:10:78:56:f1:e1:34:f5:f9:41:04:
1e:27:77:aa:c7:92:ab:c8:24:d6:0e:48:48:d1:d0:
b0:f9:d1:aa:a5:c6:32:16:5c:b5:0e:1e:41:ce:7d:
f7:1c:1d:9e:0e:9d:bc:79:16:f1:34:0a:96:38:8a:
33:81:03:7a:7d:75:7a:84:cc:5f:6e:87:2f:3f:2d:
8b:3c:b9:e2:da:78:65:cd:cd:23:88:f2:07:72:76:
de:d1:74:74:78:73:35:e3:9f:12:87:81:b3:58:b1:
1b:14:0c:26:ee:fb:c1:04:8a:8f:1e:82:a8:ad:e6:
af:37:ef:7f:d0:27:93:a3:50:bc:47:69:04:a4:5a:
1c:7c:58:17:40:36:be:a3:ca:22:3c:c6:07:03:b6:
52:a2:e5:af:91:40:fe:de:df:f9:25:3f:b9:75:30:
e5:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:19:3A:15:36:09:2E:FA:A2:99:FF:9A:64:B2:48:A9:3D:17:18:6B
X509v3 Authority Key Identifier:
keyid:49:1B:A3:35:F5:85:B8:0E:8D:C7:46:42:8B:80:35:70:06:9E:D6:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SRujNfWFuA6Nx0ZCi4A1cAae1jc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/41ba4c-8323-40ad-8268-67ef9c308389/1/SRujNfWFuA6Nx0ZCi4A1cAae1jc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/41ba4c-8323-40ad-8268-67ef9c308389/1/SRujNfWFuA6Nx0ZCi4A1cAae1jc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:29:af:3b:ad:4d:71:1e:6f:5a:87:c7:82:d5:67:41:65:f5:
d2:bc:91:07:e2:7f:ce:6c:e9:30:59:09:16:dc:96:b2:e1:52:
f9:38:1c:88:6e:8a:f6:e7:c7:84:44:92:b9:e4:58:9f:0f:93:
6c:2b:0e:22:e9:0a:49:15:e9:3e:ad:5a:28:df:42:6b:02:cf:
56:75:1d:54:14:09:90:a9:96:87:76:e5:b8:01:b9:48:3c:4e:
f4:d2:65:3f:55:60:5b:03:a7:04:f3:3b:d4:88:bd:ed:00:1e:
a7:22:a3:35:b1:9a:32:77:23:4b:16:23:11:77:1c:82:e4:bb:
94:a4:84:c9:be:3e:d8:cd:fe:2b:28:b2:a0:cf:88:d1:e7:d6:
e3:08:f6:a4:2e:fb:84:b2:b6:30:8e:05:ec:b3:b3:dc:49:52:
b7:57:3e:51:ab:41:36:01:a7:12:35:b9:b9:8e:bf:9e:fc:e5:
dd:bf:e6:44:9a:7e:3c:63:59:df:8b:13:e4:b3:77:2e:95:c0:
75:d4:e6:f3:c1:21:fc:84:bf:8f:7b:1b:bc:66:33:6b:5b:77:
bd:c2:44:7b:5a:76:83:eb:c9:b8:aa:4e:ce:7e:6f:09:9c:05:
82:2b:09:47:6c:bd:f9:37:f2:fd:d5:21:b0:65:9e:0e:36:50:
dc:00:bf:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:31:44 2026 by rpki-client