Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/d3a228-fc4f-40b2-88b2-e484611a9621/1/SxEEihpJFuExuM4Iji1v5OXF49s.mft
File: SxEEihpJFuExuM4Iji1v5OXF49s.mft (raw, json)
Hash identifier: dq3Fv1fLPH7fFaOS35fCoehfH0s0v10LM5RUMABJtrA=
Subject key identifier: F3:D0:3B:00:2E:BD:02:B7:8C:01:64:96:29:58:93:EB:CE:53:25:8C
Authority key identifier: 4B:11:04:8A:1A:49:16:E1:31:B8:CE:08:8E:2D:6F:E4:E5:C5:E3:DB
Certificate issuer: /CN=4b11048a1a4916e131b8ce088e2d6fe4e5c5e3db
Certificate serial: 019D26964138767B2F45CBA2FAA02AEFA144
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SxEEihpJFuExuM4Iji1v5OXF49s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/d3a228-fc4f-40b2-88b2-e484611a9621/1/SxEEihpJFuExuM4Iji1v5OXF49s.mft
Manifest number: 04C4
Signing time: Wed 25 Mar 2026 20:01:14 +0000
Manifest this update: Wed 25 Mar 2026 20:01:14 +0000
Manifest next update: Thu 26 Mar 2026 20:01:14 +0000
Files and hashes: 1: SxEEihpJFuExuM4Iji1v5OXF49s.crl (hash: ZEzxyLk8zvfGn9QAQSlRJXhhTLW7Wex2yx82IaUYc6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/d3a228-fc4f-40b2-88b2-e484611a9621/1/SxEEihpJFuExuM4Iji1v5OXF49s.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/d3a228-fc4f-40b2-88b2-e484611a9621/1/SxEEihpJFuExuM4Iji1v5OXF49s.mft
rsync://rpki.ripe.net/repository/DEFAULT/SxEEihpJFuExuM4Iji1v5OXF49s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:41:38:76:7b:2f:45:cb:a2:fa:a0:2a:ef:a1:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b11048a1a4916e131b8ce088e2d6fe4e5c5e3db
Validity
Not Before: Mar 25 20:01:14 2026 GMT
Not After : Mar 26 20:01:14 2026 GMT
Subject: CN=f3d03b002ebd02b78c016496295893ebce53258c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b7:ad:7c:79:81:07:b1:ca:e5:1f:ec:43:37:
8e:0c:de:3b:93:e8:19:03:f0:3b:39:38:cd:0b:cc:
d4:0c:2a:88:a2:cd:89:21:9a:9f:e7:a6:7f:70:ac:
fd:44:90:84:2f:71:a2:76:0f:82:86:cb:4a:7d:d1:
c6:98:71:7e:67:e9:16:bd:ab:3e:16:d4:ff:5e:40:
da:f0:61:b6:87:03:a0:ef:f4:52:c2:27:d1:41:f3:
8c:7b:42:bf:89:69:59:6e:54:ce:e5:60:3e:d4:fb:
af:33:1f:1d:68:b3:b2:61:53:ad:7c:12:19:44:a2:
f5:28:70:e9:9a:aa:70:96:81:ea:6a:89:24:ab:d7:
4f:81:76:28:f0:e9:0c:0a:c4:7c:39:0b:c8:98:af:
a7:2a:ed:7a:da:17:06:66:cc:4a:7b:d7:6d:1b:5c:
d8:5b:10:8b:18:7e:73:02:48:f1:cc:40:2f:02:3c:
c9:11:c6:87:a8:38:56:57:8c:e3:f3:27:d8:63:f5:
c8:9d:58:49:b4:99:7e:0e:32:42:44:54:f4:4c:de:
5d:ed:c2:23:af:37:d0:ec:41:d6:15:40:08:0f:e5:
92:61:df:26:7a:4d:3c:97:aa:7c:5b:99:4d:a4:c6:
62:69:14:fd:b4:08:2b:04:10:b1:93:ab:2b:ac:44:
8d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D0:3B:00:2E:BD:02:B7:8C:01:64:96:29:58:93:EB:CE:53:25:8C
X509v3 Authority Key Identifier:
keyid:4B:11:04:8A:1A:49:16:E1:31:B8:CE:08:8E:2D:6F:E4:E5:C5:E3:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SxEEihpJFuExuM4Iji1v5OXF49s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d3a228-fc4f-40b2-88b2-e484611a9621/1/SxEEihpJFuExuM4Iji1v5OXF49s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d3a228-fc4f-40b2-88b2-e484611a9621/1/SxEEihpJFuExuM4Iji1v5OXF49s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:2d:54:54:8c:6a:bb:48:35:72:4b:e7:27:ef:d8:24:60:b3:
b4:18:f7:b7:27:a4:61:81:df:c2:05:6c:4e:cc:83:2a:af:82:
a5:5d:2f:6d:f4:80:4e:16:6a:c4:69:55:85:f9:f3:e7:66:6c:
95:92:c3:fb:81:03:2b:d1:b5:b7:fc:a3:e9:7f:73:ab:23:47:
c8:71:0d:57:c0:f5:6e:61:89:79:38:a0:06:6a:4c:ad:21:fd:
95:1b:f6:47:89:55:7a:b6:e2:de:8a:06:d0:4d:d8:66:72:93:
18:83:70:e9:91:46:34:f1:f6:e3:15:02:87:78:b3:78:71:b2:
8a:ef:2f:37:b0:2e:18:26:c4:47:a6:07:c8:8d:df:b5:1f:9a:
7d:fe:a9:e9:ff:fb:15:38:d3:e3:0e:36:a4:d3:09:b0:8a:f4:
ea:02:b6:ab:4f:4d:95:55:6c:c4:4a:35:81:0c:96:cc:d1:18:
e2:68:64:44:30:94:20:05:ec:0f:87:38:9c:ba:68:0e:cd:16:
c4:b1:eb:cd:05:aa:c8:9e:04:f8:1b:25:46:c2:de:5d:2d:99:
59:fe:3c:63:2d:59:3e:32:12:e7:c9:19:2b:97:0e:1a:95:48:
ed:23:3a:c0:7b:b7:4c:7f:d0:d3:3f:ae:fd:13:82:48:6c:78:
42:7b:b0:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:50:57 2026 by rpki-client