Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/735756-8857-424d-9524-20f531122b57/1/SdA41NOnW7-ev-owZGh7Xjs0b-M.mft
File: SdA41NOnW7-ev-owZGh7Xjs0b-M.mft (raw, json)
Hash identifier: WcmuMugqTRox51z9kDVAz1VvqjROVYWLEoR7vPnSvIc=
Subject key identifier: 84:92:32:29:96:B3:BC:59:58:64:F8:51:6F:2B:33:7B:33:89:77:79
Authority key identifier: 49:D0:38:D4:D3:A7:5B:BF:9E:BF:EA:30:64:68:7B:5E:3B:34:6F:E3
Certificate issuer: /CN=49d038d4d3a75bbf9ebfea3064687b5e3b346fe3
Certificate serial: 019D2703A48D6AEB39A368ACD58ADC6327CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SdA41NOnW7-ev-owZGh7Xjs0b-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/735756-8857-424d-9524-20f531122b57/1/SdA41NOnW7-ev-owZGh7Xjs0b-M.mft
Manifest number: 0EA7
Signing time: Wed 25 Mar 2026 22:00:43 +0000
Manifest this update: Wed 25 Mar 2026 22:00:43 +0000
Manifest next update: Thu 26 Mar 2026 22:00:43 +0000
Files and hashes: 1: SdA41NOnW7-ev-owZGh7Xjs0b-M.crl (hash: 9zrBJXe8EOz99JJOrub4cyUUUzzNTdUBEcknwi4wf5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/735756-8857-424d-9524-20f531122b57/1/SdA41NOnW7-ev-owZGh7Xjs0b-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/735756-8857-424d-9524-20f531122b57/1/SdA41NOnW7-ev-owZGh7Xjs0b-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/SdA41NOnW7-ev-owZGh7Xjs0b-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:a4:8d:6a:eb:39:a3:68:ac:d5:8a:dc:63:27:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49d038d4d3a75bbf9ebfea3064687b5e3b346fe3
Validity
Not Before: Mar 25 22:00:43 2026 GMT
Not After : Mar 26 22:00:43 2026 GMT
Subject: CN=8492322996b3bc595864f8516f2b337b33897779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:dd:08:e1:25:77:eb:48:11:d4:83:2a:9f:e3:
09:62:6c:89:83:ac:2f:f2:10:a0:23:d3:85:22:c9:
43:a5:aa:e8:1c:c6:8c:df:ca:e9:bf:b5:6e:d0:26:
5d:a2:ff:86:14:50:51:b1:22:cc:15:0b:04:7b:da:
0c:2f:ee:a7:18:63:48:f5:b6:d1:a3:be:2a:11:4e:
82:a0:ca:d4:4e:20:64:c8:00:97:13:de:6f:0d:6e:
04:d1:15:c4:87:ad:e7:bf:5e:80:f1:0f:f7:ba:34:
09:f6:da:74:7c:c4:2c:6e:0b:ae:3f:04:bf:3a:22:
ec:3d:72:b7:21:53:b2:2f:f3:9a:9f:7a:16:02:95:
72:fe:b3:35:4e:ca:1e:8f:71:e6:b5:74:cd:a1:d5:
2c:e2:80:4c:4a:eb:5d:8d:65:f6:02:6d:06:a9:76:
98:35:3f:df:7b:92:d4:aa:6d:d8:ce:97:87:6f:5f:
a3:db:32:7a:09:d2:39:61:6e:f7:ad:6e:92:a6:ae:
84:68:64:17:ad:9f:d7:19:91:1c:1a:ca:0f:cf:f2:
68:d6:c8:87:32:71:92:72:b2:d1:47:cf:ca:bf:03:
fd:c9:63:51:6a:73:7d:5e:5e:79:65:51:c7:64:bc:
11:c4:65:29:a9:d5:8e:e1:ca:19:97:d3:61:24:cc:
08:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:92:32:29:96:B3:BC:59:58:64:F8:51:6F:2B:33:7B:33:89:77:79
X509v3 Authority Key Identifier:
keyid:49:D0:38:D4:D3:A7:5B:BF:9E:BF:EA:30:64:68:7B:5E:3B:34:6F:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SdA41NOnW7-ev-owZGh7Xjs0b-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/735756-8857-424d-9524-20f531122b57/1/SdA41NOnW7-ev-owZGh7Xjs0b-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/735756-8857-424d-9524-20f531122b57/1/SdA41NOnW7-ev-owZGh7Xjs0b-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:cd:21:b2:64:58:ad:c4:8f:13:fb:87:56:42:d8:4d:26:0f:
f1:f1:61:8e:7a:0a:ac:9b:82:07:fd:ca:ae:6a:92:fe:d6:0d:
cd:ed:10:f7:d0:c6:53:64:43:c5:1b:4d:da:a5:f0:71:59:48:
e2:bb:75:14:a0:03:69:68:a0:26:2e:2e:cf:42:d6:32:8a:14:
42:12:0c:04:72:b7:2e:e5:87:17:ae:51:38:07:1f:95:49:2b:
f8:07:63:e7:ba:81:77:60:d5:0f:f3:35:89:69:f0:69:04:b9:
29:1f:89:9a:72:25:8a:c3:1b:b3:04:a1:ce:35:57:a9:1f:1c:
0c:af:e4:e9:3a:4d:e5:f0:d0:57:ec:e5:a4:0c:cf:83:a4:3d:
7a:5e:ae:21:a4:52:a1:fd:89:52:b0:a9:6e:88:0f:3a:64:60:
cb:c4:e3:cd:cd:87:c0:4d:56:83:b9:35:dd:e1:90:ef:2b:c6:
f6:f0:52:8e:e5:a0:81:fc:7e:03:1b:51:fe:5a:8c:aa:4e:9c:
2a:aa:d0:81:7d:e9:3d:b5:e3:85:10:fe:f1:13:b1:5f:92:6e:
02:8a:f6:ac:a7:12:03:bf:64:2b:4b:c4:25:16:d0:5c:83:32:
b0:9f:52:cc:9d:46:27:bf:86:6c:9e:79:fe:d8:d6:d4:7a:89:
ee:af:60:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:33:15 2026 by rpki-client