Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/e1c29a-a936-490b-9607-6f39cc6722c2/1/SBVxyrg7M5yGCR7HR8ITX85PZYc.mft
File: SBVxyrg7M5yGCR7HR8ITX85PZYc.mft (raw, json)
Hash identifier: xZKR7oezrqJzY2ZxwhYBR8TQkceJ0wWpipi7UQOwC1k=
Subject key identifier: AA:72:4A:36:1C:FD:72:06:85:43:2E:ED:31:47:06:59:EC:CF:07:B6
Authority key identifier: 48:15:71:CA:B8:3B:33:9C:86:09:1E:C7:47:C2:13:5F:CE:4F:65:87
Certificate issuer: /CN=481571cab83b339c86091ec747c2135fce4f6587
Certificate serial: 019D27A9491EACC62E4D8AF8EDE6192F2F34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBVxyrg7M5yGCR7HR8ITX85PZYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/e1c29a-a936-490b-9607-6f39cc6722c2/1/SBVxyrg7M5yGCR7HR8ITX85PZYc.mft
Manifest number: 172A
Signing time: Thu 26 Mar 2026 01:01:38 +0000
Manifest this update: Thu 26 Mar 2026 01:01:38 +0000
Manifest next update: Fri 27 Mar 2026 01:01:38 +0000
Files and hashes: 1: SBVxyrg7M5yGCR7HR8ITX85PZYc.crl (hash: jiQUDoMF4DU55kqf6KDIpvD4z+3N0m/mG3ZfO9OPEhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/e1c29a-a936-490b-9607-6f39cc6722c2/1/SBVxyrg7M5yGCR7HR8ITX85PZYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/e1c29a-a936-490b-9607-6f39cc6722c2/1/SBVxyrg7M5yGCR7HR8ITX85PZYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SBVxyrg7M5yGCR7HR8ITX85PZYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:49:1e:ac:c6:2e:4d:8a:f8:ed:e6:19:2f:2f:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=481571cab83b339c86091ec747c2135fce4f6587
Validity
Not Before: Mar 26 01:01:38 2026 GMT
Not After : Mar 27 01:01:38 2026 GMT
Subject: CN=aa724a361cfd720685432eed31470659eccf07b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5b:99:47:d1:1d:54:31:76:00:a7:5c:02:6f:
80:b8:6e:de:66:bb:92:5f:ed:50:65:84:3e:60:76:
33:b7:81:88:e6:ad:11:df:62:43:3f:c6:d3:3b:cb:
e8:4d:04:8e:13:c7:c5:89:f3:df:97:39:70:15:60:
32:15:12:51:f1:f0:2d:f9:fe:18:57:e5:eb:28:a0:
b1:89:93:58:5d:94:f3:48:d9:a4:99:8c:f6:e9:6c:
4a:12:c5:7b:85:1a:a5:ca:70:25:37:d7:40:a5:ed:
03:6f:b1:78:26:af:ea:6a:93:af:cd:b6:72:b3:16:
be:ad:4d:b0:5c:b1:d8:26:1b:31:3c:89:b2:a7:07:
36:bc:b1:8b:02:11:47:fa:da:69:30:63:77:11:29:
8f:4c:67:a2:52:4b:ac:33:84:bb:4f:b8:3f:a9:eb:
99:97:8e:81:ef:0a:02:a3:01:e5:a0:ae:3a:f1:e7:
4d:d3:d2:b7:69:ab:b4:18:11:cf:7b:66:ed:45:60:
5f:0d:89:d5:05:3b:c2:39:3a:bc:b6:f1:e5:90:e6:
44:31:87:30:c6:67:3c:15:74:d1:50:4f:00:3f:2c:
4d:d2:b3:2c:1e:bc:73:c5:2d:a7:70:af:52:22:83:
f5:07:14:37:d1:6e:ec:14:2b:ce:13:91:8a:14:07:
1e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:72:4A:36:1C:FD:72:06:85:43:2E:ED:31:47:06:59:EC:CF:07:B6
X509v3 Authority Key Identifier:
keyid:48:15:71:CA:B8:3B:33:9C:86:09:1E:C7:47:C2:13:5F:CE:4F:65:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBVxyrg7M5yGCR7HR8ITX85PZYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e1c29a-a936-490b-9607-6f39cc6722c2/1/SBVxyrg7M5yGCR7HR8ITX85PZYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e1c29a-a936-490b-9607-6f39cc6722c2/1/SBVxyrg7M5yGCR7HR8ITX85PZYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:50:41:c9:44:b6:29:89:fb:e3:c7:e1:1b:50:65:eb:fb:6f:
e1:e7:6a:06:e3:36:fd:21:b7:60:9c:12:41:c6:11:95:84:75:
9c:3c:17:6e:f5:a6:4d:a3:aa:26:8e:8e:bb:68:21:69:c3:a9:
fc:3b:67:57:39:17:ae:a6:cd:74:f8:05:06:28:30:17:8f:53:
b4:1d:84:70:11:3e:8a:e3:c9:1c:92:b8:e3:3b:29:93:6c:47:
cc:d1:e8:d1:bb:02:6a:71:2e:97:c3:7b:f8:28:60:88:6b:46:
b3:2e:3b:03:ff:0b:c8:52:30:c9:26:f0:09:5a:67:7f:bc:fe:
17:7a:85:37:c1:5b:c7:d3:24:34:52:86:d9:83:fb:ff:7d:99:
36:e5:c6:69:8a:83:ca:c6:90:d8:c9:c3:b9:8e:cd:23:62:0d:
f8:1b:1c:0e:c5:a8:40:75:45:1c:8f:1f:d5:5f:ef:51:4c:39:
59:36:08:54:50:0c:89:80:72:2d:e9:6e:9d:69:9d:bd:45:ae:
31:6e:bb:50:b7:07:4c:3f:4c:3a:56:76:d5:bd:38:ae:e2:85:
e4:56:22:13:ec:09:2e:7f:9e:f7:53:e1:19:67:f9:e6:6b:98:
07:45:b9:cb:ab:61:a8:cf:72:de:2e:a0:8b:fd:99:a2:3d:0a:
06:99:18:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:04:33 2026 by rpki-client