Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/79b797-0922-4df6-827d-3681f5b7f86b/1/SRHEgJhyKUvlgXsVnlnynlBgljY.mft
File: SRHEgJhyKUvlgXsVnlnynlBgljY.mft (raw, json)
Hash identifier: vA2ss7i8vr04QmdLGsDc43bMUEsELl0g9LLwQif7khY=
Subject key identifier: 79:CF:CC:F0:82:9E:1B:6E:DE:56:19:A2:C4:8A:A6:F0:B0:86:AE:CC
Authority key identifier: 49:11:C4:80:98:72:29:4B:E5:81:7B:15:9E:59:F2:9E:50:60:96:36
Certificate issuer: /CN=4911c4809872294be5817b159e59f29e50609636
Certificate serial: 019D29614419B1FD3F50A115B8CAFD627FB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SRHEgJhyKUvlgXsVnlnynlBgljY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/79b797-0922-4df6-827d-3681f5b7f86b/1/SRHEgJhyKUvlgXsVnlnynlBgljY.mft
Manifest number: 02D8
Signing time: Thu 26 Mar 2026 09:02:13 +0000
Manifest this update: Thu 26 Mar 2026 09:02:13 +0000
Manifest next update: Fri 27 Mar 2026 09:02:13 +0000
Files and hashes: 1: SRHEgJhyKUvlgXsVnlnynlBgljY.crl (hash: x9fRPQ4k/39NI3sIFl6XglojY/AEl3Hi3I7RzE5nVIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/79b797-0922-4df6-827d-3681f5b7f86b/1/SRHEgJhyKUvlgXsVnlnynlBgljY.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/79b797-0922-4df6-827d-3681f5b7f86b/1/SRHEgJhyKUvlgXsVnlnynlBgljY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SRHEgJhyKUvlgXsVnlnynlBgljY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:44:19:b1:fd:3f:50:a1:15:b8:ca:fd:62:7f:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4911c4809872294be5817b159e59f29e50609636
Validity
Not Before: Mar 26 09:02:13 2026 GMT
Not After : Mar 27 09:02:13 2026 GMT
Subject: CN=79cfccf0829e1b6ede5619a2c48aa6f0b086aecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:86:c1:9a:35:9b:c6:51:1f:ed:b0:c0:72:0a:
e5:e0:bc:14:1a:32:35:ed:63:aa:35:d0:6d:88:2e:
ce:13:bd:63:4e:ca:4a:b2:d9:36:2e:67:65:65:03:
d8:22:0e:28:4f:eb:5f:a3:0f:7e:0b:46:6a:53:82:
19:82:82:e6:ef:3d:a6:1b:c4:b7:ca:30:06:53:71:
c8:39:f7:5b:48:5d:db:f7:25:e9:a6:47:dd:85:c6:
f8:9b:2e:e0:81:25:d2:0d:86:76:94:03:38:f0:32:
d9:b9:ca:bc:cd:73:d5:59:28:af:4e:20:98:ce:1a:
27:51:bc:29:12:e6:e9:68:9e:a6:3b:a9:25:60:b1:
be:72:74:4a:24:1b:a1:d5:fd:11:7e:d6:49:ce:9e:
64:e9:e3:29:22:d6:7b:37:2d:0a:b7:45:7e:35:50:
a1:98:a7:c4:00:7c:f5:cb:c1:a0:6b:de:d6:44:05:
d3:29:61:be:b0:de:eb:74:aa:02:30:93:0f:93:d1:
5d:dd:24:3f:e8:c6:25:f2:d6:7c:6e:7f:78:83:40:
b5:34:2c:30:36:f2:3e:35:62:8a:5f:c6:fc:f6:59:
4f:6e:8b:67:19:b2:90:5e:58:f4:f0:c5:ce:ba:db:
ce:f5:34:dd:cf:6f:5c:4d:91:4d:70:cf:95:e9:72:
0d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:CF:CC:F0:82:9E:1B:6E:DE:56:19:A2:C4:8A:A6:F0:B0:86:AE:CC
X509v3 Authority Key Identifier:
keyid:49:11:C4:80:98:72:29:4B:E5:81:7B:15:9E:59:F2:9E:50:60:96:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SRHEgJhyKUvlgXsVnlnynlBgljY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/79b797-0922-4df6-827d-3681f5b7f86b/1/SRHEgJhyKUvlgXsVnlnynlBgljY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/79b797-0922-4df6-827d-3681f5b7f86b/1/SRHEgJhyKUvlgXsVnlnynlBgljY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:a6:f3:2b:b9:b8:60:a9:54:57:b6:4d:c9:7d:24:4c:40:eb:
32:a0:62:91:3a:38:90:54:08:24:b1:29:da:09:79:3d:1e:4c:
b3:06:76:17:3f:42:85:46:3e:43:41:27:bb:0c:95:4b:4f:5e:
5c:01:9b:96:5c:2c:a5:45:9b:d0:e6:7a:cf:cd:f0:a1:1f:ab:
40:f1:00:c8:9d:58:fd:20:98:45:47:eb:2e:7f:e3:13:b9:45:
fc:a3:5c:29:b7:0f:c0:77:ea:f0:9a:fc:38:cc:7e:7b:4a:e5:
cb:5a:26:13:44:64:5b:14:87:f4:0e:cd:35:95:4f:ee:a2:c5:
fc:6b:3f:69:18:bb:3f:24:92:28:7b:99:35:0a:be:d8:85:13:
a1:ac:cd:39:59:f9:4e:0b:3b:71:84:22:d8:cf:1d:ed:58:8b:
5e:a2:19:2d:f2:73:ea:d1:11:38:4c:89:a9:00:b7:4e:31:4b:
e5:70:ca:f1:54:36:d9:51:a8:ed:05:36:46:f6:60:da:fc:ea:
ed:19:53:c2:b3:7f:3a:11:af:43:15:f7:d4:e8:1c:08:51:5f:
26:5c:b2:3e:96:f8:00:1a:bc:fa:01:54:e2:97:46:d6:e4:63:
d9:dd:b2:4b:c4:4a:3b:b5:39:61:a8:b4:7d:70:db:c1:08:ff:
4e:42:17:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:44:26 2026 by rpki-client