Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/0ceec3-482a-41a5-97eb-bfe1e173d8f0/1/SVfItkDqWWxdEac7PSZu54w_Cds.mft
File: SVfItkDqWWxdEac7PSZu54w_Cds.mft (raw, json)
Hash identifier: LJyIq9A1yYT8ZT9TsipjaYWdUO/lME08Zy5nHqk7pQs=
Subject key identifier: F1:F8:CE:21:EF:CD:73:A5:E1:A3:8A:3A:11:03:05:16:09:60:2A:7B
Authority key identifier: 49:57:C8:B6:40:EA:59:6C:5D:11:A7:3B:3D:26:6E:E7:8C:3F:09:DB
Certificate issuer: /CN=4957c8b640ea596c5d11a73b3d266ee78c3f09db
Certificate serial: 019D27A8A699EC93309D1B86C8EC9DA82340
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SVfItkDqWWxdEac7PSZu54w_Cds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/0ceec3-482a-41a5-97eb-bfe1e173d8f0/1/SVfItkDqWWxdEac7PSZu54w_Cds.mft
Manifest number: 0B14
Signing time: Thu 26 Mar 2026 01:00:57 +0000
Manifest this update: Thu 26 Mar 2026 01:00:57 +0000
Manifest next update: Fri 27 Mar 2026 01:00:57 +0000
Files and hashes: 1: SVfItkDqWWxdEac7PSZu54w_Cds.crl (hash: nfDN1WFSr4jtUzjMa8tNq0FcDNtBphWZ+xgwhaijeJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/0ceec3-482a-41a5-97eb-bfe1e173d8f0/1/SVfItkDqWWxdEac7PSZu54w_Cds.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/0ceec3-482a-41a5-97eb-bfe1e173d8f0/1/SVfItkDqWWxdEac7PSZu54w_Cds.mft
rsync://rpki.ripe.net/repository/DEFAULT/SVfItkDqWWxdEac7PSZu54w_Cds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:a6:99:ec:93:30:9d:1b:86:c8:ec:9d:a8:23:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4957c8b640ea596c5d11a73b3d266ee78c3f09db
Validity
Not Before: Mar 26 01:00:57 2026 GMT
Not After : Mar 27 01:00:57 2026 GMT
Subject: CN=f1f8ce21efcd73a5e1a38a3a1103051609602a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6a:29:4f:f5:bd:5b:ca:33:f8:7b:04:f9:98:
16:e5:6b:ed:97:3e:ae:63:49:a6:fb:f7:39:9c:e2:
8d:07:96:47:cf:37:ac:68:a1:cd:31:2c:de:4f:60:
ad:a2:45:82:a0:09:ae:fe:8f:b4:79:d2:e0:d5:4d:
5e:7e:b4:46:c0:06:89:98:75:ac:b9:ed:d8:c9:c5:
d9:f7:6a:f2:e9:eb:19:e3:98:d1:64:de:b2:17:ac:
99:d6:d4:8e:59:71:b0:bb:a0:6a:dc:dc:42:a3:5e:
01:82:ec:3b:57:21:40:40:6a:88:ca:75:8d:c9:88:
a5:57:65:e3:28:28:7c:cc:ee:46:37:27:0e:d2:45:
fd:80:8b:94:fb:a7:29:1f:40:7a:0b:3e:1f:02:3c:
16:e8:70:4b:d1:ae:cc:53:a0:b5:58:16:5a:c4:2c:
8b:a2:c4:e5:3f:f4:6a:bd:2e:bd:8f:7e:f4:6c:66:
ce:5b:75:af:67:4c:ab:b2:0e:99:f4:ea:6a:e3:37:
ac:d0:d7:6e:49:2a:5f:b7:04:98:ec:f6:6d:6f:6e:
f2:92:4a:6c:fc:d9:58:3c:0a:5b:2e:23:4e:c4:30:
eb:92:33:fa:f9:1e:86:73:ce:da:68:a0:9f:f9:9a:
01:26:7d:5c:ab:f5:cb:45:0b:1d:d0:54:1b:31:17:
c4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F8:CE:21:EF:CD:73:A5:E1:A3:8A:3A:11:03:05:16:09:60:2A:7B
X509v3 Authority Key Identifier:
keyid:49:57:C8:B6:40:EA:59:6C:5D:11:A7:3B:3D:26:6E:E7:8C:3F:09:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SVfItkDqWWxdEac7PSZu54w_Cds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0ceec3-482a-41a5-97eb-bfe1e173d8f0/1/SVfItkDqWWxdEac7PSZu54w_Cds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0ceec3-482a-41a5-97eb-bfe1e173d8f0/1/SVfItkDqWWxdEac7PSZu54w_Cds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:e0:f5:0b:2b:be:79:7e:ad:08:5d:47:2c:b9:02:18:79:fa:
1c:45:05:83:4a:d1:e4:66:54:6c:26:0f:fe:4d:ff:a5:51:72:
b5:4c:53:16:9d:f0:60:fa:9d:8a:86:2c:36:af:51:7b:8c:c5:
ef:5f:f5:6f:ef:29:98:8b:72:bd:81:56:2e:a8:08:3c:69:71:
22:ab:a6:31:b7:97:e4:4a:9d:9d:bc:76:76:c3:5b:f6:bb:49:
ec:2c:fe:a2:0f:54:73:48:90:47:11:bd:51:6f:8c:8f:dc:fe:
0a:e8:31:d8:94:df:4e:ce:73:e2:af:49:66:fe:04:bb:2f:b2:
1e:c4:c4:7f:e1:05:66:3d:3a:17:59:00:f4:ed:a7:ad:4a:b0:
86:09:8b:e7:ed:64:54:81:de:f4:33:d4:a5:ce:e5:49:56:5c:
b0:2e:98:a8:f5:a9:30:2e:6a:9b:54:f6:6d:a1:0b:c4:87:cd:
99:ad:ef:0b:8e:16:a9:af:4e:1c:82:24:0d:50:41:48:d7:05:
f2:1c:e0:b4:cc:4b:dc:a2:77:2b:6c:46:fd:01:a7:7e:15:e6:
25:c5:f3:28:6d:c1:11:f7:a5:16:05:22:f9:e3:64:41:92:b0:
7b:6a:88:97:dd:71:5e:1d:9b:2d:93:fe:37:64:af:47:69:02:
38:43:a5:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:59:09 2026 by rpki-client