Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.mft
File: sCBx_ye9CehFJRchNknb9nvK1dE.mft (raw, json)
Hash identifier: gVqrsob2o3pr2E4sL0OfvekW78PQbWqMTEply18HyJU=
Subject key identifier: 03:C3:1F:C1:84:49:DA:9C:D3:13:9A:D9:85:DC:B8:8C:D7:6C:71:A7
Authority key identifier: B0:20:71:FF:27:BD:09:E8:45:25:17:21:36:49:DB:F6:7B:CA:D5:D1
Certificate issuer: /CN=b02071ff27bd09e8452517213649dbf67bcad5d1
Certificate serial: 019D270409A172717A784E2F0B377270C337
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCBx_ye9CehFJRchNknb9nvK1dE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.mft
Manifest number: 0512
Signing time: Wed 25 Mar 2026 22:01:09 +0000
Manifest this update: Wed 25 Mar 2026 22:01:09 +0000
Manifest next update: Thu 26 Mar 2026 22:01:09 +0000
Files and hashes: 1: sCBx_ye9CehFJRchNknb9nvK1dE.crl (hash: 328rTdtjZ56VG+WXzJrKriD54Ah1ZJaXSfwYffOLOP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCBx_ye9CehFJRchNknb9nvK1dE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:09:a1:72:71:7a:78:4e:2f:0b:37:72:70:c3:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b02071ff27bd09e8452517213649dbf67bcad5d1
Validity
Not Before: Mar 25 22:01:09 2026 GMT
Not After : Mar 26 22:01:09 2026 GMT
Subject: CN=03c31fc18449da9cd3139ad985dcb88cd76c71a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:30:52:f3:59:7e:66:7b:17:ec:33:8e:e7:7e:
c9:1c:96:88:d3:5a:bc:6d:a0:ec:e8:1d:6a:51:43:
ef:1a:fc:ec:51:a8:3a:a6:a1:5f:56:ce:d7:2a:d3:
63:d3:9c:e3:b5:af:11:86:02:18:14:0f:c2:05:bf:
30:25:a1:53:7d:c8:cf:9c:ff:b9:ba:a7:32:2e:de:
1c:0e:2c:97:e4:90:db:a7:01:8f:55:ed:df:75:2a:
6c:b3:13:61:0a:fc:b4:f9:23:91:d8:61:49:18:6b:
75:a8:15:e7:1e:5a:9b:16:58:13:18:76:dc:fa:e2:
73:85:da:39:6f:21:ff:dc:93:84:4b:21:42:18:03:
f6:77:77:5f:a6:0b:53:f8:cd:2d:90:f8:a8:1f:07:
a4:1d:03:e7:a1:58:6a:39:53:e2:a3:8f:b9:7f:d2:
b5:12:e0:15:00:1e:f5:a8:fa:4c:64:22:77:20:0f:
a0:9a:58:26:b4:7b:f2:42:fd:39:5b:b3:05:09:c6:
2d:b2:87:cb:79:64:dc:f2:f5:6c:fe:c2:09:56:c5:
60:04:0a:78:66:f3:56:af:22:4c:10:93:5c:af:e8:
57:e3:1c:0c:f0:9a:30:f3:aa:44:0b:20:cf:2b:fb:
2d:b7:7a:91:4c:a8:c4:c8:4b:8f:83:18:d9:34:c7:
c8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C3:1F:C1:84:49:DA:9C:D3:13:9A:D9:85:DC:B8:8C:D7:6C:71:A7
X509v3 Authority Key Identifier:
keyid:B0:20:71:FF:27:BD:09:E8:45:25:17:21:36:49:DB:F6:7B:CA:D5:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCBx_ye9CehFJRchNknb9nvK1dE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:d1:af:e4:e3:59:1d:23:58:07:1a:89:85:8b:f7:8c:19:4a:
33:7e:f1:c2:84:27:e3:fe:e4:db:c0:de:91:ad:8c:06:d7:e2:
0c:2b:2e:56:ed:04:fa:b4:5f:91:69:5f:9a:d0:1e:15:21:d6:
41:59:26:c3:61:be:f2:05:d6:04:ec:23:70:95:12:e8:46:27:
10:27:b2:8e:f0:b4:f3:a1:05:ec:4f:a0:ac:b1:9e:d7:89:10:
8f:15:ac:18:e1:a5:8d:8d:cb:4c:0d:aa:62:bd:9a:99:9f:0b:
b4:b5:48:b1:f2:60:60:1f:10:b5:7c:63:a5:66:d7:68:f6:f1:
b7:1b:be:2e:0a:58:60:eb:0c:e6:f9:d1:50:ac:04:6f:45:30:
53:47:c6:7f:e6:5a:43:9d:e5:ee:7d:19:4e:5e:c0:f2:a3:a4:
8a:37:f4:f1:b7:5b:8b:ca:99:27:0d:83:54:a0:f1:38:69:a2:
c3:fc:e4:4b:52:ab:a4:40:dd:cf:0a:50:3f:1f:d7:a4:24:6b:
e9:f5:d3:b4:c3:37:6b:1b:ec:bb:d4:a8:08:16:05:d4:88:55:
a3:fb:3f:8c:04:a5:71:21:d8:b5:80:bd:e4:5b:fd:67:e1:28:
97:db:58:68:0e:b8:17:3d:46:c4:d8:6e:59:76:87:c4:3b:b4:
9e:fb:f5:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:41:46 2026 by rpki-client