Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/dadf34-1f3f-4cea-8001-e3d5d7ef4232/1/sUgIa40dx_EOND_RZXGSOadVvTQ.mft
File: sUgIa40dx_EOND_RZXGSOadVvTQ.mft (raw, json)
Hash identifier: tqN8r56djxpVDmdVQxXWLVbZukWb9KY/WCQVEWjpR70=
Subject key identifier: 35:83:7E:7A:3E:FF:29:CE:81:FB:D5:AB:A2:80:29:AB:42:C5:31:19
Authority key identifier: B1:48:08:6B:8D:1D:C7:F1:0E:34:3F:D1:65:71:92:39:A7:55:BD:34
Certificate issuer: /CN=b148086b8d1dc7f10e343fd165719239a755bd34
Certificate serial: 019D277258F2FE9F478E2587335C53B4EC17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUgIa40dx_EOND_RZXGSOadVvTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/dadf34-1f3f-4cea-8001-e3d5d7ef4232/1/sUgIa40dx_EOND_RZXGSOadVvTQ.mft
Manifest number: 1202
Signing time: Thu 26 Mar 2026 00:01:38 +0000
Manifest this update: Thu 26 Mar 2026 00:01:38 +0000
Manifest next update: Fri 27 Mar 2026 00:01:38 +0000
Files and hashes: 1: sUgIa40dx_EOND_RZXGSOadVvTQ.crl (hash: YWFXB4zgaxFOw1dYZZV3c5MvT3gPF7xu5tfpNl+Gd+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/dadf34-1f3f-4cea-8001-e3d5d7ef4232/1/sUgIa40dx_EOND_RZXGSOadVvTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/dadf34-1f3f-4cea-8001-e3d5d7ef4232/1/sUgIa40dx_EOND_RZXGSOadVvTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sUgIa40dx_EOND_RZXGSOadVvTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:58:f2:fe:9f:47:8e:25:87:33:5c:53:b4:ec:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b148086b8d1dc7f10e343fd165719239a755bd34
Validity
Not Before: Mar 26 00:01:38 2026 GMT
Not After : Mar 27 00:01:38 2026 GMT
Subject: CN=35837e7a3eff29ce81fbd5aba28029ab42c53119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:eb:a0:ba:de:cc:40:a5:ac:13:ee:ec:6d:8c:
42:3d:a4:f2:b1:c0:ea:21:3a:80:de:75:8d:ce:b6:
b4:29:cd:da:ed:2c:ee:7a:23:a7:9d:10:b0:83:b9:
3f:f2:4e:dc:5c:5a:5f:9b:d8:49:75:13:a5:4e:5d:
5f:6d:75:9f:6c:25:9d:a1:16:f2:df:f5:a5:0c:a7:
3d:a1:a8:f8:26:0a:a5:91:29:1a:ba:62:e6:3c:9a:
c8:09:17:98:da:a5:a0:c6:d0:a9:cd:03:d5:af:c7:
11:68:0e:e5:65:d5:68:fb:4e:37:eb:97:f5:85:1d:
fe:91:2d:a0:09:26:28:f9:3f:76:22:67:95:73:b5:
13:26:74:c1:3b:73:8f:fb:e0:2a:47:1d:8a:30:21:
66:b3:ef:cd:4f:0c:6a:18:63:6f:f2:70:ff:38:0e:
71:78:85:32:5c:2c:f8:14:ce:b5:a1:18:e8:37:87:
24:7b:e2:96:da:c2:b0:cd:a0:1e:7a:39:3b:9a:c6:
aa:76:05:66:5b:56:ea:24:d7:ca:42:e3:97:8e:17:
ca:76:24:30:7c:a1:26:83:2d:11:bc:a9:bc:b9:33:
6b:3f:d2:06:d0:bf:0a:f2:62:13:d6:c1:a1:63:4b:
d0:c8:67:a9:fb:b4:49:0c:c1:ea:ad:f6:2e:78:65:
cd:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:83:7E:7A:3E:FF:29:CE:81:FB:D5:AB:A2:80:29:AB:42:C5:31:19
X509v3 Authority Key Identifier:
keyid:B1:48:08:6B:8D:1D:C7:F1:0E:34:3F:D1:65:71:92:39:A7:55:BD:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUgIa40dx_EOND_RZXGSOadVvTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dadf34-1f3f-4cea-8001-e3d5d7ef4232/1/sUgIa40dx_EOND_RZXGSOadVvTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dadf34-1f3f-4cea-8001-e3d5d7ef4232/1/sUgIa40dx_EOND_RZXGSOadVvTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:49:8b:9f:c3:3f:59:7b:c1:ec:c6:52:2b:39:3f:8e:fb:f9:
79:c3:34:b4:34:04:93:18:ea:20:64:a6:ac:17:63:eb:3f:97:
ea:16:a5:61:0b:c7:94:f1:22:be:e8:d2:c3:02:e4:11:f3:54:
8f:44:aa:68:e5:33:48:dc:68:66:11:ee:5d:79:8b:dd:e1:80:
03:63:ba:35:a3:9f:35:98:c1:51:a7:6d:1f:98:a6:85:6e:88:
b2:3f:a9:ef:9f:df:0a:ae:21:75:c9:0a:05:a0:bf:88:9f:1b:
d5:5e:12:5c:1f:8b:d3:11:50:f5:3f:84:0b:65:eb:4f:64:d5:
76:64:29:65:d2:f7:87:1b:40:70:2e:96:81:1a:38:8e:5a:20:
89:52:e1:0d:c2:a6:2c:22:3c:81:b4:43:fa:36:69:dc:19:f6:
1b:66:99:63:b7:17:a7:29:fd:fd:0a:29:bb:04:91:8d:cc:81:
56:4d:ce:72:85:20:a3:50:8f:ee:f2:9b:90:15:ba:68:cc:d7:
dd:57:9f:6f:dd:ed:f6:2a:48:af:b9:32:ca:8d:a0:ed:31:d1:
86:26:b4:22:a8:99:00:c1:77:38:e7:eb:f0:88:0b:7c:ea:e4:
a6:ad:71:71:0f:48:89:56:fd:e9:d6:f8:1a:4f:1f:87:49:42:
2f:0e:8a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:45:00 2026 by rpki-client