Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.mft
File: rSRGM37TPO3jTe_1VxBdxxwDqRY.mft (raw, json)
Hash identifier: 8EkM3js6bdBnV0n5BmCpIz/sc2J4ukoghP9k7ebvn8s=
Subject key identifier: 31:D6:14:4C:5A:9C:22:90:89:EE:6D:18:04:05:0A:03:B6:46:1F:B2
Authority key identifier: AD:24:46:33:7E:D3:3C:ED:E3:4D:EF:F5:57:10:5D:C7:1C:03:A9:16
Certificate issuer: /CN=ad2446337ed33cede34deff557105dc71c03a916
Certificate serial: 019D98F4E999B33A8042C23B801D78DB6A36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSRGM37TPO3jTe_1VxBdxxwDqRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.mft
Manifest number: 0852
Signing time: Fri 17 Apr 2026 01:01:20 +0000
Manifest this update: Fri 17 Apr 2026 01:01:20 +0000
Manifest next update: Sat 18 Apr 2026 01:01:20 +0000
Files and hashes: 1: rSRGM37TPO3jTe_1VxBdxxwDqRY.crl (hash: YX1urSNeNDkQHGEDOT6e3H7I3I9Gfh5LOaZEb5SmyQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSRGM37TPO3jTe_1VxBdxxwDqRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:e9:99:b3:3a:80:42:c2:3b:80:1d:78:db:6a:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2446337ed33cede34deff557105dc71c03a916
Validity
Not Before: Apr 17 01:01:20 2026 GMT
Not After : Apr 18 01:01:20 2026 GMT
Subject: CN=31d6144c5a9c229089ee6d1804050a03b6461fb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2f:84:96:67:41:da:d6:6c:03:7b:90:32:8c:
fa:41:33:8e:b8:69:7a:9b:94:10:14:04:56:06:0b:
2f:17:72:dc:4b:f4:38:a4:4f:b5:bb:be:c5:98:48:
ef:e8:a0:0a:6d:c7:c8:1d:50:ee:57:26:36:7d:8e:
f8:a5:c0:3c:58:5f:16:eb:96:9d:ec:99:97:95:05:
34:54:38:0c:6e:86:d8:35:b3:f9:10:72:2d:08:cb:
01:59:ae:61:54:83:19:17:10:b7:b4:e8:ee:32:a3:
5d:c2:db:a4:8f:41:02:ff:b3:7a:5f:1c:f2:d6:aa:
7f:fa:1d:05:8a:35:fb:b1:de:b7:29:86:dd:b8:53:
90:93:5a:3d:3b:ff:ac:10:e7:8c:89:f6:be:bb:08:
89:c3:17:1d:72:f9:e5:43:7b:30:2a:f2:72:11:43:
52:ea:09:9e:7f:49:b6:c2:6e:19:98:f7:90:a0:cd:
34:8e:43:b8:8a:59:6a:5b:8a:8f:c8:15:e7:37:eb:
af:1c:a6:9c:4d:f9:64:10:97:7f:86:ed:78:a1:57:
ed:7b:90:af:6d:52:e7:2a:f8:1e:b4:d6:1d:a0:fc:
40:33:bf:46:c0:f7:a9:a3:5b:ab:d2:c5:95:3b:f6:
32:e8:8e:0d:92:d7:4c:36:d0:74:32:59:bb:ae:f8:
f8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:D6:14:4C:5A:9C:22:90:89:EE:6D:18:04:05:0A:03:B6:46:1F:B2
X509v3 Authority Key Identifier:
keyid:AD:24:46:33:7E:D3:3C:ED:E3:4D:EF:F5:57:10:5D:C7:1C:03:A9:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSRGM37TPO3jTe_1VxBdxxwDqRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:b3:3f:c0:86:b7:3e:8a:ea:2c:3b:bd:ef:76:57:4b:25:bc:
ed:c9:cd:d8:89:d0:e1:67:a7:fb:e6:4b:9d:20:23:ce:79:c4:
a7:65:79:1c:05:5d:49:11:7e:79:af:76:91:38:76:e9:c9:d3:
8d:1f:d3:54:08:02:c0:f2:5c:27:72:3d:52:87:d8:cb:1a:a3:
4f:36:11:ca:1a:68:4f:93:41:4b:0a:17:f3:b3:64:90:c4:ae:
61:3f:6f:45:49:0e:ea:f4:cb:25:b9:2f:a9:42:b5:a8:79:bd:
96:7e:81:44:94:fc:02:55:8e:75:4a:50:25:66:e5:07:f0:65:
c8:d6:c9:eb:53:d4:1c:6e:ee:4e:eb:3e:01:9b:e8:33:ff:b4:
8a:19:01:04:55:75:fa:72:4b:62:24:a9:e9:dc:7f:12:77:bf:
d8:83:81:b0:08:a2:7b:c7:64:ea:79:b8:68:e0:0f:4a:01:54:
28:16:ea:a6:ca:aa:3e:d8:fc:d0:b8:78:e3:66:75:99:61:0a:
d8:d2:d0:b1:45:b1:a3:66:cd:2c:53:b3:8c:5f:7d:ce:d4:c8:
66:5e:81:39:d2:5e:f8:7e:bb:f5:cd:3c:a0:78:7d:b0:85:2a:
00:b0:3e:81:12:4f:f0:01:8b:b2:c4:5f:cc:45:6d:7b:60:04:
52:f2:31:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9OmZszqAQsI7gB1422o2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMjQ0NjMzN2VkMzNjZWRlMzRkZWZmNTU3MTA1ZGM3MWMw
M2E5MTYwHhcNMjYwNDE3MDEwMTIwWhcNMjYwNDE4MDEwMTIwWjAzMTEwLwYDVQQD
EygzMWQ2MTQ0YzVhOWMyMjkwODllZTZkMTgwNDA1MGEwM2I2NDYxZmIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0y+ElmdB2tZsA3uQMoz6QTOOuGl6
m5QQFARWBgsvF3LcS/Q4pE+1u77FmEjv6KAKbcfIHVDuVyY2fY74pcA8WF8W65ad
7JmXlQU0VDgMbobYNbP5EHItCMsBWa5hVIMZFxC3tOjuMqNdwtukj0EC/7N6Xxzy
1qp/+h0FijX7sd63KYbduFOQk1o9O/+sEOeMifa+uwiJwxcdcvnlQ3swKvJyEUNS
6gmef0m2wm4ZmPeQoM00jkO4illqW4qPyBXnN+uvHKacTflkEJd/hu14oVfte5Cv
bVLnKvgetNYdoPxAM79GwPepo1ur0sWVO/Yy6I4NktdMNtB0Mlm7rvj43QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDHWFExanCKQie5tGAQFCgO2Rh+yMB8GA1UdIwQY
MBaAFK0kRjN+0zzt403v9VcQXcccA6kWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclNSR00zN1RQTzNqVGVfMVZ4QmR4eHdEcVJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9jZmE3NmMtMDVjYy00M2RjLTk4ZjEt
ZTcwN2RlYzdiZDZjLzEvclNSR00zN1RQTzNqVGVfMVZ4QmR4eHdEcVJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9jZmE3NmMtMDVjYy00M2RjLTk4ZjEtZTcwN2RlYzdiZDZj
LzEvclNSR00zN1RQTzNqVGVfMVZ4QmR4eHdEcVJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD7M/wIa3
PorqLDu973ZXSyW87cnN2InQ4Wen++ZLnSAjznnEp2V5HAVdSRF+ea92kTh26cnT
jR/TVAgCwPJcJ3I9UofYyxqjTzYRyhpoT5NBSwoX87NkkMSuYT9vRUkO6vTLJbkv
qUK1qHm9ln6BRJT8AlWOdUpQJWblB/BlyNbJ61PUHG7uTus+AZvoM/+0ihkBBFV1
+nJLYiSp6dx/Ene/2IOBsAiie8dk6nm4aOAPSgFUKBbqpsqqPtj80Lh442Z1mWEK
2NLQsUWxo2bNLFOzjF99ztTIZl6BOdJe+H679c08oHh9sIUqALA+gRJP8AGLssRf
zEVte2AEUvIx5g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:08:49 2026 by rpki-client