Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.mft
File: rSRGM37TPO3jTe_1VxBdxxwDqRY.mft (raw, json)
Hash identifier: TaKWT2gM+Xal7VlDBglJv36eu6Vo86eoebWjTKy30Ds=
Subject key identifier: 8E:E6:46:73:6A:55:A4:15:DB:CE:9B:72:E6:9F:DE:FB:51:97:DD:9E
Authority key identifier: AD:24:46:33:7E:D3:3C:ED:E3:4D:EF:F5:57:10:5D:C7:1C:03:A9:16
Certificate issuer: /CN=ad2446337ed33cede34deff557105dc71c03a916
Certificate serial: 019CA97D1AF27F3CEF1BD420F77ECF77415F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSRGM37TPO3jTe_1VxBdxxwDqRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.mft
Manifest number: 07D6
Signing time: Sun 01 Mar 2026 13:01:14 +0000
Manifest this update: Sun 01 Mar 2026 13:01:14 +0000
Manifest next update: Mon 02 Mar 2026 13:01:14 +0000
Files and hashes: 1: rSRGM37TPO3jTe_1VxBdxxwDqRY.crl (hash: Ghi8DuFbyzDB6sqN06CxNoo8aG07UqWylcgRSoxLrDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSRGM37TPO3jTe_1VxBdxxwDqRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7d:1a:f2:7f:3c:ef:1b:d4:20:f7:7e:cf:77:41:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2446337ed33cede34deff557105dc71c03a916
Validity
Not Before: Mar 1 13:01:14 2026 GMT
Not After : Mar 2 13:01:14 2026 GMT
Subject: CN=8ee646736a55a415dbce9b72e69fdefb5197dd9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:19:d4:f2:73:30:f6:a6:64:c8:e3:8a:80:8c:
73:70:4f:74:c6:35:4c:d3:b7:8a:94:9f:0d:9d:17:
c3:ae:94:c8:9f:f5:7e:f6:73:42:b6:43:56:af:93:
76:c4:da:90:03:8a:ad:3d:1b:77:9e:b6:b2:14:7c:
fd:5d:89:dd:43:7e:b7:ee:e1:2c:6f:f0:79:4e:12:
fd:97:cf:65:94:05:df:68:21:0c:be:d7:33:f2:31:
92:1b:aa:41:b7:d0:c0:84:8e:1b:46:3c:8f:7e:5c:
b1:c4:5d:41:c1:cd:66:84:2e:65:09:e8:cc:2d:68:
4e:a0:bd:25:82:e1:a5:95:5e:2e:93:f6:69:00:e5:
20:9b:24:cd:42:2e:91:1c:cf:a0:72:34:91:e0:40:
12:f4:73:02:0b:3e:63:e5:8c:6d:b9:e3:96:86:f5:
a7:e5:ba:4b:04:d8:77:b4:2c:fa:e2:9b:8c:08:1c:
62:56:87:04:2a:ab:b1:0d:53:b3:a8:fc:73:99:22:
52:8d:49:76:0b:dc:54:0b:22:54:8b:eb:ff:ea:5d:
2a:50:d0:22:82:b5:e0:57:a6:e5:41:a5:e4:1a:7d:
9c:69:b5:5e:d3:6f:53:0c:53:99:09:ee:89:bf:10:
a3:fb:11:bb:41:0d:62:e6:f4:34:89:c6:74:b8:0f:
c2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E6:46:73:6A:55:A4:15:DB:CE:9B:72:E6:9F:DE:FB:51:97:DD:9E
X509v3 Authority Key Identifier:
keyid:AD:24:46:33:7E:D3:3C:ED:E3:4D:EF:F5:57:10:5D:C7:1C:03:A9:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSRGM37TPO3jTe_1VxBdxxwDqRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:35:13:83:35:07:d9:f8:35:09:fc:c9:bf:85:0f:6a:88:fe:
43:4a:44:5a:c2:88:d9:37:9f:6d:c2:e8:76:bc:dc:8d:ad:af:
5b:d3:83:37:4a:43:a1:8b:bc:9c:64:ff:29:7e:1a:47:85:a5:
8a:53:08:b1:ce:d7:ad:4a:dd:2a:88:76:16:75:60:2a:e5:d1:
3c:dd:00:bc:ba:a0:7b:9c:ce:9d:ec:78:90:2d:8e:53:8e:7e:
12:9b:f0:b4:53:f5:bd:f9:ba:e0:11:28:76:59:dd:3b:7a:b8:
b1:e3:c3:01:ce:41:95:87:37:bb:83:3c:d5:b4:51:74:a6:61:
0b:dd:bd:a2:80:bb:46:f2:8b:da:fd:e8:95:76:b5:a1:c8:a5:
fd:84:b3:00:e0:7e:ad:27:b7:e3:30:96:19:e4:4f:0c:a5:88:
51:f2:9e:79:9a:e4:db:ba:a9:c5:cc:80:da:a9:b2:2d:60:bc:
9c:3b:27:7e:b7:a7:aa:25:28:4d:d9:fc:73:8f:4a:5f:07:8d:
2e:21:8d:ef:9e:93:3e:13:0b:33:cd:f7:21:8f:c2:aa:a4:5e:
5a:13:4a:91:68:01:6c:32:73:0f:cc:c9:aa:28:ed:cf:f6:c2:
e9:b7:82:a7:b6:7f:70:8e:29:03:6f:a5:c2:8d:35:f9:f7:21:
82:70:01:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:59:02 2026 by rpki-client