Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.mft
File: sjQvyZcw8qNNCe5LXukheHVs1NE.mft (raw, json)
Hash identifier: URvW2uIroyDVnzimCNV8nMFlMwKbDJcBpU3CAxXojjQ=
Subject key identifier: 36:CF:9A:2D:42:26:F1:53:7C:53:CA:0D:44:CC:B3:38:00:EC:9D:6C
Authority key identifier: B2:34:2F:C9:97:30:F2:A3:4D:09:EE:4B:5E:E9:21:78:75:6C:D4:D1
Certificate issuer: /CN=b2342fc99730f2a34d09ee4b5ee92178756cd4d1
Certificate serial: 019CAB6AE02ED3B6082C8CC296C5F52BF3E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sjQvyZcw8qNNCe5LXukheHVs1NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.mft
Manifest number: 08F2
Signing time: Sun 01 Mar 2026 22:00:33 +0000
Manifest this update: Sun 01 Mar 2026 22:00:33 +0000
Manifest next update: Mon 02 Mar 2026 22:00:33 +0000
Files and hashes: 1: sjQvyZcw8qNNCe5LXukheHVs1NE.crl (hash: u94J4TzMqGgwQXu6dq/+M82qHbICkRcm7QsNYTBSbkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sjQvyZcw8qNNCe5LXukheHVs1NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:e0:2e:d3:b6:08:2c:8c:c2:96:c5:f5:2b:f3:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2342fc99730f2a34d09ee4b5ee92178756cd4d1
Validity
Not Before: Mar 1 22:00:33 2026 GMT
Not After : Mar 2 22:00:33 2026 GMT
Subject: CN=36cf9a2d4226f1537c53ca0d44ccb33800ec9d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2f:7b:df:69:47:0d:d0:b1:a7:7f:09:86:37:
56:41:87:ad:62:5d:95:13:92:cd:09:8a:cb:6d:ed:
6f:2a:83:5b:a2:6d:3e:9e:cc:71:e8:03:49:88:14:
1e:87:92:fc:ad:cf:09:ca:83:f0:76:27:fd:1c:ad:
d3:48:5e:20:82:16:cf:71:c7:c6:73:a4:e1:04:2e:
ea:a6:10:bd:f2:89:ce:92:22:ad:53:5b:7d:dd:5f:
1f:e7:46:0d:9b:5e:8c:00:28:d2:23:e8:93:8c:72:
6c:fa:d6:b6:47:11:55:71:2b:95:6c:e7:ee:b3:81:
4c:e5:3b:5f:57:d5:51:af:4e:b1:9d:0b:ad:e9:52:
d1:f0:d8:97:55:fe:38:85:5b:ee:21:4a:1d:75:1a:
7c:30:0f:f2:a7:f1:da:90:e9:98:1e:52:f8:13:1b:
ee:b6:65:4a:50:90:20:d6:ea:0d:e1:c8:ee:88:78:
43:d9:38:02:46:80:83:51:85:32:a3:26:6e:7d:33:
29:87:0c:93:26:40:f9:af:9f:40:49:ad:e7:9e:ff:
2e:01:5b:75:05:74:03:61:bc:e7:42:25:5c:88:c7:
a7:7d:c3:fe:ce:dc:62:df:1d:31:dd:2f:fe:7c:9d:
88:4c:e0:6d:e7:07:ad:0c:6a:1e:4e:2d:89:0f:02:
fe:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:CF:9A:2D:42:26:F1:53:7C:53:CA:0D:44:CC:B3:38:00:EC:9D:6C
X509v3 Authority Key Identifier:
keyid:B2:34:2F:C9:97:30:F2:A3:4D:09:EE:4B:5E:E9:21:78:75:6C:D4:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjQvyZcw8qNNCe5LXukheHVs1NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:95:08:23:a9:f3:fd:34:f3:fc:7e:16:bc:aa:02:f1:69:f1:
38:99:52:75:4c:90:16:26:0b:28:ea:31:9e:a2:8e:cd:b3:77:
82:26:27:da:e9:f8:20:47:99:bf:1a:2d:60:9c:9b:57:cb:ae:
de:fb:7e:90:4e:d6:50:36:67:d9:ab:96:15:fa:52:d7:63:55:
01:a7:b7:c9:6f:d3:c8:29:67:9f:d2:02:aa:15:08:57:eb:83:
fe:59:1b:71:cf:9c:0a:9c:2c:58:29:11:ff:9d:12:ab:46:57:
13:5e:db:32:53:69:f7:32:fa:26:b4:59:40:37:88:49:c0:8d:
96:7c:02:d2:b7:9f:3e:ab:48:d5:8f:05:78:87:ed:2d:dc:86:
c6:b2:ba:9d:4f:27:f0:37:c6:56:39:6e:c4:12:cb:f2:d5:2e:
49:60:94:4b:89:da:34:fb:a3:40:6a:38:46:13:fb:78:28:9d:
ef:3b:68:61:e2:86:e9:5d:da:36:57:4a:eb:81:14:49:2b:46:
04:36:c9:b9:ba:f1:f0:e0:07:b7:e2:7b:21:fe:3a:5c:86:a5:
8a:b2:b3:ad:65:ac:c3:f7:e1:97:2a:7e:a4:ce:0c:3e:41:40:
98:bf:e7:63:d8:62:e5:e3:b9:c7:25:68:f4:9a:77:99:02:94:
6c:3a:b1:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:37:22 2026 by rpki-client