Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.mft
File: SP34H7869DBnKkv2Qnc7lZxFCKY.mft (raw, json)
Hash identifier: 6UB/i2q/c7skm6Kkf1y6fhI8yJo7wevkTD7UxIgXDq4=
Subject key identifier: 70:EF:F8:22:FC:96:8A:86:27:42:54:EB:66:05:3B:30:BA:FE:D8:6F
Authority key identifier: 48:FD:F8:1F:BF:3A:F4:30:67:2A:4B:F6:42:77:3B:95:9C:45:08:A6
Certificate issuer: /CN=48fdf81fbf3af430672a4bf642773b959c4508a6
Certificate serial: 019D99D01C07A4C37D0C65E4D48AC2F3C72D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SP34H7869DBnKkv2Qnc7lZxFCKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.mft
Manifest number: 1474
Signing time: Fri 17 Apr 2026 05:00:45 +0000
Manifest this update: Fri 17 Apr 2026 05:00:45 +0000
Manifest next update: Sat 18 Apr 2026 05:00:45 +0000
Files and hashes: 1: SP34H7869DBnKkv2Qnc7lZxFCKY.crl (hash: c6vMPcbLo2kS3AsFut3EjkjqBzqzqJ1vXYBFYqxTewk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SP34H7869DBnKkv2Qnc7lZxFCKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:1c:07:a4:c3:7d:0c:65:e4:d4:8a:c2:f3:c7:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48fdf81fbf3af430672a4bf642773b959c4508a6
Validity
Not Before: Apr 17 05:00:45 2026 GMT
Not After : Apr 18 05:00:45 2026 GMT
Subject: CN=70eff822fc968a86274254eb66053b30bafed86f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:72:89:b7:6a:de:72:3a:ab:70:b7:e0:54:52:
0d:03:07:53:db:da:3c:45:18:c2:c7:64:cc:da:05:
3d:ac:b3:cd:b3:e3:36:6e:91:b2:53:4e:fd:08:b3:
90:d7:20:18:42:d8:3e:50:d1:2e:f8:6f:88:5c:57:
53:ab:67:88:12:86:69:70:f2:b4:3a:8a:35:03:2e:
48:d5:ff:26:98:67:1d:fc:f7:ed:f8:c8:c8:7e:f3:
ca:8d:8b:01:85:5b:94:26:1d:7d:78:24:70:f4:38:
ef:f1:c1:bf:0b:42:de:77:b0:8c:7a:a8:26:cf:2f:
6c:d9:c3:7b:f5:ca:42:e4:5b:26:24:68:33:0a:36:
73:3d:de:2d:dd:31:6d:73:97:61:e6:bf:40:d0:aa:
6b:7b:39:83:7a:47:0c:2d:3f:67:30:95:d6:6e:3f:
e8:ed:f1:9d:3a:78:20:3d:90:9d:a0:f6:c0:76:12:
8b:85:3e:10:fc:44:37:06:f1:6a:0a:fd:00:56:2c:
d5:be:ad:1d:dc:53:3f:60:2f:8b:8c:89:e4:8a:72:
0d:0e:19:31:66:be:9e:6b:ff:f8:05:83:3b:75:0c:
bc:b5:d9:c3:94:aa:91:1b:5d:8f:e4:ca:f0:54:39:
ef:0d:6d:23:44:ec:af:ea:1c:fc:19:7d:72:bb:32:
96:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:EF:F8:22:FC:96:8A:86:27:42:54:EB:66:05:3B:30:BA:FE:D8:6F
X509v3 Authority Key Identifier:
keyid:48:FD:F8:1F:BF:3A:F4:30:67:2A:4B:F6:42:77:3B:95:9C:45:08:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SP34H7869DBnKkv2Qnc7lZxFCKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:7e:54:f3:d6:8a:42:92:8c:10:8a:9e:9f:c4:45:0c:9c:91:
98:be:f9:dc:e0:bb:85:d7:a0:91:ae:bf:65:42:f4:da:c4:78:
4e:a6:36:6a:1f:a5:93:83:c0:56:c0:4f:4b:a8:46:2d:45:59:
50:55:35:0d:3d:df:80:71:93:a0:a9:20:82:55:bc:41:03:44:
dc:7b:a4:8d:54:f0:62:45:61:90:d5:5d:9e:5b:bf:60:d9:4a:
ad:aa:6a:5c:4f:e3:33:71:90:5e:68:bf:79:80:f2:95:1b:60:
50:ba:d4:ec:6a:10:a1:3b:02:93:4c:60:cf:03:da:e6:d7:dc:
01:02:71:8f:10:87:6a:89:d1:6b:e1:49:8d:2b:c1:30:1a:b0:
8f:92:fe:62:7e:8e:75:b3:22:6c:d3:64:2a:ce:70:52:e8:f3:
a2:55:0a:cc:12:01:f6:0d:46:31:fc:d3:34:e4:8f:13:16:87:
81:2b:9b:e1:75:a5:ec:bd:38:78:35:00:7f:6f:a9:dc:66:b9:
e6:59:1c:fb:d9:e6:0f:8e:8b:0d:1b:1c:a8:03:58:67:82:08:
8e:ed:32:d2:d1:d8:41:f5:19:51:5d:e7:8a:55:f6:96:3d:c4:
93:d1:48:f2:fd:dd:d3:35:81:d5:f1:36:76:4b:9b:41:c9:2e:
ed:a8:b8:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0BwHpMN9DGXk1IrC88ctMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4ZmRmODFmYmYzYWY0MzA2NzJhNGJmNjQyNzczYjk1OWM0
NTA4YTYwHhcNMjYwNDE3MDUwMDQ1WhcNMjYwNDE4MDUwMDQ1WjAzMTEwLwYDVQQD
Eyg3MGVmZjgyMmZjOTY4YTg2Mjc0MjU0ZWI2NjA1M2IzMGJhZmVkODZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3KJt2recjqrcLfgVFINAwdT29o8
RRjCx2TM2gU9rLPNs+M2bpGyU079CLOQ1yAYQtg+UNEu+G+IXFdTq2eIEoZpcPK0
Ooo1Ay5I1f8mmGcd/Pft+MjIfvPKjYsBhVuUJh19eCRw9Djv8cG/C0Led7CMeqgm
zy9s2cN79cpC5FsmJGgzCjZzPd4t3TFtc5dh5r9A0KprezmDekcMLT9nMJXWbj/o
7fGdOnggPZCdoPbAdhKLhT4Q/EQ3BvFqCv0AVizVvq0d3FM/YC+LjInkinINDhkx
Zr6ea//4BYM7dQy8tdnDlKqRG12P5MrwVDnvDW0jROyv6hz8GX1yuzKW5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHDv+CL8loqGJ0JU62YFOzC6/thvMB8GA1UdIwQY
MBaAFEj9+B+/OvQwZypL9kJ3O5WcRQimMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1AzNEg3ODY5REJuS2t2MlFuYzdsWnhGQ0tZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8wNzk1MDYtYWNkYS00YWFiLTlmYTIt
MDgxZDEyMTQ2ZmEzLzEvU1AzNEg3ODY5REJuS2t2MlFuYzdsWnhGQ0tZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8wNzk1MDYtYWNkYS00YWFiLTlmYTItMDgxZDEyMTQ2ZmEz
LzEvU1AzNEg3ODY5REJuS2t2MlFuYzdsWnhGQ0tZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANn5U89aK
QpKMEIqen8RFDJyRmL753OC7hdegka6/ZUL02sR4TqY2ah+lk4PAVsBPS6hGLUVZ
UFU1DT3fgHGToKkgglW8QQNE3HukjVTwYkVhkNVdnlu/YNlKrapqXE/jM3GQXmi/
eYDylRtgULrU7GoQoTsCk0xgzwPa5tfcAQJxjxCHaonRa+FJjSvBMBqwj5L+Yn6O
dbMibNNkKs5wUujzolUKzBIB9g1GMfzTNOSPExaHgSub4XWl7L04eDUAf2+p3Ga5
5lkc+9nmD46LDRscqANYZ4IIju0y0tHYQfUZUV3nilX2lj3Ek9FI8v3d0zWB1fE2
dkubQcku7ai4WA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:59:24 2026 by rpki-client