Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.mft
File: SP34H7869DBnKkv2Qnc7lZxFCKY.mft (raw, json)
Hash identifier: E7LZKXiZobaIoZtdf9wuzFNmwWdwLU+GspJoMcQG0jw=
Subject key identifier: 19:36:87:0B:43:B4:ED:84:71:B0:EC:DE:65:43:14:8A:8F:10:34:0B
Authority key identifier: 48:FD:F8:1F:BF:3A:F4:30:67:2A:4B:F6:42:77:3B:95:9C:45:08:A6
Certificate issuer: /CN=48fdf81fbf3af430672a4bf642773b959c4508a6
Certificate serial: 019CAA58655A3A42E086B02326A3AAA0533B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SP34H7869DBnKkv2Qnc7lZxFCKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.mft
Manifest number: 13F8
Signing time: Sun 01 Mar 2026 17:00:45 +0000
Manifest this update: Sun 01 Mar 2026 17:00:45 +0000
Manifest next update: Mon 02 Mar 2026 17:00:45 +0000
Files and hashes: 1: SP34H7869DBnKkv2Qnc7lZxFCKY.crl (hash: bL5A7qLJbYKQXSGCa/OdQRchVznriJz/VGKbgYeMapw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SP34H7869DBnKkv2Qnc7lZxFCKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:65:5a:3a:42:e0:86:b0:23:26:a3:aa:a0:53:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48fdf81fbf3af430672a4bf642773b959c4508a6
Validity
Not Before: Mar 1 17:00:45 2026 GMT
Not After : Mar 2 17:00:45 2026 GMT
Subject: CN=1936870b43b4ed8471b0ecde6543148a8f10340b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7f:10:0f:26:41:9a:72:e9:30:af:39:13:5c:
4d:bd:08:1e:8e:cf:31:6b:90:14:55:be:4d:7d:c0:
e7:62:2c:40:77:e3:52:0b:35:24:72:22:2c:c9:f2:
f1:42:cb:24:c6:29:25:81:50:da:1e:44:e4:83:20:
86:50:a0:04:e4:1c:71:eb:26:d1:df:25:1f:bb:f9:
d1:6a:bc:a7:7b:73:2c:1a:4d:08:d1:23:da:5c:d2:
20:d5:3a:18:d4:c6:51:22:16:c5:73:2a:c3:42:d4:
3d:42:f9:dc:78:c7:9e:7c:44:15:36:41:73:22:95:
38:e2:d5:41:97:b7:27:74:bd:d4:da:bc:6c:ee:fd:
c2:9f:25:aa:dc:0e:2b:a6:05:c4:50:68:09:fe:3a:
29:a3:1b:bc:25:f1:94:17:a5:e8:92:5a:48:f6:4b:
c3:3a:58:23:c9:39:a8:c6:c2:28:b9:f6:c9:76:5c:
ba:70:8e:61:19:38:29:d2:71:a4:2e:f7:da:ff:40:
3f:78:4d:84:ef:58:9e:e6:f8:56:fd:60:c2:7c:02:
a8:80:e3:c9:ed:b1:8a:98:87:9d:cd:92:6e:f7:cf:
b2:9c:25:d4:e0:0a:d1:3f:bd:d7:76:3c:79:a9:11:
e2:61:d5:71:20:ca:cd:f3:ad:b8:36:9d:88:05:bf:
cd:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:36:87:0B:43:B4:ED:84:71:B0:EC:DE:65:43:14:8A:8F:10:34:0B
X509v3 Authority Key Identifier:
keyid:48:FD:F8:1F:BF:3A:F4:30:67:2A:4B:F6:42:77:3B:95:9C:45:08:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SP34H7869DBnKkv2Qnc7lZxFCKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/079506-acda-4aab-9fa2-081d12146fa3/1/SP34H7869DBnKkv2Qnc7lZxFCKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:79:ef:1d:a3:65:fa:1d:a7:f9:f8:44:f4:58:a6:c2:a2:eb:
43:d8:eb:31:1a:13:be:bc:3b:f6:dd:cd:97:5b:7a:3e:35:2c:
f3:61:a6:21:45:b0:6f:69:e1:79:e5:82:0d:63:63:ff:07:81:
8d:88:99:18:1d:9b:0b:73:72:d2:88:77:4d:90:b9:7a:99:77:
ee:7e:44:fd:f1:4d:b2:fa:9c:97:95:cc:e4:cb:c3:02:47:3a:
a8:51:e3:3c:b3:a3:05:18:1b:c3:fe:a2:6a:54:f6:10:0b:a0:
d9:b9:dd:2d:30:ed:ad:c3:15:67:16:c9:d7:8f:d1:d3:f1:5e:
11:7e:7f:2b:61:11:56:8f:c9:3e:f2:46:4a:d6:ab:11:60:11:
fc:03:39:54:41:82:18:90:1f:e6:b2:f9:9a:d4:f0:7d:91:7d:
8a:80:95:fe:45:9c:a7:e9:85:a7:87:dd:28:ae:89:a8:07:70:
07:eb:19:1c:e0:f8:8f:32:55:85:c8:60:ee:13:f2:1f:5f:9f:
a0:e0:45:f3:a5:71:68:ab:ac:f6:54:47:18:fa:f1:f8:7f:fe:
7d:6c:13:a2:52:ed:a0:a8:88:a7:57:a7:d3:a6:50:00:cd:76:
f9:07:d9:0f:82:15:80:43:10:7b:97:42:95:35:88:95:d1:80:
14:f3:5a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:56:11 2026 by rpki-client