Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft
File: 15-SXhc4vDUrxrXPX_lRs9gTrjk.mft (raw, json)
Hash identifier: Q+gLUTE6y6M0JFwPnP8DvlvqHF1H7OHrgqwraEMMO/s=
Subject key identifier: 0C:34:93:31:CC:0E:F5:2E:DE:6A:5D:4B:B8:43:3F:04:C7:D4:77:EE
Authority key identifier: D7:9F:92:5E:17:38:BC:35:2B:C6:B5:CF:5F:F9:51:B3:D8:13:AE:39
Certificate issuer: /CN=d79f925e1738bc352bc6b5cf5ff951b3d813ae39
Certificate serial: 019D9A3E98A24FBB0489A9AACF32CD690962
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft
Manifest number: 0944
Signing time: Fri 17 Apr 2026 07:01:26 +0000
Manifest this update: Fri 17 Apr 2026 07:01:26 +0000
Manifest next update: Sat 18 Apr 2026 07:01:26 +0000
Files and hashes: 1: 15-SXhc4vDUrxrXPX_lRs9gTrjk.crl (hash: EB+SFPjI7V3vCOdEr9bUzvN/YMbXD42Xon4uIldADv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:98:a2:4f:bb:04:89:a9:aa:cf:32:cd:69:09:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79f925e1738bc352bc6b5cf5ff951b3d813ae39
Validity
Not Before: Apr 17 07:01:26 2026 GMT
Not After : Apr 18 07:01:26 2026 GMT
Subject: CN=0c349331cc0ef52ede6a5d4bb8433f04c7d477ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:94:16:63:0e:02:02:9d:e1:86:e8:41:4e:64:
32:13:52:3f:38:dc:4b:c9:a0:e3:94:67:83:55:23:
8d:04:1d:a4:d3:2a:17:8e:66:4b:9f:2c:f1:5e:60:
2d:b1:83:25:f2:9f:8f:b3:76:f8:cf:b3:2a:c1:e8:
fb:05:47:bc:3d:dc:1c:72:e5:e8:12:db:7a:d3:dc:
69:3e:42:58:09:d9:2c:2a:9a:c9:82:e9:48:1f:ad:
89:d8:55:09:2f:0e:2e:55:f6:32:5e:fe:99:5b:bc:
72:74:26:f5:dd:d5:3e:57:38:cc:ab:8f:37:88:2b:
96:15:ce:35:9b:ac:af:a5:e3:90:4a:d5:16:14:1d:
5f:92:67:d8:a6:84:e5:09:88:c1:01:05:6b:1f:33:
a8:e3:5f:9d:d6:93:c5:c1:cd:63:fb:c7:27:81:be:
b2:41:e9:78:c2:15:e8:61:ca:37:29:1f:a7:43:4c:
69:61:cf:e0:20:d8:8d:04:71:69:e5:a9:a1:f7:ce:
72:26:97:51:81:ee:72:4b:fc:c3:d3:3c:cb:da:4f:
53:8a:b8:ba:b3:12:2d:fc:3c:5a:ad:b5:c2:ac:df:
2c:95:3c:4e:72:e5:c8:7f:1b:f8:b4:f9:97:cb:f2:
58:06:24:47:bc:40:87:fc:a6:81:6c:27:20:96:5d:
c8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:34:93:31:CC:0E:F5:2E:DE:6A:5D:4B:B8:43:3F:04:C7:D4:77:EE
X509v3 Authority Key Identifier:
keyid:D7:9F:92:5E:17:38:BC:35:2B:C6:B5:CF:5F:F9:51:B3:D8:13:AE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:4f:a0:3c:f1:21:a9:1c:6e:38:45:f3:92:b4:a8:15:bf:64:
1b:ac:36:da:8e:a4:65:c8:30:5d:d5:99:55:15:29:80:6e:f8:
1f:8e:8c:60:79:51:33:fc:36:b8:f9:d7:e9:94:86:ad:66:5d:
b4:92:5a:d2:43:dd:14:c9:68:37:81:56:2b:35:f5:c8:15:6e:
d8:77:5a:07:d2:2e:8d:26:cc:e9:1d:ca:bc:7b:b5:eb:64:38:
99:55:88:28:45:31:55:bf:25:19:7e:73:5e:1c:50:4a:89:29:
aa:5e:01:b9:7f:7f:2d:85:1b:03:f4:0f:3a:9d:f9:05:b4:b8:
6e:4a:30:44:fa:0f:04:54:3c:76:02:cf:86:11:83:41:86:ec:
c5:4f:27:c7:4f:02:31:7a:c2:39:b9:08:dd:ba:72:1f:45:d5:
3f:83:db:54:e1:25:24:a8:26:b4:84:11:4c:7b:8e:1a:21:db:
0c:8e:36:9f:e4:35:4f:4f:7e:2a:4e:df:8b:ec:74:16:c1:42:
eb:d2:c1:9a:7d:63:b3:ad:ff:94:fa:db:74:de:e3:38:15:05:
91:25:16:c6:fe:2e:f4:cd:44:6c:4c:11:45:31:25:2c:c4:a2:
07:c8:11:f5:44:b3:91:ca:2b:04:ec:3a:d0:f1:e6:ba:25:b5:
b9:4c:7f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:49:03 2026 by rpki-client