Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft
File: 15-SXhc4vDUrxrXPX_lRs9gTrjk.mft (raw, json)
Hash identifier: LFC928yasm4bspizjPR/Z3ua/PORE7ChPE00P6yArFI=
Subject key identifier: C0:50:69:7D:6A:30:8E:2B:FB:09:23:A1:52:0F:F6:58:76:BC:69:E9
Authority key identifier: D7:9F:92:5E:17:38:BC:35:2B:C6:B5:CF:5F:F9:51:B3:D8:13:AE:39
Certificate issuer: /CN=d79f925e1738bc352bc6b5cf5ff951b3d813ae39
Certificate serial: 01A0C93431C6BF3A33C67761E253247AF8EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft
Manifest number: 0AEA
Signing time: Tue 22 Sep 2026 13:00:35 +0000
Manifest this update: Tue 22 Sep 2026 13:00:35 +0000
Manifest next update: Wed 23 Sep 2026 13:00:35 +0000
Files and hashes: 1: 15-SXhc4vDUrxrXPX_lRs9gTrjk.crl (hash: 0x7Wm009PyaBTc3cpMzBuRxEikrCYXmHicNdHEE7CEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:34:31:c6:bf:3a:33:c6:77:61:e2:53:24:7a:f8:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79f925e1738bc352bc6b5cf5ff951b3d813ae39
Validity
Not Before: Sep 22 13:00:35 2026 GMT
Not After : Sep 23 13:00:35 2026 GMT
Subject: CN=c050697d6a308e2bfb0923a1520ff65876bc69e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a3:4b:e3:3f:9d:67:17:96:58:a4:ce:55:bc:
47:5d:8f:70:ef:90:75:b5:fa:6f:ed:88:d7:85:0c:
5a:3b:76:9a:d0:69:45:07:9e:53:96:ee:39:69:b4:
84:cc:5f:12:e5:2d:50:78:51:39:56:eb:c2:f0:46:
9b:85:69:87:00:aa:e3:42:2c:78:fa:c5:3a:4a:d9:
f4:b1:fa:ae:02:88:9e:04:4a:66:f1:71:79:e5:cd:
72:f7:d8:d6:9f:f1:07:7b:66:e9:3b:dd:ab:85:c1:
81:85:76:a1:bc:21:53:35:9d:11:8e:80:e7:25:3c:
56:22:65:45:73:f4:d0:e0:f1:13:6d:a4:b7:6c:9a:
32:25:50:5a:7b:17:19:b6:e4:58:1e:70:55:57:8a:
ac:68:d3:d7:d7:c2:38:5f:85:9d:2e:71:fc:d6:93:
7d:56:9f:53:0d:6c:68:99:11:7e:44:45:95:b4:3a:
c8:be:27:27:4f:f9:ad:3f:49:00:06:9f:75:7d:1b:
18:1f:9d:0c:2a:d9:bd:e8:2d:63:ad:06:a4:77:0c:
be:6a:36:8d:20:0a:57:18:a1:10:d2:3d:f3:3b:fd:
77:9c:6b:c9:92:ca:6a:4a:3d:fd:6e:cb:24:c3:c9:
01:c5:23:0a:ad:7e:e7:ee:2d:55:2c:22:c7:06:04:
9e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:50:69:7D:6A:30:8E:2B:FB:09:23:A1:52:0F:F6:58:76:BC:69:E9
X509v3 Authority Key Identifier:
keyid:D7:9F:92:5E:17:38:BC:35:2B:C6:B5:CF:5F:F9:51:B3:D8:13:AE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:b1:73:5c:13:26:4f:c9:2d:97:f4:d8:e4:b9:cc:3e:3e:a9:
4d:d2:19:ed:62:18:ac:18:94:3e:bd:b2:e1:1b:9d:53:cb:82:
43:ca:63:5c:81:b7:e8:a2:9c:42:38:57:f7:49:ef:83:3c:47:
44:f3:c0:ec:ad:0e:07:bd:f1:80:be:49:04:cc:51:f7:2f:c0:
3a:ee:26:67:17:a4:33:f9:e5:4c:02:31:54:58:03:55:2a:8f:
13:c4:ba:09:1a:8b:6a:ea:9a:67:c1:69:af:c0:20:1a:d8:82:
dc:65:64:a5:35:45:13:39:e2:3b:2a:fe:4b:f0:b2:41:66:56:
71:7f:be:90:bd:63:01:5b:49:04:81:dd:76:29:76:54:93:97:
7b:31:fa:17:4b:ba:db:3d:65:fe:48:e0:7a:5c:fe:59:90:50:
48:df:b6:9f:92:fc:79:36:65:8b:76:46:83:66:31:29:19:18:
7c:86:25:f9:f9:84:d8:58:2f:9b:4d:cd:91:3c:38:97:d7:46:
83:3e:3a:26:dc:f3:f4:aa:8f:fa:b5:7e:d8:65:75:07:a5:0f:
a4:18:35:59:36:68:37:9d:d5:ad:6a:12:42:1e:8b:fb:41:5b:
c6:9d:48:91:59:b3:50:f3:e2:f4:a8:70:d0:5e:b9:ac:a1:06:
a5:14:98:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:09:36 2026 by rpki-client