Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/919b01-7a20-4c00-86af-e919c37e4ebc/1/savnP_2tb4YrC92JTUQyfCyUp9U.mft
File: savnP_2tb4YrC92JTUQyfCyUp9U.mft (raw, json)
Hash identifier: 8p6l0OnErxPm5MjMBQWAcwOi8krcqR8x6f+IuYMYq5M=
Subject key identifier: 42:2D:17:6A:B2:17:6D:F1:FE:7F:26:B8:C0:D5:76:CD:E9:91:96:18
Authority key identifier: B1:AB:E7:3F:FD:AD:6F:86:2B:0B:DD:89:4D:44:32:7C:2C:94:A7:D5
Certificate issuer: /CN=b1abe73ffdad6f862b0bdd894d44327c2c94a7d5
Certificate serial: 019DA3E5E9D439F8D55C13E6F568178DE1D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/savnP_2tb4YrC92JTUQyfCyUp9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/919b01-7a20-4c00-86af-e919c37e4ebc/1/savnP_2tb4YrC92JTUQyfCyUp9U.mft
Manifest number: 069D
Signing time: Sun 19 Apr 2026 04:00:46 +0000
Manifest this update: Sun 19 Apr 2026 04:00:46 +0000
Manifest next update: Mon 20 Apr 2026 04:00:46 +0000
Files and hashes: 1: savnP_2tb4YrC92JTUQyfCyUp9U.crl (hash: hmR2DcNfkm5PdlRrKVqrAOoaeS0BUu3JZEkuMgfFZOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/919b01-7a20-4c00-86af-e919c37e4ebc/1/savnP_2tb4YrC92JTUQyfCyUp9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/919b01-7a20-4c00-86af-e919c37e4ebc/1/savnP_2tb4YrC92JTUQyfCyUp9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/savnP_2tb4YrC92JTUQyfCyUp9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e5:e9:d4:39:f8:d5:5c:13:e6:f5:68:17:8d:e1:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1abe73ffdad6f862b0bdd894d44327c2c94a7d5
Validity
Not Before: Apr 19 04:00:46 2026 GMT
Not After : Apr 20 04:00:46 2026 GMT
Subject: CN=422d176ab2176df1fe7f26b8c0d576cde9919618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9d:b4:39:7b:4f:9e:67:df:0a:f7:16:db:3c:
5a:fc:fb:98:d1:66:25:c6:1d:6b:29:70:d9:56:3a:
a6:ed:b0:c3:1e:a0:83:bf:4e:4c:b2:2d:42:1d:9d:
83:14:63:b7:83:ca:bc:d4:4b:21:dc:ca:14:cc:94:
a9:27:be:3e:e1:d0:61:d6:dd:19:b0:34:c9:e6:25:
9e:45:8c:d6:d1:07:18:95:ee:a6:9e:d7:e9:86:f9:
df:c1:ad:82:cb:81:1b:e2:f4:98:c0:eb:8d:0c:8e:
4a:2d:29:ee:d9:b2:0e:ad:07:fc:16:50:b5:07:7a:
48:80:97:d3:3e:e8:43:e6:cf:cc:b8:93:b8:15:20:
aa:45:f1:78:27:2c:80:49:90:4f:75:fe:05:cd:12:
e4:83:21:8d:b3:07:01:e8:f4:5e:9d:8c:4d:5a:9e:
ee:ba:46:19:b7:f8:8f:9b:cd:06:97:f3:ff:df:0f:
61:98:6a:06:7a:80:27:a6:98:f3:65:9b:22:13:8c:
38:c0:e5:4e:4d:f7:10:05:26:3d:2c:8d:ab:f4:73:
03:25:c2:7d:6f:4e:c9:92:20:88:0d:8f:5a:e6:22:
d3:09:e7:f6:51:c1:86:f1:f1:90:d5:81:76:ff:59:
6e:0b:11:29:c5:df:7e:aa:37:4f:a8:67:81:2d:eb:
62:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:2D:17:6A:B2:17:6D:F1:FE:7F:26:B8:C0:D5:76:CD:E9:91:96:18
X509v3 Authority Key Identifier:
keyid:B1:AB:E7:3F:FD:AD:6F:86:2B:0B:DD:89:4D:44:32:7C:2C:94:A7:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/savnP_2tb4YrC92JTUQyfCyUp9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/919b01-7a20-4c00-86af-e919c37e4ebc/1/savnP_2tb4YrC92JTUQyfCyUp9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/919b01-7a20-4c00-86af-e919c37e4ebc/1/savnP_2tb4YrC92JTUQyfCyUp9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:7c:c0:f6:aa:49:64:a6:0e:1f:c2:ac:3f:ee:a2:c4:41:74:
5b:81:70:2e:b3:de:5e:0c:d5:a8:d5:c8:a7:d9:75:e5:cd:69:
1a:61:99:83:a0:de:5f:81:c9:12:5f:cd:7f:f8:ed:5e:40:0a:
f2:f2:81:a4:2a:c9:ec:9b:61:1a:34:d4:86:06:60:01:18:e3:
a5:87:64:fb:00:97:20:de:50:06:2e:0e:d2:07:be:11:69:21:
5e:b5:82:01:43:f5:1a:43:37:8f:08:b6:2f:02:98:f0:0a:70:
53:c5:ef:28:0d:95:97:74:60:26:f1:72:25:77:8c:ca:e4:87:
68:58:33:43:02:7b:28:3e:a7:dd:90:72:00:78:f6:db:f3:cd:
80:c1:a6:c0:12:38:f7:39:41:2a:0c:06:e2:b9:23:be:0e:af:
dc:26:94:6a:3c:28:96:e9:b4:f9:d3:89:c8:9b:7f:42:48:64:
24:ee:52:71:f4:81:66:5f:6a:dd:da:64:16:39:5d:b0:be:34:
fc:dd:08:e5:31:cf:5c:0d:e0:78:1c:23:0b:7f:7f:67:51:d1:
45:0e:86:93:b9:7b:fc:b0:bc:63:d9:65:9f:f7:f3:9b:ed:45:
84:27:2e:30:b4:c3:2a:71:09:9b:e1:74:6f:f4:20:e5:7d:b2:
a4:d3:64:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:05:32 2026 by rpki-client