Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.mft
File: sxk4vHICgkRLq9OyazSStFats5c.mft (raw, json)
Hash identifier: XeFf1uRK3JZ/FYAmwfXH+n3NUeTTrhmkCsUrQnUdCiI=
Subject key identifier: 21:9A:3E:61:37:52:21:96:FB:2C:C8:F9:94:E2:41:F9:56:B0:C6:9D
Authority key identifier: B3:19:38:BC:72:02:82:44:4B:AB:D3:B2:6B:34:92:B4:56:AD:B3:97
Certificate issuer: /CN=b31938bc720282444babd3b26b3492b456adb397
Certificate serial: 019CAB34154853764B8B65424981BDBD7C91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxk4vHICgkRLq9OyazSStFats5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.mft
Manifest number: 0B65
Signing time: Sun 01 Mar 2026 21:00:43 +0000
Manifest this update: Sun 01 Mar 2026 21:00:43 +0000
Manifest next update: Mon 02 Mar 2026 21:00:43 +0000
Files and hashes: 1: eaw_KDLii_O0OZBia4ceyJvvRgg.roa (hash: 785x1F9Iz8gQQoHICXoHX9Lh+Vh5PnxM3BQ0Ya5+hPc=)
2: sxk4vHICgkRLq9OyazSStFats5c.crl (hash: d1M0wAShS247pi/YOB+priBPe7nfCaeQm5jjjIapHMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/sxk4vHICgkRLq9OyazSStFats5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:15:48:53:76:4b:8b:65:42:49:81:bd:bd:7c:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31938bc720282444babd3b26b3492b456adb397
Validity
Not Before: Mar 1 21:00:43 2026 GMT
Not After : Mar 2 21:00:43 2026 GMT
Subject: CN=219a3e6137522196fb2cc8f994e241f956b0c69d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:47:0a:b9:4f:b4:52:27:14:d7:3b:da:0d:92:
08:88:48:7d:d4:09:7c:91:51:9f:b1:96:4d:91:18:
6e:d1:dc:cc:7f:ac:94:f4:27:b2:d6:a7:5e:49:fc:
c7:9c:80:8d:51:d4:a1:63:f3:72:75:21:5d:6b:74:
49:50:30:39:ed:27:75:6b:4b:9b:ac:85:7e:22:d1:
0f:e7:e4:fa:3b:8b:e0:62:d6:a1:7b:1c:fe:5a:02:
12:06:f7:39:f0:80:2b:05:29:7f:1d:ab:95:3d:3a:
91:01:8e:57:f8:a7:45:ca:72:d5:02:33:86:07:ca:
66:15:c7:dc:0c:a5:a9:92:84:e7:76:dd:6d:7a:5d:
af:ec:ac:7e:09:ab:44:e9:a5:b7:7c:9d:a1:79:e1:
f8:84:b2:95:bb:48:96:4b:fb:bd:38:c7:cd:82:31:
1c:cc:a3:cc:2b:14:a1:4d:21:2f:3d:de:b3:45:81:
18:6a:56:89:96:16:50:bc:bd:42:8b:9e:5f:9a:d2:
2b:98:a1:e3:27:29:2f:8a:cf:fa:90:d8:10:76:ff:
92:c1:e0:b0:f7:b1:72:1e:f3:8c:a7:87:65:f6:de:
78:3c:22:33:d9:4d:20:83:50:e4:c6:d3:24:91:44:
10:bf:54:16:58:05:58:e9:b2:05:75:9c:fb:29:5e:
99:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:9A:3E:61:37:52:21:96:FB:2C:C8:F9:94:E2:41:F9:56:B0:C6:9D
X509v3 Authority Key Identifier:
keyid:B3:19:38:BC:72:02:82:44:4B:AB:D3:B2:6B:34:92:B4:56:AD:B3:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxk4vHICgkRLq9OyazSStFats5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:a1:e2:32:d6:0f:ea:0c:de:9f:20:4e:f3:77:15:7c:4d:6e:
f9:b3:67:0e:c2:1e:00:e6:49:11:0f:5d:af:fa:86:e4:3e:3d:
e2:c4:03:b2:bb:6c:e8:37:b0:00:6b:bc:21:de:cd:33:e1:82:
e2:25:63:69:34:78:a5:18:bb:86:b9:f2:c0:27:64:d3:2e:f4:
04:1a:c9:92:9e:77:d5:df:c3:5f:5b:55:fa:42:7e:33:8b:bb:
9a:b4:48:e8:e0:05:3e:0c:e0:56:64:2e:74:ec:e8:4f:54:fa:
cf:80:26:86:cb:9b:e4:37:55:ab:ba:dc:e6:4e:57:d1:f6:3e:
68:dd:2e:69:5d:70:4b:6b:7d:e4:02:b9:5a:9f:ff:88:b9:cf:
e1:44:c9:ba:53:4f:bb:4c:39:d2:d7:a4:a0:51:bd:af:48:0d:
b9:2a:c8:ba:25:da:75:fe:6f:24:ef:f8:b1:cc:34:86:ea:4c:
2c:21:9c:71:b1:68:cd:25:16:37:35:7d:b2:0b:a4:5c:4e:15:
86:ac:d7:18:61:2c:48:72:67:2c:22:75:e7:43:5f:51:22:af:
46:c4:06:b9:f0:51:66:2e:09:c5:03:70:fb:12:0b:9a:7b:3a:
d9:32:15:1c:03:f3:93:5b:d0:60:34:cb:da:3f:98:54:aa:51:
54:70:76:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:05:57 2026 by rpki-client