Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.mft
File: sxk4vHICgkRLq9OyazSStFats5c.mft (raw, json)
Hash identifier: Ucn6643MZ5Of6kIVCKbvcleMQVUO1DXPZFJQQkxsg/4=
Subject key identifier: 81:EE:33:FE:ED:FC:E8:A1:AF:58:46:36:A1:24:C1:D9:97:AF:57:9D
Authority key identifier: B3:19:38:BC:72:02:82:44:4B:AB:D3:B2:6B:34:92:B4:56:AD:B3:97
Certificate issuer: /CN=b31938bc720282444babd3b26b3492b456adb397
Certificate serial: 01A10F27E468E681159436CEF9A50B856DCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxk4vHICgkRLq9OyazSStFats5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.mft
Manifest number: 0DAB
Signing time: Tue 06 Oct 2026 03:00:34 +0000
Manifest this update: Tue 06 Oct 2026 03:00:34 +0000
Manifest next update: Wed 07 Oct 2026 03:00:34 +0000
Files and hashes: 1: eaw_KDLii_O0OZBia4ceyJvvRgg.roa (hash: 785x1F9Iz8gQQoHICXoHX9Lh+Vh5PnxM3BQ0Ya5+hPc=)
2: sxk4vHICgkRLq9OyazSStFats5c.crl (hash: tOnjNkEj2XnnmvnsT+yLUeWlC//oQDRkLY1S7VI3oLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/sxk4vHICgkRLq9OyazSStFats5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 23:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0f:27:e4:68:e6:81:15:94:36:ce:f9:a5:0b:85:6d:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31938bc720282444babd3b26b3492b456adb397
Validity
Not Before: Oct 6 03:00:34 2026 GMT
Not After : Oct 7 03:00:34 2026 GMT
Subject: CN=81ee33feedfce8a1af584636a124c1d997af579d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f0:ab:8b:d3:82:8e:9d:9d:49:96:37:17:bc:
b5:f1:55:54:2e:45:a7:c1:9e:fe:f3:f5:86:e1:7d:
cf:a1:fa:e3:fb:a8:6d:cf:83:84:28:87:20:d7:4f:
b0:01:d8:6a:8e:06:4c:7b:98:64:a5:96:18:2f:e5:
d6:dd:0c:df:e8:d3:14:19:9b:47:18:2c:e2:17:fd:
9e:6d:74:1e:ea:e7:37:c6:a9:45:17:97:a4:09:09:
6a:6c:15:4b:cf:d4:43:17:e8:a1:05:9d:2a:fd:98:
51:9e:73:c5:92:14:d1:a0:73:e8:9a:54:e8:2d:6b:
7e:5f:40:9f:0b:0c:6c:b3:68:e6:3b:6d:21:1a:48:
ca:93:5f:47:a8:f2:8e:ee:e1:bd:b4:9a:8a:1a:70:
d0:df:ce:90:79:67:7f:4d:e9:83:b6:d0:bd:14:10:
f0:4d:8c:17:23:dd:50:97:a8:bf:60:43:8a:0c:dc:
8d:2d:08:3d:1b:53:fd:76:31:3c:e2:c9:2f:ab:ae:
ea:6c:84:ca:02:f1:8f:60:85:c8:21:d4:86:5d:1a:
e4:45:e0:bd:e8:2d:08:69:f8:3e:aa:ea:2c:6b:33:
bc:52:a6:4d:92:0b:e5:33:6c:54:4f:04:ba:65:de:
f3:9b:a8:fe:82:c8:ef:9e:7e:55:f0:15:40:c9:ce:
85:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:EE:33:FE:ED:FC:E8:A1:AF:58:46:36:A1:24:C1:D9:97:AF:57:9D
X509v3 Authority Key Identifier:
keyid:B3:19:38:BC:72:02:82:44:4B:AB:D3:B2:6B:34:92:B4:56:AD:B3:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxk4vHICgkRLq9OyazSStFats5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:8a:b5:b7:82:66:28:50:78:a4:7c:b7:45:fe:ca:b1:ad:64:
5e:c4:b0:c6:aa:74:24:6d:2e:e8:94:c3:b4:f3:a0:b2:ad:db:
95:5e:21:34:30:3a:31:fc:da:43:bf:7b:55:78:d7:ea:5f:d4:
de:3a:a0:02:f4:7e:73:96:cd:9a:d8:15:d4:0f:ad:ba:e4:aa:
a1:ed:4d:70:d6:f0:81:e9:e9:7b:f3:34:55:bd:c0:a8:96:c0:
62:d1:6c:cf:d9:8d:10:5f:39:70:9f:42:5e:dc:7d:dd:25:35:
c3:ad:79:ed:9c:13:b2:36:e7:a5:f9:bc:1a:5b:fc:39:e2:5d:
cc:18:a2:58:35:48:d1:98:6a:46:57:48:8c:e1:f4:f9:86:20:
26:8b:67:a5:d4:58:5c:46:c9:a3:8f:27:8b:50:4d:13:6d:77:
a3:40:f9:ee:c6:16:0a:84:7d:b0:f2:a8:7a:ef:8e:5a:a7:72:
09:bc:da:6a:3b:7b:d7:64:24:c9:f3:8b:a1:6d:81:86:eb:e9:
a3:86:cd:7e:59:86:01:50:75:17:a7:cf:01:be:23:e1:02:2a:
3c:fc:0d:3b:1f:fe:16:41:fb:56:19:74:f4:35:f5:25:25:b5:
f6:6d:f2:8a:e2:32:28:ff:1b:16:e3:6b:57:89:81:84:de:3b:
79:05:84:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 08:47:55 2026 by rpki-client