Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.mft
File: sxk4vHICgkRLq9OyazSStFats5c.mft (raw, json)
Hash identifier: fImwb/6zeN1J9t3hguK2MFfbx74xDvQ81TjqGZUgeNI=
Subject key identifier: 22:0A:64:BA:00:FD:15:F0:90:D1:52:EA:61:4C:AD:62:FE:82:41:13
Authority key identifier: B3:19:38:BC:72:02:82:44:4B:AB:D3:B2:6B:34:92:B4:56:AD:B3:97
Certificate issuer: /CN=b31938bc720282444babd3b26b3492b456adb397
Certificate serial: 019FABD1A9767ED8882C26961AFF23E2B4FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxk4vHICgkRLq9OyazSStFats5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.mft
Manifest number: 0CF3
Signing time: Wed 29 Jul 2026 03:01:11 +0000
Manifest this update: Wed 29 Jul 2026 03:01:11 +0000
Manifest next update: Thu 30 Jul 2026 03:01:11 +0000
Files and hashes: 1: eaw_KDLii_O0OZBia4ceyJvvRgg.roa (hash: 785x1F9Iz8gQQoHICXoHX9Lh+Vh5PnxM3BQ0Ya5+hPc=)
2: sxk4vHICgkRLq9OyazSStFats5c.crl (hash: qe25L7cDylvNZol2fzOCkkWqBAlntH8F8VzwmsUE8Cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/sxk4vHICgkRLq9OyazSStFats5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 03:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d1:a9:76:7e:d8:88:2c:26:96:1a:ff:23:e2:b4:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31938bc720282444babd3b26b3492b456adb397
Validity
Not Before: Jul 29 03:01:11 2026 GMT
Not After : Jul 30 03:01:11 2026 GMT
Subject: CN=220a64ba00fd15f090d152ea614cad62fe824113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:06:e7:7a:1f:bc:ef:87:35:cf:7e:86:f2:ca:
db:6f:8b:ef:8a:3c:57:cb:16:97:4e:0a:a2:ae:31:
d1:9c:60:63:e2:76:5e:0a:22:b3:2c:6c:04:18:32:
de:69:0a:64:2f:74:fa:92:0a:ec:76:b7:b6:15:21:
3a:13:52:a4:4e:75:fe:43:75:5e:4d:ac:7f:3b:27:
44:84:36:d9:53:b5:3d:c0:5e:35:76:3b:28:b5:6d:
04:70:0f:a8:90:8f:a6:aa:0d:d1:10:3e:e5:aa:c7:
bd:fd:50:5a:bd:68:ac:6d:5d:94:2b:91:44:98:a9:
bf:14:08:f5:4c:e1:eb:d5:ea:3d:df:f7:5d:48:b9:
f8:76:25:87:79:8e:e1:c4:a5:fe:2a:e8:7b:89:5e:
f3:f5:74:f1:57:c4:09:b0:67:6b:0b:20:ec:d0:55:
b2:be:d8:6b:a0:06:6f:2d:88:91:86:35:90:2f:5d:
64:9a:7d:d2:14:37:8e:e0:a6:80:31:ce:78:fe:a4:
a2:4c:b9:68:b0:34:73:af:27:54:d3:7f:41:e9:8a:
4f:43:fe:2e:f4:d8:5b:f9:b0:db:a1:5b:99:c5:ad:
4e:75:41:20:42:b2:28:13:6d:aa:23:73:f7:83:d2:
0a:f8:71:4e:17:a6:54:0e:4b:45:e2:aa:a1:38:c9:
22:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:0A:64:BA:00:FD:15:F0:90:D1:52:EA:61:4C:AD:62:FE:82:41:13
X509v3 Authority Key Identifier:
keyid:B3:19:38:BC:72:02:82:44:4B:AB:D3:B2:6B:34:92:B4:56:AD:B3:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxk4vHICgkRLq9OyazSStFats5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:20:9a:ad:6f:e9:01:55:cd:4d:a7:36:8b:5f:cc:c4:f6:26:
0c:57:bd:2e:cb:87:12:8b:2b:52:80:03:f0:48:a0:e1:15:4b:
50:9d:31:fc:a6:b0:94:8b:c4:5c:81:4a:a6:4c:7c:0e:a6:53:
71:1b:55:ff:83:a8:54:0d:a9:cc:b9:2b:d6:61:2c:a9:5e:6c:
62:41:05:c9:57:84:39:01:f6:5f:a2:9c:e4:5f:57:f1:62:bb:
37:5e:c2:7e:0e:ae:1a:8b:10:b0:05:52:00:2e:fd:dc:a7:1f:
67:83:ed:15:8e:81:e6:32:62:b5:6a:0c:7c:19:05:c5:dc:4b:
4b:fe:37:14:8d:3a:95:35:85:1c:ec:ea:5f:57:c4:b2:64:72:
b5:83:c1:70:ed:b2:ba:db:2c:f0:9d:5a:49:74:91:28:ee:f1:
37:55:eb:6d:22:e5:d1:84:7b:0e:c7:4e:e1:76:14:f0:d0:a8:
35:6f:57:5a:26:a8:e9:56:2f:d8:4d:df:73:76:a3:81:bd:dc:
9a:fc:e5:59:c1:aa:2b:3d:5a:8e:46:53:34:f4:1d:20:2b:c4:
19:7f:dc:0e:f8:56:5a:7c:99:32:5a:bd:40:68:db:38:b1:0d:
3d:3f:ca:e2:f5:45:0c:c9:54:a7:3d:12:cf:e7:df:e6:7f:4f:
c9:93:22:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:08:39 2026 by rpki-client