Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.mft
File: SXjTKLzeUpTzcnZcEa7vKBVbDwI.mft (raw, json)
Hash identifier: txd3gUBxdSR5D142DpkF20793wZ++HFMnIDXRTgNfMM=
Subject key identifier: 3C:6C:F2:6B:56:05:B1:BC:60:AF:CE:98:45:3F:B2:3D:3C:42:81:8F
Authority key identifier: 49:78:D3:28:BC:DE:52:94:F3:72:76:5C:11:AE:EF:28:15:5B:0F:02
Certificate issuer: /CN=4978d328bcde5294f372765c11aeef28155b0f02
Certificate serial: 019CAB6BE4AB4793AC92AE5634878C99B050
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SXjTKLzeUpTzcnZcEa7vKBVbDwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.mft
Manifest number: 184C
Signing time: Sun 01 Mar 2026 22:01:40 +0000
Manifest this update: Sun 01 Mar 2026 22:01:40 +0000
Manifest next update: Mon 02 Mar 2026 22:01:40 +0000
Files and hashes: 1: SXjTKLzeUpTzcnZcEa7vKBVbDwI.crl (hash: m5Vh+/O/K1JY6bU3ppcBMNfBhSZg8eZhQszR2dqMO6w=)
2: z4VLYtswGcmvOrd3jGwZx5w_uAg.roa (hash: MY7QPHqZSOiP3oaWW8od9BPKvJMoZCzW1Qh7mRvMMC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SXjTKLzeUpTzcnZcEa7vKBVbDwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:e4:ab:47:93:ac:92:ae:56:34:87:8c:99:b0:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4978d328bcde5294f372765c11aeef28155b0f02
Validity
Not Before: Mar 1 22:01:40 2026 GMT
Not After : Mar 2 22:01:40 2026 GMT
Subject: CN=3c6cf26b5605b1bc60afce98453fb23d3c42818f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:14:4d:3e:15:e4:d6:e8:7c:d4:34:e3:ca:23:
20:94:dc:1b:9f:00:df:47:f3:5a:e6:a2:80:7b:11:
ed:26:2c:4d:00:a0:0e:1c:a4:8e:0a:f2:82:51:99:
eb:18:4b:ab:7a:e4:3d:5b:33:bf:f9:78:91:c8:10:
25:fd:ef:64:06:dd:15:d9:33:5d:66:c3:88:06:90:
24:5a:6c:b4:0a:a3:8c:07:c4:12:ae:a7:13:d8:85:
c2:83:d6:3b:47:ac:89:90:c5:6a:20:51:35:9a:90:
7e:d4:ba:bb:74:eb:7a:96:f6:cf:eb:29:19:52:ca:
fd:72:e2:64:7b:9c:7c:98:c8:7a:b1:68:00:02:f0:
45:8b:75:6c:7e:8d:a8:de:aa:17:e0:aa:c4:96:a4:
b3:07:3d:2b:47:52:d8:53:92:7a:06:4f:07:0f:29:
7e:1e:53:f0:43:46:29:ab:93:56:c7:75:12:62:bb:
b6:b3:e6:62:75:85:05:d7:3a:94:9d:b0:0b:92:92:
16:67:55:66:2f:5e:ca:56:fd:e6:bf:f5:84:bb:54:
1c:80:07:4a:6f:7f:f1:fd:db:35:10:49:f7:d4:f4:
00:b2:3f:f3:59:d2:d4:c7:13:6f:f5:e1:3e:d6:6c:
76:10:c2:1d:3e:65:4b:26:b8:17:42:84:55:ba:e8:
fc:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:6C:F2:6B:56:05:B1:BC:60:AF:CE:98:45:3F:B2:3D:3C:42:81:8F
X509v3 Authority Key Identifier:
keyid:49:78:D3:28:BC:DE:52:94:F3:72:76:5C:11:AE:EF:28:15:5B:0F:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SXjTKLzeUpTzcnZcEa7vKBVbDwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:d1:0d:6f:fd:12:46:c5:68:0a:72:f1:61:fe:e4:bf:f1:fe:
d0:44:00:20:20:69:47:58:78:b5:05:35:ed:a1:2d:1a:57:be:
e3:17:f8:d8:48:d7:7c:bd:93:00:ed:fe:89:c6:dc:78:a0:42:
0f:86:98:d7:a5:e9:49:2f:ba:45:1b:71:53:11:f5:2b:73:7f:
7b:01:94:69:8a:99:1f:d3:35:76:cf:b1:b0:1f:d5:1e:2f:d7:
5f:0d:89:49:6e:fb:77:a6:f4:75:21:59:d4:8e:47:3d:4d:bf:
f9:ac:7e:ba:1c:7b:26:91:cc:d1:14:82:d0:58:85:66:89:7e:
c4:66:09:25:d5:ef:a0:d3:69:2d:60:dd:ed:11:9a:df:63:7f:
00:cc:87:5e:41:ac:02:f0:2b:d0:0d:05:7a:be:48:3f:5b:08:
c2:83:e6:d1:bd:02:dd:96:df:1b:a3:89:47:9f:59:b9:5b:48:
ab:e0:42:bd:6d:2d:eb:cb:58:5e:f3:7d:6a:6d:7c:f8:43:f7:
1b:8b:87:78:42:e3:51:01:c7:f3:0c:56:e0:9b:d2:32:7f:d4:
8b:a9:9c:18:9b:22:92:6c:e9:1a:f7:ee:4f:eb:98:09:7a:74:
2d:78:dd:71:77:c7:09:9d:62:b5:ae:a1:9a:3b:ee:22:fc:1e:
9a:ae:8a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:56:31 2026 by rpki-client