Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.mft
File: sXQMTAefLR3uhUOfgngbm651apU.mft (raw, json)
Hash identifier: YqRl2gVDG4kTAYVBW6LUylOOp9VojG5q4YOA566Dz6o=
Subject key identifier: 88:4E:43:9D:80:39:0F:F4:E4:1B:E9:8E:BD:41:7E:59:22:04:B2:4F
Authority key identifier: B1:74:0C:4C:07:9F:2D:1D:EE:85:43:9F:82:78:1B:9B:AE:75:6A:95
Certificate issuer: /CN=b1740c4c079f2d1dee85439f82781b9bae756a95
Certificate serial: 019CAB34564EE42DF5AA0D5333B696638543
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXQMTAefLR3uhUOfgngbm651apU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.mft
Manifest number: 1493
Signing time: Sun 01 Mar 2026 21:00:59 +0000
Manifest this update: Sun 01 Mar 2026 21:00:59 +0000
Manifest next update: Mon 02 Mar 2026 21:00:59 +0000
Files and hashes: 1: k2NLRoGGs_1_tPLBpVuQ2tQaPX8.roa (hash: 7U/P0XBJOG36kibHl1+nAbvsI31pDTNTQ+rTrF6SsdE=)
2: kfGT7rmG_b7NtjrIHfozveynidI.roa (hash: fvmGEPse0L5/dDUx9Eg53Q73vcZQitS7udRiA39FkwA=)
3: sXQMTAefLR3uhUOfgngbm651apU.crl (hash: 4UO07WL/f+1kyfGmGffJWByGpteCmLXTLqgcZunhqT4=)
4: yS_lGMVX6IuAVI6W1sAw8zbKOfs.roa (hash: xRXUXVbiVTSPwLv7pVaMbiKs2q5E3HgTW6OSYD6dOfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXQMTAefLR3uhUOfgngbm651apU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:56:4e:e4:2d:f5:aa:0d:53:33:b6:96:63:85:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1740c4c079f2d1dee85439f82781b9bae756a95
Validity
Not Before: Mar 1 21:00:59 2026 GMT
Not After : Mar 2 21:00:59 2026 GMT
Subject: CN=884e439d80390ff4e41be98ebd417e592204b24f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:04:e2:11:8e:d5:7c:00:d6:12:5f:89:95:38:
66:8c:12:d9:b7:e8:b9:92:32:91:1e:40:d8:68:44:
1b:f9:37:dd:b0:d4:f8:99:4e:eb:06:f7:10:45:f7:
2e:e1:e7:50:30:ed:4d:eb:ec:a2:3a:ea:85:76:cd:
b0:08:94:58:81:88:94:2e:f6:95:34:57:1c:2f:8b:
da:48:b8:0c:71:c6:c5:08:71:4f:3e:d6:2b:e2:7f:
25:07:54:f2:d2:5a:72:5a:db:ce:b9:ea:59:89:fd:
e5:ca:db:0a:9f:3c:9b:28:b8:6a:5f:09:17:29:66:
61:2f:bd:d3:f8:65:95:dd:4a:ef:40:24:5c:c3:6d:
47:67:ca:e2:20:0d:17:fa:f3:6c:61:24:ff:4a:90:
39:cb:7c:94:1b:99:57:75:e2:e5:58:d9:c9:ef:ee:
94:b4:b2:59:c5:84:b2:5f:e3:a1:43:f8:48:f2:51:
f0:2d:9c:8f:4b:dd:45:0e:fe:d5:dc:04:26:61:68:
b1:86:43:fd:58:27:3b:e4:01:4e:37:e0:f6:f3:c7:
d3:30:38:ed:91:10:31:c7:3b:d7:f0:8f:9a:2d:bd:
02:d6:b6:3f:5b:e3:5a:ef:dc:84:b6:e5:17:f7:f6:
83:01:1c:13:9d:e4:a3:f4:c2:68:81:ab:e3:4f:8c:
ca:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:4E:43:9D:80:39:0F:F4:E4:1B:E9:8E:BD:41:7E:59:22:04:B2:4F
X509v3 Authority Key Identifier:
keyid:B1:74:0C:4C:07:9F:2D:1D:EE:85:43:9F:82:78:1B:9B:AE:75:6A:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXQMTAefLR3uhUOfgngbm651apU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:82:31:e5:63:7a:93:bf:38:4b:2c:30:7d:b1:3a:40:7a:78:
b1:b9:e5:e7:ad:84:c2:2c:65:5b:ca:01:df:ea:1c:b2:f3:e7:
4e:c2:dd:9c:a2:ee:e5:2f:85:88:0c:ad:ed:68:7f:7b:dc:34:
5b:0f:35:7a:2c:e0:44:02:b2:92:79:99:03:17:79:85:bb:ec:
27:c1:01:af:2d:94:65:48:e8:3d:be:cb:76:b3:89:fe:db:66:
56:b4:05:3f:dd:5e:6d:b4:e9:b6:43:54:28:6d:00:35:05:9f:
1f:2f:da:a7:e9:9b:8f:e8:b1:41:18:0c:8c:c5:e5:1c:1c:c2:
58:3d:56:43:e4:55:b5:28:bb:bd:fc:a4:9a:7d:85:e0:53:63:
77:c3:ad:3b:df:79:65:29:04:25:54:d4:43:cd:62:18:3b:56:
a6:08:89:0f:7c:3e:68:ce:6b:b4:1e:74:a7:0e:37:13:4b:68:
c2:d4:d2:46:6d:4a:c2:90:38:84:17:b3:9b:94:de:ae:c6:5c:
34:c4:fa:26:55:06:62:e6:62:44:46:6f:3c:fb:f6:8f:9a:47:
b7:0a:7b:09:07:04:94:17:23:be:97:c8:de:b8:35:c4:56:e2:
d7:6a:f6:f8:72:34:83:d6:3e:99:37:69:01:3d:c5:70:83:49:
bc:26:4a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:55:52 2026 by rpki-client